last executing test programs: 32.528688699s ago: executing program 0 (id=2089): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14, 0x29, 0x51, 0x10a}}], 0x18}, 0x5000000) syz_emit_ethernet(0x2f, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaae94f5e99783258d800000064ea0000000f00bd80664542a62c2db344a0671adfd7582420e3faf4973d714e3303556c9d0493515910bd27cd93f240da56989911224c31ffeba6daa2ea4f538aadc35d73b0221ce36cfbed5cb5e1dd76a65c2d3cff00070c2672ac2a3cb1c772bd62d1f6d62a520a51a90e4a008ad5515eafd4bb46947a4614e666a59cb94ba9e6aa3a956cc087b0d8ffd58364faf9c032b28865026aa1ccd0586b41f9fcb9d44cff"], 0x0) 32.394652586s ago: executing program 0 (id=2091): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x3, 0xff, 0x4, 0x6, @remote, @mcast2, 0x8, 0x700, 0x1, 0x80000000}}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltfilter={0x74, 0x2d, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1}, {0xc, 0xfff1}, {0x10, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff000000, 0xffffffff, 0x254aef682f0dd4b2]}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x5}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1d}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x8005) r5 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r6 = openat$cgroup_pressure(r2, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000100)={'full', 0x20, 0x1, 0x20, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2000000000000021, 0x2, 0x4) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000180)=0xc) shutdown(r7, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 32.204467447s ago: executing program 0 (id=2093): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@gettclass={0x24, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2, 0x10}}}, 0x24}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000bc0)={0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000c40)=0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@gettclass={0x24, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2, 0x10}}}, 0x24}}, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000bc0)) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000c40)=0x4) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003e440000000000007a0a00fe00ffffffc30300ff50000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) 21.384314998s ago: executing program 2 (id=2174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}], 0x1, 0x4000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) shutdown(r3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4, 0x4a, 0x5}, [@NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0xc090) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="ab", 0x1, 0x24040855, 0x0, 0x0) recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/38, 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00), 0x3e}, 0x2}], 0x2, 0x2, 0x0) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xcc, @dev={0xfe, 0x80, '\x00', 0x42}, 0x1}], 0x1c) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5202) 21.306575439s ago: executing program 4 (id=2175): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x6, [0x9, 0x0, 0x9, 0x5, 0xfffffbff, 0x80000000]}}) r1 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r1, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/45, 0x2d}, {&(0x7f00000010c0)=""/189, 0xbd}, {&(0x7f0000001180)=""/165, 0xa5}, {&(0x7f0000001240)=""/150, 0x96}], 0x5, &(0x7f0000001380)=""/80, 0x50}, 0x504}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/237, 0xed}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/149, 0x95}, {&(0x7f00000035c0)=""/35, 0x23}], 0x5, &(0x7f0000003680)=""/211, 0xd3}, 0x8}, {{&(0x7f0000003780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003800)=""/67, 0x43}, {&(0x7f0000003880)=""/185, 0xb9}, {&(0x7f0000003940)=""/227, 0xe3}, {&(0x7f0000003a40)=""/49, 0x31}], 0x4, &(0x7f0000003ac0)=""/85, 0x55}}, {{&(0x7f0000003b40)=@isdn, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003bc0)=""/89, 0x59}, {&(0x7f0000003c40)=""/191, 0xbf}], 0x2, &(0x7f0000003d40)=""/65, 0x41}, 0x9}, {{&(0x7f0000003dc0)=@hci, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/5, 0x5}, {&(0x7f0000004e80)=""/202, 0xca}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/53, 0x35}], 0x5}, 0x7fffffff}, {{&(0x7f0000006040)=@isdn, 0x80, &(0x7f0000006400)=[{&(0x7f00000060c0)=""/84, 0x54}, {&(0x7f0000006140)=""/11, 0xb}, {&(0x7f0000006180)=""/178, 0xb2}, {&(0x7f0000006240)=""/172, 0xac}, {&(0x7f0000006300)=""/158, 0x9e}, {&(0x7f00000063c0)=""/55, 0x37}], 0x6, &(0x7f0000006480)=""/84, 0x54}, 0x4}, {{&(0x7f0000006500)=@phonet, 0x80, &(0x7f0000006680)=[{&(0x7f0000006580)=""/215, 0xd7}], 0x1, &(0x7f00000066c0)=""/220, 0xdc}, 0x7}], 0x7, 0x20, &(0x7f0000006980)={0x0, 0x989680}) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000069c0)={'batadv0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000006a00)={r0}) bind$xdp(r2, &(0x7f0000006a40)={0x2c, 0x1, r3, 0x3b, r4}, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000006a80)={'some', 0x20, 0x0, 0x20, 0x2}, 0x2f) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000006ac0), 0x3) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000006b00), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000006b40), 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006bc0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000006d00)={'sit0\x00', &(0x7f0000006c00)={'syztnl2\x00', r3, 0x7, 0x7, 0x0, 0x6, {{0x2a, 0x4, 0x2, 0x3, 0xa8, 0x67, 0x0, 0xa, 0x56, 0x0, @remote, @rand_addr=0x64010101, {[@cipso={0x86, 0x4d, 0x0, [{0x0, 0xf, "d11daa6502306ea16d64f2fd47"}, {0x1, 0x4, "de63"}, {0x1, 0x3, "eb"}, {0x2, 0xb, "dc936eec93ba476965"}, {0x7, 0x5, "f79b07"}, {0x7, 0xd, "6d1a6f2ad68c2875509ded"}, {0x0, 0xa, "55eb6428ea0acaee"}, {0x0, 0xa, "88ad36d3957f270d"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x62, 0x0, 0x9, [0x101, 0xd]}, @cipso={0x86, 0x35, 0x3, [{0x2, 0x6, "b539cd94"}, {0x7, 0xe, "5e3139034742098d098a49ea"}, {0x7, 0xa, "80b2b5ee83753d0f"}, {0x6, 0x11, "65df2277bde51e01e129354becf9ff"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000006e40)={&(0x7f0000006b80)={0x10, 0x0, 0x0, 0x44c30000}, 0xc, &(0x7f0000006e00)={&(0x7f0000006d40)={0xb4, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe2570674989482fa}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xa003a55f54d567cf}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000006e80)={@empty, 0x6f, r7}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000006ec0)=0x1, 0x4) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000006f00)={{r2}, 0x10000, 0x72d2, 0xe}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000007000)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006fc0)={&(0x7f0000006f80)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000007040)=0x2, 0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000007080)={0x5, 0x2c76, 0x7f, 0xfffff301, 0x8}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007100), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000007200)={&(0x7f00000070c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000071c0)={&(0x7f0000007140)={0x5c, r10, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x12000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000080) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007280), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f00000073c0)={&(0x7f0000007240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000007380)={&(0x7f0000007300)={0x44, r12, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004044}, 0x80c4) 21.155419167s ago: executing program 1 (id=2176): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x10010, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x10010, 0xffffffffffffffff, 0x2000) (async) 21.020746274s ago: executing program 2 (id=2178): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000500)=""/4096, 0x1000) (async, rerun: 64) splice(r2, 0x0, r5, 0x0, 0x400000008000f28, 0x0) (async, rerun: 64) splice(r4, 0x0, r3, 0x0, 0x100, 0x3) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=ANY=[@ANYBLOB="00010000036d0b"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async, rerun: 64) sendmsg$inet(r8, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (rerun: 64) sendmsg$inet(r8, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) 20.978860739s ago: executing program 1 (id=2179): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x1000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x2c, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xb, @private1, 0x1}]}, &(0x7f00000004c0)=0x10) recvmsg(r1, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x182) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000884800050003ee0b80558ddbba9b37786f", 0x27}], 0x1}, 0x24004010) socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) socket$kcm(0x2, 0x3, 0x2) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x1000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x2c, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xb, @private1, 0x1}]}, &(0x7f00000004c0)=0x10) (async) recvmsg(r1, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x182) (async) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000884800050003ee0b80558ddbba9b37786f", 0x27}], 0x1}, 0x24004010) (async) 20.802367258s ago: executing program 2 (id=2181): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4a, 0x2, 0xfe, 0x9, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x4, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r1, 0x3a, 0xc8, 0x0, 0x0) (async) setsockopt$MRT6_INIT(r1, 0x3a, 0xc8, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff050003"], 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000182600003f17910e37b35ec8a0a63bf917dd16eba42ccc1c4e5993d8536e4f3b1ed54e6f7f34f868610065c14c86045a53fd8574da64e7d1b5c24d5fce0b4c4e0b61f8a295f2d55d3a586c92c9787c8b45a6b6e75182e84b2f5bf86b4395d1fb86", @ANYRES32=r2, @ANYBLOB="00000000000000809500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1000, &(0x7f0000001a40)=""/4096}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000182600003f17910e37b35ec8a0a63bf917dd16eba42ccc1c4e5993d8536e4f3b1ed54e6f7f34f868610065c14c86045a53fd8574da64e7d1b5c24d5fce0b4c4e0b61f8a295f2d55d3a586c92c9787c8b45a6b6e75182e84b2f5bf86b4395d1fb86", @ANYRES32=r2, @ANYBLOB="00000000000000809500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1000, &(0x7f0000001a40)=""/4096}, 0x94) 20.565164762s ago: executing program 1 (id=2182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c0010800800024000000007080001"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xbb1d}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) close(r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x815) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 20.405794651s ago: executing program 0 (id=2183): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="70010000", @ANYRES16=r0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="fc000000e3ffffffffffff9fa3dbc6b3f9b25500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc000000000000000000000000000001e000000200000000000000000000000000000004000000000a0060803b0000006e0b88201a72c70b7e9b362450f97a6f60b9a295f26a10f4bc20b9a30a9a08f31b3b5bae4a17fed68de7acfeda6df08c48883d1f37d6ebac89d7a0ab32d949fcfceff9c2071402ad611910000bcf2fc420", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000000000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006000000feffff3f0000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @local}, {0x306}, 0x8, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f00000001c0)=0x8001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0400000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008000000000000000000000000000000000000000002000deaa2c3850c0893a3bd520d71e55887cab8c0e8c82e5b2c112c29d60675888dee8258b15452afd603e2259c1149deacde448165022"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000258718110000", @ANYRES32=r10, @ANYBLOB="000000000000000085000000160000009500000000000000"], &(0x7f0000000040)='GPL\x00'}, 0x80) r11 = openat$cgroup_int(r9, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000600)=0x8000000000000000, 0x12) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x64, 0x30, 0x1, 0x70bd21, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x200000}}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xeb756673eed151e1}, 0x0) 20.356604416s ago: executing program 1 (id=2184): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x68, 0x1, [@m_nat={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x13, 0x6, "5422002fcf6706afb352af162f6c49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000f00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bfb56b0f490089b4000000000400000000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.356326907s ago: executing program 2 (id=2185): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x100, 0x70bd28, 0x3}, 0x14}}, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.274679701s ago: executing program 4 (id=2186): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000040), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f8000008000200810000002400098008000200040000080002008000000008000200400000000800010001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r8, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)="922c61816e8c5c3c9eac46f8fbc68746146264df7ff761a1b86a214c63dca9c315cef0a0d950a20712b2980de54c5926be2db6ec5691f62c03394193e6e31c9c40ea2590", 0x44}], 0x2}}], 0x1, 0x200880d8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r11, @ANYBLOB="010000000000000000002c00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20.058170712s ago: executing program 2 (id=2188): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2e, '\x00', r2, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7f}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 20.057597774s ago: executing program 1 (id=2189): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000aa36"], 0x18}, 0x3400c8d4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x6, 0x12) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="040027bd7000fedb8c6741e62210f54443df25040000000500040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) 20.038797695s ago: executing program 0 (id=2190): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0xa, 0xe, 0x44, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0x62, 0x7}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@mpls_newroute={0x24, 0x18, 0x400, 0x70bd29, 0x25dfdbfc, {0x1c, 0x10, 0x14, 0x6, 0xfe, 0x0, 0xfe, 0x5, 0x100}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x20040800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x29, &(0x7f0000000340)={&(0x7f0000003ec0)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}, @nested={0x8, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x20048000) 19.679725975s ago: executing program 0 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002280)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'batadv0\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x80) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0xa, 0xb}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x5, 0x1, 0x6}}, {@ipv6={0x86dd, @tcp={0x7, 0x6, '\x00', 0x16, 0x6, 0xff, @private2, @mcast1, {[], {{0x4e1e, 0x4e64, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x100, 0x0, 0x9}, {"c8d3"}}}}}}}}, 0x54) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x204}, @initial, @device_a, @device_b, {0x8, 0x7}}, @random="5a0e3269ef10d89883c73a681f906df5132399625b45678683ecd90140d60631a2e1de82aea74420925b3ecc70362815ca4366631342d3968614157658997a0d49d2ccdb2c2a0199eac88a0a1894fb9fc9c539737569cd7e4a692fb61d23cc96c08a35e4d2e4d6dd"}, 0x80) 19.534104192s ago: executing program 1 (id=2192): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x949}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x16d}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x76}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) listen(r0, 0x28) poll(&(0x7f0000000080)=[{r0, 0x408}], 0x1, 0x40000400) shutdown(r0, 0x1) 19.376732611s ago: executing program 4 (id=2193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14c, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x11c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x15}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xcd}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc17ea5e1ef4f1a46}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd27, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x140cd80d}, 0x0) 19.30169861s ago: executing program 2 (id=2194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 19.164513414s ago: executing program 4 (id=2195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x81, 0x4, 0x100, 0x8000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4048000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) 18.947059187s ago: executing program 4 (id=2196): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x22, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a91ba78c185431cb8329614f78c7e6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 18.746802243s ago: executing program 4 (id=2197): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000001300)="d7b5", 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x14cf32da831c98a9, &(0x7f0000000400)="d03e5cbfb784eae396da1d52ea53893adcc64da56fa334418461a11a2308881e427b8b9468e007de84dcc511c48c55626a651dad7f56f2569cc3c4fa6f8398c189812c6933a39aeb51b38ada6d667c3f1410530ccbbefa81303e69bd196f0957f58339fdec1b952ad5332bfdfcef0e1a7da3d16297adbcc33c169be00cceb6dfcec5a91ced1b51db6ecaafa90bef7bbf5548cb43dc92759fd4b50852bc2f6d1b55288aa4cdb0d5b18c894d12f8e44ae09873c715f6bd7aff2609fd0cb468f042f79677d3f1fde079e04b", 0xca) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c2c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) getsockopt$sock_buf(r6, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x8d, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r5) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r13, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, 'wg1\x00'}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4042}, 0x40010) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r15, @ANYBLOB="24005a802000018014000300000000000000000000000d000100000004000200040001"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3fffffff}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 18.267526097s ago: executing program 3 (id=2200): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100181208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x3, 0x5}, &(0x7f0000000040)=0x8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getpeername$inet6(r7, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x10}, {0xfff3, 0xffff}, {0xfff3, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4814) 17.303729469s ago: executing program 3 (id=2201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) connect(r0, &(0x7f0000000140)=@llc={0x1a, 0x104, 0x8, 0xe, 0x22, 0x2, @local}, 0x80) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000700)="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", 0x1b4}], 0x1}}], 0x1, 0x2090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x7c}}, 0xc4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003fd4b20127b080bf82664e51c36a4c4681dd332c6cb068cd11d13dae5f798032ed4237ad618305d0bffb28dac3b13bd148e2d7e8798ce2deb330ec7cdfdc5cddd477f3ffd22b884e91529740da75f625d46b48a6aa4c40adced23638423cdc401bdd228b0590432be970bd3c9c7b2a6ee3dabba57022a222a4b012ef17e0385b92f034fe82ff530fddd4285581275eecee8a722e309654717a604b740ca6dbc00e7c878d6dd35f55413fc7c8cb1fd3beda73c7db9903f9d44c4faf64095a03292fda7cb99bc539914391c4ca199090cd5fd133969265c62ed24a87055dd031a71479489af1fde720611d613ab67cd77d9b0741367da527a4afcc9f7bbe806c0c0e155c5d5f227dc9933bb33b535f241c984bdb7084664329f3185c355d429c41f52ea5532f4e27ac3599939bd6a476e88e857942705607ad7c2183b1245e5de7482b14f33eb832fc878eee3535f92329133405896bd60b4c07736b72210aa4ea89d000359571524c2245ab8b67af41b0aefd1c88d8019bf591498f2813a2901d317c83826c716e6bba1e26c2b5621dbc41642d3c8f7594e75258fabb2587705005128182a564a0db4b63338deed92b1e17e539423594ba0373f44a5936c1b77fe2f6d2116d8d202e841e1269042ef6a8ab1f76fde15efd57f54b9c7139e1875896d3a78ec97e0893701809cf90a74afa0ebe8c5ab9b5001892046e8fd2268712d552280ded91affd715e7df3ce2f0ba23a22d8e25f4c6723ec8fc10a718631198ad80c5d89a00b9c5a8905947e58a055cd95eb9bb81b948cd43a9cbafbbf29fa8f543f53", 0x621) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000070000000100860600000003140000000000000000000000001600000000000000000000000100000008000000000000000000020000000000000000", @ANYRESOCT=r1, @ANYRES8=r2, @ANYRES8, @ANYRESOCT], 0x48}, 0x8c0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="128b3b8a2ccba7389f930b2fb4e73e08cb13713eb4f92b7c1736ca04b8b18c2673", 0xfffffffffffffd9b}], 0x1, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="27e3baf54482e34886f0dcf42bf75433cac1011a322d7c9d7ed2ff8abf9d28b3eda0bcfeb4093a33fb39fb170f1a1c5e9becb2abeb75e6acdd742ef8bc70eb7d4d5bbe45b1d66fcac0c530a93553277b8fbfdb3d60bfc37f551ff3c0b549205cf9f1ddc3e96dc8e9215f088528c4078304ff3a48a63b0d450af5a5977e38ad694be7c8d57d34a3f912ade91fbce778242cd41785f328720aa0dc31d9260342a6427489273e1bb3e5fc11"}], 0x0, 0x0, 0x0, 0x20008000}], 0x1, 0x64000850) recvmmsg(r6, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/16, 0x10}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x19}], 0x1, 0x40000140, 0x0) r7 = socket(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)) 16.441837832s ago: executing program 3 (id=2202): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_MASTER={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000080}, 0x4000844) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffa}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@newchain={0xf0, 0x64, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff2}, {0x5, 0xfff3}, {0x7, 0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x6, 0xa4, 0xfb, 0xffff}, {0xfffc, 0x10, 0x2, 0x4d}, {0x6, 0xf8, 0xab, 0x5}, {0x1, 0x3, 0xd0}]}}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @dev={0xfe, 0x80, '\x00', 0x37}}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x3}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x4}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x8}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xff}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24000001}, 0x10) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x10) (async) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x5, @multicast}, 0x10) (async) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000080)={r5, 0x1, 0x6, @multicast}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r4], 0x11c}}, 0x0) 16.27373846s ago: executing program 3 (id=2203): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffe00, 0x5, 0x3, 0x18, 0x1, 0x15, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r5}, 0x20) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) (async, rerun: 64) r7 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) listen(r7, 0xfffffffd) socket$nl_route(0x10, 0x3, 0x0) (async) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f0000000280)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c19", 0x20}, {&(0x7f0000000380)="d422b8440c607d46a140ebfce60a67610dd2493961afc1684af41b1820085a974c353f2ff3843617008d627082460020ee4bcac2e32f815419b5d5ddc3cb756fd9", 0x41}], 0x4) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b0400010000000000000200000014000480100001800800010064753000040002800900010073797a30000000000900020073797a3200000000050007405d000000140000001100010000000000000000000000000a"], 0x70}}, 0x4040040) (async) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$cgroup_devices(r9, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0020040002000000340012800b00010067656e65766500002400028014001200fc01000000000000000000000000000004000600060005004e210000"], 0x54}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) (async) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000040)={0x8000, 0x1}) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000020605000000000000000000050000010c000300686173683a6970409f8b8cb2430e6a6d61703a697000000013000300686173683a6e65742c696661636500000500040003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 15.920496398s ago: executing program 3 (id=2204): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x2008, @remote}}}, 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x20000010}, 0x4014004) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x18, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000000000000002c0012800e0001006970366772657461700000001800028014000700000000000000ff00000000b00000000108000d0006000020"], 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24060000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r7, r7, 0x19, 0x0, @val=@perf_event={0x3}}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r10, 0x0, 0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 15.805245523s ago: executing program 3 (id=2205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x443}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5}]}, 0x1c}}, 0x10) 4.01368616s ago: executing program 32 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002280)={0x94, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'batadv0\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x80) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0xa, 0xb}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x5, 0x1, 0x6}}, {@ipv6={0x86dd, @tcp={0x7, 0x6, '\x00', 0x16, 0x6, 0xff, @private2, @mcast1, {[], {{0x4e1e, 0x4e64, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x100, 0x0, 0x9}, {"c8d3"}}}}}}}}, 0x54) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x204}, @initial, @device_a, @device_b, {0x8, 0x7}}, @random="5a0e3269ef10d89883c73a681f906df5132399625b45678683ecd90140d60631a2e1de82aea74420925b3ecc70362815ca4366631342d3968614157658997a0d49d2ccdb2c2a0199eac88a0a1894fb9fc9c539737569cd7e4a692fb61d23cc96c08a35e4d2e4d6dd"}, 0x80) 3.967924087s ago: executing program 33 (id=2192): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x949}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x16d}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x76}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) listen(r0, 0x28) poll(&(0x7f0000000080)=[{r0, 0x408}], 0x1, 0x40000400) shutdown(r0, 0x1) 3.772543938s ago: executing program 34 (id=2194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 2.860632719s ago: executing program 35 (id=2197): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000001300)="d7b5", 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x14cf32da831c98a9, &(0x7f0000000400)="d03e5cbfb784eae396da1d52ea53893adcc64da56fa334418461a11a2308881e427b8b9468e007de84dcc511c48c55626a651dad7f56f2569cc3c4fa6f8398c189812c6933a39aeb51b38ada6d667c3f1410530ccbbefa81303e69bd196f0957f58339fdec1b952ad5332bfdfcef0e1a7da3d16297adbcc33c169be00cceb6dfcec5a91ced1b51db6ecaafa90bef7bbf5548cb43dc92759fd4b50852bc2f6d1b55288aa4cdb0d5b18c894d12f8e44ae09873c715f6bd7aff2609fd0cb468f042f79677d3f1fde079e04b", 0xca) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c2c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) getsockopt$sock_buf(r6, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x8d, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r5) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r13, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, 'wg1\x00'}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4042}, 0x40010) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r15, @ANYBLOB="24005a802000018014000300000000000000000000000d000100000004000200040001"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3fffffff}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 0s ago: executing program 36 (id=2205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x443}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5}]}, 0x1c}}, 0x10) kernel console output (not intermixed with test programs): 210.575168][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.928'. [ 210.619320][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 210.777401][ T9717] macsec1: entered allmulticast mode [ 210.806800][ T9717] gretap0: entered allmulticast mode [ 210.865828][ T9717] gretap0: left allmulticast mode [ 211.050054][ T140] bond1: (slave gretap1): failed to get link speed/duplex [ 211.072133][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 211.132837][ T9725] xt_hashlimit: size too large, truncated to 1048576 [ 211.420644][ T9741] SET target dimension over the limit! [ 211.741235][ T9756] bridge0: port 1(macvlan2) entered blocking state [ 211.758450][ T9756] bridge0: port 1(macvlan2) entered disabled state [ 211.776741][ T9756] macvlan2: entered allmulticast mode [ 211.799361][ T9756] gretap0: entered allmulticast mode [ 211.823148][ T9756] macvlan2: entered promiscuous mode [ 211.860997][ T9765] syzkaller0: entered promiscuous mode [ 211.877793][ T9765] syzkaller0: entered allmulticast mode [ 211.952757][ T9762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.023845][ T9769] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 212.116638][ T9762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.244512][ T9769] bond1: entered promiscuous mode [ 212.267820][ T9769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.296328][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 212.321199][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 212.336272][ T9787] IPVS: length: 169 != 8 [ 212.361422][ T9786] netlink: 'syz.1.942': attribute type 11 has an invalid length. [ 212.416567][ T9769] bond1: (slave bridge2): making interface the new active one [ 212.433205][ T9769] bridge2: entered promiscuous mode [ 212.455859][ T9769] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 212.522858][ T9790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.242461][ T9819] netlink: 'syz.0.947': attribute type 12 has an invalid length. [ 213.292564][ T9825] netlink: 'syz.3.948': attribute type 1 has an invalid length. [ 213.514748][ T9825] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.613098][ T9829] bond6: (slave veth5): Enslaving as an active interface with a down link [ 213.682239][ T9832] sit0: left promiscuous mode [ 213.933831][ T9832] syzkaller0: left promiscuous mode [ 213.962410][ T9832] syzkaller0: left allmulticast mode [ 214.005808][ T9832] macvlan3: left promiscuous mode [ 214.031388][ T9832] bond3: left promiscuous mode [ 214.053563][ T9832] macvlan3: left allmulticast mode [ 214.078806][ T9832] bond3: left allmulticast mode [ 214.191344][ T9825] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 214.205703][ T9825] bond6: (slave batadv1): making interface the new active one [ 214.223375][ T9825] batadv1: entered promiscuous mode [ 214.233678][ T9825] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 214.309621][ T13] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 214.468941][ T13] net_ratelimit: 16 callbacks suppressed [ 214.468959][ T13] bond1: (slave gretap1): failed to get link speed/duplex [ 214.597777][ T9853] syzkaller0: entered promiscuous mode [ 214.607115][ T9853] syzkaller0: entered allmulticast mode [ 214.638258][ T140] bond1: (slave gretap1): failed to get link speed/duplex [ 214.656059][ T9860] syzkaller0: entered promiscuous mode [ 214.672521][ T9860] syzkaller0: entered allmulticast mode [ 214.818666][ T7964] bond1: (slave gretap1): failed to get link speed/duplex [ 214.948472][ T140] bond1: (slave gretap1): failed to get link speed/duplex [ 214.992380][ T9874] syzkaller1: entered promiscuous mode [ 215.017244][ T9874] syzkaller1: entered allmulticast mode [ 215.144157][ T9886] team0: Port device xfrm0 removed [ 215.205653][ T9886] bond1: (slave gretap1): Removing an active aggregator [ 215.224053][ T9886] bond1: (slave gretap1): Releasing backup interface [ 215.302944][ T9888] team0: Port device xfrm0 added [ 215.312692][ T9890] tipc: Enabled bearer , priority 0 [ 215.589287][ T9883] __nla_validate_parse: 7 callbacks suppressed [ 215.589306][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.962'. [ 215.646547][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.962'. [ 215.659511][ T9910] sctp: [Deprecated]: syz.3.969 (pid 9910) Use of int in max_burst socket option. [ 215.659511][ T9910] Use struct sctp_assoc_value instead [ 215.667556][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.962'. [ 215.981979][ T9922] IPVS: Error connecting to the multicast addr [ 216.106872][ T9924] netlink: 'syz.3.973': attribute type 4 has an invalid length. [ 216.225737][ T9934] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 216.303146][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 216.337154][ T9940] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 216.374250][ T1683] tipc: Node number set to 1978402695 [ 216.394154][ T9943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.402188][ T9943] IPv6: NLM_F_CREATE should be set when creating new route [ 216.409582][ T9943] IPv6: NLM_F_CREATE should be set when creating new route [ 216.416876][ T9943] IPv6: NLM_F_CREATE should be set when creating new route [ 216.435182][ T9945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.450931][ T9945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.492046][ T9940] bond7: option mode: invalid value (7) [ 216.499780][ T9940] bond7 (unregistering): Released all slaves [ 216.654996][ T9940] netlink: 'syz.3.977': attribute type 10 has an invalid length. [ 216.679325][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.977'. [ 216.923019][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.981'. [ 216.953807][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 217.001157][ T9957] syzkaller0: entered promiscuous mode [ 217.006800][ T9957] syzkaller0: entered allmulticast mode [ 218.470609][ T9982] syzkaller0: left promiscuous mode [ 218.486194][ T9982] syzkaller0: left allmulticast mode [ 218.606854][ T9991] "syz.2.993" (9991) uses obsolete ecb(arc4) skcipher [ 218.763316][T10003] syzkaller0: entered promiscuous mode [ 218.770379][T10003] syzkaller0: entered allmulticast mode [ 219.073076][T10022] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1001'. [ 219.093422][T10022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.185475][T10022] bond0 (unregistering): Released all slaves [ 219.303003][T10029] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1004'. [ 220.273818][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 220.541571][T10056] tipc: Enabling of bearer rejected, failed to enable media [ 220.641344][ T7950] IPVS: starting estimator thread 0... [ 220.760705][T10078] IPVS: using max 29 ests per chain, 69600 per kthread [ 220.920546][T10084] bond0: (slave batadv0): Releasing backup interface [ 220.934158][T10084] bridge_slave_0: left allmulticast mode [ 220.947430][T10084] bridge_slave_0: left promiscuous mode [ 220.953838][T10084] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.972278][T10084] bridge_slave_1: left allmulticast mode [ 220.981575][T10084] bridge_slave_1: left promiscuous mode [ 220.998508][T10084] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.031362][T10084] bond0: (slave 07ÿ): Releasing backup interface [ 221.056721][T10084] bond0: (slave bond_slave_1): Releasing backup interface [ 221.089639][T10084] team0: Port device team_slave_0 removed [ 221.101709][T10084] team0: Port device team_slave_1 removed [ 221.108786][T10084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.116284][T10084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.136281][T10084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.145830][T10084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.161499][T10084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.184045][T10086] __nla_validate_parse: 1 callbacks suppressed [ 221.184059][T10086] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1020'. [ 221.212770][T10095] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1020'. [ 221.343636][T10100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1023'. [ 221.529352][T10113] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 221.632720][T10113] bond3: entered promiscuous mode [ 221.643015][T10113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.673144][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1029'. [ 221.701482][T10122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1030'. [ 221.714091][T10122] syzkaller0: entered promiscuous mode [ 221.723638][T10122] syzkaller0: entered allmulticast mode [ 221.760132][T10113] syzkaller0: entered promiscuous mode [ 221.765845][T10113] syzkaller0: entered allmulticast mode [ 221.772039][T10118] tc action pedit 'at' offset 20 out of bounds [ 221.963687][ T9154] udevd[9154]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 222.052592][T10137] syzkaller0: entered promiscuous mode [ 222.058912][T10137] syzkaller0: entered allmulticast mode [ 222.097928][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 222.125197][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 222.138696][T10140] vlan2: entered promiscuous mode [ 222.159890][T10140] hsr0: entered promiscuous mode [ 222.179177][T10140] vlan2: entered allmulticast mode [ 222.195388][T10140] hsr0: entered allmulticast mode [ 222.211322][T10140] hsr_slave_0: entered allmulticast mode [ 222.227992][T10140] hsr_slave_1: entered allmulticast mode [ 222.279707][T10141] hsr_slave_0: left promiscuous mode [ 222.299882][T10141] hsr_slave_1: left promiscuous mode [ 222.319433][T10155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1036'. [ 222.332197][T10154] netlink: 'syz.4.1036': attribute type 30 has an invalid length. [ 222.444307][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 222.452353][T10164] netlink: 'syz.0.1038': attribute type 39 has an invalid length. [ 222.693360][T10174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1041'. [ 223.008061][T10192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.088869][T10195] bridge_slave_0: default FDB implementation only supports local addresses [ 223.531114][T10223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.609485][T10226] syzkaller1: entered promiscuous mode [ 223.617387][T10226] syzkaller1: entered allmulticast mode [ 223.868979][T10246] netlink: 'syz.1.1064': attribute type 1 has an invalid length. [ 223.928529][T10246] bond4: entered promiscuous mode [ 223.934126][T10246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.985476][T10246] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.999863][T10246] bond4: (slave bond5): making interface the new active one [ 224.007526][T10246] bond5: entered promiscuous mode [ 224.017154][T10246] bond4: (slave bond5): Enslaving as an active interface with an up link [ 224.864853][T10300] syzkaller0: left promiscuous mode [ 225.137823][T10283] bridge0: port 3(wlan1) entered disabled state [ 225.460965][ T7963] batadv1: left promiscuous mode [ 225.490709][ T4924] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.493679][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 225.506709][T10327] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 225.550229][T10349] tipc: Resetting bearer [ 225.617041][T10349] tipc: Disabling bearer [ 225.704824][T10349] team0 (unregistering): Port device xfrm0 removed [ 225.772424][T10358] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 225.994720][T10376] netlink: 'syz.1.1091': attribute type 4 has an invalid length. [ 226.025639][T10376] netlink: 'syz.1.1091': attribute type 1 has an invalid length. [ 226.065833][T10376] nbd: socks must be embedded in a SOCK_ITEM attr [ 226.213883][T10379] syzkaller1: entered promiscuous mode [ 226.232788][T10379] syzkaller1: entered allmulticast mode [ 226.581644][T10402] bridge0: Caught tx_queue_len zero misconfig [ 226.667815][T10410] __nla_validate_parse: 8 callbacks suppressed [ 226.667832][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'. [ 226.755148][T10426] ip6t_srh: unknown srh invflags BA61 [ 226.835388][T10434] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1100'. [ 226.895031][T10439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1103'. [ 227.194388][T10454] netlink: 'syz.2.1108': attribute type 8 has an invalid length. [ 227.254592][T10454] netlink: 'syz.2.1108': attribute type 8 has an invalid length. [ 227.304552][T10462] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 227.370623][T10467] SET target dimension over the limit! [ 227.400767][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 227.421307][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 227.440225][T10462] bond6: entered promiscuous mode [ 227.445832][T10462] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.454537][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 227.463588][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 227.568764][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.589608][ T7967] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.628519][ T7963] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.650969][ T7963] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.682127][ T7963] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.836673][T10494] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1119'. [ 227.876866][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 228.075936][T10511] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 228.086455][T10503] syzkaller0: entered promiscuous mode [ 228.114393][T10503] syzkaller0: entered allmulticast mode [ 229.794034][T10542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1132'. [ 230.346696][T10583] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 230.515284][T10593] bridge0: port 1(batadv1) entered blocking state [ 230.523057][T10593] bridge0: port 1(batadv1) entered disabled state [ 230.532614][T10593] batadv1: entered allmulticast mode [ 230.540646][T10593] batadv1: entered promiscuous mode [ 231.009701][ T7963] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 231.019780][ T7963] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 231.193041][T10640] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 231.343878][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.353292][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.363701][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.373242][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.385242][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.394983][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.410800][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.421380][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.430885][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.442671][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.453767][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.463575][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.473975][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.490567][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.500321][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.510678][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.520265][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.529810][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.539752][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.550343][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.561680][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.572025][T10661] sctp: [Deprecated]: syz.2.1162 (pid 10661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.572025][T10661] Use struct sctp_sack_info instead [ 231.588977][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.601425][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.611404][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.620755][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.630523][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.639951][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.649473][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.659257][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.669226][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.678587][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.687803][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.697711][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.707303][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.717116][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.727144][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.737274][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.746548][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.756224][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.765469][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.774883][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.784426][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.794292][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.803683][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.825917][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.835514][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.845124][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.855274][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.864513][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.876378][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.885742][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.895277][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.905076][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.916336][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.925864][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.950234][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.960760][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.971301][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.980699][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.990562][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.999985][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.009661][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.022085][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.031880][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.041676][T10655] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 234.077753][T10671] netlink: 'syz.4.1165': attribute type 4 has an invalid length. [ 234.089765][T10671] netlink: 'syz.4.1165': attribute type 4 has an invalid length. [ 234.234100][T10644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.465292][T10693] __nla_validate_parse: 7 callbacks suppressed [ 234.465311][T10693] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1172'. [ 234.498531][T10687] tipc: Started in network mode [ 234.507205][T10687] tipc: Node identity 9e840b4b5a67, cluster identity 4711 [ 234.516997][T10687] tipc: Enabled bearer , priority 0 [ 234.526452][T10698] syzkaller0: entered promiscuous mode [ 234.541753][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1171'. [ 234.551995][T10698] syzkaller0: entered allmulticast mode [ 234.619964][T10687] syzkaller0: mtu less than device minimum [ 235.386491][T10755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.437079][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1185'. [ 235.479454][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 235.509555][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 235.526840][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 235.573013][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 235.666391][ T6915] tipc: Node number set to 3303213899 [ 235.826001][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 235.919350][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 235.973454][T10793] netlink: 774 bytes leftover after parsing attributes in process `syz.3.1195'. [ 235.985632][T10793] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 235.998424][ T6902] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 236.096100][T10796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.287314][T10810] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 237.061001][T10841] xt_CT: No such helper "snmp_trap" [ 237.088926][ T5714] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 237.215157][T10849] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 237.259483][T10849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.283946][T10852] syzkaller0: entered promiscuous mode [ 237.907971][T10889] pim6reg: left allmulticast mode [ 238.763108][T10907] tipc: Enabling of bearer rejected, failed to enable media [ 238.816338][T10934] tap0: tun_chr_ioctl cmd 1074025677 [ 238.829479][T10934] tap0: linktype set to 804 [ 239.335715][T10967] netlink: 'syz.1.1250': attribute type 1 has an invalid length. [ 239.439365][T10973] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 239.529631][T10973] __nla_validate_parse: 16 callbacks suppressed [ 239.529650][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1250'. [ 239.643891][T10967] veth7: entered promiscuous mode [ 239.677588][T10967] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 239.703072][ T7968] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 239.711987][T10973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.819643][T10998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.829828][ T7963] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 239.850063][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 239.874618][T10996] netlink: 'syz.2.1255': attribute type 29 has an invalid length. [ 239.886368][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 239.987442][T11003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1258'. [ 240.572207][ T9154] udevd[9154]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 240.647811][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 240.681733][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 240.791310][T11048] batman_adv: batadv0: Adding interface: macvtap1 [ 240.809208][T11048] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.840638][T11048] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 241.204457][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 241.264139][T11068] netlink: 'syz.4.1273': attribute type 4 has an invalid length. [ 241.295821][T11069] netlink: 'syz.4.1273': attribute type 4 has an invalid length. [ 241.307987][T11068] netlink: 'syz.4.1273': attribute type 4 has an invalid length. [ 241.326291][T11060] vlan2: entered allmulticast mode [ 241.332982][T11060] bridge5: entered allmulticast mode [ 241.344436][T11070] bridge5: port 1(erspan0) entered blocking state [ 241.352269][T11070] bridge5: port 1(erspan0) entered disabled state [ 241.366494][T11070] erspan0: entered promiscuous mode [ 241.386886][T11070] bridge5: port 1(erspan0) entered blocking state [ 241.393500][T11070] bridge5: port 1(erspan0) entered forwarding state [ 241.440572][T11060] bridge5: port 1(erspan0) entered disabled state [ 241.495868][T11060] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.531983][T11060] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.661572][T11060] tipc: Resetting bearer [ 241.671618][T11060] tipc: Resetting bearer [ 241.860735][T11086] batman_adv: batadv0: Adding interface: dummy0 [ 241.878486][T11086] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.946900][T11086] batman_adv: batadv0: Interface activated: dummy0 [ 242.044040][T11083] batadv0: mtu less than device minimum [ 242.061627][T11083] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.073958][T11083] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.085703][T11083] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.097321][T11083] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.110090][T11083] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.121664][T11083] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.317581][T11112] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 243.912990][T11148] netlink: 'syz.3.1293': attribute type 1 has an invalid length. [ 244.117672][T11137] ipvlan0: left promiscuous mode [ 244.274050][T11137] bond3: left promiscuous mode [ 244.289298][T11137] bond4: left promiscuous mode [ 244.299367][T11137] bond5: left promiscuous mode [ 244.306746][T11137] bond6: left promiscuous mode [ 244.318355][T11137] bridge0: port 1(batadv1) entered blocking state [ 244.322662][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 244.325216][T11137] bridge0: port 1(batadv1) entered forwarding state [ 244.342048][T11137] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 244.355661][T11137] veth7: left promiscuous mode [ 244.366965][T11167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.385891][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 244.400262][T11167] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1295'. [ 244.420904][T11148] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.581300][ T13] bond7: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 244.650140][ T13] bond7: active interface up! [ 244.727232][T11186] __nla_validate_parse: 1 callbacks suppressed [ 244.727248][T11186] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1301'. [ 244.789168][ T13] net_ratelimit: 22 callbacks suppressed [ 244.789186][ T13] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 244.812682][T11187] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1301'. [ 244.926972][T11189] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1302'. [ 244.960988][ T13] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 245.002149][T11196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1306'. [ 245.032977][T11197] netlink: 'syz.3.1305': attribute type 13 has an invalid length. [ 245.054280][T11197] netlink: 'syz.3.1305': attribute type 17 has an invalid length. [ 245.267940][T11197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.341169][T11197] veth0_vlan: left promiscuous mode [ 245.353700][T11197] veth0_vlan: entered promiscuous mode [ 245.403698][T11197] syzkaller0: left promiscuous mode [ 245.410111][T11197] syzkaller0: left allmulticast mode [ 245.487069][T11216] pim6reg: entered allmulticast mode [ 245.535874][T11219] pim6reg: left allmulticast mode [ 245.648601][ T7964] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 245.778513][ T13] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 245.970155][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 245.989913][T11251] pim6reg: entered allmulticast mode [ 246.010380][T11254] ipt_REJECT: TCP_RESET invalid for non-tcp [ 246.031441][ T7949] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 246.179610][ T13] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 246.319006][ T13] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 246.466301][T11273] syzkaller1: entered allmulticast mode [ 246.472863][T11275] netlink: 'syz.1.1325': attribute type 11 has an invalid length. [ 246.480824][T11275] netlink: 'syz.1.1325': attribute type 4 has an invalid length. [ 246.491657][T11275] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1325'. [ 246.502255][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 246.568721][ T7967] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 246.597041][T11277] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1326'. [ 246.632473][T11282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1328'. [ 246.700732][ T7967] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 246.818670][ T7967] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 246.832599][T11296] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1332'. [ 247.137144][T11311] netlink: 'syz.2.1338': attribute type 2 has an invalid length. [ 247.149686][T11311] netlink: 'syz.2.1338': attribute type 1 has an invalid length. [ 247.174283][T11311] nbd: illegal input index 65544 [ 247.282226][ T7968] IPVS: starting estimator thread 0... [ 247.391044][T11329] IPVS: using max 29 ests per chain, 69600 per kthread [ 247.893143][T11351] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 248.171118][T11361] netlink: 'syz.4.1352': attribute type 4 has an invalid length. [ 248.248314][T11343] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 248.285266][T11361] netlink: 'syz.4.1352': attribute type 9 has an invalid length. [ 248.318707][T11343] dummy0: entered promiscuous mode [ 248.401536][T11369] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 248.768698][ T4924] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.774822][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 249.305548][T11415] IPVS: set_ctl: invalid protocol: 20551 10.1.1.2:8188 [ 249.777160][T11439] bond2: entered promiscuous mode [ 249.782888][T11439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.804031][T11439] vlan2: entered allmulticast mode [ 249.810718][T11439] bond2: entered allmulticast mode [ 249.844565][T11439] bond2: (slave bridge2): making interface the new active one [ 249.878526][T11439] bridge2: entered promiscuous mode [ 249.900329][T11439] bridge2: entered allmulticast mode [ 249.926038][T11439] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 249.960582][T11444] __nla_validate_parse: 10 callbacks suppressed [ 249.960593][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 249.978923][ T13] net_ratelimit: 25 callbacks suppressed [ 249.978939][ T13] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 250.098197][ T13] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 250.218181][ T7967] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 250.218932][T11452] block nbd2: server does not support multiple connections per device. [ 250.243237][T11452] block nbd2: shutting down sockets [ 250.348410][ T7963] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 250.528924][ T13] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 250.598659][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 250.658725][ T7967] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 250.696418][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1392'. [ 250.781791][ T7967] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 250.929521][ T7967] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 250.951081][T11496] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1396'. [ 251.058168][ T7968] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 251.188439][ T7964] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 251.298423][T11503] batman_adv: batadv0: Interface deactivated: dummy0 [ 251.314539][T11503] batman_adv: batadv0: Removing interface: dummy0 [ 251.425573][T11503] bond4: (slave bond5): Releasing backup interface [ 251.457557][T11503] batadv1: left allmulticast mode [ 251.471604][T11503] batadv1: left promiscuous mode [ 251.489062][T11503] bridge0: port 1(batadv1) entered disabled state [ 251.516971][T11503] bond7: (slave ip6gretap1): Releasing backup interface [ 251.528836][T11503] bond7: (slave ip6gretap1): the permanent HWaddr of slave - 1a:aa:55:4b:79:94 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 251.574530][T11503] bond7: (slave veth7): Removing an active aggregator [ 251.588718][T11503] bond7: (slave veth7): Releasing backup interface [ 251.690443][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 251.995291][T11533] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1405'. [ 252.141411][T11539] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1411'. [ 252.160814][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 252.178432][T11539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1411'. [ 252.194657][T11540] x_tables: duplicate underflow at hook 1 [ 252.201684][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 252.226001][T11540] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 252.285367][T11542] IPVS: Scheduler module ip_vs_sip not found [ 252.717562][T11556] bond0: Unable to set down delay as MII monitoring is disabled [ 253.020896][T11568] ip6t_srh: unknown srh invflags 4000 [ 253.689874][T11611] validate_nla: 8 callbacks suppressed [ 253.689891][T11611] netlink: 'syz.0.1433': attribute type 4 has an invalid length. [ 253.725475][T11611] netlink: 'syz.0.1433': attribute type 4 has an invalid length. [ 253.738798][T11613] Unknown options in mask 6 [ 253.995265][T11629] netlink: 'syz.3.1436': attribute type 4 has an invalid length. [ 254.064854][T11611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.091937][T11611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.275208][T11611] batman_adv: batadv0: Interface deactivated: gretap2 [ 254.369283][ T7968] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.393300][ T7968] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.450109][ T7968] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.490029][ T7968] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.698917][T11652] netlink: 'syz.0.1443': attribute type 4 has an invalid length. [ 254.742597][T11652] netlink: 'syz.0.1443': attribute type 4 has an invalid length. [ 254.805114][T11657] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 255.077972][T11668] __nla_validate_parse: 9 callbacks suppressed [ 255.077988][T11668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1449'. [ 255.217837][T11677] IPVS: set_ctl: invalid protocol: 1 172.30.0.4:20014 [ 255.273112][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1451'. [ 255.571343][T11691] netlink: 'syz.4.1455': attribute type 1 has an invalid length. [ 255.648283][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 255.657084][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.663697][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.720864][T11691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.742252][T11696] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1457'. [ 255.775879][T11698] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 255.816723][T11706] bridge1: entered promiscuous mode [ 255.896490][T11691] macvlan3: entered promiscuous mode [ 255.921273][T11691] macvlan3: entered allmulticast mode [ 255.935535][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 255.947016][T11691] bond2: entered promiscuous mode [ 255.997015][T11691] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 256.017571][T11691] bond2: left promiscuous mode [ 256.064991][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 256.181113][T11715] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 256.240935][T11723] syzkaller0: entered promiscuous mode [ 256.246588][T11723] syzkaller0: entered allmulticast mode [ 256.256381][T11723] net_ratelimit: 1 callbacks suppressed [ 256.256393][T11723] syzkaller0: mtu less than device minimum [ 256.617246][T11741] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 256.671060][T11741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.736995][T11749] x_tables: duplicate underflow at hook 1 [ 257.162863][T11772] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 257.179565][T11757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.205073][T11770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 257.214204][T11770] block nbd0: NBD_DISCONNECT [ 257.223102][T11770] block nbd0: Send disconnect failed -32 [ 257.230003][T11770] block nbd0: shutting down sockets [ 257.311565][T11776] veth11: entered allmulticast mode [ 257.347434][T11776] bond3: (slave veth11): Enslaving as an active interface with a down link [ 257.546384][T11791] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 257.572951][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 257.676691][T11800] netlink: 'syz.1.1484': attribute type 3 has an invalid length. [ 259.076121][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 259.117122][T11818] syzkaller1: entered promiscuous mode [ 259.125621][T11818] syzkaller1: entered allmulticast mode [ 259.487815][T11830] syzkaller0: left promiscuous mode [ 259.494222][T11830] syzkaller0: left allmulticast mode [ 259.560843][T11830] bridge1: left promiscuous mode [ 259.579934][ T7968] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.612481][ T7968] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.646218][ T7968] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.661964][ T7968] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.673408][ T7968] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.682897][ T7968] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.695378][ T7968] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.717239][ T7968] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.763798][T11850] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1498'. [ 259.875273][T11854] tipc: Enabling of bearer rejected, failed to enable media [ 260.027444][T11862] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 260.045167][T11857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1501'. [ 260.072237][T11871] netlink: 'syz.0.1502': attribute type 11 has an invalid length. [ 260.098494][T11871] netlink: 'syz.0.1502': attribute type 14 has an invalid length. [ 260.244275][T11876] smc: adding net device wg2 with user defined pnetid SYZ0 [ 260.496846][T11891] SET target dimension over the limit! [ 260.707527][T11909] syzkaller0: entered promiscuous mode [ 260.718450][T11909] syzkaller0: entered allmulticast mode [ 260.830141][T11912] netlink: 'syz.4.1515': attribute type 1 has an invalid length. [ 260.886700][T11918] __nla_validate_parse: 2 callbacks suppressed [ 260.886716][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'. [ 260.892443][T11912] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.926409][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 261.276101][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 261.301791][T11940] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1521'. [ 261.349725][T11942] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1522'. [ 261.420283][T11944] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1523'. [ 261.795821][T11958] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.804189][T11958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.811504][T11958] IPv6: NLM_F_CREATE should be set when creating new route [ 262.110537][T11968] nbd0: detected capacity change from 0 to 63 [ 262.327838][T11975] syzkaller0: entered promiscuous mode [ 262.335480][T11975] syzkaller0: entered allmulticast mode [ 262.586325][T11977] IPVS: set_ctl: invalid protocol: 115 172.30.0.1:20000 [ 262.849474][ T50] block nbd0: Receive control failed (result -104) [ 262.982375][T11989] tipc: Resetting bearer [ 263.191416][T11997] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1540'. [ 263.215979][T11999] 8021q: VLANs not supported on nlmon0 [ 263.432744][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 263.463249][T12002] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1540'. [ 263.511305][T12002] geneve2: entered promiscuous mode [ 263.516725][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 263.543619][T12002] geneve2: entered allmulticast mode [ 263.617180][T12010] erspan0: entered promiscuous mode [ 263.674412][T12010] bridge0: port 1(macvlan2) entered blocking state [ 263.681117][T12010] bridge0: port 1(macvlan2) entered forwarding state [ 263.720669][T12010] batadv0: left promiscuous mode [ 263.733287][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.861301][T12010] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 263.941315][T12010] macvlan0: left promiscuous mode [ 264.014197][T12010] batman_adv: batadv0: Interface activated: vlan2 [ 264.027467][T12010] bond1: left promiscuous mode [ 264.032692][T12010] bridge2: left promiscuous mode [ 264.068655][T12010] batadv_slave_1: entered promiscuous mode [ 264.097744][T12010] batman_adv: batadv0: Interface activated: macvtap1 [ 264.133494][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.361758][T12035] netlink: 'syz.3.1549': attribute type 7 has an invalid length. [ 264.444939][ T7950] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 264.473488][ T7950] bond2: (slave veth0_to_bond): making interface the new active one [ 264.515972][ T7950] bond2: active interface up! [ 264.545461][T12040] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 264.572423][T12045] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 264.605783][T12044] 0·: renamed from hsr0 (while UP) [ 264.633448][T12044] 0·: entered allmulticast mode [ 264.642396][T12044] hsr_slave_0: entered allmulticast mode [ 264.649357][T12044] hsr_slave_1: entered allmulticast mode [ 264.656147][T12044] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 264.797854][T12040] tipc: Resetting bearer [ 264.816519][T12056] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 264.879812][T12045] tipc: Resetting bearer [ 265.041893][T12065] netlink: 'syz.1.1559': attribute type 58 has an invalid length. [ 266.167746][T12120] __nla_validate_parse: 13 callbacks suppressed [ 266.167763][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1577'. [ 266.626506][T12144] tipc: Enabled bearer , priority 0 [ 266.657772][T12143] tipc: Disabling bearer [ 266.756544][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 266.940380][T12150] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1586'. [ 266.984885][T12161] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 267.706471][T12151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.051798][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1598'. [ 268.140290][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 268.287327][T12225] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.324357][T12225] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.343782][T12225] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.353704][T12225] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 268.368771][T12225] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 268.386028][T12225] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 268.413117][T12225] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 268.445130][T12225] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.456934][T12225] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.466369][T12225] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.476409][T12225] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.485669][T12225] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.528567][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.988649][T12218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.210928][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 269.241036][T12252] netlink: 'syz.0.1608': attribute type 5 has an invalid length. [ 270.203364][T12268] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 270.411536][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 271.265447][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 271.455183][T12344] netlink: 'syz.4.1631': attribute type 11 has an invalid length. [ 271.464694][T12344] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.1631'. [ 271.564129][T12347] netlink: 'syz.2.1632': attribute type 3 has an invalid length. [ 271.583694][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 271.823553][T12364] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 272.010277][T12364] bond4: entered promiscuous mode [ 272.028634][T12364] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.055452][T12383] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1641'. [ 272.071689][T12371] vlan4: entered allmulticast mode [ 272.077089][T12371] bond4: entered allmulticast mode [ 272.165957][T12361] bridge5: port 1(erspan0) entered disabled state [ 272.423381][T12361] ip6tnl1: left allmulticast mode [ 272.429950][T12361] tipc: Resetting bearer [ 272.435973][T12361] syzkaller0: left promiscuous mode [ 272.441553][T12361] syzkaller0: left allmulticast mode [ 272.452615][T12361] gretap1: left allmulticast mode [ 272.461439][T12361] ip6tnl4: left allmulticast mode [ 272.479569][T12361] vlan2: left allmulticast mode [ 272.484628][T12361] bridge5: left allmulticast mode [ 272.516587][T12379] bond4: (slave bridge6): making interface the new active one [ 272.533073][T12379] bridge6: entered promiscuous mode [ 272.539912][T12379] bridge6: entered allmulticast mode [ 272.547260][T12379] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 272.645481][T12398] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1644'. [ 272.699377][ T7964] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.721654][ T7964] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.745279][ T7964] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.771035][T12398] syzkaller0: entered promiscuous mode [ 272.783880][T12398] syzkaller0: entered allmulticast mode [ 272.849800][ T7964] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.874616][T12405] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 273.011843][T12417] netlink: 'syz.2.1649': attribute type 2 has an invalid length. [ 273.039857][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1649'. [ 273.171538][T12417] : entered promiscuous mode [ 273.208540][T12419] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 273.261553][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'. [ 273.312438][T12419] 8021q: adding VLAN 0 to HW filter on device bond9 [ 273.353134][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'. [ 273.413857][T12431] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1654'. [ 273.464313][T12439] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 273.483853][T12431] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1654'. [ 273.509981][T12445] nbd: socks must be embedded in a SOCK_ITEM attr [ 273.527929][T12443] nbd: socks must be embedded in a SOCK_ITEM attr [ 273.802616][T12460] ip6gre1: entered promiscuous mode [ 273.822454][T12460] ip6gre1: entered allmulticast mode [ 273.997009][T12470] netlink: 'syz.4.1666': attribute type 5 has an invalid length. [ 274.306511][T12496] sctp: [Deprecated]: syz.2.1673 (pid 12496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.306511][T12496] Use struct sctp_sack_info instead [ 274.358467][T12496] virt_wifi0 speed is unknown, defaulting to 1000 [ 275.010845][T12519] syzkaller0: entered promiscuous mode [ 275.018938][T12519] syzkaller0: entered allmulticast mode [ 275.044506][T12521] smc: net device wg2 erased user defined pnetid SYZ0 [ 275.160823][T12525] team0: Port device team_slave_0 removed [ 275.184410][T12528] netlink: 'syz.1.1682': attribute type 11 has an invalid length. [ 275.418501][T12549] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.640442][T12557] pim6reg: entered allmulticast mode [ 275.782703][T12570] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 275.893995][T12576] syzkaller0: entered promiscuous mode [ 275.908188][T12576] syzkaller0: entered allmulticast mode [ 275.917118][T12576] tipc: Resetting bearer [ 275.994413][T12583] xt_hashlimit: size too large, truncated to 1048576 [ 276.045165][T12580] virt_wifi0 speed is unknown, defaulting to 1000 [ 276.337897][T12604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.365728][T12604] __nla_validate_parse: 13 callbacks suppressed [ 276.365744][T12604] netlink: 4160 bytes leftover after parsing attributes in process `syz.2.1704'. [ 276.382111][T12604] openvswitch: netlink: Flow key attr not present in new flow. [ 276.753801][T12621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.893817][T12642] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20001 [ 277.061397][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 277.344694][T12650] tc_dump_action: action bad kind [ 277.418831][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 277.459737][T12666] netlink: 'syz.1.1719': attribute type 1 has an invalid length. [ 277.556904][T12675] gretap2: entered allmulticast mode [ 277.810444][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1723'. [ 277.856820][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1723'. [ 278.783252][T12708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.035821][T12771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1736'. [ 279.075820][T12775] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 279.092686][T12771] netlink: 480 bytes leftover after parsing attributes in process `syz.2.1736'. [ 279.168612][T12775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.190811][T12775] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 279.346787][T12787] syzkaller0: left promiscuous mode [ 279.377158][T12787] syzkaller0: left allmulticast mode [ 279.418000][T12787] netlink: Conntrack attr has 1 unknown bytes [ 279.451076][T12787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.676245][T12804] IPVS: set_ctl: invalid protocol: 148 224.0.0.2:20004 [ 279.699396][T12806] netlink: 'syz.1.1747': attribute type 1 has an invalid length. [ 279.701594][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'. [ 279.725379][T12804] tipc: Enabling of bearer rejected, already enabled [ 279.764294][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'. [ 280.022294][T12828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1751'. [ 280.107761][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 280.150203][T12838] xt_time: unknown flags 0x4 [ 280.798530][T12877] block nbd2: server does not support multiple connections per device. [ 280.815506][T12877] block nbd2: shutting down sockets [ 280.944875][ T6912] batman_adv: batadv0: Interface deactivated: vlan2 [ 281.270343][T12900] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 281.341267][T12908] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 281.396014][T12908] __nla_validate_parse: 4 callbacks suppressed [ 281.396033][T12908] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1769'. [ 281.411986][T12908] NCSI netlink: No device for ifindex 0 [ 281.427998][T12900] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.572072][T12880] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.582312][T12900] bond5: (slave gretap1): making interface the new active one [ 281.597992][T12880] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 281.607377][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1773'. [ 281.627844][T12900] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 281.654000][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1774'. [ 281.702720][T12880] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.725106][T12880] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 281.830730][T12880] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.852362][T12880] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 281.862460][T12936] netlink: Unknown conntrack attr (type=5382, max=9) [ 281.873942][T12936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.901878][T12880] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.916274][T12880] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 281.933459][T12936] syz.4.1777 (12936) used obsolete PPPIOCDETACH ioctl [ 281.957582][T12880] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 281.983173][T12880] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 282.486711][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 282.735868][T12992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1788'. [ 282.784007][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 282.850447][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 283.392463][T13029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1797'. [ 283.417043][T13011] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1793'. [ 284.014493][T13055] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1802'. [ 284.325151][T13052] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.515945][T13072] syzkaller0: entered promiscuous mode [ 284.535453][T13072] syzkaller0: entered allmulticast mode [ 284.596950][T13072] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.752114][T13086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.803655][T13088] netlink: 'syz.1.1811': attribute type 30 has an invalid length. [ 284.815964][T13090] netlink: 'syz.1.1811': attribute type 30 has an invalid length. [ 284.910368][ T7971] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.921778][ T7971] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.932997][T13090] netlink: 'syz.1.1811': attribute type 30 has an invalid length. [ 284.946159][ T7971] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.998597][ T7967] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.022076][T13090] netlink: 'syz.1.1811': attribute type 30 has an invalid length. [ 285.124865][T13090] netlink: 'syz.1.1811': attribute type 30 has an invalid length. [ 285.179185][T13106] vlan3: entered promiscuous mode [ 285.184313][T13106] hsr0: entered promiscuous mode [ 285.190036][T13106] vlan3: entered allmulticast mode [ 285.195208][T13106] hsr0: entered allmulticast mode [ 285.197033][T13090] netlink: 'syz.1.1811': attribute type 30 has an invalid length. [ 285.202533][T13106] hsr_slave_0: entered allmulticast mode [ 285.215183][T13106] hsr_slave_1: entered allmulticast mode [ 285.257709][T13108] hsr_slave_0: left promiscuous mode [ 285.267824][T13108] hsr_slave_1: left promiscuous mode [ 285.299590][T13090] netlink: 'syz.1.1811': attribute type 30 has an invalid length. [ 285.385054][T13111] netlink: 'syz.0.1815': attribute type 2 has an invalid length. [ 285.399700][T13090] netlink: 'syz.1.1811': attribute type 30 has an invalid length. [ 285.476566][T13090] netlink: 'syz.1.1811': attribute type 30 has an invalid length. [ 286.199686][T13144] openvswitch: netlink: Flow actions attr not present in new flow. [ 286.332088][T13147] syzkaller0: entered promiscuous mode [ 286.355407][T13147] syzkaller0: entered allmulticast mode [ 287.278369][T13185] __nla_validate_parse: 19 callbacks suppressed [ 287.278387][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 287.447246][T13188] tun0: tun_chr_ioctl cmd 1074025675 [ 287.455140][T13189] netdevsim netdevsim1: Direct firmware load for .® failed with error -2 [ 287.469602][T13188] tun0: persist enabled [ 287.484494][T13188] tun0: tun_chr_ioctl cmd 1074025675 [ 287.491240][T13189] netdevsim netdevsim1: Falling back to sysfs fallback for: .® [ 287.507452][T13188] tun0: persist enabled [ 288.189656][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 288.264559][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'. [ 288.283024][T13217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1845'. [ 288.571951][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 288.766151][T13241] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.671918][T13274] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.777446][T13278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.796658][T13281] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 289.881229][T13283] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1864'. [ 290.041132][T13290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1867'. [ 290.075365][T13288] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1866'. [ 290.159555][T13290] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1867'. [ 290.171789][T13295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1864'. [ 290.342647][T13302] tc_dump_action: action bad kind [ 290.387955][T13303] pim6reg: left allmulticast mode [ 290.858550][T13316] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 291.062305][T13319] ip6gre2: entered promiscuous mode [ 291.112001][T13319] ip6gre2: entered allmulticast mode [ 292.113186][T13373] tipc: New replicast peer: 255.255.255.255 [ 292.152331][T13373] tipc: Enabled bearer , priority 5 [ 292.173744][T13373] validate_nla: 4 callbacks suppressed [ 292.173762][T13373] netlink: 'syz.2.1890': attribute type 1 has an invalid length. [ 292.198072][T13370] virt_wifi0 speed is unknown, defaulting to 1000 [ 292.275807][T13373] bond5: entered promiscuous mode [ 292.301386][T13373] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.347679][T13373] __nla_validate_parse: 5 callbacks suppressed [ 292.347695][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1890'. [ 292.377193][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 292.539960][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'. [ 292.543458][T13373] bond5: entered allmulticast mode [ 292.562825][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1893'. [ 292.643733][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 292.655786][T13391] bond5: (slave bridge8): making interface the new active one [ 292.673140][T13391] bridge8: entered promiscuous mode [ 292.679675][T13371] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1889'. [ 292.691303][T13391] bridge8: entered allmulticast mode [ 292.698001][T13371] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1889'. [ 292.712602][T13391] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 292.740816][T13371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1889'. [ 292.772053][ T1697] block nbd0: Possible stuck request ffff88802772e000: control (read@0,4096B). Runtime 30 seconds [ 292.806994][T13393] veth9: entered allmulticast mode [ 292.829258][T13393] bond6: (slave veth9): Enslaving as an active interface with an up link [ 292.961289][T13382] bond6 (unregistering): (slave veth9): Releasing backup interface [ 293.108619][T13382] bond6 (unregistering): Released all slaves [ 293.248385][T13401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'. [ 293.427169][T13412] netlink: 'syz.1.1896': attribute type 26 has an invalid length. [ 294.073713][T13423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1897'. [ 294.699137][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 294.789284][T13441] gre2: entered promiscuous mode [ 294.813037][T13441] gre2: entered allmulticast mode [ 296.492733][T13464] bridge0: port 1(macvlan2) entered disabled state [ 296.799018][T13464] batadv0: left allmulticast mode [ 297.155072][T13464] 0·: left allmulticast mode [ 297.176739][T13464] hsr_slave_0: left allmulticast mode [ 297.197816][T13464] hsr_slave_1: left allmulticast mode [ 297.265189][T13490] ip_tables: iptables: counters copy to user failed while replacing table [ 297.850919][T13464] batman_adv: batadv0: Interface deactivated: macvtap1 [ 297.910817][T13464] bond4: left promiscuous mode [ 297.932779][T13464] bridge6: left promiscuous mode [ 297.958453][T13464] vlan4: left allmulticast mode [ 297.984027][T13464] bond4: left allmulticast mode [ 298.001477][T13464] bridge6: left allmulticast mode [ 298.049235][T13464] ip6gre2: left promiscuous mode [ 298.069240][T13464] ip6gre2: left allmulticast mode [ 298.086757][T13464] veth9: left allmulticast mode [ 298.104178][T13464] gre2: left promiscuous mode [ 298.123063][T13464] gre2: left allmulticast mode [ 298.148135][ T7972] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.182693][ T7972] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.254981][ T7972] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.304953][ T7972] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.345544][T13499] __nla_validate_parse: 1 callbacks suppressed [ 298.345561][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1918'. [ 298.378162][ T7972] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.437959][ T7972] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.494950][ T7972] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.555224][ T7972] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.575916][T13515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1922'. [ 298.612837][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 298.648402][T13506] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1919'. [ 298.665504][T13515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1922'. [ 299.211795][T13532] syzkaller0: entered promiscuous mode [ 299.232271][T13532] syzkaller0: entered allmulticast mode [ 299.320020][T13532] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1927'. [ 299.731960][T13550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1932'. [ 299.833008][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1935'. [ 299.857022][T13545] syzkaller0: entered promiscuous mode [ 299.908153][T13545] syzkaller0: entered allmulticast mode [ 300.066268][T13554] bridge0: entered promiscuous mode [ 300.088463][T13554] bridge0: entered allmulticast mode [ 300.190368][T13560] geneve2: entered allmulticast mode [ 302.447961][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 302.791816][T13611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1941'. [ 306.573569][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 306.784906][T13564] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 307.172998][T13623] tipc: Enabling of bearer rejected, already enabled [ 307.255212][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 307.278383][T13629] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.778243][T13624] ovs-system: entered promiscuous mode [ 308.162065][T13658] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1951'. [ 308.204893][T13663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1950'. [ 308.332654][T13654] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.376972][T13654] dummy0: left promiscuous mode [ 308.389527][T13672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1951'. [ 308.422454][T13654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.501496][T13672] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1951'. [ 308.650353][T13654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.673430][T13683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.685067][T13654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.718145][T13654] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 308.783490][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.790689][ T7971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.857336][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.864557][ T7971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.385134][T13710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1962'. [ 310.146061][T13736] ip_tables: iptables: counters copy to user failed while replacing table [ 311.592082][T13785] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 311.605632][T13797] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1975'. [ 311.643288][T13797] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1975'. [ 311.731506][T13801] netlink: 'syz.3.1974': attribute type 58 has an invalid length. [ 311.744480][T13799] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1975'. [ 311.768840][T13801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1974'. [ 312.125567][T13785] bond11 (unregistering): Released all slaves [ 312.860104][T13826] netlink: 'syz.0.1981': attribute type 1 has an invalid length. [ 313.039182][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 313.261896][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 313.351597][T13826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.586704][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1985'. [ 313.994078][T13864] netlink: 'syz.4.1987': attribute type 21 has an invalid length. [ 314.108663][T13870] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1989'. [ 314.126787][T13864] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1987'. [ 314.198411][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'. [ 314.307664][T13876] netlink: 'syz.1.1991': attribute type 2 has an invalid length. [ 314.348105][T13876] netlink: 'syz.1.1991': attribute type 2 has an invalid length. [ 314.606848][T13882] syzkaller0: left promiscuous mode [ 314.636715][T13882] syzkaller0: left allmulticast mode [ 314.688418][T13882] tipc: Resetting bearer [ 314.895321][T13889] bond6: option all_slaves_active: invalid value (255) [ 314.942640][T13889] bond6 (unregistering): Released all slaves [ 315.269531][T13909] bond6: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 315.312412][T13909] bond6: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 315.368912][T13909] bond6: entered allmulticast mode [ 315.646546][T13928] batadv2: entered promiscuous mode [ 315.672277][T13928] batadv2: entered allmulticast mode [ 315.695142][T13928] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 315.872823][T13936] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 315.948390][T13940] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 316.523561][T13961] x_tables: duplicate underflow at hook 2 [ 317.091431][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.097992][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.171409][T13992] __nla_validate_parse: 11 callbacks suppressed [ 317.171425][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 317.261187][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 317.341161][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 317.760620][T14019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2028'. [ 317.831560][T14019] smc: net device wg2 applied user defined pnetid SYZ0 [ 317.926696][T14029] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2029'. [ 318.624668][T14051] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 318.660505][T14058] syzkaller0: entered promiscuous mode [ 318.702226][T14058] syzkaller0: entered allmulticast mode [ 319.064432][T14073] netlink: 'syz.4.2041': attribute type 1 has an invalid length. [ 319.089518][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 319.103157][T14073] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2041'. [ 319.130407][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'. [ 319.139650][T14069] virt_wifi0 speed is unknown, defaulting to 1000 [ 319.496148][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2045'. [ 319.623133][T14089] netdevsim netdevsim4: Direct firmware load for á failed with error -2 [ 319.653288][T14089] netdevsim netdevsim4: Falling back to sysfs fallback for: á [ 319.862313][T14099] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 319.908148][T14099] netlink: 'syz.4.2048': attribute type 3 has an invalid length. [ 319.925343][T14099] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2048'. [ 320.016995][T14098] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 320.052153][T14098] batman_adv: batadv0: Adding interface: gretap2 [ 320.076147][T14098] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.110502][T14098] batman_adv: batadv0: Interface activated: gretap2 [ 320.151058][T14104] netlink: 'syz.2.2050': attribute type 3 has an invalid length. [ 321.139312][T14138] 8021q: VLANs not supported on xfrm0 [ 322.012346][T14154] block nbd4: not configured, cannot reconfigure [ 322.057029][T14154] netlink: 'syz.4.2067': attribute type 30 has an invalid length. [ 322.160187][T14162] pim6reg: entered allmulticast mode [ 322.642219][T14175] smbdirect: ib_dev[syz1] removed [ 322.669656][T14190] __nla_validate_parse: 3 callbacks suppressed [ 322.669674][T14190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2077'. [ 322.693911][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 322.858479][ T1697] block nbd0: Possible stuck request ffff88802772e000: control (read@0,4096B). Runtime 60 seconds [ 323.015845][T14202] netlink: Conntrack attr has 12 unknown bytes [ 323.033240][T14202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.085079][T14210] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 323.983875][T14244] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2092'. [ 324.087550][T14244] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2092'. [ 324.589364][T14270] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 324.857721][T14272] bond6 (unregistering): Released all slaves [ 325.144380][T14260] tipc: Resetting bearer [ 325.555195][T14299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.586480][T14303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'. [ 325.994712][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'. [ 326.067875][T14318] netlink: 'syz.2.2106': attribute type 20 has an invalid length. [ 326.111810][T14318] netlink: 'syz.2.2106': attribute type 21 has an invalid length. [ 326.410184][T14330] netlink: 'syz.3.2110': attribute type 5 has an invalid length. [ 326.504816][ T30] audit: type=1804 audit(1786288376.531:7): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2109" name="/newroot/424/cgroup.controllers" dev="tmpfs" ino=2204 res=1 errno=0 [ 326.590005][ T30] audit: type=1800 audit(1786288376.531:8): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2109" name="cgroup.controllers" dev="tmpfs" ino=2204 res=0 errno=0 [ 326.684013][T14341] macsec2: entered allmulticast mode [ 326.715588][T14345] netlink: 'syz.3.2112': attribute type 7 has an invalid length. [ 326.748979][T14341] dummy0: entered allmulticast mode [ 326.797522][T14341] dummy0: left allmulticast mode [ 326.997977][T14345] netlink: 'syz.3.2112': attribute type 7 has an invalid length. [ 327.001682][ T7955] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.148566][T14355] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2115'. [ 327.297732][ T7955] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.364243][ T7955] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.418672][T14361] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2117'. [ 327.442421][ T7955] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.133505][ T30] audit: type=1800 audit(1786288378.161:9): pid=14385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2124" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2138 res=0 errno=0 [ 329.671409][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 330.253881][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 330.624725][T14457] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2143'. [ 330.786012][T14457] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2143'. [ 331.108635][T14478] netlink: 'syz.4.2149': attribute type 1 has an invalid length. [ 331.138643][T14475] netlink: 'syz.4.2149': attribute type 1 has an invalid length. [ 331.306261][T14478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.404501][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2150'. [ 331.487094][T14489] netlink: 'syz.3.2152': attribute type 5 has an invalid length. [ 331.512910][T14489] netlink: 'syz.3.2152': attribute type 5 has an invalid length. [ 331.822526][T14501] xt_CT: No such helper "snmp_trap" [ 332.159843][T14517] bond0: (slave ip6tnl0): refused to change device type [ 332.433522][T14523] ip6erspan0: entered allmulticast mode [ 332.872402][T14538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.947317][T14545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2165'. [ 333.015285][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2164'. [ 333.203686][T14555] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 333.693950][T14561] bond2: (slave veth0_to_bond): Releasing active interface [ 333.770229][T14561] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 334.092231][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 334.840549][T14583] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2174'. [ 334.864004][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2174'. [ 334.899604][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2174'. [ 335.363995][T14607] syzkaller0: left promiscuous mode [ 335.382386][T14607] syzkaller0: left allmulticast mode [ 335.400186][T14609] openvswitch: netlink: IP tunnel dst address not specified [ 335.436366][T14609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.442253][T14608] openvswitch: netlink: IP tunnel dst address not specified [ 335.466827][T14607] ip6gre1: left promiscuous mode [ 335.482552][T14607] ip6gre1: left allmulticast mode [ 335.494716][T14608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.535113][T14615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2182'. [ 335.545510][T14615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2182'. [ 335.613668][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2180'. [ 335.708224][ T7964] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.746717][ T7964] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.800800][ T7964] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.839861][ T7964] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.922772][T14626] xt_policy: output policy not valid in PREROUTING and INPUT [ 336.164380][T14636] netlink: 'syz.2.2188': attribute type 8 has an invalid length. [ 336.196667][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2188'. [ 336.491794][T14636] veth1_to_team: entered promiscuous mode [ 336.520187][T14636] gretap0: entered promiscuous mode [ 336.552369][T14636] veth1_to_team: left promiscuous mode [ 336.576761][T14636] gretap0: left promiscuous mode [ 337.001178][T14655] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2195'. [ 337.527336][T14664] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 337.947992][T14671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2200'. [ 340.114008][T14690] netlink: 'syz.3.2204': attribute type 1 has an invalid length. [ 340.145279][T14690] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.284594][ T4974] udevd[4974]: worker [9154] /devices/virtual/block/nbd0 is taking a long time [ 352.350487][ T4924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 352.366623][ T4924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 352.381560][ T4924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 352.390437][ T4924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 352.402761][ T4924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 352.473970][ T4924] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 352.484369][ T4924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 352.493440][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 352.501419][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 352.512191][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 352.527648][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 352.535244][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 352.544641][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.553405][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 352.561078][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 352.892646][ T5611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 352.907389][ T5611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 352.924794][ T5611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.941052][ T5611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.949302][ T5611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.963771][ T1697] block nbd0: Possible stuck request ffff88802772e000: control (read@0,4096B). Runtime 90 seconds [ 353.657811][ T5611] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 353.672757][ T5611] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 353.683976][ T5611] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 353.698496][ T5611] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 353.720961][ T5611] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 354.608492][ T50] Bluetooth: hci5: command tx timeout [ 354.768276][ T50] Bluetooth: hci6: command tx timeout [ 354.790225][T14701] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.797738][T14701] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.805265][T14701] bridge_slave_0: entered allmulticast mode [ 354.813487][T14701] bridge_slave_0: entered promiscuous mode [ 354.857758][T14701] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.873237][T14701] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.885357][T14701] bridge_slave_1: entered allmulticast mode [ 354.893878][T14701] bridge_slave_1: entered promiscuous mode [ 355.008160][ T50] Bluetooth: hci7: command tx timeout [ 355.054370][T14701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.067018][T14701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.191263][T14699] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.200170][T14699] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.207496][T14699] bridge_slave_0: entered allmulticast mode [ 355.215994][T14699] bridge_slave_0: entered promiscuous mode [ 355.224173][T14710] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.232486][T14710] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.240483][T14710] bridge_slave_0: entered allmulticast mode [ 355.248733][T14710] bridge_slave_0: entered promiscuous mode [ 355.267247][T14701] team0: Port device team_slave_0 added [ 355.273636][T14699] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.283080][T14699] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.291099][T14699] bridge_slave_1: entered allmulticast mode [ 355.300711][T14699] bridge_slave_1: entered promiscuous mode [ 355.314270][T14710] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.322217][T14710] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.330092][T14710] bridge_slave_1: entered allmulticast mode [ 355.338818][T14710] bridge_slave_1: entered promiscuous mode [ 355.370178][T14701] team0: Port device team_slave_1 added [ 355.480888][T14699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.494385][T14710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.504825][T14701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.512893][T14701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.539357][T14701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.554625][T14699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.566572][T14710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.592903][T14701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.600250][T14701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.626552][T14701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.712769][T14710] team0: Port device team_slave_0 added [ 355.733676][T14710] team0: Port device team_slave_1 added [ 355.754990][T14699] team0: Port device team_slave_0 added [ 355.792207][T14699] team0: Port device team_slave_1 added [ 355.809019][ T50] Bluetooth: hci8: command tx timeout [ 355.870287][T14710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.879851][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.906943][T14710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.927088][T14701] hsr_slave_0: entered promiscuous mode [ 355.934002][T14701] hsr_slave_1: entered promiscuous mode [ 355.956240][T14699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.963987][T14699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.993618][T14699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.030663][T14699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.044920][T14699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.089297][T14699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.104201][T14710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.111684][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.139906][T14710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.332166][ T5611] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 356.342701][ T5611] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 356.351310][ T5611] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 356.360478][ T5611] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 356.372409][ T5611] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 356.411166][T14699] hsr_slave_0: entered promiscuous mode [ 356.417922][T14699] hsr_slave_1: entered promiscuous mode [ 356.424408][T14699] debugfs: 'hsr0' already exists in 'hsr' [ 356.430334][T14699] Cannot create hsr debugfs directory [ 356.495453][T14710] hsr_slave_0: entered promiscuous mode [ 356.502259][T14710] hsr_slave_1: entered promiscuous mode [ 356.511134][T14710] debugfs: 'hsr0' already exists in 'hsr' [ 356.516929][T14710] Cannot create hsr debugfs directory [ 356.758729][ T50] Bluetooth: hci5: command tx timeout [ 356.849431][ T50] Bluetooth: hci6: command tx timeout [ 356.902244][T14729] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.923975][T14729] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.939418][T14729] bridge_slave_0: entered allmulticast mode [ 356.953500][T14729] bridge_slave_0: entered promiscuous mode [ 357.020993][T14729] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.028541][T14729] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.037911][T14729] bridge_slave_1: entered allmulticast mode [ 357.046209][T14729] bridge_slave_1: entered promiscuous mode [ 357.089863][ T50] Bluetooth: hci7: command tx timeout [ 357.159644][T14729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.200455][T14729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.365963][T14729] team0: Port device team_slave_0 added [ 357.410305][T14729] team0: Port device team_slave_1 added [ 357.512763][T14729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.522015][T14729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.548599][T14729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.589919][T14729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.596924][T14729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.624284][T14729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.744947][T14729] hsr_slave_0: entered promiscuous mode [ 357.751813][T14729] hsr_slave_1: entered promiscuous mode [ 357.758810][T14729] debugfs: 'hsr0' already exists in 'hsr' [ 357.764608][T14729] Cannot create hsr debugfs directory [ 357.893065][ T50] Bluetooth: hci8: command tx timeout [ 358.356369][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.363694][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.371517][T14770] bridge_slave_0: entered allmulticast mode [ 358.379694][T14770] bridge_slave_0: entered promiscuous mode [ 358.388865][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.396082][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.403791][T14770] bridge_slave_1: entered allmulticast mode [ 358.412153][T14770] bridge_slave_1: entered promiscuous mode [ 358.448261][ T50] Bluetooth: hci9: command tx timeout [ 358.459151][T14770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.472153][T14770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.512717][T14770] team0: Port device team_slave_0 added [ 358.521463][T14770] team0: Port device team_slave_1 added [ 358.559464][T14770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.566459][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.593421][T14770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.606253][T14770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.613652][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.640466][T14770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.706202][T14770] hsr_slave_0: entered promiscuous mode [ 358.713156][T14770] hsr_slave_1: entered promiscuous mode [ 358.720030][T14770] debugfs: 'hsr0' already exists in 'hsr' [ 358.725808][T14770] Cannot create hsr debugfs directory [ 358.769860][ T50] Bluetooth: hci5: command tx timeout [ 358.928419][ T50] Bluetooth: hci6: command tx timeout [ 359.178129][ T50] Bluetooth: hci7: command tx timeout [ 359.968165][ T50] Bluetooth: hci8: command tx timeout [ 360.528601][ T50] Bluetooth: hci9: command tx timeout [ 360.848158][ T50] Bluetooth: hci5: command tx timeout [ 361.008423][ T50] Bluetooth: hci6: command tx timeout [ 361.248439][ T50] Bluetooth: hci7: command tx timeout [ 362.048219][ T50] Bluetooth: hci8: command tx timeout [ 362.608271][ T50] Bluetooth: hci9: command tx timeout [ 364.688181][ T50] Bluetooth: hci9: command tx timeout [ 378.530352][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.538325][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.011610][ T1697] block nbd0: Possible stuck request ffff88802772e000: control (read@0,4096B). Runtime 120 seconds [ 412.840940][ T5611] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 412.854137][ T5611] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 412.862165][ T5611] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 412.880899][ T5611] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 412.889281][ T5611] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 412.977884][ T5611] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 412.992766][ T5611] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 413.006937][ T5611] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 413.017706][ T5611] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 413.027030][ T5611] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 413.037581][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 413.063756][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 413.079161][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 413.093518][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 413.104450][ T1697] block nbd0: Possible stuck request ffff88802772e000: control (read@0,4096B). Runtime 150 seconds [ 413.112732][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 414.347267][ T4924] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 414.360423][ T4924] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 414.372573][ T4924] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 414.382599][ T4924] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 414.394870][ T4924] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 414.745670][T14796] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.769062][T14796] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.776526][T14796] bridge_slave_0: entered allmulticast mode [ 414.792433][T14796] bridge_slave_0: entered promiscuous mode [ 414.846384][T14796] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.856126][T14796] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.863453][T14796] bridge_slave_1: entered allmulticast mode [ 414.871880][T14796] bridge_slave_1: entered promiscuous mode [ 414.928161][ T50] Bluetooth: hci10: command tx timeout [ 414.990402][T14796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.037065][T14799] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.044533][T14799] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.054632][T14799] bridge_slave_0: entered allmulticast mode [ 415.062398][T14799] bridge_slave_0: entered promiscuous mode [ 415.074224][T14799] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.082079][T14799] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.089336][ T50] Bluetooth: hci11: command tx timeout [ 415.095419][T14799] bridge_slave_1: entered allmulticast mode [ 415.103159][T14799] bridge_slave_1: entered promiscuous mode [ 415.113185][T14796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.168842][ T50] Bluetooth: hci12: command tx timeout [ 415.228565][T14799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.277062][T14800] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.284971][T14800] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.294321][T14800] bridge_slave_0: entered allmulticast mode [ 415.302343][T14800] bridge_slave_0: entered promiscuous mode [ 415.314076][T14799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.331046][T14796] team0: Port device team_slave_0 added [ 415.372872][T14800] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.380438][T14800] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.387645][T14800] bridge_slave_1: entered allmulticast mode [ 415.396074][T14800] bridge_slave_1: entered promiscuous mode [ 415.409033][T14796] team0: Port device team_slave_1 added [ 415.479761][T14799] team0: Port device team_slave_0 added [ 415.512024][T14796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.519128][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.545744][T14796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.560233][T14799] team0: Port device team_slave_1 added [ 415.568640][T14800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.596135][T14796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.603478][T14796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.630674][T14796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.658430][T14800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.736206][T14799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.743759][T14799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.770326][T14799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.791529][T14800] team0: Port device team_slave_0 added [ 415.812750][T14799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.820177][T14799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.846346][T14799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.875108][T14800] team0: Port device team_slave_1 added [ 415.955424][T14796] hsr_slave_0: entered promiscuous mode [ 415.962736][T14796] hsr_slave_1: entered promiscuous mode [ 415.970910][T14796] debugfs: 'hsr0' already exists in 'hsr' [ 415.976675][T14796] Cannot create hsr debugfs directory [ 416.027702][T14799] hsr_slave_0: entered promiscuous mode [ 416.034609][T14799] hsr_slave_1: entered promiscuous mode [ 416.041486][T14799] debugfs: 'hsr0' already exists in 'hsr' [ 416.047293][T14799] Cannot create hsr debugfs directory [ 416.074354][T14800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.098087][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.129659][T14800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.251864][T14800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.268058][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.328010][T14800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.369276][ T4924] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 416.380570][ T4924] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 416.388790][ T4924] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 416.397478][ T4924] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 416.416235][ T4924] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 416.448086][ T4924] Bluetooth: hci13: command tx timeout [ 416.664634][T14800] hsr_slave_0: entered promiscuous mode [ 416.671317][T14800] hsr_slave_1: entered promiscuous mode [ 416.677554][T14800] debugfs: 'hsr0' already exists in 'hsr' [ 416.683351][T14800] Cannot create hsr debugfs directory [ 417.010826][ T4924] Bluetooth: hci10: command tx timeout [ 417.168161][ T4924] Bluetooth: hci11: command tx timeout [ 417.252101][ T4924] Bluetooth: hci12: command tx timeout [ 417.303094][T14835] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.310846][T14835] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.318618][T14835] bridge_slave_0: entered allmulticast mode [ 417.326148][T14835] bridge_slave_0: entered promiscuous mode [ 417.364327][T14835] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.371688][T14835] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.380172][T14835] bridge_slave_1: entered allmulticast mode [ 417.387794][T14835] bridge_slave_1: entered promiscuous mode [ 417.450387][T14835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.472004][T14835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.597027][T14835] team0: Port device team_slave_0 added [ 417.611904][T14835] team0: Port device team_slave_1 added [ 417.683552][T14835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.691556][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.727933][T14835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.767585][T14835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.774912][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.803577][T14835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.961195][T14835] hsr_slave_0: entered promiscuous mode [ 417.978511][T14835] hsr_slave_1: entered promiscuous mode [ 417.986194][T14835] debugfs: 'hsr0' already exists in 'hsr' [ 418.002536][T14835] Cannot create hsr debugfs directory [ 418.382622][T14860] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.390326][T14860] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.397518][T14860] bridge_slave_0: entered allmulticast mode [ 418.406377][T14860] bridge_slave_0: entered promiscuous mode [ 418.440406][T14860] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.448521][T14860] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.454330][ T4924] Bluetooth: hci14: command tx timeout [ 418.455837][T14860] bridge_slave_1: entered allmulticast mode [ 418.470096][T14860] bridge_slave_1: entered promiscuous mode [ 418.528176][ T4924] Bluetooth: hci13: command tx timeout [ 418.540421][T14860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.560134][T14860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.646273][T14860] team0: Port device team_slave_0 added [ 418.664717][T14860] team0: Port device team_slave_1 added [ 418.700009][T14860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.706999][T14860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.742334][T14860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.766311][T14860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.775481][T14860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.810309][T14860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.895475][T14860] hsr_slave_0: entered promiscuous mode [ 418.902175][T14860] hsr_slave_1: entered promiscuous mode [ 418.908694][T14860] debugfs: 'hsr0' already exists in 'hsr' [ 418.914670][T14860] Cannot create hsr debugfs directory [ 419.088338][ T4924] Bluetooth: hci10: command tx timeout [ 419.248200][ T4924] Bluetooth: hci11: command tx timeout [ 419.328963][ T4924] Bluetooth: hci12: command tx timeout [ 420.528401][ T4924] Bluetooth: hci14: command tx timeout [ 420.608432][ T4924] Bluetooth: hci13: command tx timeout [ 421.168168][ T4924] Bluetooth: hci10: command tx timeout [ 421.328360][ T4924] Bluetooth: hci11: command tx timeout [ 421.408355][ T4924] Bluetooth: hci12: command tx timeout [ 422.608368][ T4924] Bluetooth: hci14: command tx timeout [ 422.688195][ T4924] Bluetooth: hci13: command tx timeout [ 424.688428][ T4924] Bluetooth: hci14: command tx timeout [ 439.971999][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.981310][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.170435][ T1697] block nbd0: Possible stuck request ffff88802772e000: control (read@0,4096B). Runtime 180 seconds [ 444.058346][ T4974] udevd[4974]: worker [9154] /devices/virtual/block/nbd0 timeout; kill it [ 444.067217][ T4974] udevd[4974]: seq 15797 '/devices/virtual/block/nbd0' killed [ 473.270547][ T1697] block nbd0: Possible stuck request ffff88802772e000: control (read@0,4096B). Runtime 210 seconds [ 473.399737][ T50] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 473.420487][ T50] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 473.429904][ T50] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 473.439574][ T50] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 473.448612][ T50] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 473.493946][ T5615] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 473.506965][ T5615] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 473.519982][ T5615] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 473.531341][ T5615] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 473.551336][ T5615] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 473.700244][ T5615] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 473.721093][ T5615] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 473.736802][ T5615] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 473.747722][ T5615] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 473.756611][ T5615] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 474.987505][ T5615] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 475.004547][ T5615] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 475.015601][ T5615] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 475.027007][ T5615] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 475.034973][ T5615] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 475.489036][ T5615] Bluetooth: hci15: command tx timeout [ 475.602347][T14890] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.625237][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.648756][ T5615] Bluetooth: hci16: command tx timeout [ 475.668571][T14890] bridge_slave_0: entered allmulticast mode [ 475.687427][T14890] bridge_slave_0: entered promiscuous mode [ 475.735577][T14890] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.756333][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.780304][T14890] bridge_slave_1: entered allmulticast mode [ 475.790635][T14890] bridge_slave_1: entered promiscuous mode [ 475.822937][ T50] Bluetooth: hci17: command tx timeout [ 475.979008][T14890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.071639][T14890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.187282][T14890] team0: Port device team_slave_0 added [ 476.236497][T14890] team0: Port device team_slave_1 added [ 476.256268][T14897] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.263825][T14897] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.271641][T14897] bridge_slave_0: entered allmulticast mode [ 476.279691][T14897] bridge_slave_0: entered promiscuous mode [ 476.322031][T14897] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.329460][T14897] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.336632][T14897] bridge_slave_1: entered allmulticast mode [ 476.344842][T14897] bridge_slave_1: entered promiscuous mode [ 476.372159][T14890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.379484][T14890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.407821][T14890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.419598][T14892] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.427553][T14892] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.435273][T14892] bridge_slave_0: entered allmulticast mode [ 476.443340][T14892] bridge_slave_0: entered promiscuous mode [ 476.476078][T14890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.483558][T14890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.512376][T14890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.532729][T14892] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.540734][T14892] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.548081][T14892] bridge_slave_1: entered allmulticast mode [ 476.555776][T14892] bridge_slave_1: entered promiscuous mode [ 476.625438][T14897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.655064][T14897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.692708][T14890] hsr_slave_0: entered promiscuous mode [ 476.699581][T14890] hsr_slave_1: entered promiscuous mode [ 476.708809][T14890] debugfs: 'hsr0' already exists in 'hsr' [ 476.727469][T14890] Cannot create hsr debugfs directory [ 476.753810][T14892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.785146][T14892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.816085][T14897] team0: Port device team_slave_0 added [ 476.911482][T14897] team0: Port device team_slave_1 added [ 476.993872][ T5618] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 477.007549][ T5618] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 477.015933][ T5618] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 477.024050][ T5618] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 477.032090][ T5618] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 477.088902][ T5618] Bluetooth: hci18: command tx timeout [ 477.108178][T14897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.115171][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.142038][T14897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.157223][T14892] team0: Port device team_slave_0 added [ 477.166153][T14892] team0: Port device team_slave_1 added [ 477.287824][T14897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.295270][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.336649][T14897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.452810][T14892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.460141][T14892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.487356][T14892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.533524][T14892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.542656][T14892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.570864][ T5618] Bluetooth: hci15: command tx timeout [ 477.576456][T14892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.613873][T14897] hsr_slave_0: entered promiscuous mode [ 477.620812][T14897] hsr_slave_1: entered promiscuous mode [ 477.627261][T14897] debugfs: 'hsr0' already exists in 'hsr' [ 477.633494][T14897] Cannot create hsr debugfs directory [ 477.738384][ T5618] Bluetooth: hci16: command tx timeout [ 477.912614][ T5618] Bluetooth: hci17: command tx timeout [ 477.919004][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 477.926470][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 477.933018][ T5621] Bluetooth: hci7: command 0x0406 tx timeout [ 477.941047][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 478.100234][T14892] hsr_slave_0: entered promiscuous mode [ 478.106809][T14892] hsr_slave_1: entered promiscuous mode [ 478.114221][T14892] debugfs: 'hsr0' already exists in 'hsr' [ 478.120294][T14892] Cannot create hsr debugfs directory [ 478.217868][T14926] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.225555][T14926] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.233206][T14926] bridge_slave_0: entered allmulticast mode [ 478.241696][T14926] bridge_slave_0: entered promiscuous mode [ 478.250694][T14926] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.258956][T14926] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.266151][T14926] bridge_slave_1: entered allmulticast mode [ 478.273983][T14926] bridge_slave_1: entered promiscuous mode [ 478.437692][T14926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.482861][T14926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.594232][T14926] team0: Port device team_slave_0 added [ 478.604213][T14926] team0: Port device team_slave_1 added [ 478.724180][T14926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.733213][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.760084][T14926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.815595][T14926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.824111][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.857144][T14926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.035184][T14926] hsr_slave_0: entered promiscuous mode [ 479.042055][T14926] hsr_slave_1: entered promiscuous mode [ 479.048722][T14926] debugfs: 'hsr0' already exists in 'hsr' [ 479.054512][T14926] Cannot create hsr debugfs directory [ 479.090014][ T5615] Bluetooth: hci19: command tx timeout [ 479.171823][ T5615] Bluetooth: hci18: command tx timeout [ 479.493997][T14955] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.502818][T14955] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.516177][T14955] bridge_slave_0: entered allmulticast mode [ 479.524095][T14955] bridge_slave_0: entered promiscuous mode [ 479.543222][T14955] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.552760][T14955] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.560170][T14955] bridge_slave_1: entered allmulticast mode [ 479.567759][T14955] bridge_slave_1: entered promiscuous mode [ 479.611918][T14955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.624547][T14955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.648401][ T5615] Bluetooth: hci15: command tx timeout [ 479.673676][T14955] team0: Port device team_slave_0 added [ 479.682870][T14955] team0: Port device team_slave_1 added [ 479.720100][T14955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.727102][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.775074][T14955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.797911][T14955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.806503][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.834752][ T5615] Bluetooth: hci16: command tx timeout [ 479.843806][T14955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.901119][T14955] hsr_slave_0: entered promiscuous mode [ 479.907671][T14955] hsr_slave_1: entered promiscuous mode [ 479.914818][T14955] debugfs: 'hsr0' already exists in 'hsr' [ 479.920915][T14955] Cannot create hsr debugfs directory [ 479.979648][ T5615] Bluetooth: hci17: command tx timeout [ 481.169053][ T5611] Bluetooth: hci19: command tx timeout [ 481.248960][ T5611] Bluetooth: hci18: command tx timeout [ 481.728500][ T5611] Bluetooth: hci15: command tx timeout [ 481.888295][ T5611] Bluetooth: hci16: command tx timeout [ 482.048228][ T5611] Bluetooth: hci17: command tx timeout [ 483.014791][ T5611] Bluetooth: hci9: command 0x0406 tx timeout [ 483.248571][ T5615] Bluetooth: hci19: command tx timeout [ 483.328268][ T5615] Bluetooth: hci18: command tx timeout [ 485.328278][ T5615] Bluetooth: hci19: command tx timeout [ 486.053900][ T31] INFO: task syz.0.2191:14640 blocked for more than 143 seconds. [ 486.062033][ T31] Not tainted syzkaller #0 [ 486.067005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.076359][ T31] task:syz.0.2191 state:D stack:28208 pid:14640 tgid:14639 ppid:5606 task_flags:0x400040 flags:0x00080002 [ 486.089061][ T31] Call Trace: [ 486.092393][ T31] [ 486.095351][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 486.100425][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.106142][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.128289][ T31] ? unwind_next_frame+0x8f/0x2550 [ 486.137279][ T31] ? __pfx___schedule+0x10/0x10 [ 486.143953][ T31] ? schedule+0x90/0x2b0 [ 486.148755][ T31] schedule+0x164/0x2b0 [ 486.152983][ T31] schedule_preempt_disabled+0x13/0x30 [ 486.158902][ T31] __mutex_lock+0x7bf/0x1550 [ 486.163564][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.169486][ T31] ? __mutex_lock+0x5d4/0x1550 [ 486.174335][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 486.179571][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 486.184664][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.190040][ T31] ? radix_tree_lookup+0x240/0x290 [ 486.195216][ T31] genl_rcv_msg+0x10b/0x7a0 [ 486.200188][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.205266][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.221933][ T31] netlink_rcv_skb+0x226/0x4a0 [ 486.226767][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.232294][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.238695][ T31] ? down_read+0x2be/0x330 [ 486.243214][ T31] genl_rcv+0x28/0x40 [ 486.247236][ T31] netlink_unicast+0x7bb/0x940 [ 486.252676][ T31] netlink_sendmsg+0x813/0xb40 [ 486.257496][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.263357][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 486.268584][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.273947][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 486.279667][ T31] __sys_sendto+0x408/0x5a0 [ 486.284260][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 486.289921][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 486.295300][ T31] __x64_sys_sendto+0xde/0x100 [ 486.300483][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.306627][ T31] do_syscall_64+0x174/0x580 [ 486.311768][ T31] ? trace_irq_disable+0x3b/0x140 [ 486.316862][ T31] ? clear_bhb_loop+0x70/0xc0 [ 486.321961][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.327920][ T31] RIP: 0033:0x7ff3a3b5e90e [ 486.334981][ T31] RSP: 002b:00007ff3a4b4ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 486.343757][ T31] RAX: ffffffffffffffda RBX: 00007ff3a4b4c6c0 RCX: 00007ff3a3b5e90e [ 486.352078][ T31] RDX: 000000000000001c RSI: 00007ff3a4b4b000 RDI: 0000000000000005 [ 486.360733][ T31] RBP: 0000000000000000 R08: 00007ff3a4b4af04 R09: 000000000000000c [ 486.378311][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 486.388551][ T31] R13: 00007ff3a4b4af58 R14: 00007ff3a4b4b000 R15: 0000000000000000 [ 486.396612][ T31] [ 486.400344][ T31] INFO: task syz.0.2191:14641 blocked for more than 143 seconds. [ 486.408785][ T31] Not tainted syzkaller #0 [ 486.413765][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.422852][ T31] task:syz.0.2191 state:D stack:26312 pid:14641 tgid:14639 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 486.435193][ T31] Call Trace: [ 486.440752][ T31] [ 486.443733][ T31] __schedule+0x17d9/0x56c0 [ 486.450797][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.455821][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.461352][ T31] ? __pfx___schedule+0x10/0x10 [ 486.466283][ T31] ? schedule+0x90/0x2b0 [ 486.470990][ T31] schedule+0x164/0x2b0 [ 486.475226][ T31] schedule_preempt_disabled+0x13/0x30 [ 486.486249][ T31] __mutex_lock+0x7bf/0x1550 [ 486.509782][ T31] ? __mutex_lock+0x5d4/0x1550 [ 486.546320][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 486.586008][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 486.600318][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 486.605994][ T31] ? radix_tree_lookup+0x240/0x290 [ 486.611491][ T31] genl_rcv_msg+0x10b/0x7a0 [ 486.616057][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.621401][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 486.626830][ T31] netlink_rcv_skb+0x226/0x4a0 [ 486.631711][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.636771][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.642166][ T31] ? down_read+0x2be/0x330 [ 486.646610][ T31] genl_rcv+0x28/0x40 [ 486.650786][ T31] netlink_unicast+0x7bb/0x940 [ 486.655611][ T31] netlink_sendmsg+0x813/0xb40 [ 486.668885][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.674249][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 486.679415][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.684754][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 486.697420][ T31] __sys_sendto+0x408/0x5a0 [ 486.702084][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 486.707147][ T31] ? errseq_sample+0x40/0x70 [ 486.711853][ T31] ? fd_install+0x94/0x3d0 [ 486.716307][ T31] ? fd_install+0x306/0x3d0 [ 486.720996][ T31] __x64_sys_sendto+0xde/0x100 [ 486.725806][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.732256][ T31] do_syscall_64+0x174/0x580 [ 486.736934][ T31] ? trace_irq_disable+0x3b/0x140 [ 486.742160][ T31] ? clear_bhb_loop+0x70/0xc0 [ 486.746895][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.752905][ T31] RIP: 0033:0x7ff3a3b5e90e [ 486.757355][ T31] RSP: 002b:00007ff3a4b29e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 486.765868][ T31] RAX: ffffffffffffffda RBX: 00007ff3a4b2b6c0 RCX: 00007ff3a3b5e90e [ 486.780258][ T31] RDX: 0000000000000028 RSI: 00007ff3a4b29fe0 RDI: 0000000000000006 [ 486.788508][ T31] RBP: 0000000000000000 R08: 00007ff3a4b29ed4 R09: 000000000000000c [ 486.796519][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 486.804707][ T31] R13: 00007ff3a4b29f28 R14: 00007ff3a4b29fe0 R15: 0000000000000000 [ 486.812876][ T31] [ 486.815952][ T31] INFO: task syz.0.2191:14643 blocked for more than 144 seconds. [ 486.823874][ T31] Not tainted syzkaller #0 [ 486.828980][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.837688][ T31] task:syz.0.2191 state:D stack:26376 pid:14643 tgid:14639 ppid:5606 task_flags:0x480140 flags:0x00080002 [ 486.850164][ T31] Call Trace: [ 486.853488][ T31] [ 486.856442][ T31] __schedule+0x17d9/0x56c0 [ 486.861093][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.866105][ T31] ? __pfx___schedule+0x10/0x10 [ 486.871151][ T31] ? schedule+0x90/0x2b0 [ 486.875454][ T31] schedule+0x164/0x2b0 [ 486.881013][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 486.886623][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 486.904567][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 486.911127][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 486.917283][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 486.923543][ T31] nbd_set_size+0x454/0x680 [ 486.930205][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 486.935314][ T31] ? nla_memcpy+0x5b/0xc0 [ 486.939930][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 486.945299][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 486.951138][ T31] ? rcu_is_watching+0x15/0xb0 [ 486.955960][ T31] ? trace_kmalloc+0x2a/0xf0 [ 486.960887][ T31] ? __kmalloc_noprof+0x396/0x720 [ 486.965962][ T31] ? __nla_parse+0x40/0x60 [ 486.970544][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 486.976926][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 486.983426][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 486.990539][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 486.996676][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.002126][ T31] genl_rcv_msg+0x614/0x7a0 [ 487.006695][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.012220][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 487.018204][ T31] netlink_rcv_skb+0x226/0x4a0 [ 487.023036][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.028185][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.033548][ T31] ? down_read+0x2be/0x330 [ 487.038042][ T31] genl_rcv+0x28/0x40 [ 487.042086][ T31] netlink_unicast+0x7bb/0x940 [ 487.046885][ T31] netlink_sendmsg+0x813/0xb40 [ 487.051875][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.057213][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 487.063249][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.069113][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 487.074213][ T31] ____sys_sendmsg+0x54e/0x850 [ 487.079055][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.084390][ T31] ? import_iovec+0x73/0xa0 [ 487.089921][ T31] ___sys_sendmsg+0x2a5/0x360 [ 487.094665][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.101028][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.106314][ T31] ? futex_wake+0x51b/0x5f0 [ 487.111319][ T31] ? __fget_files+0x2a/0x420 [ 487.115963][ T31] ? __fget_files+0x3a2/0x420 [ 487.120829][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 487.125828][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.131593][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.137720][ T31] do_syscall_64+0x174/0x580 [ 487.142462][ T31] ? trace_irq_disable+0x3b/0x140 [ 487.147540][ T31] ? clear_bhb_loop+0x70/0xc0 [ 487.152326][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.158359][ T31] RIP: 0033:0x7ff3a3b9e0d9 [ 487.162811][ T31] RSP: 002b:00007ff3a4b0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.172326][ T31] RAX: ffffffffffffffda RBX: 00007ff3a3e26180 RCX: 00007ff3a3b9e0d9 [ 487.180737][ T31] RDX: 0000000000000080 RSI: 0000200000002380 RDI: 0000000000000005 [ 487.189347][ T31] RBP: 00007ff3a3c35024 R08: 0000000000000000 R09: 0000000000000000 [ 487.197387][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.205445][ T31] R13: 00007ff3a3e26218 R14: 00007ff3a3e26180 R15: 00007fffb8e0f138 [ 487.215092][ T31] [ 487.218505][ T31] INFO: task syz.1.2192:14644 blocked for more than 144 seconds. [ 487.226473][ T31] Not tainted syzkaller #0 [ 487.231552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.240421][ T31] task:syz.1.2192 state:D stack:27872 pid:14644 tgid:14642 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 487.259201][ T31] Call Trace: [ 487.262578][ T31] [ 487.265528][ T31] __schedule+0x17d9/0x56c0 [ 487.270307][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.275313][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.280390][ T31] ? __pfx___schedule+0x10/0x10 [ 487.285282][ T31] ? schedule+0x90/0x2b0 [ 487.289963][ T31] schedule+0x164/0x2b0 [ 487.294201][ T31] schedule_preempt_disabled+0x13/0x30 [ 487.299794][ T31] __mutex_lock+0x7bf/0x1550 [ 487.304456][ T31] ? __mutex_lock+0x5d4/0x1550 [ 487.309343][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 487.314102][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 487.320754][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 487.325946][ T31] ? radix_tree_lookup+0x240/0x290 [ 487.332072][ T31] genl_rcv_msg+0x10b/0x7a0 [ 487.336660][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.341852][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 487.347638][ T31] netlink_rcv_skb+0x226/0x4a0 [ 487.352626][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.357706][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.363152][ T31] ? down_read+0x2be/0x330 [ 487.367617][ T31] genl_rcv+0x28/0x40 [ 487.371805][ T31] netlink_unicast+0x7bb/0x940 [ 487.376623][ T31] netlink_sendmsg+0x813/0xb40 [ 487.381668][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.387005][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 487.392054][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.397377][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 487.402754][ T31] __sys_sendto+0x408/0x5a0 [ 487.407322][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 487.412694][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 487.418160][ T31] __x64_sys_sendto+0xde/0x100 [ 487.422967][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.441836][ T31] do_syscall_64+0x174/0x580 [ 487.446501][ T31] ? trace_irq_disable+0x3b/0x140 [ 487.451983][ T31] ? clear_bhb_loop+0x70/0xc0 [ 487.456927][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.463069][ T31] RIP: 0033:0x7fb07db5e90e [ 487.467543][ T31] RSP: 002b:00007fb07eaf9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 487.476072][ T31] RAX: ffffffffffffffda RBX: 00007fb07eafb6c0 RCX: 00007fb07db5e90e [ 487.484216][ T31] RDX: 0000000000000020 RSI: 00007fb07eafa000 RDI: 0000000000000006 [ 487.495305][ T31] RBP: 0000000000000000 R08: 00007fb07eaf9f04 R09: 000000000000000c [ 487.503450][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 487.511735][ T31] R13: 00007fb07eaf9f58 R14: 00007fb07eafa000 R15: 0000000000000000 [ 487.519847][ T31] [ 487.522984][ T31] INFO: task syz.2.2194:14651 blocked for more than 144 seconds. [ 487.540243][ T31] Not tainted syzkaller #0 [ 487.546593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.556624][ T31] task:syz.2.2194 state:D stack:28808 pid:14651 tgid:14649 ppid:5605 task_flags:0x400040 flags:0x00080002 [ 487.576952][ T31] Call Trace: [ 487.580605][ T31] [ 487.583583][ T31] __schedule+0x17d9/0x56c0 [ 487.590932][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.596057][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.601168][ T31] ? unwind_next_frame+0x8f/0x2550 [ 487.606344][ T31] ? __pfx___schedule+0x10/0x10 [ 487.611417][ T31] ? schedule+0x90/0x2b0 [ 487.615714][ T31] schedule+0x164/0x2b0 [ 487.620226][ T31] schedule_preempt_disabled+0x13/0x30 [ 487.625750][ T31] __mutex_lock+0x7bf/0x1550 [ 487.630496][ T31] ? __mutex_lock+0x5d4/0x1550 [ 487.635325][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 487.640100][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 487.645155][ T31] ? stack_trace_save+0xa9/0x100 [ 487.650854][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.655859][ T31] ? radix_tree_lookup+0x240/0x290 [ 487.662353][ T31] genl_rcv_msg+0x10b/0x7a0 [ 487.666936][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.672114][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.677126][ T31] netlink_rcv_skb+0x226/0x4a0 [ 487.682421][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.687723][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.693257][ T31] ? down_read+0x2be/0x330 [ 487.697722][ T31] genl_rcv+0x28/0x40 [ 487.701839][ T31] netlink_unicast+0x7bb/0x940 [ 487.706662][ T31] netlink_sendmsg+0x813/0xb40 [ 487.711607][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.716950][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 487.722017][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.727363][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 487.737855][ T31] __sys_sendto+0x408/0x5a0 [ 487.742559][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 487.747699][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 487.753644][ T31] __x64_sys_sendto+0xde/0x100 [ 487.758565][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.764683][ T31] do_syscall_64+0x174/0x580 [ 487.770891][ T31] ? trace_irq_disable+0x3b/0x140 [ 487.775981][ T31] ? clear_bhb_loop+0x70/0xc0 [ 487.780801][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.786746][ T31] RIP: 0033:0x7f3e6595e90e [ 487.791734][ T31] RSP: 002b:00007f3e63bf4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 487.800257][ T31] RAX: ffffffffffffffda RBX: 00007f3e63bf66c0 RCX: 00007f3e6595e90e [ 487.823750][ T31] RDX: 000000000000001c RSI: 00007f3e63bf5000 RDI: 0000000000000004 [ 487.831859][ T31] RBP: 0000000000000000 R08: 00007f3e63bf4f04 R09: 000000000000000c [ 487.840194][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 487.848407][ T31] R13: 00007f3e63bf4f58 R14: 00007f3e63bf5000 R15: 0000000000000000 [ 487.856458][ T31] [ 487.859686][ T31] INFO: task syz.4.2197:14659 blocked for more than 145 seconds. [ 487.867453][ T31] Not tainted syzkaller #0 [ 487.872740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.882736][ T31] task:syz.4.2197 state:D stack:28104 pid:14659 tgid:14658 ppid:5608 task_flags:0x400140 flags:0x00080002 [ 487.895714][ T31] Call Trace: [ 487.899323][ T31] [ 487.902320][ T31] __schedule+0x17d9/0x56c0 [ 487.906852][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.911871][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.916843][ T31] ? unwind_next_frame+0x8f/0x2550 [ 487.922104][ T31] ? __pfx___schedule+0x10/0x10 [ 487.927016][ T31] ? schedule+0x90/0x2b0 [ 487.931850][ T31] schedule+0x164/0x2b0 [ 487.936071][ T31] schedule_preempt_disabled+0x13/0x30 [ 487.941715][ T31] __mutex_lock+0x7bf/0x1550 [ 487.946392][ T31] ? __mutex_lock+0x5d4/0x1550 [ 487.951459][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 487.956193][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 487.961390][ T31] ? stack_trace_save+0xa9/0x100 [ 487.966380][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.974587][ T31] ? radix_tree_lookup+0x240/0x290 [ 487.980012][ T31] genl_rcv_msg+0x10b/0x7a0 [ 487.984596][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.991074][ T31] ? __lock_acquire+0x683/0x2cf0 [ 487.996104][ T31] netlink_rcv_skb+0x226/0x4a0 [ 488.001014][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.006099][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.023209][ T31] ? down_read+0x2be/0x330 [ 488.027710][ T31] genl_rcv+0x28/0x40 [ 488.031836][ T31] netlink_unicast+0x7bb/0x940 [ 488.036654][ T31] netlink_sendmsg+0x813/0xb40 [ 488.042032][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.047401][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.052801][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.058443][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 488.063542][ T31] ____sys_sendmsg+0x54e/0x850 [ 488.068419][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.073768][ T31] ? import_iovec+0x73/0xa0 [ 488.079530][ T31] ___sys_sendmsg+0x2a5/0x360 [ 488.084310][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.089832][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.095115][ T31] ? futex_wait+0x2a2/0x390 [ 488.101094][ T31] ? __fget_files+0x2a/0x420 [ 488.105808][ T31] ? __fget_files+0x3a2/0x420 [ 488.110605][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 488.115582][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.121335][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.127452][ T31] do_syscall_64+0x174/0x580 [ 488.132918][ T31] ? trace_irq_disable+0x3b/0x140 [ 488.138120][ T31] ? clear_bhb_loop+0x70/0xc0 [ 488.142841][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.149420][ T31] RIP: 0033:0x7f93b939e0d9 [ 488.153897][ T31] RSP: 002b:00007f93ba1a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.162432][ T31] RAX: ffffffffffffffda RBX: 00007f93b9625fa0 RCX: 00007f93b939e0d9 [ 488.170758][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000e [ 488.178956][ T31] RBP: 00007f93b9435024 R08: 0000000000000000 R09: 0000000000000000 [ 488.186980][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.195047][ T31] R13: 00007f93b9626038 R14: 00007f93b9625fa0 R15: 00007ffe26863548 [ 488.203150][ T31] [ 488.206258][ T31] INFO: task syz.4.2197:14661 blocked for more than 145 seconds. [ 488.216376][ T31] Not tainted syzkaller #0 [ 488.221478][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.230643][ T31] task:syz.4.2197 state:D stack:25512 pid:14661 tgid:14658 ppid:5608 task_flags:0x400140 flags:0x00080002 [ 488.242715][ T31] Call Trace: [ 488.246036][ T31] [ 488.249624][ T31] __schedule+0x17d9/0x56c0 [ 488.254193][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.259645][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.264868][ T31] ? unwind_next_frame+0x8f/0x2550 [ 488.270112][ T31] ? __pfx___schedule+0x10/0x10 [ 488.275006][ T31] ? schedule+0x90/0x2b0 [ 488.279703][ T31] schedule+0x164/0x2b0 [ 488.283931][ T31] schedule_preempt_disabled+0x13/0x30 [ 488.295796][ T31] __mutex_lock+0x7bf/0x1550 [ 488.300554][ T31] ? __mutex_lock+0x5d4/0x1550 [ 488.305375][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 488.310140][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 488.315194][ T31] ? stack_trace_save+0xa9/0x100 [ 488.321479][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.326525][ T31] ? radix_tree_lookup+0x240/0x290 [ 488.331825][ T31] genl_rcv_msg+0x10b/0x7a0 [ 488.336390][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.341701][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.346700][ T31] netlink_rcv_skb+0x226/0x4a0 [ 488.351550][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.356714][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.362256][ T31] ? down_read+0x2be/0x330 [ 488.366720][ T31] genl_rcv+0x28/0x40 [ 488.371221][ T31] netlink_unicast+0x7bb/0x940 [ 488.376259][ T31] netlink_sendmsg+0x813/0xb40 [ 488.381268][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.386613][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.391892][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.397226][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 488.402448][ T31] __sys_sendto+0x408/0x5a0 [ 488.407004][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 488.412211][ T31] ? errseq_sample+0x40/0x70 [ 488.416874][ T31] ? fd_install+0x94/0x3d0 [ 488.421482][ T31] ? fd_install+0x306/0x3d0 [ 488.426085][ T31] __x64_sys_sendto+0xde/0x100 [ 488.432201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.438406][ T31] do_syscall_64+0x174/0x580 [ 488.443064][ T31] ? trace_irq_disable+0x3b/0x140 [ 488.450152][ T31] ? clear_bhb_loop+0x70/0xc0 [ 488.454877][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.460913][ T31] RIP: 0033:0x7f93b935e90e [ 488.465370][ T31] RSP: 002b:00007f93ba185e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 488.474027][ T31] RAX: ffffffffffffffda RBX: 00007f93ba1876c0 RCX: 00007f93b935e90e [ 488.482418][ T31] RDX: 0000000000000020 RSI: 00007f93ba186000 RDI: 0000000000000010 [ 488.490563][ T31] RBP: 0000000000000000 R08: 00007f93ba185f04 R09: 000000000000000c [ 488.499149][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 488.507172][ T31] R13: 00007f93ba185f58 R14: 00007f93ba186000 R15: 0000000000000000 [ 488.515259][ T31] [ 488.518423][ T31] INFO: task syz.3.2205:14692 blocked for more than 145 seconds. [ 488.526171][ T31] Not tainted syzkaller #0 [ 488.533020][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.543064][ T31] task:syz.3.2205 state:D stack:28808 pid:14692 tgid:14691 ppid:5619 task_flags:0x400040 flags:0x00080002 [ 488.555228][ T31] Call Trace: [ 488.558764][ T31] [ 488.561757][ T31] __schedule+0x17d9/0x56c0 [ 488.566291][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.571404][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.576406][ T31] ? unwind_next_frame+0x8f/0x2550 [ 488.581718][ T31] ? __pfx___schedule+0x10/0x10 [ 488.586662][ T31] ? schedule+0x90/0x2b0 [ 488.592059][ T31] schedule+0x164/0x2b0 [ 488.596299][ T31] schedule_preempt_disabled+0x13/0x30 [ 488.602150][ T31] __mutex_lock+0x7bf/0x1550 [ 488.606810][ T31] ? __mutex_lock+0x5d4/0x1550 [ 488.621599][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 488.626339][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 488.631500][ T31] ? stack_trace_save+0xa9/0x100 [ 488.636474][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.641559][ T31] ? radix_tree_lookup+0x240/0x290 [ 488.646724][ T31] genl_rcv_msg+0x10b/0x7a0 [ 488.652639][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.657733][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.662834][ T31] netlink_rcv_skb+0x226/0x4a0 [ 488.667663][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.672980][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.678427][ T31] ? down_read+0x2be/0x330 [ 488.682895][ T31] genl_rcv+0x28/0x40 [ 488.686907][ T31] netlink_unicast+0x7bb/0x940 [ 488.692043][ T31] netlink_sendmsg+0x813/0xb40 [ 488.696873][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.702353][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.707349][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.712725][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 488.717781][ T31] __sys_sendto+0x408/0x5a0 [ 488.722852][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 488.727997][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 488.733344][ T31] __x64_sys_sendto+0xde/0x100 [ 488.738356][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.744470][ T31] do_syscall_64+0x174/0x580 [ 488.749214][ T31] ? trace_irq_disable+0x3b/0x140 [ 488.754301][ T31] ? clear_bhb_loop+0x70/0xc0 [ 488.760417][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.766366][ T31] RIP: 0033:0x7f301d35e90e [ 488.775782][ T31] RSP: 002b:00007f301e29de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 488.784502][ T31] RAX: ffffffffffffffda RBX: 00007f301e29f6c0 RCX: 00007f301d35e90e [ 488.792578][ T31] RDX: 0000000000000020 RSI: 00007f301e29e000 RDI: 0000000000000004 [ 488.800678][ T31] RBP: 0000000000000000 R08: 00007f301e29df04 R09: 000000000000000c [ 488.809023][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 488.817063][ T31] R13: 00007f301e29df58 R14: 00007f301e29e000 R15: 0000000000000000 [ 488.825180][ T31] [ 488.828566][ T31] INFO: task syz.3.2205:14693 blocked for more than 146 seconds. [ 488.836323][ T31] Not tainted syzkaller #0 [ 488.841894][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.865566][ T31] task:syz.3.2205 state:D stack:28752 pid:14693 tgid:14691 ppid:5619 task_flags:0x400040 flags:0x00080002 [ 488.878756][ T31] Call Trace: [ 488.882100][ T31] [ 488.885053][ T31] __schedule+0x17d9/0x56c0 [ 488.889975][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.894983][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.900088][ T31] ? unwind_next_frame+0x8f/0x2550 [ 488.905277][ T31] ? __pfx___schedule+0x10/0x10 [ 488.910356][ T31] ? schedule+0x90/0x2b0 [ 488.914697][ T31] schedule+0x164/0x2b0 [ 488.919101][ T31] schedule_preempt_disabled+0x13/0x30 [ 488.924625][ T31] __mutex_lock+0x7bf/0x1550 [ 488.935372][ T31] ? __mutex_lock+0x5d4/0x1550 [ 488.940492][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 488.945229][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 488.950742][ T31] ? stack_trace_save+0xa9/0x100 [ 488.955735][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.960815][ T31] ? radix_tree_lookup+0x240/0x290 [ 488.965992][ T31] genl_rcv_msg+0x10b/0x7a0 [ 488.970724][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.975806][ T31] ? __lock_acquire+0x683/0x2cf0 [ 488.981309][ T31] netlink_rcv_skb+0x226/0x4a0 [ 488.986127][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.992107][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.997455][ T31] ? down_read+0x2be/0x330 [ 489.002141][ T31] genl_rcv+0x28/0x40 [ 489.006176][ T31] netlink_unicast+0x7bb/0x940 [ 489.011259][ T31] netlink_sendmsg+0x813/0xb40 [ 489.016084][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.032337][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 489.037347][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.042741][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 489.049185][ T31] __sys_sendto+0x408/0x5a0 [ 489.053767][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 489.059296][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 489.064842][ T31] __x64_sys_sendto+0xde/0x100 [ 489.069770][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.075901][ T31] do_syscall_64+0x174/0x580 [ 489.080576][ T31] ? trace_irq_disable+0x3b/0x140 [ 489.085633][ T31] ? clear_bhb_loop+0x70/0xc0 [ 489.091057][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.097038][ T31] RIP: 0033:0x7f301d35e90e [ 489.103445][ T31] RSP: 002b:00007f301e27ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 489.112380][ T31] RAX: ffffffffffffffda RBX: 00007f301e27e6c0 RCX: 00007f301d35e90e [ 489.120432][ T31] RDX: 0000000000000020 RSI: 00007f301e27d000 RDI: 0000000000000003 [ 489.128613][ T31] RBP: 0000000000000000 R08: 00007f301e27cf04 R09: 000000000000000c [ 489.136622][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 489.155322][ T31] R13: 00007f301e27cf58 R14: 00007f301e27d000 R15: 0000000000000000 [ 489.163629][ T31] [ 489.166796][ T31] [ 489.166796][ T31] Showing all locks held in the system: [ 489.175878][ T31] 1 lock held by khungtaskd/31: [ 489.180953][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 489.198400][ T31] 2 locks held by getty/5364: [ 489.206740][ T31] #0: ffff888035f3f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 489.217667][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 489.228202][ T31] 1 lock held by udevd/9154: [ 489.232846][ T31] #0: ffff8880268ff350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 489.242168][ T31] 2 locks held by syz.0.2191/14640: [ 489.247377][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.256956][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.266073][ T31] 2 locks held by syz.0.2191/14641: [ 489.271581][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.280437][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.289930][ T31] 6 locks held by syz.0.2191/14643: [ 489.295171][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.303450][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.312915][ T31] #2: ffff88802761b260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 489.324351][ T31] #3: ffff888026b3ed08 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 489.342124][ T31] #4: ffff888026b3e6d0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 489.354295][ T31] #5: ffff888026b3e708 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 489.366751][ T31] 2 locks held by syz.1.2192/14644: [ 489.372132][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.380646][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.390209][ T31] 2 locks held by syz.2.2194/14651: [ 489.395511][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.403866][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.413072][ T31] 2 locks held by syz.4.2197/14659: [ 489.418793][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.427058][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.437433][ T31] 2 locks held by syz.4.2197/14661: [ 489.442756][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.462020][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.471230][ T31] 2 locks held by syz.3.2205/14692: [ 489.476485][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.484801][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.494382][ T31] 2 locks held by syz.3.2205/14693: [ 489.500185][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.508545][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.517558][ T31] 2 locks held by syz-executor/14699: [ 489.523044][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.531810][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.541840][ T31] 2 locks held by syz-executor/14701: [ 489.547287][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.555611][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.564795][ T31] 2 locks held by syz-executor/14710: [ 489.571772][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.580243][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.589353][ T31] 2 locks held by syz-executor/14729: [ 489.594763][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.603292][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.613934][ T31] 2 locks held by syz-executor/14770: [ 489.619763][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.628124][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.637152][ T31] 2 locks held by syz-executor/14796: [ 489.643011][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.657612][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.666778][ T31] 2 locks held by syz-executor/14799: [ 489.672310][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.680736][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.689995][ T31] 2 locks held by syz-executor/14800: [ 489.695415][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.703770][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.713070][ T31] 2 locks held by syz-executor/14835: [ 489.719028][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.727321][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.736655][ T31] 2 locks held by syz-executor/14860: [ 489.742142][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.750825][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.760898][ T31] 2 locks held by syz-executor/14890: [ 489.766318][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.774709][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.783908][ T31] 2 locks held by syz-executor/14892: [ 489.789498][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.797763][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.807013][ T31] 2 locks held by syz-executor/14897: [ 489.817523][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.826052][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.835676][ T31] 2 locks held by syz-executor/14926: [ 489.841144][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.849599][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.859188][ T31] 2 locks held by syz-executor/14955: [ 489.864611][ T31] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 489.873902][ T31] #1: ffffffff900985e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 489.883094][ T31] [ 489.885456][ T31] ============================================= [ 489.885456][ T31] [ 489.911159][ T31] NMI backtrace for cpu 1 [ 489.911189][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 489.911211][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.911222][ T31] Call Trace: [ 489.911229][ T31] [ 489.911237][ T31] dump_stack_lvl+0xe8/0x150 [ 489.911268][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 489.911293][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 489.911323][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 489.911363][ T31] sys_info+0x135/0x170 [ 489.911382][ T31] watchdog+0xfd7/0x1030 [ 489.911411][ T31] ? watchdog+0x1c7/0x1030 [ 489.911438][ T31] kthread+0x388/0x470 [ 489.911464][ T31] ? __pfx_watchdog+0x10/0x10 [ 489.911482][ T31] ? __pfx_kthread+0x10/0x10 [ 489.911508][ T31] ret_from_fork+0x514/0xb70 [ 489.911536][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 489.911561][ T31] ? __switch_to+0xc89/0x1420 [ 489.911585][ T31] ? __pfx_kthread+0x10/0x10 [ 489.911610][ T31] ret_from_fork_asm+0x1a/0x30 [ 489.911652][ T31] [ 489.911658][ T31] Sending NMI from CPU 1 to CPUs 0: [ 490.022797][ C0] NMI backtrace for cpu 0 [ 490.022816][ C0] CPU: 0 UID: 0 PID: 7972 Comm: kworker/u8:39 Not tainted syzkaller #0 PREEMPT(full) [ 490.022833][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.022844][ C0] Workqueue: bat_events batadv_tt_purge [ 490.022868][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x111/0x270 [ 490.022889][ C0] Code: 31 73 2d 41 8b 44 24 20 a9 00 00 04 00 74 db 25 00 00 03 00 83 f8 01 ba 03 00 00 00 83 da 00 48 89 df 4c 89 e6 e8 ff 62 00 00 <85> c0 75 bc eb 79 48 c7 c7 f0 7d a2 8e 4c 89 fe e8 6a 44 6d 03 eb [ 490.022902][ C0] RSP: 0018:ffffc90000007d70 EFLAGS: 00000002 [ 490.022914][ C0] RAX: 0000000000000001 RBX: ffff888028f19f00 RCX: ffffffff941cdd98 [ 490.022925][ C0] RDX: 0000000000000002 RSI: ffff888028f1aaf0 RDI: ffff888028f19f00 [ 490.022935][ C0] RBP: 18ca2bc7977f1f1c R08: ffffffff90575b37 R09: 1ffffffff20aeb66 [ 490.022947][ C0] R10: dffffc0000000000 R11: fffffbfff20aeb67 R12: ffff888028f1aaf0 [ 490.022958][ C0] R13: ffff888025dc7a30 R14: ffff888028f1aaa0 R15: 0000000000000002 [ 490.022968][ C0] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 490.022980][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.022990][ C0] CR2: 0000557a70cc4ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 490.023003][ C0] Call Trace: [ 490.023009][ C0] [ 490.023015][ C0] ? ktime_get+0x45/0x220 [ 490.023032][ C0] trace_hardirqs_on+0x28/0x40 [ 490.023049][ C0] seqcount_lockdep_reader_access+0xa9/0x100 [ 490.023067][ C0] ktime_get+0x45/0x220 [ 490.023084][ C0] gate_timer_func+0x1dc/0x450 [ 490.023101][ C0] ? __pfx_gate_timer_func+0x10/0x10 [ 490.023116][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 490.023137][ C0] hrtimer_run_softirq+0x17a/0x240 [ 490.023154][ C0] handle_softirqs+0x225/0x840 [ 490.023171][ C0] ? do_softirq+0x76/0xd0 [ 490.023187][ C0] ? batadv_tt_local_purge+0x2c1/0x340 [ 490.023204][ C0] do_softirq+0x76/0xd0 [ 490.023218][ C0] [ 490.023223][ C0] [ 490.023228][ C0] __local_bh_enable_ip+0xf8/0x130 [ 490.023243][ C0] batadv_tt_local_purge+0x2c1/0x340 [ 490.023265][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 490.023280][ C0] batadv_tt_purge+0x35/0xa10 [ 490.023299][ C0] ? rcu_is_watching+0x15/0xb0 [ 490.023321][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 490.023335][ C0] process_scheduled_works+0xa8e/0x14e0 [ 490.023361][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 490.023378][ C0] ? assign_work+0x3cf/0x5d0 [ 490.023393][ C0] worker_thread+0xa47/0xfb0 [ 490.023414][ C0] ? __kthread_parkme+0x71/0x1f0 [ 490.023441][ C0] kthread+0x388/0x470 [ 490.023459][ C0] ? __pfx_worker_thread+0x10/0x10 [ 490.023473][ C0] ? __pfx_kthread+0x10/0x10 [ 490.023492][ C0] ret_from_fork+0x514/0xb70 [ 490.023513][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 490.023531][ C0] ? __switch_to+0xc89/0x1420 [ 490.023548][ C0] ? __pfx_kthread+0x10/0x10 [ 490.023567][ C0] ret_from_fork_asm+0x1a/0x30 [ 490.023594][ C0] [ 490.331641][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 490.338533][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 490.347660][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.357734][ T31] Call Trace: [ 490.361026][ T31] [ 490.363972][ T31] vpanic+0x56c/0xa60 [ 490.367981][ T31] ? __pfx___schedule+0x10/0x10 [ 490.372872][ T31] ? __pfx_vpanic+0x10/0x10 [ 490.377416][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 490.383602][ T31] panic+0xc5/0xd0 [ 490.387355][ T31] ? __pfx_panic+0x10/0x10 [ 490.391805][ T31] ? preempt_schedule_common+0x82/0xd0 [ 490.397287][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 490.402672][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 490.409033][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 490.415229][ T31] watchdog+0x1030/0x1030 [ 490.419595][ T31] ? watchdog+0x1c7/0x1030 [ 490.424048][ T31] kthread+0x388/0x470 [ 490.428182][ T31] ? __pfx_watchdog+0x10/0x10 [ 490.432896][ T31] ? __pfx_kthread+0x10/0x10 [ 490.437523][ T31] ret_from_fork+0x514/0xb70 [ 490.442141][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 490.447282][ T31] ? __switch_to+0xc89/0x1420 [ 490.452063][ T31] ? __pfx_kthread+0x10/0x10 [ 490.456710][ T31] ret_from_fork_asm+0x1a/0x30 [ 490.461529][ T31] [ 490.465180][ T31] Kernel Offset: disabled [ 490.469521][ T31] Rebooting in 86400 seconds..