last executing test programs: 19.399716654s ago: executing program 3 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd5, 0xd5, 0x7, [@datasec={0x6, 0xa, 0x0, 0xf, 0x1, [{0x1, 0xfffffff9, 0x6}, {0x1, 0x8, 0x4}, {0x2, 0x2, 0x4}, {0x5, 0xdf, 0x10001}, {0x5, 0x1, 0x81}, {0x5, 0x6, 0xfffffffd}, {0x3, 0x4, 0x8}, {0x1, 0x8, 0x8}, {0x4, 0x81, 0xf}, {0x2, 0x5, 0xffffffff}], "d3"}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0xf, 0x2}, {0xe, 0x5}, {0xa, 0x2}, {0xb}, {0x7}, {0x6}]}]}, {0x0, [0x0, 0x41, 0x30, 0x0, 0x30]}}, &(0x7f0000000300)=""/39, 0xf7, 0x27, 0x1, 0x9}, 0x28) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf5c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2a, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffefc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000006c0)={r0, &(0x7f00000005c0)='\x00', 0x8000, &(0x7f0000000600)={@_ha_fsid={[0x0, 0xd2cc]}, {0x5, 0x0, 0x5, 0xf}}, 0xffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x2}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r8, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x62}, @exit, @call={0x85, 0x0, 0x0, 0xad}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xcb2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9, r2, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x4, 0x7, 0xdfc}, 0x10, 0xffffffffffffffff, r3, 0x8, &(0x7f0000000700)=[r4, r5, r7, r8, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x5, 0xd, 0x7}, {0x1, 0x2, 0x5, 0x9}, {0x5, 0x1, 0x1, 0x4}, {0x5, 0x2, 0x2, 0x4}, {0x0, 0x5, 0x0, 0x3}, {0x1, 0x6, 0xc, 0x6}, {0x3, 0x5, 0x7, 0x1}, {0x2, 0x4, 0x2, 0x9}]}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c000180"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 19.14713872s ago: executing program 3 (id=1173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x45}, 0x1, 0x0, 0x0, 0x4040}, 0xe97b44310876ac03) sendmsg$802154_raw(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) recvfrom(r3, 0x0, 0x94, 0x32, 0x0, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "981b0816ac56f3635749f99c197ff887221c1e6b89a891b4", "56ef2262780dd97e7d906e511dea4cf076bdc759ee1a520f26cd442326bc8997"}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) (async) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000240)={0x0, 0xea60}, 0x10) (async) accept(r4, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)=[{&(0x7f00000006c0)={0xd8, 0x14, 0x200, 0xfff, 0x25dfdbfc, "", [@generic="8a7408c103f315adb10950032d2ee2208b4416ac9fce9f1785eaef8ab66bd271cfc42eef0921487fca9bf6af1be9dd11e54050e54e63078339c1660769aec195a88a5eeca45470a70e809025d666019b78d76be24d05fd", @nested={0x8, 0x11f, 0x0, 0x1, [@typed={0x4, 0x6}]}, @typed={0xc, 0x8d, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x155, 0x0, 0x0, @u32=0x8a53}, @generic="89f9e3747875fd07c8469b21fe6e13c9fb599512522502ca3fa89031e2e2263005603b78f4508a18a0689d7aaa06d415f02e0bc95e0294673a8f410431773feddb420e9ffb58b765a9fd3bf2b5494082b31e896b"]}, 0xd8}], 0x1, 0x0, 0x0, 0x20000000}, 0x49) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) unshare(0xe040400) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x1d, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffa50a, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x3, 0x0, 0xb, 0x2, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x36}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x3, 0xa, 0xd, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) 18.407764961s ago: executing program 1 (id=1181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0xfff2}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x1, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000008c00000095000000000000009500ad0500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x15, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 18.123937666s ago: executing program 3 (id=1183): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0xa, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000480)={{r1, &(0x7f0000000000)='GPL\x00', 0x20000, &(0x7f0000000040)={@align=0x9, {0x9, 0x16, 0x1ff, 0x6}}, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x1b4}, 0x2, &(0x7f0000000440)=[{0x1, 0x8a, &(0x7f00000001c0)='}\x00', &(0x7f00000002c0)="089b5d1133ecbac84864e88615559e40bfe4b39a4a4c4a861a7c9404faa62f16a94983e06ae9935b23a96831964a053be71716e2f45ecb017816d2bf3694d2aeb3261af1", 0x44, 0x20}, {0x2, 0x7fff, &(0x7f0000000340)='GPL\x00', &(0x7f0000000380)="35caec237c31189a694dbcc3d938980867a3fabcecadb93db51208ec72203f365a327d4ee152f7bfcc5c5f6f762877419c65fea9d0ce11462722940f0c882c0e00c6f2e83d84d56fab1d5a681f1bef6d61ff7fca4a5b5c480bcba55020491677d8d3656b8af622832e4e97a16bae1ea8f2128b8313321def521867a8d2f36b94e2f411bdc5ab02d2cfb82df5e1998f007ada37d84ea3b1e329413c63", 0x9c, 0x12}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x400, 0x5, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 18.123671919s ago: executing program 2 (id=1184): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async, rerun: 64) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async, rerun: 64) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async, rerun: 64) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080)=0xb1, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 18.079014684s ago: executing program 1 (id=1185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="5eaa00000000000071101c0000000000950000000000ea11f5c65c4d3cd700ce21f4fa2c6057c10b58c5391df90fb054c75d6b2ffdcc48bbbd0a162c61f05cac2e209e6494143e40b78fb1bd6410535fafcb781c15921720ac218b9bb0d90ae3690a47375f4eb4bcd76535b8fff3de4e3a85ed1029e1a5cbb64cc243266090d4b2aa4772f9ae54d06a56bb32919dfdbf4000ac1d3c0cedd392126c05b0bd0c05cd7fa74bd0ce9756af81d63e900e842fe57c3aec5ab3880998a4498b23248cc0a7cbe4b6563cf9df87df61bce36d6e1edfc4bafb3b0ad708b8c9dabc4a2e"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="14006e726119000a00000003ff05000000000000000000", @ANYRES32=r1, @ANYBLOB='\b\x00(\x0078\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2001c004) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x8, 0x4) 17.951247736s ago: executing program 3 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17.896237397s ago: executing program 1 (id=1188): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd05c0200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x98e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x898}, 0x810) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000380)=0xffffffffffffffed) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000840)={0x10001, {{0xa, 0x4e22, 0x4, @empty, 0x1}}, {{0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x108) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x10100, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x4008880) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = socket(0x11, 0x3, 0xd) accept4$unix(r6, 0x0, 0x0, 0x0) unshare(0x8040480) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x4f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x24, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x46, &(0x7f0000000000)=0x8, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}]}, 0x1c}], 0x1}, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r11, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000400}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x20008084) 17.891433969s ago: executing program 2 (id=1189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r2, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) bind$packet(r1, &(0x7f0000000100)={0x2a, 0x7, 0x0, 0x1, 0x17}, 0x14) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000600)={'filter\x00', 0x0, 0x3, 0xfa, [0x7, 0x9, 0x9, 0x8, 0x100000000, 0x2], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000500)=""/250}, &(0x7f0000000680)=0x78) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0x9, 0x8, "822c5708e7"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0xf8, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}]}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x18c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004802c0001800b0001006e756d67656e00001c00028008000340d982435f0bd9cf2c000000020800014000000001100001800800010064757000040002800900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') epoll_create(0xfffffffc) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 17.77665014s ago: executing program 3 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x2000000000031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776", 0x80, 0x840, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaac7533137cd4e1eaaaaaaaaaaaa0008004e00004c00000000000690780a0101"], 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffe0}, {0x6, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f48f3be52163448020ba800", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000000}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 17.592683588s ago: executing program 2 (id=1192): socket(0x28, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) write$tun(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e20, 0x1, @mcast2, 0xc4}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x16, 0x7, '\x00', [@generic={0x6, 0x5, "19bcd1f077"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x20}}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x1000}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x58}, 0x20040001) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x5a, 0x2000, 0x0, @mcast2, @empty, 0x80, 0x7, 0x5, 0x1}}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltclass={0x2c, 0x29, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0x4, 0x5}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x2c}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 17.513414806s ago: executing program 0 (id=1193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0ffffff}, 0x94) 17.355939094s ago: executing program 1 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x15, 0x2, 0x7, 0x20000004}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x700, 0x10, 0x1, 0x61bc, {{0x2f, 0x4, 0x0, 0x1, 0xbc, 0x67, 0x0, 0x8f, 0x2f, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x3, [{@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@loopback}, {@broadcast, 0xfffffe01}, {@private=0xa010100, 0x9}, {@private=0xa010100, 0x6}]}, @ssrr={0x89, 0xb, 0xd8, [@broadcast, @private=0xa010101]}, @generic={0x88, 0x6, "6fcacdcb"}, @rr={0x7, 0xb, 0x5e, [@rand_addr=0x64010102, @rand_addr=0x64010101]}, @end, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x0, [{@loopback, 0x845}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}}, {@remote, 0xc7f2}]}, @cipso={0x86, 0x13, 0x1, [{0x0, 0x7, "4ecf442c5a"}, {0x2, 0x2}, {0x6, 0x4, "2e19"}]}, @rr={0x7, 0xf, 0x7d, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x9b, 0x0, 0x1, @remote, @loopback, 0x715, 0x700, 0x8, 0x5e}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1}}]}}]}, 0x48}}, 0x20040084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r13 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r14 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r13, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r15, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r12, r15, 0x25, 0x0, @val=@netkit={@void, @value=r12}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0xf8, 0xde, 0x5, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8, 0x7800, 0x800, 0x7b4}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'macvlan0\x00', 0x0}) r18 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r18, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r19, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r19, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x400}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000ac0)={@broadcast, @multicast1, 0x0}, &(0x7f0000000b00)=0xc) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)={0x8dc, 0x0, 0x400, 0x2, 0x25dfdbff, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc9a6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r15}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x4000001}, 0x14) 17.250660613s ago: executing program 2 (id=1196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000004) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000004) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000f55529d299070ce0d40c94641b5f2f2bf6b9cce25651bc3d98ea86028596df804a373f0a26337457eece937f76f470221ca9c30df337a069cd660208adce2395eab47d6c2983ea1aa66b98fde01b541d52e0a97bb7af2bd8", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf252100000009001f00706879320000000005002000000000000c0005000203aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x48002}, 0x44) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, r5, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r9, &(0x7f0000000640)=ANY=[], 0xffdd) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 17.228267101s ago: executing program 0 (id=1197): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000001780)={0xa, &(0x7f0000001640)=[{0x2, 0x0, &(0x7f0000000000), 0x0, 0x1}, {0x7, 0xde, &(0x7f0000000040)="6987a9efd012b86c9ce38d1acf86ff3f378721b1ec9110bd8d3cea6757441962f322c4a32eac74f0a300631c45a2ac166bfd620950bf4a666249f82a3fc266073d3bccf04ac76ed9038cab2b405c4b3f3ad7284fb6cfa17a5c158fb3370482e43302014c1003db3b3375f73d52e22a3d5b72eb29f7cd793afb85d30fc2bc6473c21d8c645a7c1af413e9dd6dd931b4fc724103e72784031682890562db654e3aece0ff45eb6a4e072e632261e78b07675557b52952a6fdd9759afc1649325a3d97a2dc1db43d2585177d9d9f40296b46d11557c5a84e4c63efb934cb6525", 0x0, 0x1}, {0x0, 0xa5, &(0x7f0000000140)="7b9a616682706db4fbdb81e20f504c508985e2f69727ee7ce13b129f714f2a494888115610921966597d37773ba901a90be5a39c6026c160dd83378561a05b5704f3dcabf83575ae88ebac9d9ce08ad38fb8156165f2dec4c814dcad939044903dade71293d98834d575d1922002af48b600b558c4748e6e306fadd7eb152030c55388d2265ea4c3245b808ff1662feb6d9fecd6c012ccb0499a11c134c0d0248a96d6d657"}, {0x8, 0x8c, &(0x7f0000000200)="90e63b9ceb81ec294824e3c5922956d3659a3fbb78aa652cb09c0429810bf55185d9f512413d11424efacfa477c460c8af1772f4baf42a694c96363e771bd5c7a7b965d2fa6b4c66c3da64ce3851b1078450fd99c4bdd1ed20b7fc4621944ee3de79d1d20b9f79bec035c6e9661a969385320ebfbe1aa4b6c736eede1f697933c11a193241c6db1c4f414f48", 0x0, 0x1}, {0x94, 0xad, &(0x7f00000002c0)="e93f33760a40360402df5eff581c7f928f454efac214bdb7aa7ba396bbbf566ea735900164eb40a171595fadf088ae87ed87d609b1059e2bbeab973f435a3992b8764c76540a18b4c75ce3ac3708db02d89d4fe010d21716abe40aeb7383372cc7d2a2c7a201a94cba3082d4493329f2bb5607db47b5dd1747977cdc7f2865aac62c571f769d1bf7ab1f5d6a037e2e66dc7de07b7da76f4d3cc2e45111b6331739e2ed2d0a938ce9cddd07d626", 0x1}, {0x3ff, 0x40, &(0x7f0000000380)="b3092531b14c70bb4ba0f220f34e084203ad77ec030c301fceab803a75d50a672027fdbc72b13a6f3345d5984255075f5924f07fd0f86a686696317f10e8b467", 0x1, 0x1}, {0x6, 0x1000, &(0x7f00000003c0)="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", 0x1, 0x1}, {0x4, 0xc7, &(0x7f00000013c0)="718cf06d64f917585fbc88bc0d2433647e5cde1f3f5e70f2efbe8af0b7d843dc526901ec7010773cb3ebfcf8bc7b21c9489fc49338a4d41517ee7f0fe6a201cb4baf1896a5a161d99bf74c16d5ade79680da2a56d7e7b45e03aa0d25913e96e41fdaf01a4374caffc3f920dab6e00d3f1d67321493964491f14b02ee3ef8b5cd1a421671144e5fbbf4df0d49cc0ca3b8c849708fcb633a129d784fa6099be51a3b05e35b8294aab51cf0f43b002db801018d78787b5927ae05531614125dbb8cff081014eb3bb2", 0x1}, {0x3, 0x4f, &(0x7f00000014c0)="346ada044f409dc7d19a96e01cb9f553ed10ab37d4916242256a8f5a30bc1eeb49211a52a10f61432600319f83c5fb9cf33c9fc5425ed38c36093bd30b8ffbf5b45ba4c475813b793921b50de2618d", 0x0, 0x1}, {0x5, 0xdf, &(0x7f0000001540)="804d49fb449f3029f2c31220d6bfbb43038efe482c6dfb9d2382434c40c840874f9bc10002cf57b30fb96b6e859d2af5b17214bef4784bfcb9eb466c1bfdaa5ae14f0d104f6816a93bbdc54be2b54f3342635a4875a7b0320b4d6b3e8003e4c349089083cb5a0dcb971dcb6763ee7cb0135706365a8236663bf8f80b599ebf7535cc417767ef3f617fd0bede8192ca8b2be094f58c9a3583ea26bee1f2a6e277efe32b341d5d68b87198a5a3d8b9ed5b8b88f0ed364d6c2693745a2eb6b0bc08ed55df2bb599251f65d4473d91300a209a8380658d16fc1ef8833fafa34bff", 0x0, 0x2}]}) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001900)={'erspan0\x00', &(0x7f0000001800)={'gre0\x00', 0x0, 0x80, 0x7, 0x3e58, 0x401, {{0x2d, 0x4, 0x1, 0x6, 0xb4, 0x65, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp={0x44, 0xc, 0x24, 0x0, 0x2, [0x3, 0xffff]}, @timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0xb, [{@private=0xa010101, 0xe240}, {@local, 0x53}]}, @rr={0x7, 0x27, 0xd, [@remote, @local, @multicast2, @loopback, @broadcast, @loopback, @local, @remote, @private=0xa010100]}, @timestamp_prespec={0x44, 0x24, 0xf8, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x8}, {@multicast1, 0x4}, {@rand_addr=0x64010100, 0xc}, {@rand_addr=0x64010102, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xae, 0x3, 0x3, [{@empty, 0xd}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x47}, {@loopback, 0xe}]}, @lsrr={0x83, 0x7, 0x2a, [@multicast2]}, @timestamp={0x44, 0x8, 0xf7, 0x0, 0xe, [0xe]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000001a00)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)=@getchain={0x4c, 0x66, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe, 0x4}, {0x5, 0xffe0}, {0xfff1, 0xd}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xf0}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4965}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004040}, 0x20008010) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a40)='cgroup.events\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x6c, 0xa, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c00)=@generic={&(0x7f0000001bc0)='./file0\x00', 0x0, 0x18}, 0x18) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000001c40), &(0x7f0000001c80)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001cc0)={'vlan1\x00', 0x0}) r5 = socket(0x21, 0x1, 0x1000) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000001d00)={{0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'ovf\x00', 0x7, 0x683, 0x7a}, {@multicast2, 0x4e20, 0x1, 0x5, 0x6, 0x7}}, 0x44) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001ec0)={r3, &(0x7f0000001d80)="95f94caa61a3b42b13b90bfd90f19e6d8f947ac6139fe71f5bebcf6f783e38f23d9bd67835809e51e46118fdca960292809d3ddf2b491b521550bb79795f33112f5dfe0f21b272fd5ff0ff8cbb042a8263abcbc274f5d0ba40935398a3131afb31d5a37ce75439becacc2a1366a485f38071c6c2f9804dc7ed49840b1cd932e4e88ce44cd2ac63a2263b682772c7cb4c6ca10168b04b401fe856174be56dd710b22e997d4e15b4288dc66862f021c2f54fbdbc0adf6b0d8a960687116814c346ad1937dc22ef8ddf99e367822732955ee1ce206dbfa2affb", &(0x7f0000001e80)=@udp=r0, 0x4}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f40), r5) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x60, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4e081}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000032c0)={r3, 0x0, 0xb7, 0xf7, &(0x7f0000002080)="439eb26224fb6891073155dd7a0fb80e88b76e4bcbc637047f2f3a11338101b51d34f791790550e3d5a46eee392d98bbb7067d2ebfd0cdd2afd1a21e370556f2305a2266de6d039badb0edae973b38f97894005258e5a7e47924aa5b5b1f5f831c426a7a9052f3b16af221eb9ba773a5e2fd285eaf6753096b72cabe5df6badfc36d0d221457125aef4dd11043079e54a7ed0c8e6a054a217fae5791ff214b9615273b59b472da0892b703e41cf9adc9d983ffc10b431b", &(0x7f0000002140)=""/247, 0x8, 0x0, 0x7c, 0x1000, &(0x7f0000002240)="623eb910d6cb1144ee00ea222fcae33ffc88c956ba20ba8080a9a5c46ba10ddcc862243337b6c7af0db1343fdcc0cd7cbc2d8ceddfc82e3146ceacc29052a4ad785f95a030ce7e38c29730bf19ad4ef102697e8c38610d16fbb2c7a33d08395b4fa5b8cfd7e210376417c6f67f53ae18c05a33faa07818af22100fef", &(0x7f00000022c0)="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", 0x5, 0x0, 0x417}, 0x50) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000003340), &(0x7f0000003380)=0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f00000033c0)={0x5ef9, 0x57c}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003440), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f00000035c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003580)={&(0x7f0000003480)={0xf4, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x38, 0x15, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet(r5, &(0x7f0000004c00)=[{{&(0x7f0000003700)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003740)="fead1d9248a2b7698d76bb838f49cc2ae31f52955975f23b450b21574810067d3c20627108548bbf91c22c89fb95b711ca617582665b43b98673c7863854dc53ce89b50ec8a5efd830c9ef9f6ce5de6ad7d98b3a6d2b69f5e844d39e3fac79b2eada31b7b77ddc103436142e0dcf456941ee69dd8b61dd", 0x77}, {&(0x7f00000037c0)="d2c163667dc61fc2e37f8fec883ab8986d218c38e112ee80b4824fa9ea93363e50b830d9d01488ffe7a99cab0953748c28f432b4f0602c665a5e203c0e17a0c7bc23a08814296dabd010e91be4694746e2886217c8b37069838828e149374ba693244d85b156655cff37c5ac8f118773c15ddae0798c1973187f2408f2104ab5442975377d9f6867dd8cef88a4f328195f333554d4f303edff9260d91c612b909cba3f4948536010a7d417c1aef921b7df09aeceef42b352b79623314001a5edbd5d53", 0xc3}, {&(0x7f00000038c0)="0532cc4b6457cb7ccfebec46aed6a69b05b07b9522480f6297cd07e11ae3cf8e914887e76a44f13b01d43d79099929519f0dfec5c8019769a4ebf7f596961572b7e2bff3c0e1bb3be061a97393cc2a5776aa4228bc692fcba94b3291af79c67bab39301af9d8c959e37b45be638d899d810258bf3c53dfb01f495bf62faf244fd3cdc4", 0x83}, {&(0x7f0000003980)="38398ece6819ca122681e03e00fe4a4bf42adb3eef848c16f0a2ee28010a5863b734aaafdcbf815a0f7713291d59dee514ce513fef847ca44d080e3c5568e4e8c32d3fe6de23edf4745810164379117c3300416471a8618663802b37924dcbe9f8828dfef1e73d68c6058fba93e415", 0x6f}, {&(0x7f0000003a00)="0130e8a2cf39419677a835a2b92598a6e10e8b2e7c2c2ce8c0375ea57f46", 0x1e}, {&(0x7f0000003a40)="1c4a7e20da4ea5492343c338d9b29dd85351962ae70eb2aee4dee15d5d803747232c858910176571017f061953c0292bd175f38a4ea8e0d42d65264e039b42aea7e8e2c87020f9e02cb80acdab425f9498ea9e768ee39e5436739e4563ceb29db719846adc3f7478b2b90f3d186414e7347869c67518663d3caa50fee9ea02fd6190cc8048d94643c4bd90ead286adc349607bbc6d28de23a3ab50b343f6ed72fb680d99526f97", 0xa7}, {&(0x7f0000003b00)="b905e838885b7a3322386c04796e689b75a5f30063f5fb097fab011ee203e0262c94f6e67b4723ecd3c02a39d4e9aec0ba2f1421442920233f6defbf2c628ff25891a5fd0591c28ec28248c65b0990275aabab35e25c25380066f9cc944f9ec34e2e233aa49406507fd2f5ce519249b6a39d543bde2d740d91e0733a6ec355b9f6a20c56a1ef262ddb547953cbb82998a3375a546616e92ec84a2dd2ad12a078ca7d1a806a2d9aee96b86e0c25aa5bc1da53dd0dda2d9c7a0582461c75e7dc1edee3369ecf87da30231e942edf8276778110", 0xd2}, {&(0x7f0000003c00)="ffdf290e00dce7d0", 0x8}], 0x8, &(0x7f0000003cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x94, 0x0, 0x7, [0x7, 0x5, 0x5, 0x80, 0x5, 0x7, 0x135, 0xd, 0x48000]}, @generic={0x44, 0x12, "2004df71788920c2b936a879e9b0cc28"}, @timestamp_prespec={0x44, 0x2c, 0x20, 0x3, 0x9, [{@remote, 0x6}, {@broadcast, 0x9}, {@loopback, 0x6}, {@empty, 0x9}, {@multicast2, 0xfffffffe}]}, @noop, @rr={0x7, 0x7, 0x50, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x4b, 0x3, 0xb, [{@remote, 0x4}, {@local, 0x8be}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@multicast1, 0xffffffc0}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x1ff}, {@loopback, 0x9}, {@loopback, 0xfffffffb}, {@rand_addr=0x64010102, 0x9}]}, @noop, @ssrr={0x89, 0x2b, 0x4b, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x3f}]}, @lsrr={0x83, 0x13, 0xfd, [@multicast2, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x1c0}}, {{&(0x7f0000003e80)={0x2, 0x4e20, @empty}, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000003ec0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xabeb}}], 0x30}}, {{&(0x7f0000003f00)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000042c0)=[{&(0x7f0000003f40)="dd6c9ff6d96edc3f0a5fa849dfc696afda00ea005ec93ab9d2dc591aafcc73df26bc1a61994c45daf1185b9b4877fdfeb25d5bada27ea3c10c6531a9bf741c4c9e2a2dd7f6eb043f58a69fff90bd4ef0e4a95b3b10131827febd2014bc608892055c0d218eb4338602b2c979a5b3eb29371496083d1de22f56cf5d7779a19aef37286e61e3410ca1de4edb3e84e3973316a7ce42e81798bb4f0819296ad539a6c6b614c2a65cb8d7b919dd1ad5eecea97a", 0xb1}, {&(0x7f0000004000)="592114c1bb0cf7445db5bdb59a46d0c6e6c33fbbba084cb0578ee3e22d2ed9e62aa8e7cfe6a6438a4c63eaf7ee3e748127ad9be6f8aeaa8a3746d251d002853adc75dd344291f442dbba7d2cd2042d84a74cc5ab14dd599c433835ec7396a3476fc21ea867074a6061fcaddf7bce06c9a4f846a08c275c42ebee72e72e6b3d626d001c97ae897755a88be5d6737b99a4d3975af59db7f8487e8ad541c8a730dc89fb227a38e2cb36801e5426b9c0c8b7860ab991f127", 0xb6}, {&(0x7f00000040c0)="9d81b3ead834d61da24a425175a195ca6e82ed5facb6aeb33295f8c23c40a36f8b9b3017bf9f8771544820f7273bfb3839e91219442601e6d5a79186a9cdd7a5a639a78dba6a747cda92b2779a1b59abaabfcd57546d326ab7cad07db9bb1ac4cc82b8880d9259647a7ce43b37b1dc6a7dca5d14f6126e38c881080cf132368d545a193180c1b1a5cf88334d9b0189835eb8cad15c4da672b560a02e578378466c895f56c4c65819c3b7dd71d7bbed6687366bd07fb055ac55d5ad9834ae85cdbd11819b432919429b005a7c5a4f9630a366a1b6f8e4e1e2e56b6657ebbd4cf4a8cf", 0xe2}, {&(0x7f00000041c0)="4f5498fbac184a5a8ab8f44a3bb3ad679d094a653b2cdae02baafc16cd2e26a3c12781c0c38b6e4b42c327567da86f0539cd22637d3c5aad11ea0dc86d344bba5a582d56f3a15df3e500178cd7395a449696737693a1c79626ccb88729cdbb757f3714fffda64ea6be89372d383e049adbf829af6094654014c10c97d4f7e1ed5daa4f4de620a0da3035bb5ebcb9e1f76f769b711c5b32167536c002b0e104e338fb85d084d010261a9c0cc6fb20d04643680e5ea6424d2bb6d777510733c33112a7c786761bad259ce12d032224a5278aac1b597f71e5be88137c4a6a649aaa66dafe", 0xe3}], 0x4, &(0x7f0000004300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0x3, "f4"}, {0x5, 0x6, "1aaef74c"}, {0x7, 0x9, "d368f6a05ea7c0"}, {0x5, 0x7, "af4950af0c"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x78}}, {{&(0x7f0000004380)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000004600)=[{&(0x7f00000043c0)="b2993eac13ad67a6ce3ffa2cc5d202b976f29fe0b0e45e2df0884b9059563b638aedce9fe08a20209295f0cc83", 0x2d}, {&(0x7f0000004400)="ea0cade38e842d0541ce90efcd6201a027b9e123163870f99b73f1b20a06d6df308f8433a3989c10dce445a85ce17da0c0568ed378817ee0cae49213826e11ad6faa15ca252be41fd12d610a7adefebf42456e88da3abbc042a0101edc69846182371f5f8730637d5e9157f3d4694060aeafbcab323881ef27983dbaa9979bf29047a77f5aac189ea37f9b32ad85134b5042d1e78081c26a204f12d0950ab068e595cdc693f1e2", 0xa7}, {&(0x7f00000044c0)="6049067bc4740590d02c66822b81ba573b1997b1915d552694072ffaa65b62a116a7d6e2aa0f4bb82c928c2645b0012021deaa0360bdd1193bf5a5f88e4a8c3aa55217831ff66245aa45c4ff38f7299ca096ebe30e30aec6a07b077e946b86cdc2cbadaf3dcabeb73bd3864facaec60559fe3a102628f7a56150284f06935d18af4c5f1bf0e3a79dc4cfedfdf0ca67cf86a29c42e1942c9890e8170f17f2575d8559aaa93bca359878d03fa462f91eced3b0b0386836ed", 0xb7}, {&(0x7f0000004580)="23b633e46fa335755ef12b91f8562e014ce5dab2ca45b2f7ce059efcbe6a699da2a2ae1c6143f36fd01ecd5bf44128ac6292a79e6f2750ac58c7211f124c63a22dc4ead0c9c7915ffb4be128baedc890f7a698aa2dedd20e6ea25df27827b57653f12f47db39c920d720c40da7c08b2eb295", 0x72}], 0x4, &(0x7f0000004640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x8c, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x91aa}, {@multicast2, 0x96}, {@local, 0x8}, {@local, 0x6}, {@private=0xa010101, 0x81}, {@loopback, 0x2}]}]}}}], 0x80}}, {{&(0x7f00000046c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000004780)=[{&(0x7f0000004700)="b260dff9d8a66c81fa3770733830a987472a09ec775125d7e27c06556caaa4c7afbea112b2d990efce9e99aa93b0ce5861553f7c35d05b217d89d299e9f5b6970fed0fd84ba55f534d3de21e21837801f357", 0x52}], 0x1}}, {{&(0x7f00000047c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000004940)=[{&(0x7f0000004800)="31ca8a5787636481d43edde9842c70dae56ec880ad6360d94c50c05b23f73c84e0a777af030ba234d3e8aed4e157df18f372b8721255544f3fe5dbca3479248aba0bef96e12ed598e7396e64bc985ba154af34b6f770d38c8ce3d0147f2f9b6aefef1862bb21b738634ee844aeb03090e9f447ca400724efeda6e47312ee02eb3b46d799fe889da1478c5e45a4b7ec970500102a840ef2fd2bf76d8cda820e77aa5cf83f5837ab808b4273ec44557df2484bc30708543221763fee07a3b6764912d7b82a420fdd13b60356021b70a921ae", 0xd1}, {&(0x7f0000004900)="dbd135501fc6e9b0270de708adb55b6c1977f9e54c77d08ab35c851db28a52bae0d2f7e33654f13613dad6874d011f19ad01d57eda4bf23a40", 0x39}], 0x2, &(0x7f0000004980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x88, 0xb, "3cef7cafac15abc275"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14}}], 0xb8}}, {{&(0x7f0000004a40)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe538}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x57, [@rand_addr=0x64010100, @multicast1, @broadcast, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x3c}]}, @timestamp_addr={0x44, 0x24, 0x9a, 0x1, 0x6, [{@empty, 0x4}, {@local, 0x3}, {@multicast1}, {@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x8a, 0x3, 0x3, [{@multicast2, 0x4}, {@broadcast, 0x7}, {@multicast2, 0x8}, {@multicast2, 0xfff}, {@multicast2, 0x3ff}, {@loopback, 0xff}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4}]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x88, 0xc, "f9642c7dcd1731d2efbe"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x140}}], 0x7, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000004dc0), &(0x7f0000004e00)=0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000004e40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000004e80)=0x38) openat$cgroup_ro(r3, &(0x7f0000004ec0)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000004fc0)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f40)={0x30, 0x1410, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x24000038) ioctl$int_in(r7, 0x0, &(0x7f0000005000)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000005040), r3) 17.03282581s ago: executing program 0 (id=1198): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x3, 0x0, 0x0, 0xa1d}]}, 0x10) 16.962224461s ago: executing program 2 (id=1199): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @random="429e82211cf8", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast, @dev={0xac, 0x14, 0x14, 0x45}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$tipc(0x1e, 0x5, 0x0) 16.922637297s ago: executing program 0 (id=1200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0xffff, r3, 0x42, 0xc6, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x840) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r5, &(0x7f00000042c0)=[{{&(0x7f0000000500)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x18, 0x29, 0x4, '#/'}], 0x18}}], 0x1, 0x20004880) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x32, 0x1, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r1, 0x25, 0x0, @void}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) (async) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000ec0)={0x87e, 0x87e4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 16.812658603s ago: executing program 1 (id=1201): syz_emit_ethernet(0x3c6, &(0x7f0000000880)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x390, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0x2, "6eec22507c120a6fb50ecc30272b"}]}}}}}}, 0x0) unshare(0x26020480) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002b00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r3}, 0x38) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], 0x31) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000140)) 16.778882494s ago: executing program 2 (id=1202): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) accept4(r1, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000240)=0x80, 0x80000) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf25030000000c000500200100000000000008000100000000000c00020007000000000000000d7eb12ae990f0349fc8376abcaa187236e87e1520a10685b4794b8f43943964db8949188f5a2e8963763c94b01718d420e66e24d93a955d6ca891ec75db339e9ce8c60e2e8ef9100e417937dbdaa788e96e7832df240530ce273ee832fe7921646f7147f04d33f3342b2891398391646d44d47e170dd9e0dad67ecf4d06b224a30288a6a1a5ab4490c95a23e3325bb4ee685d10aebe75947c1de5e5612e4864acb54d916f49efb366d87a7db5cfde11c8ecb4a57ab9cdce4d6908c98d8294dcc225"], 0x34}}, 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x59, "0f435dc65e8df6f71ca17a7c683102c9586bb59bbc9ba7a3b6a823bfaab589a29f284d94658dcfd40ea5c3ae10ddadfb55004c9ca4820466ff30f708b53830b5cac515688f53db22da2c2afc65604bd23edcbbdd66e33a63b9"}, &(0x7f0000000340)=0x61) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={r8, 0xa2, 0x1f86}, &(0x7f00000003c0)=0x8) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r9) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)={0x74, r10, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 16.703685478s ago: executing program 0 (id=1203): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES8], 0x50) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe80900534e05f5dd00000010000100040c100000000080224e0000", 0x58}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000006000000090003000204fe419a2a748489ceb4a3110bd3c68a4c27549c2a096815f0e6b2b6948d3945b2449767d95308dc0f918b1cb66973e1ab8207f0a3f56bfadaf463d8aedf34636435", @ANYRES32=r5, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x9, 0xf, 0x5b}, 0x2c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x202}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x44080) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r10, 0x4030582b, &(0x7f0000000340)={0x0, 0x2, 0xd, 0xfff, 0xf84, 0x6}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="05008f3200000000000000000a000000000012cc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7b}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000500)='GPL\x00', 0x2, 0x1000, &(0x7f0000000600)=""/4096, 0x0, 0x1, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000001600)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001640)={0x4, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001700)=[r0, r0, r0, r0, r11], &(0x7f0000001740)=[{0x1, 0x3, 0x6, 0xa}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r12, 0xffffffffffffffff}, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a00010000000000fcffffff81808000000008000000000014000200fe8000000000000000000000000000bb140001"], 0x44}}, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES64=r13, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r15, 0x18000000000002a0, 0x48, 0xaf, &(0x7f0000000100)="c3941108a8000000009e08e086dd3ddd5e4cf73d9da674ebca0ce0510e656d14ccecebc51c669fa2c8c63d9b60879b1691088a165b47b112d55312223baba55ec5e6a8a10196a0a7ba01d00edaa257e6dd385979ceb51787dab408dfc44e08449ec766cb0d0cb70a59b2bb6cb0b0ca626cb1b190586da7bb", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 16.620617092s ago: executing program 1 (id=1204): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x0, 0xa695, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000500)=[{&(0x7f00000002c0)="390000001300034700000000c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000042a47bf6275137277296214e21b4736557bc47929fb15f339599b6f4a75c703db114355c1c7fc97a7df899732605e0bea0450d1f487f40bdd962541a9b1e2feec7cfb655c5648170680367877fe0762ef369827730052c37d940c96aca81da9c68f5c5d8bbee8abee2cf3e1fc17a406d0b630000", 0xad}, {&(0x7f0000000440)="16e32b1ef82a55404f2c0470467b41cafd9129abf3a50a532a00cc9154b76adc1aad09051fd8159451d7f1c85086c4cbff81364b30e59e7b92f69ad0580c6955ec3e1d69a81b7b8a671d8e46d641d1e5e42298308701acdaedd236918b35b75558f7a2cd6ac17092db099cf1165b2d4a084c8e0fd755dfcc02ed2eef456a461b51a657cbab6508a169693d1ef4d896aee4af82283b712842dca2f00ac789633a0761abc3795093c7b6e8fee5c4d3bf941f27574cb0a9836ed054", 0xba}], 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r8, 0x29, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x44, 0x0, 0x1}, 0x28) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x800) 16.567795899s ago: executing program 3 (id=1205): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bbfc0100880b0000000000000021000086dd080088"], 0x0) 16.307946014s ago: executing program 0 (id=1207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000180)=0x5b6, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="100000000000000000000100000000000000002c5709728aed55cb846f33b29f00e67eac689a7f57e298c720dc48b2a1d919536cf4ea41cf8b22f06ee4207997ad255d2b3bf609629b5374a6bf1794eb3c269c3b09002bd42b4568c78fa282a95dc3c40a409111e153c94b2e50cb450200a5194c29c1741fab0232a8964fbebd3db4ef84ca0d9bbf657c3cf5d7c605419e55e716a7f70a2624c5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001800009f6703000020000000bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r4, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000480)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) r7 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r6, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000180)=0x9, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) socket(0xa, 0x0, 0x3a) 15.677882338s ago: executing program 4 (id=1211): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000100fefffffffddbdf25810a000000000000080001"], 0x20}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000100fefffffffddbdf25810a000000000000080001"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x68, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489, 0x10122}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @gre={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x553418c37b1a602b}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x100}, @IFLA_GRE_IKEY={0x8, 0x4, 0x81}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4017}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r8, 0x0, 0x8000000000000000) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x138, 0xb, 0x148, 0x0, 0x148, 0x210, 0x230, 0x242, 0x210, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x0, 0x70}, 0x0, 0xd8, 0x138, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0xee00, 0x3, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x4, 0x1, 0x0, 0x4], 0x9, 0x4}, {0x0, [0x1, 0x2, 0x0, 0x0, 0x4, 0x2], 0x1, 0x5}}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x4, 0xffffffff, 0x101, 'pptp\x00', 'syz1\x00', {0x333}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x138, 0xb, 0x148, 0x0, 0x148, 0x210, 0x230, 0x242, 0x210, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x0, 0x70}, 0x0, 0xd8, 0x138, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0xee00, 0x3, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x4, 0x1, 0x0, 0x4], 0x9, 0x4}, {0x0, [0x1, 0x2, 0x0, 0x0, 0x4, 0x2], 0x1, 0x5}}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x4, 0xffffffff, 0x101, 'pptp\x00', 'syz1\x00', {0x333}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0xfff, 0x0, 0x4, 0x60000, r0, 0x1, '\x00', r2, r8, 0x2, 0x4, 0x4}, 0x50) 15.583656267s ago: executing program 4 (id=1212): r0 = socket(0x1e, 0x802, 0x0) r1 = epoll_create1(0x80000) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="1200002b4e4418f1bbb5c5151f84240fcbf200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000800000000000000000000000000000000000000000088a56fd88587f45f068bea083b2fada4deecea9839c877752d3b7353a18f2636fb5e4e23f26c60ccb939082492ad921d206d598d"], 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="c346de4658daafc2fb20dd5e6a34a81294355ffefc1e8f7a07012634acbc238a9195b55845210299d1e102e534b9259c869de0982e0ca110a11507dbdfec607062be4e73303e39b0f720baf3e3874b3d3e49b44bc44addae4308c92914ed728ffa61d3f59435a7850bd68ca0199b1621402f7000"/131, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_netdev_private(r4, 0x89fd, &(0x7f00000003c0)="c87eae6ccb2faafce234d0657bd4dc176cab81ebd2553037f3884c96b8be08a25cf1d5de2f27b897e1c657766d26a315e66021d85c68b19e0855247f71aa75418df52af0cff75d902c5311c7406a6c660351d83e4f2d2b7c388324d73f935e14df46258869f34aed594565eba295dc920b0169ab89da4cc9efe7a81be43f0f394bbffd2744576bd8743648535e0f09ebbc6520c476578637f50e417f84604a61fb8f67c93f2f869dbbd25c233ea8159d4fe100801379b9b7668ce0d0aeb7fff644f38999d002f5bced083951fc9bb83871501fac22d07e8cbcf612550e2672e3ffb516295bde891c2a7e28ad0fcef5b9d2e80776") setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="640000001000370400000000ffdbdf2500001400bc01b96b846af47bdc9e7350d79a477b829ce9a3bc753f24e933e48e888bbba3a41aebf76f17c780b6a4386159e314f38393aa7ef951c98da00fae06699f94f26ef21d6cc814cbfc", @ANYRES32=0x0, @ANYBLOB="836507000100000044002b80080003000100000008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030004000000080003000000000008000800", @ANYRES32, @ANYBLOB="080003000400000008000800", @ANYRES32=r1, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40080c4) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xd5, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) shutdown(r2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffff6a}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000700)="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"/390, 0x186}, {&(0x7f0000000340)="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", 0xfe}], 0x4, &(0x7f0000000280)}], 0x1, 0x40801) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x60002005}) 15.332230615s ago: executing program 4 (id=1213): r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x26, 0x2000}, 0x20) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 15.322098653s ago: executing program 4 (id=1214): bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000240)=@base={0x6, 0x4, 0x2003, 0x2}, 0x48) 15.274503823s ago: executing program 4 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000050000030900010073797a30000000002c000000030a01020000000000000000050000040900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c0002800800024000000003080003400000000208000140000000000900010073797a2000000000140000001100010000000000000000000300000a"], 0xc8}}, 0x840) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000051a736e6d010000000024000180140001"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@newtfilter={0x5c, 0x2c, 0xc3f, 0x30bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0xc, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1f7050e70891b286}, {0x800, 0x4, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f00000000c0)={0x1}, 0x1) setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @local, 0x9}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}], 0x10) 15.068205697s ago: executing program 4 (id=1216): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x24020400) r5 = socket(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000010a40)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0xd}, {0x0, 0x2}, {0x4, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x24040084) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) listen(r2, 0x658) write(r0, &(0x7f0000000000)="2a000200010078", 0x7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.562772863s ago: executing program 32 (id=1204): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x0, 0xa695, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000500)=[{&(0x7f00000002c0)="390000001300034700000000c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000042a47bf6275137277296214e21b4736557bc47929fb15f339599b6f4a75c703db114355c1c7fc97a7df899732605e0bea0450d1f487f40bdd962541a9b1e2feec7cfb655c5648170680367877fe0762ef369827730052c37d940c96aca81da9c68f5c5d8bbee8abee2cf3e1fc17a406d0b630000", 0xad}, {&(0x7f0000000440)="16e32b1ef82a55404f2c0470467b41cafd9129abf3a50a532a00cc9154b76adc1aad09051fd8159451d7f1c85086c4cbff81364b30e59e7b92f69ad0580c6955ec3e1d69a81b7b8a671d8e46d641d1e5e42298308701acdaedd236918b35b75558f7a2cd6ac17092db099cf1165b2d4a084c8e0fd755dfcc02ed2eef456a461b51a657cbab6508a169693d1ef4d896aee4af82283b712842dca2f00ac789633a0761abc3795093c7b6e8fee5c4d3bf941f27574cb0a9836ed054", 0xba}], 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000100)=0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r8, 0x29, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x44, 0x0, 0x1}, 0x28) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x800) 1.527591514s ago: executing program 33 (id=1202): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) accept4(r1, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000240)=0x80, 0x80000) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf25030000000c000500200100000000000008000100000000000c00020007000000000000000d7eb12ae990f0349fc8376abcaa187236e87e1520a10685b4794b8f43943964db8949188f5a2e8963763c94b01718d420e66e24d93a955d6ca891ec75db339e9ce8c60e2e8ef9100e417937dbdaa788e96e7832df240530ce273ee832fe7921646f7147f04d33f3342b2891398391646d44d47e170dd9e0dad67ecf4d06b224a30288a6a1a5ab4490c95a23e3325bb4ee685d10aebe75947c1de5e5612e4864acb54d916f49efb366d87a7db5cfde11c8ecb4a57ab9cdce4d6908c98d8294dcc225"], 0x34}}, 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x59, "0f435dc65e8df6f71ca17a7c683102c9586bb59bbc9ba7a3b6a823bfaab589a29f284d94658dcfd40ea5c3ae10ddadfb55004c9ca4820466ff30f708b53830b5cac515688f53db22da2c2afc65604bd23edcbbdd66e33a63b9"}, &(0x7f0000000340)=0x61) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={r8, 0xa2, 0x1f86}, &(0x7f00000003c0)=0x8) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r9) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)={0x74, r10, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.049699872s ago: executing program 34 (id=1207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000180)=0x5b6, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB="100000000000000000000100000000000000002c5709728aed55cb846f33b29f00e67eac689a7f57e298c720dc48b2a1d919536cf4ea41cf8b22f06ee4207997ad255d2b3bf609629b5374a6bf1794eb3c269c3b09002bd42b4568c78fa282a95dc3c40a409111e153c94b2e50cb450200a5194c29c1741fab0232a8964fbebd3db4ef84ca0d9bbf657c3cf5d7c605419e55e716a7f70a2624c5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001800009f6703000020000000bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r4, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000480)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) r7 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r6, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000180)=0x9, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) socket(0xa, 0x0, 0x3a) 976.284017ms ago: executing program 35 (id=1205): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bbfc0100880b0000000000000021000086dd080088"], 0x0) 0s ago: executing program 36 (id=1216): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x24020400) r5 = socket(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000010a40)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0xd}, {0x0, 0x2}, {0x4, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x24040084) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) listen(r2, 0x658) write(r0, &(0x7f0000000000)="2a000200010078", 0x7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): W filter on device netdevsim2 [ 85.200735][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.211754][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.291099][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.357458][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.368103][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.377759][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.388471][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.397072][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.406405][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.414934][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.425187][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.434341][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.444906][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.472866][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.480366][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.509355][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.516750][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.537911][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.567000][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.590393][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.597639][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.644699][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.651950][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.665737][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.700919][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.708063][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.734834][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.742031][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.857298][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.931418][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.997283][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.004503][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.055032][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.062264][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.132640][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.193044][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.236052][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.243303][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.349214][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.356483][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.640518][ T5617] Bluetooth: hci1: command tx timeout [ 86.646116][ T50] Bluetooth: hci2: command tx timeout [ 86.646148][ T50] Bluetooth: hci4: command tx timeout [ 86.646252][ T4923] Bluetooth: hci0: command tx timeout [ 86.662951][ T5613] Bluetooth: hci3: command tx timeout [ 86.695570][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.353219][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.575926][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.605176][ T5608] veth0_vlan: entered promiscuous mode [ 87.660958][ T5608] veth1_vlan: entered promiscuous mode [ 87.838520][ T5603] veth0_vlan: entered promiscuous mode [ 87.858234][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.871686][ T5608] veth0_macvtap: entered promiscuous mode [ 87.892711][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.901026][ T5605] veth0_vlan: entered promiscuous mode [ 87.915664][ T5608] veth1_macvtap: entered promiscuous mode [ 87.932090][ T5603] veth1_vlan: entered promiscuous mode [ 87.957809][ T5605] veth1_vlan: entered promiscuous mode [ 87.990566][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.038032][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.102385][ T5611] veth0_vlan: entered promiscuous mode [ 88.115475][ T5603] veth0_macvtap: entered promiscuous mode [ 88.127718][ T5605] veth0_macvtap: entered promiscuous mode [ 88.137603][ T5604] veth0_vlan: entered promiscuous mode [ 88.152904][ T5605] veth1_macvtap: entered promiscuous mode [ 88.173290][ T5611] veth1_vlan: entered promiscuous mode [ 88.181824][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.193196][ T5603] veth1_macvtap: entered promiscuous mode [ 88.208392][ T5604] veth1_vlan: entered promiscuous mode [ 88.284349][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.297831][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.332133][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.364011][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.366432][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.381146][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.400165][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.459257][ T5611] veth0_macvtap: entered promiscuous mode [ 88.471198][ T770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.483130][ T5604] veth0_macvtap: entered promiscuous mode [ 88.500325][ T805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.510067][ T770] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.520209][ T805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.528918][ T5611] veth1_macvtap: entered promiscuous mode [ 88.540694][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.562287][ T5604] veth1_macvtap: entered promiscuous mode [ 88.570861][ T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.600219][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.659900][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.717937][ T770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.724974][ T5613] Bluetooth: hci3: command tx timeout [ 88.727108][ T5622] Bluetooth: hci0: command tx timeout [ 88.731388][ T5613] Bluetooth: hci4: command tx timeout [ 88.731416][ T5613] Bluetooth: hci2: command tx timeout [ 88.731473][ T5617] Bluetooth: hci1: command tx timeout [ 88.737069][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.766245][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.775817][ T770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.788111][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.839594][ T770] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.879241][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.915725][ T770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.925625][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.937856][ T770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.973525][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.990039][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.073377][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.097824][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.323652][ T3306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.349070][ T3306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.440897][ T770] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.453298][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.462362][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.490184][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.559273][ T5820] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 89.644949][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.673752][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.681868][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.696756][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.706593][ T5823] tipc: Started in network mode [ 89.715264][ T5823] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.726369][ T5823] tipc: Enabled bearer , priority 10 [ 89.764540][ T5822] tipc: Enabling of bearer rejected, already enabled [ 89.791382][ T5827] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9'. [ 89.823328][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.848615][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.884901][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.992988][ T805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.087374][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 90.134913][ T5840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.221523][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.400943][ T805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.451974][ T805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.490543][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.525969][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.580928][ T5847] openvswitch: netlink: Missing key (keys=40, expected=100) [ 90.746133][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 90.850528][ T5761] tipc: Node number set to 2886997162 [ 91.688078][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 91.867190][ T29] cfg80211: failed to load regulatory.db [ 92.144629][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 92.236036][ T5919] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 92.595872][ T5932] netlink: 52 bytes leftover after parsing attributes in process `syz.0.34'. [ 92.607049][ T5932] Zero length message leads to an empty skb [ 92.643952][ T5934] bridge_slave_0: left allmulticast mode [ 92.652412][ T5934] bridge_slave_0: left promiscuous mode [ 92.659049][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.732446][ T5934] bridge_slave_1: left allmulticast mode [ 92.738185][ T5934] bridge_slave_1: left promiscuous mode [ 92.746144][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.768714][ T5934] bond0: (slave bond_slave_0): Releasing backup interface [ 92.792734][ T5934] bond0: (slave bond_slave_1): Releasing backup interface [ 92.846875][ T5934] team0: Port device team_slave_0 removed [ 92.883513][ T5934] team0: Port device team_slave_1 removed [ 92.892986][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.901249][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.916532][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.924618][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.936826][ T5934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.431175][ T5958] netlink: 'syz.1.44': attribute type 39 has an invalid length. [ 93.460324][ T5958] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 94.945948][ T5911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.193255][ T5974] netlink: 252 bytes leftover after parsing attributes in process `syz.1.50'. [ 95.230645][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 95.621169][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 96.115441][ T30] audit: type=1804 audit(1786093146.171:2): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.58" name="/newroot/6/cgroup.controllers" dev="tmpfs" ino=48 res=1 errno=0 [ 96.174514][ T30] audit: type=1800 audit(1786093146.171:3): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="cgroup.controllers" dev="tmpfs" ino=48 res=0 errno=0 [ 96.446942][ T6014] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 96.612024][ T6021] FAULT_INJECTION: forcing a failure. [ 96.612024][ T6021] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.634025][ T6014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.641158][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 96.641185][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.641206][ T6021] Call Trace: [ 96.641214][ T6021] [ 96.641222][ T6021] dump_stack_lvl+0xe8/0x150 [ 96.641270][ T6021] should_fail_ex+0x40c/0x560 [ 96.641297][ T6021] _copy_from_user+0x2d/0xb0 [ 96.641324][ T6021] __sys_bpf+0x2e7/0xd90 [ 96.641472][ T6021] ? __pfx___sys_bpf+0x10/0x10 [ 96.641578][ T6021] ? __fget_files+0x2a/0x420 [ 96.641677][ T6021] ? ksys_write+0x242/0x270 [ 96.641759][ T6021] ? __pfx_ksys_write+0x10/0x10 [ 96.641850][ T6021] __x64_sys_bpf+0xba/0xd0 [ 96.641912][ T6021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.641975][ T6021] do_syscall_64+0x174/0x580 [ 96.642053][ T6021] ? clear_bhb_loop+0x70/0xc0 [ 96.642112][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.642163][ T6021] RIP: 0033:0x7fd60099e0d9 [ 96.642259][ T6021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.642295][ T6021] RSP: 002b:00007fd601828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.642357][ T6021] RAX: ffffffffffffffda RBX: 00007fd600c25fa0 RCX: 00007fd60099e0d9 [ 96.642397][ T6021] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 96.642429][ T6021] RBP: 00007fd601828090 R08: 0000000000000000 R09: 0000000000000000 [ 96.642467][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.642498][ T6021] R13: 00007fd600c26038 R14: 00007fd600c25fa0 R15: 00007ffd9b4fe368 [ 96.642580][ T6021] [ 96.868486][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 97.291177][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 97.882863][ T6065] FAULT_INJECTION: forcing a failure. [ 97.882863][ T6065] name failslab, interval 1, probability 0, space 0, times 1 [ 97.914961][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(full) [ 97.914989][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.915000][ T6065] Call Trace: [ 97.915007][ T6065] [ 97.915016][ T6065] dump_stack_lvl+0xe8/0x150 [ 97.915048][ T6065] should_fail_ex+0x40c/0x560 [ 97.915074][ T6065] should_failslab+0xa8/0x100 [ 97.915105][ T6065] __kmalloc_noprof+0xfe/0x720 [ 97.915131][ T6065] ? bpf_test_init+0x9f/0x150 [ 97.915150][ T6065] ? bpf_test_init+0x9f/0x150 [ 97.915177][ T6065] bpf_test_init+0x9f/0x150 [ 97.915202][ T6065] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 97.915257][ T6065] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.915293][ T6065] ? __fget_files+0x2a/0x420 [ 97.915324][ T6065] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.915348][ T6065] bpf_prog_test_run+0x2c5/0x340 [ 97.915379][ T6065] __sys_bpf+0xa22/0xd90 [ 97.915412][ T6065] ? __pfx___sys_bpf+0x10/0x10 [ 97.915448][ T6065] ? __fget_files+0x2a/0x420 [ 97.915490][ T6065] ? ksys_write+0x242/0x270 [ 97.915523][ T6065] ? __pfx_ksys_write+0x10/0x10 [ 97.915557][ T6065] __x64_sys_bpf+0xba/0xd0 [ 97.915580][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.915601][ T6065] do_syscall_64+0x174/0x580 [ 97.915628][ T6065] ? trace_irq_disable+0x3b/0x140 [ 97.915651][ T6065] ? clear_bhb_loop+0x70/0xc0 [ 97.915677][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.915696][ T6065] RIP: 0033:0x7f761a39e0d9 [ 97.915714][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.915731][ T6065] RSP: 002b:00007f761b1f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.915752][ T6065] RAX: ffffffffffffffda RBX: 00007f761a625fa0 RCX: 00007f761a39e0d9 [ 97.915766][ T6065] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 97.915779][ T6065] RBP: 00007f761b1f5090 R08: 0000000000000000 R09: 0000000000000000 [ 97.915792][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.915803][ T6065] R13: 00007f761a626038 R14: 00007f761a625fa0 R15: 00007fffa6ef90a8 [ 97.915834][ T6065] [ 98.939005][ T6088] syzkaller0: entered promiscuous mode [ 98.958322][ T6088] syzkaller0: entered allmulticast mode [ 99.218687][ T6103] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 99.254781][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 99.528421][ T6110] netlink: 32 bytes leftover after parsing attributes in process `syz.1.90'. [ 99.572718][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 99.608784][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 99.962039][ T6119] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 100.016008][ T6119] macvlan2: entered promiscuous mode [ 100.034004][ T6119] macvlan2: entered allmulticast mode [ 100.045308][ T6119] veth1_vlan: entered allmulticast mode [ 100.054737][ T6119] team0: Port device macvlan2 added [ 100.093913][ T6114] FAULT_INJECTION: forcing a failure. [ 100.093913][ T6114] name failslab, interval 1, probability 0, space 0, times 0 [ 100.118254][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.0.91 Not tainted syzkaller #0 PREEMPT(full) [ 100.118283][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.118295][ T6114] Call Trace: [ 100.118302][ T6114] [ 100.118311][ T6114] dump_stack_lvl+0xe8/0x150 [ 100.118345][ T6114] should_fail_ex+0x40c/0x560 [ 100.118373][ T6114] should_failslab+0xa8/0x100 [ 100.118404][ T6114] __kmalloc_noprof+0xfe/0x720 [ 100.118432][ T6114] ? tomoyo_encode+0x2ad/0x570 [ 100.118463][ T6114] ? tomoyo_encode+0x2ad/0x570 [ 100.118500][ T6114] tomoyo_encode+0x2ad/0x570 [ 100.118537][ T6114] tomoyo_realpath_from_path+0x5fa/0x640 [ 100.118579][ T6114] ? tomoyo_path_number_perm+0x219/0x5f0 [ 100.118608][ T6114] tomoyo_path_number_perm+0x246/0x5f0 [ 100.118643][ T6114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.118669][ T6114] ? __lock_acquire+0x683/0x2cf0 [ 100.118712][ T6114] ? hook_file_ioctl+0x1f0/0x5f0 [ 100.118760][ T6114] ? __fget_files+0x2a/0x420 [ 100.118790][ T6114] ? __fget_files+0x2a/0x420 [ 100.118814][ T6114] ? __fget_files+0x3a2/0x420 [ 100.118839][ T6114] ? __fget_files+0x2a/0x420 [ 100.118870][ T6114] security_file_ioctl+0xc3/0x2a0 [ 100.118899][ T6114] __se_sys_ioctl+0x47/0x170 [ 100.118931][ T6114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.118954][ T6114] do_syscall_64+0x174/0x580 [ 100.118981][ T6114] ? trace_irq_disable+0x3b/0x140 [ 100.119005][ T6114] ? clear_bhb_loop+0x70/0xc0 [ 100.119029][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.119047][ T6114] RIP: 0033:0x7fd60099e0d9 [ 100.119064][ T6114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.119078][ T6114] RSP: 002b:00007fd601807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.119098][ T6114] RAX: ffffffffffffffda RBX: 00007fd600c26090 RCX: 00007fd60099e0d9 [ 100.119111][ T6114] RDX: 000000000000010f RSI: 00000000400454cd RDI: 0000000000000005 [ 100.119121][ T6114] RBP: 00007fd601807090 R08: 0000000000000000 R09: 0000000000000000 [ 100.119132][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.119142][ T6114] R13: 00007fd600c26128 R14: 00007fd600c26090 R15: 00007ffd9b4fe368 [ 100.119182][ T6114] [ 100.119276][ T6114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.372142][ T6127] netlink: 388 bytes leftover after parsing attributes in process `syz.2.95'. [ 100.708401][ T6138] nbd: socks must be embedded in a SOCK_ITEM attr [ 100.882493][ T36] IPVS: starting estimator thread 0... [ 100.947586][ T6146] netlink: 56 bytes leftover after parsing attributes in process `syz.3.100'. [ 101.020064][ T6145] IPVS: using max 32 ests per chain, 76800 per kthread [ 101.074991][ T5906] udevd[5906]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 101.088260][ T6158] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 101.231108][ T6142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.264371][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 101.468918][ T6176] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 101.547419][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.106'. [ 101.600454][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.106'. [ 104.203357][ T6150] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 104.233429][ T6185] bridge1: entered promiscuous mode [ 104.538329][ T6218] trusted_key: syz.0.113 sent an empty control message without MSG_MORE. [ 104.662782][ T6222] 8021q: VLANs not supported on xfrm0 [ 104.810340][ T6229] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 104.871434][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'. [ 104.884927][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 104.897915][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 104.914001][ T6235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.948477][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 105.004711][ T6234] veth3: entered allmulticast mode [ 105.073269][ T6236] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 105.103403][ T6239] tipc: Started in network mode [ 105.125833][ T6239] tipc: Node identity 3664389e3688, cluster identity 4711 [ 105.151997][ T6239] tipc: Enabled bearer , priority 0 [ 105.331951][ T6241] syzkaller0: entered promiscuous mode [ 105.353888][ T6241] syzkaller0: entered allmulticast mode [ 105.373789][ T6241] tipc: Resetting bearer [ 105.476239][ T36] tipc: Resetting bearer [ 105.516284][ T6262] netlink: 996 bytes leftover after parsing attributes in process `syz.0.124'. [ 105.532029][ T6262] netlink: 996 bytes leftover after parsing attributes in process `syz.0.124'. [ 105.551273][ T6238] tipc: Resetting bearer [ 106.655779][ T6238] tipc: Disabling bearer [ 106.684723][ T29] tipc: Node number set to 15480990 [ 106.734958][ T6253] syz.4.122 (6253) used greatest stack depth: 18280 bytes left [ 106.855744][ T6272] sctp: [Deprecated]: syz.0.126 (pid 6272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.855744][ T6272] Use struct sctp_sack_info instead [ 107.006577][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 107.225639][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 107.247441][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 107.459098][ T6305] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 107.594907][ T6308] bond1: option all_slaves_active: invalid value (255) [ 107.651398][ T6308] bond1 (unregistering): Released all slaves [ 107.744291][ T6314] geneve2: entered promiscuous mode [ 107.985645][ T6334] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.027258][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 108.065084][ T6334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.143'. [ 108.313022][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.146'. [ 108.483152][ T6349] Bluetooth: MGMT ver 1.23 [ 108.598543][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 108.608326][ T6353] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 108.619074][ T6353] netlink: 224 bytes leftover after parsing attributes in process `syz.2.149'. [ 109.083530][ T77] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 109.121786][ T77] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 109.163320][ T77] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 109.191417][ T77] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 110.106636][ T6419] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 110.121446][ T6418] nbd: must specify a device to reconfigure [ 110.269238][ T6419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.369360][ T6421] bond1: (slave gretap1): making interface the new active one [ 110.384138][ T805] IPVS: starting estimator thread 0... [ 110.398459][ T6421] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 110.480682][ T6436] IPVS: using max 31 ests per chain, 74400 per kthread [ 110.834293][ T6448] syzkaller0: entered promiscuous mode [ 110.843473][ T6448] syzkaller0: entered allmulticast mode [ 111.637079][ T36] IPVS: starting estimator thread 0... [ 111.673869][ T6489] __nla_validate_parse: 8 callbacks suppressed [ 111.673887][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'. [ 111.760773][ T6490] IPVS: using max 28 ests per chain, 67200 per kthread [ 111.937852][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 112.410652][ T6515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.193'. [ 112.446736][ T6516] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 112.782873][ T6536] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 113.197229][ T6523] gretap0: entered promiscuous mode [ 113.548440][ T6558] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 113.687326][ T6554] gre0: entered promiscuous mode [ 113.692815][ T6554] gre0: entered allmulticast mode [ 113.706633][ T6558] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 113.757767][ T6558] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 113.794044][ T6558] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 113.842725][ T6558] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 113.887802][ T6558] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 113.913476][ T6558] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 113.952394][ T6558] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 114.238474][ T6576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.316372][ T6578] bond1: entered promiscuous mode [ 114.345733][ T6578] bond1: entered allmulticast mode [ 114.365302][ T6576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.391792][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.424345][ T6576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.488684][ T6582] erspan1: entered allmulticast mode [ 114.547660][ T6582] bond1: (slave erspan1): making interface the new active one [ 114.584139][ T6582] erspan1: entered promiscuous mode [ 114.644142][ T6582] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 114.738409][ T6578] syz.0.204 (6578) used obsolete PPPIOCDETACH ioctl [ 114.867380][ T6602] x_tables: duplicate underflow at hook 1 [ 114.895368][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 115.023757][ T6597] erspan0: mtu less than device minimum [ 115.395232][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 115.437605][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 115.497864][ T6625] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 115.553278][ T6625] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 115.604443][ T6628] sctp: [Deprecated]: syz.4.215 (pid 6628) Use of int in maxseg socket option. [ 115.604443][ T6628] Use struct sctp_assoc_value instead [ 115.647303][ T6625] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 115.731197][ T6625] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.804972][ T6625] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 115.828018][ T6633] erspan0: entered promiscuous mode [ 115.868603][ T6633] erspan0: entered allmulticast mode [ 116.394826][ T6664] xt_hashlimit: size too large, truncated to 1048576 [ 116.538100][ T6657] bond1: option resend_igmp: invalid value (2878) [ 116.573161][ T6657] bond1: option resend_igmp: allowed values 0 - 255 [ 116.636552][ T6657] bond1 (unregistering): Released all slaves [ 116.728234][ T6680] netlink: 280 bytes leftover after parsing attributes in process `syz.0.224'. [ 117.117411][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 117.177820][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 117.237032][ T6695] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.342848][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 117.352497][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 117.585264][ T6700] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 117.645426][ T6700] bond1 (unregistering): Released all slaves [ 118.211929][ T6721] macsec1: entered promiscuous mode [ 118.232698][ T6721] dummy0: entered promiscuous mode [ 118.245891][ T6721] macsec1: entered allmulticast mode [ 118.252680][ T6721] dummy0: entered allmulticast mode [ 118.273055][ T6721] dummy0: left allmulticast mode [ 118.322036][ T6731] pim6reg1: entered promiscuous mode [ 118.339084][ T6731] pim6reg1: entered allmulticast mode [ 118.355214][ T29] dummy0: left promiscuous mode [ 118.373050][ T6737] validate_nla: 58 callbacks suppressed [ 118.373069][ T6737] netlink: 'syz.2.237': attribute type 3 has an invalid length. [ 118.560674][ T6745] netlink: 'syz.1.240': attribute type 23 has an invalid length. [ 118.675433][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 118.698716][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 118.736039][ T6752] netlink: 'syz.3.242': attribute type 15 has an invalid length. [ 118.784574][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 118.900180][ T6752] netlink: 316 bytes leftover after parsing attributes in process `syz.3.242'. [ 118.919939][ T77] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.935023][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'. [ 118.957632][ T77] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.997513][ T77] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 119.047841][ T77] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 119.785763][ T6795] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20003 [ 119.809200][ T6794] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 120.230139][ T6814] syzkaller1: entered promiscuous mode [ 120.243985][ T6814] syzkaller1: entered allmulticast mode [ 120.335786][ T6811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.358879][ T6811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.380660][ T6811] bond0 (unregistering): Released all slaves [ 120.469177][ T6823] pimreg: entered allmulticast mode [ 121.553050][ T29] hid-generic 0005:0458:5505.0001: item fetching failed at offset 0/2 [ 121.577788][ T29] hid-generic 0005:0458:5505.0001: probe with driver hid-generic failed with error -22 [ 121.624893][ T6845] x_tables: duplicate underflow at hook 2 [ 121.765430][ T6845] ip_tables: iptables: counters copy to user failed while replacing table [ 121.820394][ T6867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.857136][ T6881] __nla_validate_parse: 9 callbacks suppressed [ 121.857154][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 122.153336][ T6881] team0: Port device team_slave_0 removed [ 122.758301][ T6911] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 122.788044][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 122.812254][ T6912] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 123.644134][ T6929] x_tables: duplicate entry at hook 4 [ 123.845331][ T6934] netlink: 'syz.4.291': attribute type 4 has an invalid length. [ 123.976689][ T6941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.293'. [ 124.187292][ T6951] netlink: 48 bytes leftover after parsing attributes in process `syz.4.294'. [ 124.197272][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 124.252451][ T6952] netlink: 'syz.4.294': attribute type 3 has an invalid length. [ 124.849905][ T6971] veth0: entered promiscuous mode [ 124.884083][ T6971] veth0: left promiscuous mode [ 124.947442][ T6976] netlink: 240 bytes leftover after parsing attributes in process `syz.4.306'. [ 125.313926][ T6989] virt_wifi0: entered promiscuous mode [ 125.323600][ T6989] batman_adv: batadv0: Adding interface: virt_wifi0 [ 125.332076][ T6984] netlink: 60 bytes leftover after parsing attributes in process `syz.4.308'. [ 125.349507][ T6989] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.395064][ T6989] batman_adv: batadv0: Interface activated: virt_wifi0 [ 125.448927][ T6990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.308'. [ 126.077581][ T7012] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 126.119451][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 126.225973][ T7012] bond0: (slave bond_slave_1): Releasing backup interface [ 126.234150][ T6981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.307'. [ 126.306309][ T7016] veth0: entered promiscuous mode [ 126.317867][ T7016] vlan2: entered promiscuous mode [ 127.121845][ T7052] __nla_validate_parse: 1 callbacks suppressed [ 127.121864][ T7052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.326'. [ 127.465064][ T7061] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 127.712162][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 127.747103][ T7070] netlink: 68 bytes leftover after parsing attributes in process `syz.1.332'. [ 127.820422][ T7070] geneve3: entered promiscuous mode [ 127.831548][ T7070] geneve3: entered allmulticast mode [ 128.250626][ T7086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.338'. [ 128.467717][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 128.620620][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.341'. [ 128.987150][ T7120] af_packet: tpacket_rcv: packet too big, clamped from 160 to 4294967272. macoff=96 [ 129.054383][ T7120] netlink: 112 bytes leftover after parsing attributes in process `syz.2.348'. [ 129.150152][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 129.458047][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 129.475887][ T7150] syzkaller1: entered promiscuous mode [ 129.490333][ T7150] syzkaller1: entered allmulticast mode [ 130.271466][ T36] IPVS: starting estimator thread 0... [ 130.369659][ T7184] IPVS: using max 27 ests per chain, 64800 per kthread [ 130.407212][ T7190] netlink: 'syz.0.364': attribute type 6 has an invalid length. [ 131.047658][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 131.130569][ T7223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.139619][ T48] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 131.167426][ T48] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 131.331018][ T36] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 131.359235][ T36] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 132.373781][ T7262] syzkaller0: entered promiscuous mode [ 132.393005][ T7262] syzkaller0: entered allmulticast mode [ 132.399723][ T4923] Bluetooth: hci3: command 0x0405 tx timeout [ 132.455795][ T7270] __nla_validate_parse: 3 callbacks suppressed [ 132.455815][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'. [ 132.588104][ T7273] netlink: 200 bytes leftover after parsing attributes in process `syz.4.383'. [ 132.610952][ T7273] netlink: 'syz.4.383': attribute type 16 has an invalid length. [ 132.624995][ T7273] netlink: 'syz.4.383': attribute type 17 has an invalid length. [ 132.808525][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.817464][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.145609][ T7280] bridge1: entered allmulticast mode [ 134.738410][ T7316] netlink: 'syz.2.393': attribute type 1 has an invalid length. [ 134.868042][ T7327] warning: `syz.2.393' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.935748][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 135.945162][ T7337] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 135.955973][ T7337] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 135.964474][ T7337] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 136.021187][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.038148][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.074919][ T7340] netlink: 180 bytes leftover after parsing attributes in process `syz.0.400'. [ 136.090075][ T7340] erspan0: entered promiscuous mode [ 136.098180][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 137.238006][ T7282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.331793][ T7348] sock: sock_timestamping_bind_phc: sock not bind to device [ 137.512143][ T7358] netlink: 'syz.1.407': attribute type 10 has an invalid length. [ 137.538573][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 137.573123][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'. [ 137.664155][ T7358] geneve4: entered promiscuous mode [ 137.693578][ T7358] geneve4: entered allmulticast mode [ 137.815569][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 138.296329][ T7390] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 138.374009][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 138.390676][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 138.429670][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 138.544769][ T7390] bond1: entered promiscuous mode [ 138.580935][ T7390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.628699][ T77] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x2a [ 138.643156][ T7400] bond1: (slave bridge2): making interface the new active one [ 138.663113][ T7400] bridge2: entered promiscuous mode [ 138.677409][ T7403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.689201][ T7400] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 138.709319][ T7408] netlink: 136 bytes leftover after parsing attributes in process `syz.1.417'. [ 139.024063][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.424'. [ 139.742988][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'. [ 139.888374][ T7454] Bluetooth: MGMT ver 1.23 [ 140.208187][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 141.281740][ T7494] dvmrp1: entered allmulticast mode [ 141.473185][ T59] dvmrp1: left allmulticast mode [ 142.543629][ T7571] __nla_validate_parse: 5 callbacks suppressed [ 142.543658][ T7571] netlink: 44 bytes leftover after parsing attributes in process `syz.1.462'. [ 142.780968][ T7572] ip6gre2: entered promiscuous mode [ 142.800820][ T7572] ip6gre2: entered allmulticast mode [ 143.064173][ T7584] netlink: 260 bytes leftover after parsing attributes in process `syz.4.465'. [ 143.973219][ T7609] syzkaller0: entered promiscuous mode [ 143.989590][ T7609] syzkaller0: entered allmulticast mode [ 144.467175][ T7631] bond0 (unregistering): Released all slaves [ 144.628382][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.636273][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.698331][ T7655] netlink: 'syz.1.480': attribute type 3 has an invalid length. [ 144.709753][ T7655] netlink: 'syz.1.480': attribute type 3 has an invalid length. [ 144.747203][ T7637] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 145.420631][ T7692] netlink: 60 bytes leftover after parsing attributes in process `syz.1.490'. [ 145.468669][ T7691] syzkaller0: entered promiscuous mode [ 145.490541][ T7691] syzkaller0: entered allmulticast mode [ 145.517495][ T7682] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 145.541223][ T7682] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 145.557532][ T7682] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 147.000966][ T7712] openvswitch: netlink: Message has 8 unknown bytes. [ 147.007916][ T7712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.099211][ T7713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.495'. [ 147.498329][ T5619] block nbd64: NBD_DISCONNECT [ 147.603776][ T7736] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 147.757458][ T7743] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 147.758448][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 147.821596][ T7743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.881866][ T7737] vlan2: entered promiscuous mode [ 147.887009][ T7737] team_slave_1: entered promiscuous mode [ 147.892949][ T5906] udevd[5906]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 148.175809][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 148.196391][ T7763] wg2 speed is unknown, defaulting to 1000 [ 148.206793][ T7763] wg2 speed is unknown, defaulting to 1000 [ 148.244253][ T7763] wg2 speed is unknown, defaulting to 1000 [ 148.295554][ T7763] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 148.361725][ T7763] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 148.424464][ T7763] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 148.533486][ T7763] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.713827][ T7763] wg2 speed is unknown, defaulting to 1000 [ 148.762875][ T7763] wg2 speed is unknown, defaulting to 1000 [ 148.790627][ T7763] wg2 speed is unknown, defaulting to 1000 [ 148.814709][ T7763] wg2 speed is unknown, defaulting to 1000 [ 148.823369][ T7763] wg2 speed is unknown, defaulting to 1000 [ 150.122256][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.130148][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.405774][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.536952][ T7847] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 150.747964][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 150.860307][ T77] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.950518][ T7887] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 150.964040][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.546'. [ 151.003984][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.546'. [ 151.044158][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.546'. [ 151.084925][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.546'. [ 151.135931][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.546'. [ 151.186975][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.546'. [ 151.254768][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.546'. [ 152.863378][ T7857] wg2 speed is unknown, defaulting to 1000 [ 152.966543][ T7888] wg2 speed is unknown, defaulting to 1000 [ 152.992699][ T7915] __nla_validate_parse: 59 callbacks suppressed [ 152.992718][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 153.135838][ T7918] sctp: [Deprecated]: syz.2.556 (pid 7918) Use of int in max_burst socket option deprecated. [ 153.135838][ T7918] Use struct sctp_assoc_value instead [ 153.285782][ T77] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.309706][ T77] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.355679][ T805] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.893018][ T7950] ip_tables: iptables: counters copy to user failed while replacing table [ 154.026090][ T7961] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 154.061517][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 154.075494][ T7963] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003 [ 154.102517][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'. [ 154.256932][ T7966] bond2: entered promiscuous mode [ 154.266262][ T7966] bond2: entered allmulticast mode [ 154.285682][ T7977] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 154.390935][ T7977] bond0: option mode: invalid value (12) [ 154.407351][ T7977] bond0 (unregistering): Released all slaves [ 154.506747][ T7988] netlink: 'syz.0.575': attribute type 1 has an invalid length. [ 154.784655][ T7992] syzkaller0: entered promiscuous mode [ 154.807107][ T7992] syzkaller0: entered allmulticast mode [ 154.847893][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.579'. [ 154.868414][ T7999] veth0: entered promiscuous mode [ 154.900592][ T7999] veth0: left promiscuous mode [ 155.254314][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.582'. [ 155.429154][ T8031] macsec1: entered promiscuous mode [ 155.658324][ T8042] FAULT_INJECTION: forcing a failure. [ 155.658324][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.692361][ T8032] erspan0: left promiscuous mode [ 155.697932][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.1.588 Not tainted syzkaller #0 PREEMPT(full) [ 155.697960][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.697972][ T8042] Call Trace: [ 155.697980][ T8042] [ 155.697989][ T8042] dump_stack_lvl+0xe8/0x150 [ 155.698034][ T8042] should_fail_ex+0x40c/0x560 [ 155.698062][ T8042] _copy_from_user+0x2d/0xb0 [ 155.698090][ T8042] ___sys_recvmsg+0x173/0x5a0 [ 155.698121][ T8042] ? __pfx____sys_recvmsg+0x10/0x10 [ 155.698150][ T8042] ? __fget_files+0x2a/0x420 [ 155.698199][ T8042] ? __fget_files+0x3a2/0x420 [ 155.698235][ T8042] __x64_sys_recvmsg+0x1ae/0x290 [ 155.698262][ T8042] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 155.698305][ T8042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.698327][ T8042] do_syscall_64+0x174/0x580 [ 155.698354][ T8042] ? trace_irq_disable+0x3b/0x140 [ 155.698378][ T8042] ? clear_bhb_loop+0x70/0xc0 [ 155.698404][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.698424][ T8042] RIP: 0033:0x7f30b5d9e0d9 [ 155.698455][ T8042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.698472][ T8042] RSP: 002b:00007f30b6c43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 155.698498][ T8042] RAX: ffffffffffffffda RBX: 00007f30b6026090 RCX: 00007f30b5d9e0d9 [ 155.698514][ T8042] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 155.698526][ T8042] RBP: 00007f30b6c43090 R08: 0000000000000000 R09: 0000000000000000 [ 155.698538][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.698549][ T8042] R13: 00007f30b6026128 R14: 00007f30b6026090 R15: 00007ffe10c461f8 [ 155.698582][ T8042] [ 155.843413][ T8032] virt_wifi0: left promiscuous mode [ 155.916228][ T8032] bond1: left promiscuous mode [ 155.921401][ T8032] erspan1: left promiscuous mode [ 155.926611][ T8032] bond1: left allmulticast mode [ 155.932081][ T8032] erspan1: left allmulticast mode [ 155.937960][ T8032] bond2: left promiscuous mode [ 155.943257][ T8032] bond2: left allmulticast mode [ 156.464582][ T8061] syzkaller0: entered promiscuous mode [ 156.482736][ T8061] syzkaller0: entered allmulticast mode [ 156.850948][ T8088] netlink: 4712 bytes leftover after parsing attributes in process `syz.1.599'. [ 157.085492][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.601'. [ 157.414439][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 157.428114][ T8110] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 157.489571][ T8110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.254960][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.616'. [ 158.684317][ T8161] ip_tables: iptables: counters copy to user failed while replacing table [ 158.952148][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.622'. [ 159.452486][ T8192] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 159.639674][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.629'. [ 159.913853][ T8207] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 159.953321][ T8212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.633'. [ 160.111386][ T8212] ip6tnl1: entered allmulticast mode [ 160.347622][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.376789][ T5710] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.386077][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.644188][ T8236] netlink: 'syz.0.639': attribute type 4 has an invalid length. [ 160.719761][ T5710] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.734882][ T5709] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.882216][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 161.081906][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.645'. [ 161.113615][ T8260] netlink: 'syz.4.644': attribute type 39 has an invalid length. [ 162.793284][ T8289] netlink: 'syz.4.653': attribute type 21 has an invalid length. [ 162.839137][ T8289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.653'. [ 162.898492][ T8289] netlink: 204 bytes leftover after parsing attributes in process `syz.4.653'. [ 162.942797][ T8289] netlink: 84 bytes leftover after parsing attributes in process `syz.4.653'. [ 163.139301][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 163.267145][ T8306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.277997][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 163.287053][ T8316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.306519][ T8316] netlink: 'syz.4.661': attribute type 12 has an invalid length. [ 163.320987][ T8317] bond2 (unregistering): Released all slaves [ 163.346844][ T8310] netlink: 'syz.4.661': attribute type 26 has an invalid length. [ 163.647483][ T8311] bond2 (unregistering): Released all slaves [ 163.943814][ T8345] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 164.079031][ T8345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.149676][ T8327] netlink: 44 bytes leftover after parsing attributes in process `syz.4.665'. [ 164.208931][ T8341] vlan3: entered promiscuous mode [ 164.233981][ T8341] bond2: entered promiscuous mode [ 164.271581][ T8341] vlan3: entered allmulticast mode [ 164.299897][ T8341] bond2: entered allmulticast mode [ 164.350747][ T8327] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 164.364862][ T8327] bond2: (slave batadv1): making interface the new active one [ 164.379495][ T8327] batadv1: entered promiscuous mode [ 164.395305][ T8327] batadv1: entered allmulticast mode [ 164.419326][ T8327] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 164.719581][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 165.190912][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 165.220793][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 165.355960][ T8402] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 165.664552][ T8420] netlink: 388 bytes leftover after parsing attributes in process `syz.4.689'. [ 165.932429][ T8440] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 166.256436][ T8461] IPVS: set_ctl: invalid protocol: 136 100.1.1.5:20002 [ 166.291191][ T8461] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20001 [ 166.468605][ T8456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.685738][ T8456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.842299][ T8456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.148085][ T8456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.324629][ T8510] syzkaller0: entered promiscuous mode [ 167.335670][ T8510] syzkaller0: entered allmulticast mode [ 167.732418][ T8503] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.757685][ T8503] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.856579][ T8499] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.002285][ T8535] macsec1: entered promiscuous mode [ 168.111256][ T8544] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 168.112653][ T8549] x_tables: duplicate underflow at hook 2 [ 168.777807][ T8546] syzkaller0: entered promiscuous mode [ 168.798487][ T8546] syzkaller0: entered allmulticast mode [ 168.819623][ T8503] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.913301][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 168.935622][ T8575] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 168.951297][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.724'. [ 168.971995][ T8578] netlink: 52 bytes leftover after parsing attributes in process `syz.0.724'. [ 168.997804][ T8580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.725'. [ 169.031414][ T8575] geneve2: entered promiscuous mode [ 169.036671][ T8575] geneve2: entered allmulticast mode [ 169.842581][ T5622] Bluetooth: hci3: command 0x0405 tx timeout [ 170.684024][ T8605] veth1_to_bond: entered allmulticast mode [ 170.693160][ T8605] veth1_to_bond: entered promiscuous mode [ 170.700965][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 170.749683][ T8605] veth1_to_bond (unregistering): left allmulticast mode [ 170.773470][ T8605] veth1_to_bond (unregistering): left promiscuous mode [ 171.329839][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 171.357651][ T8639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.763426][ T8660] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 171.950594][ T8628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.151938][ T8670] wg2 speed is unknown, defaulting to 1000 [ 172.243579][ T8677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.787734][ T8703] netlink: 'syz.0.757': attribute type 16 has an invalid length. [ 172.897381][ T8694] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.904657][ T8694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.951360][ T8708] gre0: entered promiscuous mode [ 172.971900][ T8708] gre0: entered allmulticast mode [ 173.119566][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 173.160648][ T8712] netlink: 56 bytes leftover after parsing attributes in process `syz.3.759'. [ 173.177250][ T8712] netlink: 56 bytes leftover after parsing attributes in process `syz.3.759'. [ 173.566124][ T8736] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 173.606479][ T8736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.635582][ T8736] bond3: (slave geneve5): making interface the new active one [ 173.649088][ T8736] bond3: (slave geneve5): Enslaving as an active interface with an up link [ 174.031235][ T8750] syzkaller0: entered promiscuous mode [ 174.044215][ T8750] syzkaller0: entered allmulticast mode [ 174.077596][ T8716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.946584][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 174.967968][ T8778] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 174.981520][ T8778] bond4 (unregistering): Released all slaves [ 175.000019][ T8789] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 175.009741][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 175.581288][ T8805] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.757631][ T8814] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 175.886079][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'. [ 175.935917][ T8821] syzkaller0: entered promiscuous mode [ 175.953036][ T8821] syzkaller0: entered allmulticast mode [ 176.214772][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 176.717592][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 176.988597][ T8859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.799'. [ 176.998499][ T8859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.799'. [ 177.174653][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802afc6400: rx timeout, send abort [ 177.185891][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802afc6400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.312391][ T8869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.802'. [ 177.324114][ T8869] IPv6: Can't replace route, no match found [ 177.809868][ T8889] syzkaller0: entered promiscuous mode [ 177.823919][ T8889] syzkaller0: entered allmulticast mode [ 178.873352][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.816'. [ 178.885778][ T36] wlan1: Trigger new scan to find an IBSS to join [ 180.267397][ T8937] syzkaller0: entered promiscuous mode [ 180.273725][ T8937] syzkaller0: entered allmulticast mode [ 180.298925][ T8951] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 180.563195][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 180.589315][ T8972] netlink: 'syz.1.825': attribute type 3 has an invalid length. [ 180.811335][ T8981] syzkaller0: entered promiscuous mode [ 180.832443][ T8981] syzkaller0: entered allmulticast mode [ 180.958403][ T8985] netlink: 212 bytes leftover after parsing attributes in process `syz.0.829'. [ 180.968352][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 180.988478][ T8985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 181.018352][ T8998] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 181.048237][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 181.064546][ T8998] netlink: 'syz.2.830': attribute type 3 has an invalid length. [ 181.295345][ T9008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.833'. [ 181.462465][ T9011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.833'. [ 181.539003][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 181.585723][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 181.799778][ T9030] bridge_slave_1: left allmulticast mode [ 181.806542][ T9030] bridge_slave_1: left promiscuous mode [ 181.813551][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.828837][ T9030] bridge_slave_0: left allmulticast mode [ 181.836091][ T9030] bridge_slave_0: left promiscuous mode [ 181.841851][ T13] wlan1: Trigger new scan to find an IBSS to join [ 181.848728][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.343894][ T9052] netlink: 140 bytes leftover after parsing attributes in process `syz.0.840'. [ 183.780841][ T9119] xt_policy: too many policy elements [ 183.989168][ T9130] ip_vti0: entered promiscuous mode [ 184.239696][ T5761] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.362885][ T8503] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.412579][ T9145] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 184.435914][ T9149] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20004 [ 184.443269][ T9146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.456717][ T9150] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20004 [ 184.465338][ T9145] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 184.512882][ T9145] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 184.560059][ T5761] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.656056][ T9145] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 184.874553][ T9160] syzkaller0: entered promiscuous mode [ 184.884815][ T9160] syzkaller0: entered allmulticast mode [ 184.936876][ T9175] netlink: 'syz.4.871': attribute type 1 has an invalid length. [ 186.491175][ T9175] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 186.518930][ T8507] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.548338][ T8507] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.750589][ T9193] syzkaller0: entered promiscuous mode [ 186.765186][ T9193] syzkaller0: entered allmulticast mode [ 186.790532][ T9193] tipc: Started in network mode [ 186.820236][ T9193] tipc: Node identity eaa497ed83bf, cluster identity 4711 [ 186.857886][ T9193] tipc: Enabled bearer , priority 0 [ 186.873320][ T9209] xt_time: unknown flags 0x4 [ 186.960512][ T9193] tipc: Resetting bearer [ 187.005580][ T9193] tipc: Disabling bearer [ 187.069979][ T9215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.139952][ T5737] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.154028][ T9218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.405894][ T9229] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.425524][ T9229] erspan1: entered allmulticast mode [ 187.575677][ T9198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.196985][ T9260] __nla_validate_parse: 6 callbacks suppressed [ 188.197004][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 188.222410][ T9262] netlink: 'syz.2.899': attribute type 2 has an invalid length. [ 188.244737][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 188.365666][ T9262] ¿: entered promiscuous mode [ 188.887868][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 188.977857][ T9292] netlink: 104 bytes leftover after parsing attributes in process `syz.1.911'. [ 189.096977][ T9292] netlink: 'syz.1.911': attribute type 12 has an invalid length. [ 189.105291][ T9292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.911'. [ 189.118033][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 189.206326][ T9297] veth3: entered allmulticast mode [ 189.250017][ T9297] bond0: (slave veth3): Enslaving as an active interface with an up link [ 189.532352][ T9318] netlink: 368 bytes leftover after parsing attributes in process `syz.2.919'. [ 189.545674][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.919'. [ 189.555136][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.919'. [ 189.564609][ T9318] netlink: 44 bytes leftover after parsing attributes in process `syz.2.919'. [ 189.759568][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 190.239578][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.871522][ T9377] pimreg: entered allmulticast mode [ 190.892848][ T9377] pimreg: left allmulticast mode [ 191.704413][ T9412] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 191.748440][ T9412] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 191.778504][ T9412] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 191.993771][ T9424] netlink: 'syz.1.951': attribute type 10 has an invalid length. [ 191.995845][ T9423] netlink: 'syz.1.951': attribute type 10 has an invalid length. [ 192.047622][ T30] audit: type=1804 audit(1786093242.101:4): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.952" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=966 res=1 errno=0 [ 192.085456][ T9424] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 192.110492][ T30] audit: type=1800 audit(1786093242.101:5): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.952" name="cgroup.controllers" dev="tmpfs" ino=966 res=0 errno=0 [ 192.501334][ T9438] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 192.758423][ T9447] netlink: 'syz.4.962': attribute type 1 has an invalid length. [ 192.897263][ T9447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.847881][ T9488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.877199][ T9488] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.892507][ T9488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.964595][ T9488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.017567][ T9488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.044777][ T9488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.103086][ T9488] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 194.243082][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.249778][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.981539][ T9536] bond4: entered allmulticast mode [ 194.993405][ T9536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.043411][ T9548] __nla_validate_parse: 17 callbacks suppressed [ 195.043431][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 195.059183][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.991'. [ 195.087934][ T9542] syzkaller0: entered promiscuous mode [ 195.095921][ T9542] syzkaller0: entered allmulticast mode [ 195.110831][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 195.131504][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.991'. [ 195.295296][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.994'. [ 195.355487][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 195.401673][ T30] audit: type=1107 audit(1786093245.451:6): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='9ZͳŒ =ÐwUt椞v·fzÉìqaÆKòìRÍ`2£øÔZdû£+¡ ø…ÁòÐuÀPJ!Ì/™‡bea8Û£%0ÆZÐ$Ý‘-Íå\¿`qHYé–˜£V& ]@¬‘ ª”;Ÿ-œ²V@& ¢Âh¢ýWs¤cÛ«G˜¹†Äñ†5*2¤·“ Ò1rʯ¼f['ÀLƒ=nþáGƒ£r™' [ 196.741335][ T9626] vlan0: entered promiscuous mode [ 196.833895][ T9629] openvswitch: netlink: VXLAN extension message has 232 unknown bytes. [ 196.871715][ T9629] syzkaller0: entered promiscuous mode [ 196.884174][ T9629] syzkaller0: entered allmulticast mode [ 196.911521][ T9629] tipc: Enabled bearer , priority 0 [ 196.930347][ T9629] tipc: Resetting bearer [ 196.943640][ T9628] tipc: Resetting bearer [ 196.971378][ T9628] tipc: Disabling bearer [ 197.326006][ T9648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1021'. [ 197.349871][ T9648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1021'. [ 197.440601][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.617912][ T9653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.660141][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 197.672596][ T9664] netlink: 'syz.2.1025': attribute type 2 has an invalid length. [ 197.687001][ T9667] netlink: 'syz.0.1024': attribute type 2 has an invalid length. [ 197.733702][ T9667] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 197.779022][ T9667] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1024'. [ 198.706192][ T9674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.985261][ T9704] bridge_slave_0: left allmulticast mode [ 199.020102][ T9704] bridge_slave_0: left promiscuous mode [ 199.041312][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.060976][ T9704] bridge_slave_1: left allmulticast mode [ 199.066878][ T9704] bridge_slave_1: left promiscuous mode [ 199.077226][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.124401][ T9704] bond0: (slave veth0_to_bond): Releasing backup interface [ 199.172187][ T9704] bond0: (slave bond_slave_0): Releasing backup interface [ 199.227018][ T9704] bond0: (slave bond_slave_1): Releasing backup interface [ 199.313253][ T9704] team0: Port device team_slave_0 removed [ 199.380955][ T9704] team0: Port device team_slave_1 removed [ 199.391471][ T9704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.400419][ T9704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.416471][ T9704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.427700][ T9704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.437906][ T9704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 199.486959][ T9707] team0: Device xfrm0 is of different type [ 199.528657][ T9712] tipc: Started in network mode [ 199.581720][ T9712] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 199.598152][ T9712] tipc: Enabled bearer , priority 0 [ 199.628866][ T36] tipc: Resetting bearer [ 200.075249][ T9743] __nla_validate_parse: 5 callbacks suppressed [ 200.075268][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 200.391585][ T9762] syzkaller0: entered promiscuous mode [ 200.408589][ T9762] syzkaller0: entered allmulticast mode [ 200.425755][ T9763] syzkaller0: entered promiscuous mode [ 200.432076][ T9763] syzkaller0: entered allmulticast mode [ 200.619513][ T5709] tipc: Node number set to 11578026 [ 201.263746][ T9799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1061'. [ 201.309606][ T9799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1061'. [ 201.480078][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 201.569189][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1067'. [ 201.583076][ T9814] syzkaller0: entered promiscuous mode [ 201.588628][ T9814] syzkaller0: entered allmulticast mode [ 201.597953][ T8501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.606807][ T8501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.627225][ T9817] sctp: [Deprecated]: syz.4.1068 (pid 9817) Use of int in max_burst socket option. [ 201.627225][ T9817] Use struct sctp_assoc_value instead [ 202.073924][ T9831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.362473][ T9836] nbd0: detected capacity change from 0 to 63 [ 202.381946][ T9839] nbd: must specify an index to disconnect [ 202.407143][ T9846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.416353][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1073'. [ 202.476208][ T5622] block nbd0: Receive control failed (result -104) [ 202.577346][ T9855] bond4: option xmit_hash_policy: invalid value (10) [ 202.595295][ T9855] bond4 (unregistering): Released all slaves [ 203.228803][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'. [ 203.338617][ T9901] batadv0: entered promiscuous mode [ 203.360674][ T9901] vlan2: entered promiscuous mode [ 203.546673][ T9908] No such timeout policy "syz1" [ 203.562568][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 203.817762][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 203.991053][ T9932] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1100'. [ 205.103643][ T9925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.592492][ T9963] ip_tables: iptables: counters copy to user failed while replacing table [ 205.618454][ T9964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1104'. [ 205.643348][ T9964] unsupported nlmsg_type 40 [ 205.757846][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1108'. [ 206.092055][ T9981] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 206.100408][ T9981] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1108'. [ 206.403446][ T9987] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 206.420195][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 206.512344][ T9989] netlink: 'syz.2.1112': attribute type 2 has an invalid length. [ 206.523977][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 206.561662][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 206.569103][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 206.575402][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 207.291252][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 207.572355][T10041] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 210.041921][T10016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.061011][T10023] netlink: 'syz.1.1118': attribute type 2 has an invalid length. [ 210.072666][T10044] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 210.112837][T10052] netlink: 'syz.4.1127': attribute type 11 has an invalid length. [ 210.130170][T10052] netlink: 'syz.4.1127': attribute type 4 has an invalid length. [ 210.163125][T10052] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1127'. [ 210.323804][T10058] 8021q: VLANs not supported on vxcan1 [ 210.648942][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1136'. [ 210.666270][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1136'. [ 210.970615][T10094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1142'. [ 210.979927][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 211.124857][T10097] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 211.149651][T10097] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1144'. [ 211.210267][T10097] netlink: 'syz.1.1144': attribute type 21 has an invalid length. [ 211.241087][T10097] netlink: 'syz.1.1144': attribute type 6 has an invalid length. [ 211.262655][T10097] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1144'. [ 211.274175][T10107] 0: reclassify loop, rule prio 0, protocol 03 [ 211.282844][T10106] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 211.547142][T10108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.582139][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1149'. [ 211.646089][T10108] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.686297][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1150'. [ 211.703553][T10108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.856578][T10108] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 211.880638][T10130] netlink: 'syz.3.1154': attribute type 39 has an invalid length. [ 212.000466][T10122] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.046984][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.054314][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.315825][T10149] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1157'. [ 212.799561][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.962760][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1164'. [ 213.042340][T10171] hsr_slave_0: left promiscuous mode [ 213.074116][T10171] hsr_slave_1: left promiscuous mode [ 213.896336][T10212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.110803][ T5723] wg2 speed is unknown, defaulting to 1000 [ 214.131065][ T9949] wg2 speed is unknown, defaulting to 1000 [ 215.885120][T10320] bridge_slave_0: default FDB implementation only supports local addresses [ 216.013195][T10327] __nla_validate_parse: 17 callbacks suppressed [ 216.013214][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 216.091876][T10330] netlink: 'syz.0.1203': attribute type 3 has an invalid length. [ 216.116967][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 216.204285][T10330] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.911865][T10364] syzkaller0: entered promiscuous mode [ 216.917717][T10364] syzkaller0: entered allmulticast mode [ 217.203043][T10375] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1212'. [ 217.450965][T10381] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 217.458925][T10381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1215'. [ 217.471636][T10381] netlink: 'syz.4.1215': attribute type 8 has an invalid length. [ 217.480027][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'. [ 217.494599][T10381] veth1_to_team: entered promiscuous mode [ 217.502168][T10381] gretap0: entered promiscuous mode [ 217.508411][T10381] bridge_slave_1: entered promiscuous mode [ 217.515345][T10381] hsr0: entered promiscuous mode [ 217.618435][T10383] Bluetooth: MGMT ver 1.23 [ 231.267030][ T4923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.281350][ T4923] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.290674][ T4923] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.300109][ T4923] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.309695][ T4923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.345062][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.360405][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.368234][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.378899][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.387785][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.866564][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 231.879596][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 231.888059][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 231.898059][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 231.905885][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.951773][T10389] wg2 speed is unknown, defaulting to 1000 [ 231.962087][T10387] wg2 speed is unknown, defaulting to 1000 [ 232.061453][ T5622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 232.073301][ T5622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 232.081656][ T5622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 232.090719][ T5622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 232.099239][ T5622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 232.641349][ T1664] block nbd0: Possible stuck request ffff888049df0000: control (read@0,1024B). Runtime 30 seconds [ 232.657484][ T1664] block nbd0: Possible stuck request ffff888049df01c0: control (read@1024,1024B). Runtime 30 seconds [ 232.669252][ T1664] block nbd0: Possible stuck request ffff888049df0380: control (read@2048,1024B). Runtime 30 seconds [ 232.681202][ T1664] block nbd0: Possible stuck request ffff888049df0540: control (read@3072,1024B). Runtime 30 seconds [ 232.870575][ T5622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 232.888960][ T5622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 232.897868][ T5622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 232.908537][ T5622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 232.908979][T10409] wg2 speed is unknown, defaulting to 1000 [ 232.923385][ T5622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 232.935401][T10389] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.942931][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.952731][T10389] bridge_slave_0: entered allmulticast mode [ 232.960713][T10389] bridge_slave_0: entered promiscuous mode [ 232.998851][T10389] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.006550][T10389] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.014221][T10389] bridge_slave_1: entered allmulticast mode [ 233.023281][T10389] bridge_slave_1: entered promiscuous mode [ 233.031894][T10413] wg2 speed is unknown, defaulting to 1000 [ 233.061450][T10387] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.068710][T10387] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.076157][T10387] bridge_slave_0: entered allmulticast mode [ 233.086987][T10387] bridge_slave_0: entered promiscuous mode [ 233.120909][T10387] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.128087][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.136014][T10387] bridge_slave_1: entered allmulticast mode [ 233.144126][T10387] bridge_slave_1: entered promiscuous mode [ 233.222576][T10389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.235576][T10389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.272129][T10387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.312633][T10387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.359840][ T5622] Bluetooth: hci5: command tx timeout [ 233.393110][T10389] team0: Port device team_slave_0 added [ 233.411176][T10387] team0: Port device team_slave_0 added [ 233.420364][T10389] team0: Port device team_slave_1 added [ 233.435749][T10387] team0: Port device team_slave_1 added [ 233.441466][ T5622] Bluetooth: hci6: command tx timeout [ 233.491389][T10389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.498437][T10389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.525178][T10389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.553896][T10387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.561089][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.587665][T10387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.617674][T10389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.626696][T10389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.653396][T10389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.675042][T10387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.683332][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.710701][T10387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.834812][T10389] hsr_slave_0: entered promiscuous mode [ 233.841539][T10389] hsr_slave_1: entered promiscuous mode [ 233.847700][T10389] debugfs: 'hsr0' already exists in 'hsr' [ 233.853627][T10389] Cannot create hsr debugfs directory [ 233.876958][T10387] hsr_slave_0: entered promiscuous mode [ 233.883743][T10387] hsr_slave_1: entered promiscuous mode [ 233.890186][T10387] debugfs: 'hsr0' already exists in 'hsr' [ 233.895986][T10387] Cannot create hsr debugfs directory [ 233.962963][T10442] wg2 speed is unknown, defaulting to 1000 [ 234.000856][ T5622] Bluetooth: hci7: command tx timeout [ 234.159582][ T5622] Bluetooth: hci8: command tx timeout [ 234.445297][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.453555][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.461126][T10409] bridge_slave_0: entered allmulticast mode [ 234.468415][T10409] bridge_slave_0: entered promiscuous mode [ 234.502135][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.509652][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.516849][T10413] bridge_slave_0: entered allmulticast mode [ 234.524552][T10413] bridge_slave_0: entered promiscuous mode [ 234.551028][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.558263][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.566243][T10409] bridge_slave_1: entered allmulticast mode [ 234.575276][T10409] bridge_slave_1: entered promiscuous mode [ 234.585065][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.592480][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.600134][T10413] bridge_slave_1: entered allmulticast mode [ 234.607797][T10413] bridge_slave_1: entered promiscuous mode [ 234.673190][T10413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.686127][T10413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.746709][T10409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.784370][T10413] team0: Port device team_slave_0 added [ 234.793814][T10413] team0: Port device team_slave_1 added [ 234.802115][T10409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.891207][T10409] team0: Port device team_slave_0 added [ 234.902647][T10409] team0: Port device team_slave_1 added [ 234.924240][T10413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.932364][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.958973][T10413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.959688][ T5622] Bluetooth: hci9: command tx timeout [ 234.993814][T10413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.001111][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.028811][T10413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.085720][T10409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.092838][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.119562][T10409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.165209][T10409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.172416][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.198391][T10409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.237563][T10413] hsr_slave_0: entered promiscuous mode [ 235.244552][T10413] hsr_slave_1: entered promiscuous mode [ 235.251692][T10413] debugfs: 'hsr0' already exists in 'hsr' [ 235.258594][T10413] Cannot create hsr debugfs directory [ 235.381276][T10409] hsr_slave_0: entered promiscuous mode [ 235.387716][T10409] hsr_slave_1: entered promiscuous mode [ 235.394045][T10409] debugfs: 'hsr0' already exists in 'hsr' [ 235.399924][T10409] Cannot create hsr debugfs directory [ 235.436953][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.444707][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.452118][ T5622] Bluetooth: hci5: command tx timeout [ 235.458075][T10442] bridge_slave_0: entered allmulticast mode [ 235.466103][T10442] bridge_slave_0: entered promiscuous mode [ 235.504325][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.511721][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.518924][T10442] bridge_slave_1: entered allmulticast mode [ 235.526756][T10442] bridge_slave_1: entered promiscuous mode [ 235.532700][ T5622] Bluetooth: hci6: command tx timeout [ 235.614051][T10442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.626331][T10442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.700275][T10442] team0: Port device team_slave_0 added [ 235.708768][T10442] team0: Port device team_slave_1 added [ 235.766771][T10442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.774188][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.800749][T10442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.830055][T10442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.837087][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.863835][T10442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.970243][T10442] hsr_slave_0: entered promiscuous mode [ 235.976668][T10442] hsr_slave_1: entered promiscuous mode [ 235.983201][T10442] debugfs: 'hsr0' already exists in 'hsr' [ 235.988974][T10442] Cannot create hsr debugfs directory [ 236.079720][ T5622] Bluetooth: hci7: command tx timeout [ 236.239662][ T5622] Bluetooth: hci8: command tx timeout [ 237.049508][ T5622] Bluetooth: hci9: command tx timeout [ 237.519622][ T5622] Bluetooth: hci5: command tx timeout [ 237.600378][ T5622] Bluetooth: hci6: command tx timeout [ 238.160084][ T5622] Bluetooth: hci7: command tx timeout [ 238.319620][ T5622] Bluetooth: hci8: command tx timeout [ 239.119542][ T5622] Bluetooth: hci9: command tx timeout [ 239.609615][ T5622] Bluetooth: hci5: command tx timeout [ 239.689738][ T5622] Bluetooth: hci6: command tx timeout [ 240.239584][ T5622] Bluetooth: hci7: command tx timeout [ 240.409521][ T5622] Bluetooth: hci8: command tx timeout [ 241.199535][ T5622] Bluetooth: hci9: command tx timeout [ 242.239637][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.681555][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688000][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.720588][ T1664] block nbd0: Possible stuck request ffff888049df0000: control (read@0,1024B). Runtime 60 seconds [ 262.731450][ T1664] block nbd0: Possible stuck request ffff888049df01c0: control (read@1024,1024B). Runtime 60 seconds [ 262.742513][ T1664] block nbd0: Possible stuck request ffff888049df0380: control (read@2048,1024B). Runtime 60 seconds [ 262.753685][ T1664] block nbd0: Possible stuck request ffff888049df0540: control (read@3072,1024B). Runtime 60 seconds [ 263.258418][ T4973] udevd[4973]: worker [5623] /devices/virtual/block/nbd0 is taking a long time [ 291.397740][ T4923] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 291.410968][ T4923] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 291.420401][ T4923] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 291.432179][ T4923] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 291.446646][ T5609] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 291.451373][ T5617] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 291.467472][ T5622] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 291.478296][ T5622] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 291.486499][ T5622] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 291.498224][ T5622] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 291.980142][T10477] wg2 speed is unknown, defaulting to 1000 [ 292.076728][ T5617] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 292.086765][ T5609] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 292.100701][ T5609] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 292.108868][T10479] wg2 speed is unknown, defaulting to 1000 [ 292.109824][ T5617] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 292.124413][ T5609] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 292.124931][ T5617] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 292.141454][ T5617] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 292.150940][ T5609] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 292.151884][ T5617] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 292.167562][ T5609] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 292.742125][T10477] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.751561][T10477] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.758797][T10477] bridge_slave_0: entered allmulticast mode [ 292.782247][T10477] bridge_slave_0: entered promiscuous mode [ 292.798762][T10477] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.816321][ T1664] block nbd0: Possible stuck request ffff888049df0000: control (read@0,1024B). Runtime 90 seconds [ 292.825468][T10477] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.829962][ T1664] block nbd0: Possible stuck request ffff888049df01c0: control (read@1024,1024B). Runtime 90 seconds [ 292.845564][T10477] bridge_slave_1: entered allmulticast mode [ 292.855434][ T1664] block nbd0: Possible stuck request ffff888049df0380: control (read@2048,1024B). Runtime 90 seconds [ 292.855510][T10477] bridge_slave_1: entered promiscuous mode [ 292.868289][ T1664] block nbd0: Possible stuck request ffff888049df0540: control (read@3072,1024B). Runtime 90 seconds [ 292.985284][T10477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.042789][T10477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.085838][ T5617] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 293.098063][ T5617] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 293.107294][ T5617] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 293.116266][ T5617] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 293.127151][ T5617] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 293.185760][T10477] team0: Port device team_slave_0 added [ 293.194660][T10477] team0: Port device team_slave_1 added [ 293.228598][T10500] wg2 speed is unknown, defaulting to 1000 [ 293.267450][T10499] wg2 speed is unknown, defaulting to 1000 [ 293.284123][T10477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.292746][T10477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.321409][T10477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.333225][T10479] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.340973][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.348236][T10479] bridge_slave_0: entered allmulticast mode [ 293.359117][T10479] bridge_slave_0: entered promiscuous mode [ 293.385390][T10477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.394216][T10477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.424735][T10477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.438199][T10479] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.446239][T10479] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.457911][T10479] bridge_slave_1: entered allmulticast mode [ 293.466010][T10479] bridge_slave_1: entered promiscuous mode [ 293.519514][ T4923] Bluetooth: hci10: command tx timeout [ 293.527189][ T5617] Bluetooth: hci11: command tx timeout [ 293.563252][T10479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.606307][T10479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.722593][T10477] hsr_slave_0: entered promiscuous mode [ 293.729950][T10477] hsr_slave_1: entered promiscuous mode [ 293.736382][T10477] debugfs: 'hsr0' already exists in 'hsr' [ 293.743708][T10477] Cannot create hsr debugfs directory [ 293.752426][T10479] team0: Port device team_slave_0 added [ 293.775881][T10479] team0: Port device team_slave_1 added [ 293.846849][T10479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.854214][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.881236][T10479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.908172][T10479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.915268][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.941560][T10479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.980402][T10531] wg2 speed is unknown, defaulting to 1000 [ 294.194170][T10479] hsr_slave_0: entered promiscuous mode [ 294.202498][T10479] hsr_slave_1: entered promiscuous mode [ 294.214925][T10479] debugfs: 'hsr0' already exists in 'hsr' [ 294.221283][T10479] Cannot create hsr debugfs directory [ 294.241685][ T4923] Bluetooth: hci12: command tx timeout [ 294.250884][ T4923] Bluetooth: hci13: command tx timeout [ 294.531297][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.538572][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.546098][T10499] bridge_slave_0: entered allmulticast mode [ 294.555537][T10499] bridge_slave_0: entered promiscuous mode [ 294.603345][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.610796][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.618179][T10499] bridge_slave_1: entered allmulticast mode [ 294.625946][T10499] bridge_slave_1: entered promiscuous mode [ 294.662341][T10500] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.670185][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.677410][T10500] bridge_slave_0: entered allmulticast mode [ 294.685540][T10500] bridge_slave_0: entered promiscuous mode [ 294.727112][T10500] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.735309][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.743170][T10500] bridge_slave_1: entered allmulticast mode [ 294.751450][T10500] bridge_slave_1: entered promiscuous mode [ 294.761432][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.803054][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.864852][T10500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.895520][T10500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.931287][T10499] team0: Port device team_slave_0 added [ 294.975212][T10499] team0: Port device team_slave_1 added [ 295.002365][T10500] team0: Port device team_slave_0 added [ 295.045909][T10500] team0: Port device team_slave_1 added [ 295.067266][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.074478][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.100864][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.131783][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.138966][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.165265][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.197591][T10500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.204676][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.204712][ T4923] Bluetooth: hci14: command tx timeout [ 295.231094][T10500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.236165][T10500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.254785][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.281028][T10500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.401662][T10499] hsr_slave_0: entered promiscuous mode [ 295.408482][T10499] hsr_slave_1: entered promiscuous mode [ 295.415274][T10499] debugfs: 'hsr0' already exists in 'hsr' [ 295.421176][T10499] Cannot create hsr debugfs directory [ 295.442387][T10500] hsr_slave_0: entered promiscuous mode [ 295.448793][T10500] hsr_slave_1: entered promiscuous mode [ 295.455479][T10500] debugfs: 'hsr0' already exists in 'hsr' [ 295.461372][T10500] Cannot create hsr debugfs directory [ 295.546663][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.554183][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.561561][T10531] bridge_slave_0: entered allmulticast mode [ 295.568811][T10531] bridge_slave_0: entered promiscuous mode [ 295.593176][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.600773][ T4923] Bluetooth: hci10: command tx timeout [ 295.600788][ T5617] Bluetooth: hci11: command tx timeout [ 295.607474][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.619106][T10531] bridge_slave_1: entered allmulticast mode [ 295.627670][T10531] bridge_slave_1: entered promiscuous mode [ 295.732983][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.745731][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.874040][T10531] team0: Port device team_slave_0 added [ 295.909664][T10531] team0: Port device team_slave_1 added [ 295.971036][T10531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.978041][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.004666][T10531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.028437][T10531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.035948][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.062515][T10531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.134341][T10531] hsr_slave_0: entered promiscuous mode [ 296.141720][T10531] hsr_slave_1: entered promiscuous mode [ 296.147963][T10531] debugfs: 'hsr0' already exists in 'hsr' [ 296.153885][T10531] Cannot create hsr debugfs directory [ 296.319555][ T4923] Bluetooth: hci12: command tx timeout [ 296.326410][ T5617] Bluetooth: hci13: command tx timeout [ 297.289997][ T5617] Bluetooth: hci14: command tx timeout [ 297.680171][ T4923] Bluetooth: hci10: command tx timeout [ 297.685745][ T5617] Bluetooth: hci11: command tx timeout [ 298.399653][ T5617] Bluetooth: hci13: command tx timeout [ 298.401176][ T4923] Bluetooth: hci12: command tx timeout [ 299.359712][ T5617] Bluetooth: hci14: command tx timeout [ 299.759587][ T5617] Bluetooth: hci11: command tx timeout [ 299.759879][ T4923] Bluetooth: hci10: command tx timeout [ 300.479753][ T5617] Bluetooth: hci13: command tx timeout [ 300.479962][ T4923] Bluetooth: hci12: command tx timeout [ 301.439479][ T4923] Bluetooth: hci14: command tx timeout [ 306.879693][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.122458][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.128834][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.881489][ T1664] block nbd0: Possible stuck request ffff888049df0000: control (read@0,1024B). Runtime 120 seconds [ 322.892508][ T1664] block nbd0: Possible stuck request ffff888049df01c0: control (read@1024,1024B). Runtime 120 seconds [ 322.903790][ T1664] block nbd0: Possible stuck request ffff888049df0380: control (read@2048,1024B). Runtime 120 seconds [ 322.915045][ T1664] block nbd0: Possible stuck request ffff888049df0540: control (read@3072,1024B). Runtime 120 seconds [ 339.682059][ T5617] Bluetooth: hci3: command 0x0405 tx timeout [ 351.472885][ T5617] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 351.487354][ T5617] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 351.498052][ T5622] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 351.507455][ T5617] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 351.519070][ T5622] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 351.525799][ T5617] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 351.536093][ T5622] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 351.537242][ T5617] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 351.554216][ T5617] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 351.563795][ T5617] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 352.005255][ T5617] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 352.021099][ T5617] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 352.031119][ T5617] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 352.042048][ T5617] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 352.050097][ T5617] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 352.102233][T10567] wg2 speed is unknown, defaulting to 1000 [ 352.114969][T10568] wg2 speed is unknown, defaulting to 1000 [ 352.623571][ T5617] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 352.640454][ T5617] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 352.652845][ T5617] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 352.662495][ T5617] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 352.670544][ T5617] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 352.708682][T10588] wg2 speed is unknown, defaulting to 1000 [ 352.956305][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.970044][T10567] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.981028][ T1664] block nbd0: Possible stuck request ffff888049df0000: control (read@0,1024B). Runtime 150 seconds [ 352.988493][T10567] bridge_slave_0: entered allmulticast mode [ 352.992215][ T1664] block nbd0: Possible stuck request ffff888049df01c0: control (read@1024,1024B). Runtime 150 seconds [ 353.006299][T10567] bridge_slave_0: entered promiscuous mode [ 353.008912][ T1664] block nbd0: Possible stuck request ffff888049df0380: control (read@2048,1024B). Runtime 150 seconds [ 353.026577][ T1664] block nbd0: Possible stuck request ffff888049df0540: control (read@3072,1024B). Runtime 150 seconds [ 353.053320][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.061778][T10568] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.069002][T10568] bridge_slave_0: entered allmulticast mode [ 353.076547][T10568] bridge_slave_0: entered promiscuous mode [ 353.085564][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.092854][T10568] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.100227][T10568] bridge_slave_1: entered allmulticast mode [ 353.107523][T10568] bridge_slave_1: entered promiscuous mode [ 353.118245][T10567] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.125621][T10567] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.132997][T10567] bridge_slave_1: entered allmulticast mode [ 353.140435][T10567] bridge_slave_1: entered promiscuous mode [ 353.223237][T10568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.255482][T10568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.279103][T10567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.292879][T10567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.370216][T10568] team0: Port device team_slave_0 added [ 353.391917][T10567] team0: Port device team_slave_0 added [ 353.420925][T10568] team0: Port device team_slave_1 added [ 353.430900][T10567] team0: Port device team_slave_1 added [ 353.495079][ T50] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 353.508195][ T50] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 353.518200][ T50] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 353.531352][ T50] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 353.540747][ T50] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 353.577961][T10607] wg2 speed is unknown, defaulting to 1000 [ 353.596085][T10568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.608464][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.609889][ T50] Bluetooth: hci16: command tx timeout [ 353.635493][ T5613] Bluetooth: hci15: command tx timeout [ 353.678499][T10568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.692228][T10567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.704981][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.732644][T10567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.762973][T10568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.770429][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.798140][T10568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.810862][T10567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.818247][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.847051][T10567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.043468][T10567] hsr_slave_0: entered promiscuous mode [ 354.050702][T10567] hsr_slave_1: entered promiscuous mode [ 354.057372][T10567] debugfs: 'hsr0' already exists in 'hsr' [ 354.065017][T10567] Cannot create hsr debugfs directory [ 354.079148][T10568] hsr_slave_0: entered promiscuous mode [ 354.085138][ T5613] Bluetooth: hci17: command tx timeout [ 354.092957][T10568] hsr_slave_1: entered promiscuous mode [ 354.099507][T10568] debugfs: 'hsr0' already exists in 'hsr' [ 354.105357][T10568] Cannot create hsr debugfs directory [ 354.358079][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.365941][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.374088][T10588] bridge_slave_0: entered allmulticast mode [ 354.382470][T10588] bridge_slave_0: entered promiscuous mode [ 354.393343][T10588] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.400924][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.408435][T10588] bridge_slave_1: entered allmulticast mode [ 354.416914][T10588] bridge_slave_1: entered promiscuous mode [ 354.514149][T10626] wg2 speed is unknown, defaulting to 1000 [ 354.523415][T10588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.571322][T10588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.699113][T10588] team0: Port device team_slave_0 added [ 354.719615][ T5613] Bluetooth: hci18: command tx timeout [ 354.753435][T10588] team0: Port device team_slave_1 added [ 354.819558][T10588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.826579][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.853119][T10588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.903087][T10588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.910243][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.937829][T10588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.957910][T10607] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.965571][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.974324][T10607] bridge_slave_0: entered allmulticast mode [ 354.982014][T10607] bridge_slave_0: entered promiscuous mode [ 354.990933][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.998458][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.006181][T10607] bridge_slave_1: entered allmulticast mode [ 355.013941][T10607] bridge_slave_1: entered promiscuous mode [ 355.039543][ T5613] Bluetooth: hci8: command 0x0406 tx timeout [ 355.039747][ T5624] Bluetooth: hci7: command 0x0406 tx timeout [ 355.049234][ T5613] Bluetooth: hci5: command 0x0406 tx timeout [ 355.057893][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 355.178264][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.192234][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.212421][T10588] hsr_slave_0: entered promiscuous mode [ 355.218970][T10588] hsr_slave_1: entered promiscuous mode [ 355.225644][T10588] debugfs: 'hsr0' already exists in 'hsr' [ 355.231777][T10588] Cannot create hsr debugfs directory [ 355.282591][T10607] team0: Port device team_slave_0 added [ 355.313832][T10607] team0: Port device team_slave_1 added [ 355.397409][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.404486][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.431327][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.444351][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.452688][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.478977][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.610191][ T5617] Bluetooth: hci19: command tx timeout [ 355.653567][T10607] hsr_slave_0: entered promiscuous mode [ 355.660818][T10607] hsr_slave_1: entered promiscuous mode [ 355.667054][T10607] debugfs: 'hsr0' already exists in 'hsr' [ 355.673070][T10607] Cannot create hsr debugfs directory [ 355.679506][ T5617] Bluetooth: hci15: command tx timeout [ 355.679939][ T4923] Bluetooth: hci16: command tx timeout [ 355.877011][T10626] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.884929][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.892670][T10626] bridge_slave_0: entered allmulticast mode [ 355.900825][T10626] bridge_slave_0: entered promiscuous mode [ 355.915482][T10626] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.924661][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.932104][T10626] bridge_slave_1: entered allmulticast mode [ 355.939568][T10626] bridge_slave_1: entered promiscuous mode [ 356.005477][T10626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.018369][T10626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.095017][T10626] team0: Port device team_slave_0 added [ 356.116527][T10626] team0: Port device team_slave_1 added [ 356.154764][T10626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.162034][ T4923] Bluetooth: hci17: command tx timeout [ 356.164306][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.193954][T10626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.207147][T10626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.214592][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.241097][T10626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.313316][T10626] hsr_slave_0: entered promiscuous mode [ 356.321729][T10626] hsr_slave_1: entered promiscuous mode [ 356.327968][T10626] debugfs: 'hsr0' already exists in 'hsr' [ 356.334705][T10626] Cannot create hsr debugfs directory [ 356.801252][ T4923] Bluetooth: hci18: command tx timeout [ 357.679650][ T4923] Bluetooth: hci19: command tx timeout [ 357.759549][ T4923] Bluetooth: hci15: command tx timeout [ 357.760064][ T5617] Bluetooth: hci16: command tx timeout [ 358.249561][ T5617] Bluetooth: hci17: command tx timeout [ 358.880475][ T5617] Bluetooth: hci18: command tx timeout [ 359.759746][ T5617] Bluetooth: hci19: command tx timeout [ 359.839565][ T5617] Bluetooth: hci15: command tx timeout [ 359.850456][ T5617] Bluetooth: hci16: command tx timeout [ 360.159518][ T5617] Bluetooth: hci9: command 0x0406 tx timeout [ 360.319564][ T4923] Bluetooth: hci17: command tx timeout [ 360.959555][ T4923] Bluetooth: hci18: command tx timeout [ 361.839873][ T4923] Bluetooth: hci19: command tx timeout [ 362.569745][ T31] INFO: task dhcpcd:5267 blocked for more than 143 seconds. [ 362.577133][ T31] Not tainted syzkaller #0 [ 362.582286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.591081][ T31] task:dhcpcd state:D stack:25448 pid:5267 tgid:5267 ppid:1 task_flags:0x400140 flags:0x00080000 [ 362.603466][ T31] Call Trace: [ 362.606941][ T31] [ 362.610035][ T31] __schedule+0x17d9/0x56c0 [ 362.614766][ T31] ? __lock_acquire+0x683/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 362.620022][ T31] ? __lock_acquire+0x683/0x2cf0 [ 362.625132][ T31] ? unwind_next_frame+0x8f/0x2550 [ 362.630979][ T31] ? __pfx___schedule+0x10/0x10 [ 362.636120][ T31] ? schedule+0x90/0x2b0 [ 362.642641][ T31] schedule+0x164/0x2b0 [ 362.648018][ T31] schedule_preempt_disabled+0x13/0x30 [ 362.654169][ T31] __mutex_lock+0x7bf/0x1550 [ 362.658856][ T31] ? __mutex_lock+0x5d4/0x1550 [ 362.664220][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 362.669099][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 362.674891][ T31] ? stack_trace_save+0xa9/0x100 [ 362.686725][ T31] ? __lock_acquire+0x683/0x2cf0 [ 362.704720][ T31] ? radix_tree_lookup+0x240/0x290 [ 362.723704][ T31] genl_rcv_msg+0x10b/0x7a0 [ 362.740893][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.759456][ T31] ? __lock_acquire+0x683/0x2cf0 [ 362.764587][ T31] netlink_rcv_skb+0x226/0x4a0 [ 362.772153][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.777348][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.783202][ T31] ? down_read+0x2be/0x330 [ 362.787701][ T31] genl_rcv+0x28/0x40 [ 362.791898][ T31] netlink_unicast+0x7bb/0x940 [ 362.796727][ T31] netlink_sendmsg+0x813/0xb40 [ 362.801776][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.807149][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 362.812450][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.817808][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 362.823100][ T31] ____sys_sendmsg+0x54e/0x850 [ 362.827921][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.833409][ T31] ? import_iovec+0x73/0xa0 [ 362.838133][ T31] ___sys_sendmsg+0x2a5/0x360 [ 362.842991][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.848254][ T31] ? netdev_run_todo+0xfda/0x1060 [ 362.853598][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 362.858988][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 362.864020][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.869676][ T31] ? __secure_computing+0xe7/0x2b0 [ 362.874873][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.881444][ T31] do_syscall_64+0x174/0x580 [ 362.886194][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.892376][ T31] ? clear_bhb_loop+0x70/0xc0 [ 362.897099][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.903113][ T31] RIP: 0033:0x7f6d95991407 [ 362.907633][ T31] RSP: 002b:00007ffdf113a120 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 362.916284][ T31] RAX: ffffffffffffffda RBX: 00007f6d95907780 RCX: 00007f6d95991407 [ 362.924410][ T31] RDX: 0000000000000000 RSI: 00007ffdf113a1a0 RDI: 000000000000000e [ 362.932553][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.940640][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560fa3152e10 [ 362.948645][ T31] R13: 000000000000000e R14: 00007ffdf114e660 R15: 0000560fb9e001b0 [ 362.956752][ T31] [ 362.960471][ T31] INFO: task syz.2.1202:10327 blocked for more than 143 seconds. [ 362.968272][ T31] Not tainted syzkaller #0 [ 362.973389][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.982151][ T31] task:syz.2.1202 state:D stack:23632 pid:10327 tgid:10326 ppid:5608 task_flags:0x400140 flags:0x00080002 [ 362.994440][ T31] Call Trace: [ 362.997754][ T31] [ 363.000831][ T31] __schedule+0x17d9/0x56c0 [ 363.005411][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.010485][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.015487][ T31] ? __pfx___schedule+0x10/0x10 [ 363.020562][ T31] ? schedule+0x90/0x2b0 [ 363.024877][ T31] schedule+0x164/0x2b0 [ 363.029057][ T31] schedule_preempt_disabled+0x13/0x30 [ 363.034598][ T31] __mutex_lock+0x7bf/0x1550 [ 363.039233][ T31] ? __mutex_lock+0x5d4/0x1550 [ 363.044420][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 363.049152][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 363.054418][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 363.059914][ T31] ? radix_tree_lookup+0x240/0x290 [ 363.065101][ T31] genl_rcv_msg+0x10b/0x7a0 [ 363.069868][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.074977][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 363.080518][ T31] netlink_rcv_skb+0x226/0x4a0 [ 363.085332][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.090466][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.095813][ T31] ? down_read+0x2be/0x330 [ 363.100360][ T31] genl_rcv+0x28/0x40 [ 363.104403][ T31] netlink_unicast+0x7bb/0x940 [ 363.109207][ T31] netlink_sendmsg+0x813/0xb40 [ 363.114101][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.119767][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.124791][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.130297][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 363.135385][ T31] __sys_sendto+0x408/0x5a0 [ 363.139974][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 363.145031][ T31] ? errseq_sample+0x40/0x70 [ 363.149810][ T31] ? fd_install+0x94/0x3d0 [ 363.154338][ T31] ? fd_install+0x306/0x3d0 [ 363.158887][ T31] __x64_sys_sendto+0xde/0x100 [ 363.163747][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.169981][ T31] do_syscall_64+0x174/0x580 [ 363.174743][ T31] ? clear_bhb_loop+0x70/0xc0 [ 363.179750][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.185722][ T31] RIP: 0033:0x7f761a35e90e [ 363.190275][ T31] RSP: 002b:00007f761b1f3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 363.198730][ T31] RAX: ffffffffffffffda RBX: 00007f761b1f56c0 RCX: 00007f761a35e90e [ 363.209807][ T31] RDX: 0000000000000020 RSI: 00007f761b1f4000 RDI: 0000000000000049 [ 363.217894][ T31] RBP: 0000000000000000 R08: 00007f761b1f3f04 R09: 000000000000000c [ 363.226033][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000049 [ 363.234110][ T31] R13: 00007f761b1f3f58 R14: 00007f761b1f4000 R15: 0000000000000000 [ 363.242306][ T31] [ 363.245407][ T31] INFO: task syz.2.1202:10329 blocked for more than 144 seconds. [ 363.254572][ T31] Not tainted syzkaller #0 [ 363.259975][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.268730][ T31] task:syz.2.1202 state:D stack:26376 pid:10329 tgid:10326 ppid:5608 task_flags:0x480140 flags:0x00080002 [ 363.281272][ T31] Call Trace: [ 363.284621][ T31] [ 363.287594][ T31] __schedule+0x17d9/0x56c0 [ 363.292360][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.297420][ T31] ? __pfx___schedule+0x10/0x10 [ 363.302384][ T31] ? schedule+0x90/0x2b0 [ 363.306667][ T31] schedule+0x164/0x2b0 [ 363.310913][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 363.316602][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 363.322786][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 363.329155][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 363.335382][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 363.341626][ T31] nbd_set_size+0x454/0x680 [ 363.346251][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 363.351490][ T31] ? nla_memcpy+0x5b/0xc0 [ 363.355981][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 363.361508][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 363.367294][ T31] ? rcu_is_watching+0x15/0xb0 [ 363.372267][ T31] ? trace_kmalloc+0x2a/0xf0 [ 363.376976][ T31] ? __kmalloc_noprof+0x396/0x720 [ 363.382095][ T31] ? __nla_parse+0x40/0x60 [ 363.386551][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 363.393012][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 363.399554][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 363.405167][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 363.411445][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.416504][ T31] genl_rcv_msg+0x614/0x7a0 [ 363.421381][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.426465][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 363.432409][ T31] netlink_rcv_skb+0x226/0x4a0 [ 363.437255][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.442783][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.448139][ T31] ? down_read+0x2be/0x330 [ 363.452795][ T31] genl_rcv+0x28/0x40 [ 363.456846][ T31] netlink_unicast+0x7bb/0x940 [ 363.462100][ T31] netlink_sendmsg+0x813/0xb40 [ 363.466932][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.472564][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.477574][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.484089][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 363.489209][ T31] ____sys_sendmsg+0x54e/0x850 [ 363.494410][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.500235][ T31] ? import_iovec+0x73/0xa0 [ 363.504847][ T31] ___sys_sendmsg+0x2a5/0x360 [ 363.509765][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.514821][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.520241][ T31] ? futex_wake+0x51b/0x5f0 [ 363.524825][ T31] ? __fget_files+0x2a/0x420 [ 363.529527][ T31] ? __fget_files+0x3a2/0x420 [ 363.534249][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 363.539203][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.544851][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.551020][ T31] do_syscall_64+0x174/0x580 [ 363.555645][ T31] ? trace_irq_disable+0x3b/0x140 [ 363.560882][ T31] ? clear_bhb_loop+0x70/0xc0 [ 363.565612][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.571948][ T31] RIP: 0033:0x7f761a39e0d9 [ 363.576430][ T31] RSP: 002b:00007f761b1d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.585165][ T31] RAX: ffffffffffffffda RBX: 00007f761a626090 RCX: 00007f761a39e0d9 [ 363.593412][ T31] RDX: 0000000000080000 RSI: 0000200000000c40 RDI: 0000000000000008 [ 363.602275][ T31] RBP: 00007f761a435024 R08: 0000000000000000 R09: 0000000000000000 [ 363.610526][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.618550][ T31] R13: 00007f761a626128 R14: 00007f761a626090 R15: 00007fffa6ef90a8 [ 363.626790][ T31] [ 363.630486][ T31] INFO: task syz.1.1204:10334 blocked for more than 144 seconds. [ 363.638249][ T31] Not tainted syzkaller #0 [ 363.649847][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.658584][ T31] task:syz.1.1204 state:D stack:25632 pid:10334 tgid:10333 ppid:5604 task_flags:0x400140 flags:0x00080002 [ 363.670811][ T31] Call Trace: [ 363.674146][ T31] [ 363.677105][ T31] __schedule+0x17d9/0x56c0 [ 363.682453][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.687507][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.692888][ T31] ? unwind_next_frame+0x8f/0x2550 [ 363.698099][ T31] ? __pfx___schedule+0x10/0x10 [ 363.704130][ T31] ? schedule+0x90/0x2b0 [ 363.708444][ T31] schedule+0x164/0x2b0 [ 363.712859][ T31] schedule_preempt_disabled+0x13/0x30 [ 363.718383][ T31] __mutex_lock+0x7bf/0x1550 [ 363.723527][ T31] ? __mutex_lock+0x5d4/0x1550 [ 363.728370][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 363.733317][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 363.738419][ T31] ? stack_trace_save+0xa9/0x100 [ 363.743474][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.748467][ T31] ? radix_tree_lookup+0x240/0x290 [ 363.753724][ T31] genl_rcv_msg+0x10b/0x7a0 [ 363.758752][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.764312][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.769516][ T31] netlink_rcv_skb+0x226/0x4a0 [ 363.774362][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.779681][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.785029][ T31] ? down_read+0x2be/0x330 [ 363.789918][ T31] genl_rcv+0x28/0x40 [ 363.793981][ T31] netlink_unicast+0x7bb/0x940 [ 363.798781][ T31] netlink_sendmsg+0x813/0xb40 [ 363.803763][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.809142][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 363.814247][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.819829][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 363.824882][ T31] __sys_sendto+0x408/0x5a0 [ 363.829719][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 363.834870][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 363.840706][ T31] __x64_sys_sendto+0xde/0x100 [ 363.845551][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.851730][ T31] do_syscall_64+0x174/0x580 [ 363.856386][ T31] ? trace_irq_disable+0x3b/0x140 [ 363.861517][ T31] ? clear_bhb_loop+0x70/0xc0 [ 363.866244][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.872219][ T31] RIP: 0033:0x7f30b5d5e90e [ 363.876672][ T31] RSP: 002b:00007f30b6c62e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 363.885263][ T31] RAX: ffffffffffffffda RBX: 00007f30b6c646c0 RCX: 00007f30b5d5e90e [ 363.893357][ T31] RDX: 0000000000000024 RSI: 00007f30b6c63000 RDI: 0000000000000008 [ 363.901500][ T31] RBP: 0000000000000000 R08: 00007f30b6c62f04 R09: 000000000000000c [ 363.909586][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 363.917591][ T31] R13: 00007f30b6c62f58 R14: 00007f30b6c63000 R15: 0000000000000000 [ 363.925785][ T31] [ 363.928881][ T31] INFO: task syz.3.1205:10339 blocked for more than 144 seconds. [ 363.936873][ T31] Not tainted syzkaller #0 [ 363.941924][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.950855][ T31] task:syz.3.1205 state:D stack:25808 pid:10339 tgid:10336 ppid:5611 task_flags:0x400140 flags:0x00080002 [ 363.963119][ T31] Call Trace: [ 363.966451][ T31] [ 363.969464][ T31] __schedule+0x17d9/0x56c0 [ 363.974013][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.978970][ T31] ? __lock_acquire+0x683/0x2cf0 [ 363.984046][ T31] ? __pfx___schedule+0x10/0x10 [ 363.988966][ T31] ? schedule+0x90/0x2b0 [ 363.993331][ T31] schedule+0x164/0x2b0 [ 363.997524][ T31] schedule_preempt_disabled+0x13/0x30 [ 364.003157][ T31] __mutex_lock+0x7bf/0x1550 [ 364.007819][ T31] ? __mutex_lock+0x5d4/0x1550 [ 364.012773][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 364.017525][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 364.022657][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 364.027902][ T31] ? radix_tree_lookup+0x240/0x290 [ 364.033108][ T31] genl_rcv_msg+0x10b/0x7a0 [ 364.037664][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.042899][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 364.048348][ T31] netlink_rcv_skb+0x226/0x4a0 [ 364.053208][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.058284][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.063826][ T31] ? down_read+0x2be/0x330 [ 364.068312][ T31] genl_rcv+0x28/0x40 [ 364.072386][ T31] netlink_unicast+0x7bb/0x940 [ 364.077194][ T31] netlink_sendmsg+0x813/0xb40 [ 364.082203][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.087586][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.092645][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.097966][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 364.103087][ T31] __sys_sendto+0x408/0x5a0 [ 364.107654][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 364.112788][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 364.118126][ T31] __x64_sys_sendto+0xde/0x100 [ 364.123131][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.129311][ T31] do_syscall_64+0x174/0x580 [ 364.133940][ T31] ? trace_irq_disable+0x3b/0x140 [ 364.139017][ T31] ? clear_bhb_loop+0x70/0xc0 [ 364.143794][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.149787][ T31] RIP: 0033:0x7f742cd5e90e [ 364.154238][ T31] RSP: 002b:00007f742dbdce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 364.163011][ T31] RAX: ffffffffffffffda RBX: 00007f742dbde6c0 RCX: 00007f742cd5e90e [ 364.171399][ T31] RDX: 0000000000000020 RSI: 00007f742dbdd000 RDI: 000000000000000a [ 364.179486][ T31] RBP: 0000000000000000 R08: 00007f742dbdcf04 R09: 000000000000000c [ 364.187516][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 364.195650][ T31] R13: 00007f742dbdcf58 R14: 00007f742dbdd000 R15: 0000000000000000 [ 364.203832][ T31] [ 364.206904][ T31] INFO: task syz.0.1207:10347 blocked for more than 145 seconds. [ 364.215016][ T31] Not tainted syzkaller #0 [ 364.220307][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.229072][ T31] task:syz.0.1207 state:D stack:26544 pid:10347 tgid:10346 ppid:5605 task_flags:0x400140 flags:0x00080002 [ 364.241724][ T31] Call Trace: [ 364.245068][ T31] [ 364.248034][ T31] __schedule+0x17d9/0x56c0 [ 364.252924][ T31] ? __lock_acquire+0x683/0x2cf0 [ 364.257937][ T31] ? __lock_acquire+0x683/0x2cf0 [ 364.263293][ T31] ? unwind_next_frame+0x8f/0x2550 [ 364.268492][ T31] ? __pfx___schedule+0x10/0x10 [ 364.273488][ T31] ? schedule+0x90/0x2b0 [ 364.277806][ T31] schedule+0x164/0x2b0 [ 364.282265][ T31] schedule_preempt_disabled+0x13/0x30 [ 364.287778][ T31] __mutex_lock+0x7bf/0x1550 [ 364.292503][ T31] ? __mutex_lock+0x5d4/0x1550 [ 364.297311][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 364.302138][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 364.307228][ T31] ? stack_trace_save+0xa9/0x100 [ 364.312335][ T31] ? __lock_acquire+0x683/0x2cf0 [ 364.317342][ T31] ? radix_tree_lookup+0x240/0x290 [ 364.322681][ T31] genl_rcv_msg+0x10b/0x7a0 [ 364.327272][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.332398][ T31] ? __lock_acquire+0x683/0x2cf0 [ 364.337394][ T31] netlink_rcv_skb+0x226/0x4a0 [ 364.342308][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.347405][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.352879][ T31] ? down_read+0x2be/0x330 [ 364.357360][ T31] genl_rcv+0x28/0x40 [ 364.361597][ T31] netlink_unicast+0x7bb/0x940 [ 364.366445][ T31] netlink_sendmsg+0x813/0xb40 [ 364.371336][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.376699][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.381810][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.387172][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 364.392424][ T31] __sys_sendto+0x408/0x5a0 [ 364.396983][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 364.402267][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 364.407632][ T31] __x64_sys_sendto+0xde/0x100 [ 364.412513][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.418639][ T31] do_syscall_64+0x174/0x580 [ 364.423381][ T31] ? trace_irq_disable+0x3b/0x140 [ 364.428467][ T31] ? clear_bhb_loop+0x70/0xc0 [ 364.433236][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.439161][ T31] RIP: 0033:0x7fd60095e90e [ 364.443754][ T31] RSP: 002b:00007fd601826e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 364.452234][ T31] RAX: ffffffffffffffda RBX: 00007fd6018286c0 RCX: 00007fd60095e90e [ 364.460426][ T31] RDX: 000000000000001c RSI: 00007fd601827000 RDI: 0000000000000005 [ 364.468463][ T31] RBP: 0000000000000000 R08: 00007fd601826f04 R09: 000000000000000c [ 364.476523][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 364.485031][ T31] R13: 00007fd601826f58 R14: 00007fd601827000 R15: 0000000000000000 [ 364.493164][ T31] [ 364.496289][ T31] INFO: task syz.4.1216:10383 blocked for more than 145 seconds. [ 364.504653][ T31] Not tainted syzkaller #0 [ 364.509759][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.518479][ T31] task:syz.4.1216 state:D stack:26784 pid:10383 tgid:10382 ppid:5603 task_flags:0x400140 flags:0x00080002 [ 364.530896][ T31] Call Trace: [ 364.534235][ T31] [ 364.537199][ T31] __schedule+0x17d9/0x56c0 [ 364.541909][ T31] ? __lock_acquire+0x683/0x2cf0 [ 364.546919][ T31] ? __lock_acquire+0x683/0x2cf0 [ 364.551955][ T31] ? __pfx___schedule+0x10/0x10 [ 364.556852][ T31] ? schedule+0x90/0x2b0 [ 364.561333][ T31] schedule+0x164/0x2b0 [ 364.565564][ T31] schedule_preempt_disabled+0x13/0x30 [ 364.571261][ T31] __mutex_lock+0x7bf/0x1550 [ 364.575938][ T31] ? __mutex_lock+0x5d4/0x1550 [ 364.580848][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 364.585603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 364.590774][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 364.595938][ T31] ? radix_tree_lookup+0x240/0x290 [ 364.601517][ T31] genl_rcv_msg+0x10b/0x7a0 [ 364.606138][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.611510][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 364.616967][ T31] netlink_rcv_skb+0x226/0x4a0 [ 364.622094][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.627188][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.632611][ T31] ? down_read+0x2be/0x330 [ 364.637096][ T31] genl_rcv+0x28/0x40 [ 364.641370][ T31] netlink_unicast+0x7bb/0x940 [ 364.646220][ T31] netlink_sendmsg+0x813/0xb40 [ 364.651127][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.656454][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.661656][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.667005][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 364.672265][ T31] __sys_sendto+0x408/0x5a0 [ 364.676813][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 364.682364][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 364.687759][ T31] __x64_sys_sendto+0xde/0x100 [ 364.692747][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.698868][ T31] do_syscall_64+0x174/0x580 [ 364.703832][ T31] ? trace_irq_disable+0x3b/0x140 [ 364.708932][ T31] ? clear_bhb_loop+0x70/0xc0 [ 364.713960][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.720008][ T31] RIP: 0033:0x7fa85d55e90e [ 364.724462][ T31] RSP: 002b:00007fa85e4b8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 364.732987][ T31] RAX: ffffffffffffffda RBX: 00007fa85e4ba6c0 RCX: 00007fa85d55e90e [ 364.741103][ T31] RDX: 0000000000000020 RSI: 00007fa85e4b9000 RDI: 000000000000000a [ 364.749158][ T31] RBP: 0000000000000000 R08: 00007fa85e4b8f04 R09: 000000000000000c [ 364.757338][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 364.765402][ T31] R13: 00007fa85e4b8f58 R14: 00007fa85e4b9000 R15: 0000000000000000 [ 364.773554][ T31] [ 364.776697][ T31] [ 364.776697][ T31] Showing all locks held in the system: [ 364.784564][ T31] 1 lock held by khungtaskd/31: [ 364.789695][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 364.800294][ T31] 2 locks held by dhcpcd/5267: [ 364.805175][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 364.813914][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 364.823379][ T31] 2 locks held by getty/5362: [ 364.828151][ T31] #0: ffff8880357480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 364.838430][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 364.848791][ T31] 1 lock held by udevd/5623: [ 364.853492][ T31] #0: ffff8880771c2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 364.863216][ T31] 2 locks held by syz.2.1202/10327: [ 364.868487][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 364.876806][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 364.886029][ T31] 6 locks held by syz.2.1202/10329: [ 364.891374][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 364.899976][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 364.909037][ T31] #2: ffff888058963a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 364.921022][ T31] #3: ffff888029d0e3b8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 364.930614][ T31] #4: ffff888029d0dd80 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 364.942906][ T31] #5: ffff888029d0ddb8 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 364.955355][ T31] 2 locks held by syz.1.1204/10334: [ 364.960838][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 364.969114][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 364.978294][ T31] 2 locks held by syz.3.1205/10339: [ 364.983570][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 364.991945][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.001127][ T31] 2 locks held by syz.0.1207/10347: [ 365.006373][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.014750][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.023924][ T31] 2 locks held by syz.4.1216/10383: [ 365.029158][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.037846][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.047220][ T31] 2 locks held by syz-executor/10387: [ 365.052854][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.061203][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.070400][ T31] 2 locks held by syz-executor/10389: [ 365.075849][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.084138][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.093236][ T31] 2 locks held by syz-executor/10409: [ 365.098635][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.106928][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.116010][ T31] 2 locks held by syz-executor/10413: [ 365.121667][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.129990][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.139032][ T31] 2 locks held by syz-executor/10442: [ 365.144557][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.152902][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.162568][ T31] 2 locks held by syz-executor/10477: [ 365.168002][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.176311][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.185582][ T31] 2 locks held by syz-executor/10479: [ 365.191086][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.199514][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.208595][ T31] 2 locks held by syz-executor/10499: [ 365.214211][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.222530][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.231607][ T31] 2 locks held by syz-executor/10500: [ 365.237003][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.245370][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.254707][ T31] 2 locks held by syz-executor/10531: [ 365.260183][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.268430][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.277527][ T31] 2 locks held by syz-executor/10567: [ 365.283295][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.291735][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.300847][ T31] 2 locks held by syz-executor/10568: [ 365.306249][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.314834][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.324021][ T31] 2 locks held by syz-executor/10588: [ 365.329480][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.337824][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.346896][ T31] 2 locks held by syz-executor/10607: [ 365.352346][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.360807][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.369969][ T31] 2 locks held by syz-executor/10626: [ 365.375381][ T31] #0: ffffffff900981a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 365.383728][ T31] #1: ffffffff90097fe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 365.392944][ T31] [ 365.395296][ T31] ============================================= [ 365.395296][ T31] [ 365.404102][ T31] NMI backtrace for cpu 0 [ 365.404128][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 365.404151][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.404163][ T31] Call Trace: [ 365.404171][ T31] [ 365.404180][ T31] dump_stack_lvl+0xe8/0x150 [ 365.404239][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 365.404265][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 365.404305][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 365.404333][ T31] sys_info+0x135/0x170 [ 365.404352][ T31] watchdog+0xfd7/0x1030 [ 365.404384][ T31] ? watchdog+0x1c7/0x1030 [ 365.404415][ T31] kthread+0x388/0x470 [ 365.404451][ T31] ? __pfx_watchdog+0x10/0x10 [ 365.404473][ T31] ? __pfx_kthread+0x10/0x10 [ 365.404502][ T31] ret_from_fork+0x514/0xb70 [ 365.404546][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 365.404575][ T31] ? __switch_to+0xc89/0x1420 [ 365.404602][ T31] ? __pfx_kthread+0x10/0x10 [ 365.404631][ T31] ret_from_fork_asm+0x1a/0x30 [ 365.404678][ T31] [ 365.404686][ T31] Sending NMI from CPU 0 to CPUs 1: [ 365.514790][ C1] NMI backtrace for cpu 1 [ 365.514817][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 365.514837][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.514848][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 365.514879][ C1] Code: fb 7e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 ce 18 00 fb f4 4c 06 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 365.514894][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 365.514910][ C1] RAX: 000000000013415f RBX: ffffffff819b433c RCX: 0000000080000001 [ 365.514923][ C1] RDX: 0000000000000001 RSI: ffffffff8e22af12 RDI: ffffffff8c4bba80 [ 365.514935][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 365.514948][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 365.514960][ C1] R13: 1ffff11003bdb000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 365.514973][ C1] FS: 0000000000000000(0000) GS:ffff88812505b000(0000) knlGS:0000000000000000 [ 365.514988][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.514999][ C1] CR2: 00005599e65a5ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 365.515015][ C1] Call Trace: [ 365.515022][ C1] [ 365.515029][ C1] default_idle+0x9/0x20 [ 365.515054][ C1] default_idle_call+0x72/0xb0 [ 365.515082][ C1] do_idle+0x1cc/0x540 [ 365.515105][ C1] ? __pfx_do_idle+0x10/0x10 [ 365.515132][ C1] cpu_startup_entry+0x43/0x60 [ 365.515152][ C1] start_secondary+0x101/0x110 [ 365.515174][ C1] common_startup_64+0x13e/0x157 [ 365.515201][ C1] [ 365.676413][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 365.683307][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 365.692416][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.702824][ T31] Call Trace: [ 365.706110][ T31] [ 365.709047][ T31] vpanic+0x56c/0xa60 [ 365.713052][ T31] ? __pfx___schedule+0x10/0x10 [ 365.717912][ T31] ? __pfx_vpanic+0x10/0x10 [ 365.722440][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 365.728632][ T31] panic+0xc5/0xd0 [ 365.732371][ T31] ? __pfx_panic+0x10/0x10 [ 365.736794][ T31] ? preempt_schedule_common+0x82/0xd0 [ 365.742263][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 365.747641][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 365.753800][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 365.759984][ T31] watchdog+0x1030/0x1030 [ 365.764329][ T31] ? watchdog+0x1c7/0x1030 [ 365.768852][ T31] kthread+0x388/0x470 [ 365.772937][ T31] ? __pfx_watchdog+0x10/0x10 [ 365.777645][ T31] ? __pfx_kthread+0x10/0x10 [ 365.782276][ T31] ret_from_fork+0x514/0xb70 [ 365.786922][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 365.792047][ T31] ? __switch_to+0xc89/0x1420 [ 365.796733][ T31] ? __pfx_kthread+0x10/0x10 [ 365.801353][ T31] ret_from_fork_asm+0x1a/0x30 [ 365.806138][ T31] [ 365.809794][ T31] Kernel Offset: disabled [ 365.814138][ T31] Rebooting in 86400 seconds..