last executing test programs: 20.453316012s ago: executing program 4 (id=1376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) socketpair(0x14, 0x6, 0xa8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000400)={0x564, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x6, 0x4, 0xfff, 0x9, 0x8b, 0xb7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffd, 0x4000, 0x1, 0x0, 0x5, 0x7, 0x7f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x29, 0xb, 0x9, 0x6, 0xc, 0xb, 0x2, 0x30, 0x12, 0x30, 0x36, 0x6c, 0x12, 0x6, 0x6, 0x19, 0x14, 0xb, 0x4, 0xc, 0x1, 0x1, 0x24, 0x2, 0xb, 0x4, 0x6c, 0x1, 0x60, 0x18, 0x24]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x1, 0x2, 0xfffd, 0xc, 0xf0, 0x8]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x9, 0x3, 0x7, 0x8, 0x1, 0x401]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x18, 0x18, 0x60, 0x3, 0x9, 0x24, 0x9, 0x12, 0x60, 0x4, 0x1, 0x18, 0x1, 0x12, 0x3, 0x24, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc0, 0x0, 0x6434, 0x8, 0x4, 0x9, 0x8, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x6, 0x5af, 0x39ec, 0x7f, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf7, 0x3, 0x789, 0x9, 0x7, 0x4884, 0x1, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0xb, 0x9, 0x8, 0x8, 0xfff9, 0x8]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x3, 0x12, 0x60, 0x18, 0x1, 0x48, 0x11, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x8f02, 0xba13, 0x81, 0x491, 0x6f22, 0x7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x6}, {0x3, 0x2}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0xa}, {0x5, 0x9}, {0x2, 0x2}, {0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x4, 0x3}, {0x2, 0x2}, {0x3, 0x4}, {0x3, 0x2}, {0x6, 0x8}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x4, 0x4}, {0x1}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x7}, {0x2, 0x1}, {0x5}, {0x6, 0xa}, {0x6, 0x9}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x6}, {0x2}, {0x0, 0x9}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x6}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x2}, {0x3, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x902, 0x0, 0x2, 0x33, 0x9, 0x5, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x1}, {0x7, 0xa}, {0x6, 0x9}, {0x6, 0x8}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0xa}, {0x5, 0xa}, {0x3, 0x5}, {0x7, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x2, 0x9}, {0x4, 0x8}, {0x7, 0x4}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x6}, {0x7, 0x3}, {0x2, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x3, 0xa}, {0x7, 0x7}, {0x5, 0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x3, 0x8}, {0x7, 0x9}, {0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x5, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0x6}, {}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5, 0xd8e, 0x22, 0x2, 0x6, 0xddc, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x784, 0x9, 0x7, 0x1, 0x9, 0xfff0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3296, 0x82db, 0x81, 0x5, 0x7f, 0x3, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x69ee, 0x12, 0x400, 0x4, 0xb, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x4}, {0x2, 0x8}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x6}, {0x6, 0x2}, {0x1, 0x7}, {0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x5, 0x1}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0xa}, {0x4}, {0x2, 0x3}, {0x1, 0x7}, {0x7, 0x2}, {0x7}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {0x7, 0x7}, {0x6, 0xa}, {0x1, 0x8}, {0x6, 0x9}, {0x1}, {0x1, 0x3}, {0x1}, {0x4, 0x8}, {0x2, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x5, 0x7}, {0x7, 0x8}, {0x3, 0x3}, {0x7, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x1}, {0x5, 0x6}, {0x1, 0x2}, {0x6, 0x7}, {0x2, 0x5}, {0x6, 0xa}, {0x6, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb2, 0x4, 0xa8, 0x3, 0xfff, 0x200, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x1, 0x30, 0x18, 0xb, 0x12, 0x1b, 0x4, 0x9, 0x30, 0x9, 0x2, 0x9, 0x36, 0xb, 0x5, 0x4, 0x6, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x455, 0x3, 0x0, 0x9, 0x22b2, 0x5, 0x7f, 0x93f3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x6c, 0x5, 0x48, 0x36, 0x1, 0x16, 0x60, 0x16, 0x1, 0x18, 0x4, 0x1, 0x24, 0x6c, 0x48, 0x60, 0x1b, 0x48, 0x30, 0x16, 0x60, 0x18, 0x48, 0x18, 0x16, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x7, 0x86, 0x6, 0x7, 0xffff, 0x3]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x3ff, 0x8, 0x3, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0xa}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x8}, {0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x4, 0xa}, {0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x1}, {0x7, 0x9}, {0x7, 0x7}, {0x7, 0x6}, {0x1, 0x7}, {0x3}, {0x5, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x5}, {0x3}, {0x1}, {}, {0x4, 0x3}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x1}, {0x7, 0x7}, {0x6}, {0x2}, {0x5, 0x3}, {0x6, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc1, 0x2, 0xfffe, 0x8, 0x8, 0x1, 0xfff3, 0x2694]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x14, 0xc, 0x48, 0x18, 0x18, 0x6c, 0x24, 0x0, 0x12, 0x4, 0x70, 0x4, 0xb, 0x3, 0x5, 0x24, 0x1b, 0x48, 0x71, 0x36, 0x5, 0x2, 0x12, 0x2, 0x6c]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x1}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x5}, {0x6, 0x1}, {0x4, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x2, 0x9}, {0x4, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0xa}, {0x6, 0x8}, {0x5, 0x2}, {0x6, 0x7}, {0x4, 0x2}, {0x6, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x4}, {0x7, 0x4}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x8}, {0x3, 0x2}, {0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0x1}, {0x7, 0x8}, {0x4, 0x9}, {0x4, 0x1}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x9}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x8}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x9}, {0x4, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {}, {0x4, 0x3}, {0x2}, {0x7, 0xa}, {0x5, 0x2}, {0x7, 0x7}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x3, 0xd58, 0x8, 0xa2f, 0xc00, 0x8]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x8}, {0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x5}, {0x3, 0x6}, {0x0, 0x8}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x8}, {0x2}, {0x0, 0x1}, {0x6, 0x4}, {0x1}, {0x2, 0xa}, {0x7, 0x8}, {0x4, 0x6}, {0x5}, {0x1}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x68, 0x60, 0x30, 0xb, 0x48, 0x36, 0x4, 0x9, 0x36, 0x0, 0xc, 0xb, 0x36, 0xd, 0x24, 0x5, 0xc, 0x30, 0x1b, 0x1b, 0xabf47640d25bf732, 0x12, 0xc, 0x6c, 0x24, 0x6c, 0x5e, 0x24, 0x0, 0x4f, 0x2]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x8}, {0x2, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x2, 0x4}, {0x7, 0x4}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf95e, 0x81, 0x1, 0x4, 0x80, 0xffd2, 0x7]}}]}]}]}, 0x564}, 0x1, 0x0, 0x0, 0x40010}, 0x68000041) 20.20599047s ago: executing program 2 (id=1380): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e0890620006000ff21000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@local}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) 20.204140671s ago: executing program 4 (id=1381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r3, 0x1f4d2000) write$tun(r3, 0x0, 0x22) close(r3) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="840000002328a093c0681000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000500", @ANYRES32=r2, @ANYBLOB="5c00128009000100766c616e000000004c0002800600010002000000280004800c000100b18c00000000000a0c0001009c2800003e7f00000c00010009000000050000000c0002000d00000007000000040003800600050088a80000"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'erspan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xffaf, 0x0, &(0x7f0000000100)="452846938cebbdfcffff05ffffff", 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r7, &(0x7f00000003c0)='@', 0x1, 0x20040940, &(0x7f0000000400)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000440)={r9, 0x6, 0xff, 0xffff0001, 0x8cd0, 0x6}, 0x14) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) 19.997082402s ago: executing program 2 (id=1384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000003c0)=0x1c, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x6310, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x40, r6, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbfd, {0x2, 0x14, 0x14, 0x6, 0xfe, 0x0, 0xfe, 0x4, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280), 0x8, 0x8b, 0x8, 0xfffffffffffffe5c, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES64=r2, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, 0x0, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r12, 0x84, 0x18, 0x0, &(0x7f0000001040)) 19.744669059s ago: executing program 2 (id=1386): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0346c916dc6152b0370806521455fd2faf02cecdf7a15994b6da357a8c878908bf6e403b4294c0f8b52079dc642c09193da76e48b1d6a51caf48ccdae9293e90f43d6c73623fc9bd05d606babbdda4", @ANYRES64=0x0], 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004088}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000240)={r1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) recvfrom$packet(r9, &(0x7f00000004c0)=""/236, 0xec, 0x40000100, &(0x7f0000000600)={0x11, 0xf5, r10, 0x1, 0x2}, 0x14) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180), &(0x7f0000000100)=0x8) 19.581186444s ago: executing program 2 (id=1389): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="18020000100000d90f000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b000000870000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 19.417433993s ago: executing program 2 (id=1390): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) unshare(0x22020600) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x11, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) readv(r7, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_IFNAME={0x14}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0) syz_emit_ethernet(0xda, &(0x7f00000005c0)={@multicast, @remote, @void, {@mpls_uc={0x8847, {[{0x8, 0x0, 0x1}, {0xcbd}, {0xc, 0x0, 0x1}], @ipv6=@tipc_packet={0xb, 0x6, "e522d5", 0x98, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x2c}, @local, {[@routing={0x0, 0xc, 0x1, 0x4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_mcast={{{{{{0x30, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x2, 0x8001, 0x0, 0x1, 0x7, 0x5, 0x1, 0x4, 0x2, 0x4, 0x4e24, 0x4e20}}, 0x1, 0x3}, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x800084, r1}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) 19.417313812s ago: executing program 0 (id=1391): sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfefff038}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000200)="6880d9df", 0x4}], 0x1, 0x0, 0x0, 0x20000800}}], 0x52b, 0x2900) 19.284487283s ago: executing program 0 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x34, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r1, {0x0, 0x7}, {0xf, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff}, 0x0) 18.123862534s ago: executing program 4 (id=1396): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000380)='k', 0x1, 0xc) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xcb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="a7", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)=']', 0x1}], 0x1}}], 0x2, 0x200400c0) (async, rerun: 64) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="3d7bc76bdbbda9b84b4fce8176a4fe0b", 0x10) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r3, 0x5) (async) accept(r3, 0x0, 0x0) (async, rerun: 32) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001640)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000001740)=0xe8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="a5b55559ef9ec7765e9d15e4fae17a8850c6fd407754851a13f00668bddf3b4c788eabe50d4659f2ab4161d58e3091ea42f4fd180673f2cd017ebc150c076338dd996450ed4d95674a04cdee0272962aa1efacd9732500003400a5803000168004001b8008009a00e000000108001400", @ANYRES32=r6, @ANYBLOB="0600d1007b00000004004200040055800800ce00e0000002144814034f6b8b72b6e7774a40c3a9d45b43c076019fe17c69d90e5067e2b21ec31674ad4f94b36587c42fb33f40fbcc4b0000"], 0x152c}, 0x1, 0x0, 0x0, 0x4048011}, 0x840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x28, 0x5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) connect$llc(r9, &(0x7f0000000040)={0x1a, 0xf, 0x9, 0xa, 0x6, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) (async) accept4(r9, 0x0, 0x0, 0x800) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x1000) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 18.018018415s ago: executing program 0 (id=1397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc8, 0x3, 0x6364, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)='z', 0x14}], 0x1}, 0x4011) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x101, 0x0, r7, 0x101, '\x00', r5, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) 17.7039852s ago: executing program 3 (id=1400): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="18020000100000001f000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b000000870000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 17.578496902s ago: executing program 0 (id=1401): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000280)={{0xffffffffffffffff, &(0x7f0000000400)='-%}\x00', 0x45c0, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x58eb]}, {0x2, 0x6, 0x7ebc, 0x9be}}, 0xd, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x80}, {[0x26ce, 0xfffffff8, 0x2, 0xcf6b]}, 0x7, 0xbb, &(0x7f00000001c0)=""/187}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140b, 0x2, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x20000040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRES32, @ANYRESHEX=r1], 0xf0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17.473642743s ago: executing program 1 (id=1402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000700008802800008024000100d1732899f611cd8994034d7e413dc957630e5493c285aca4006b44000080140004"], 0x98}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10002040}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x20, r2, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x12}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x81) 17.436687411s ago: executing program 3 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004803c0001800c0001007061796c6f6164002c00028008000440000000fe08000340000006400000000108000240000000020900020073797a3200000000140000001100010000000000000000000000000a00"/148], 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 17.406132097s ago: executing program 0 (id=1404): sendmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1000019f}}, {{&(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="007a0a102f608c521b0306dfd1b4fa7cb81ca8b97cec75cecbd7f2c762c438e6bf06e1127801ce0dd33d99f73bb790725a85a458be8c45f6c738ea5479b7301c010180026ae97d858675735c8daf2778ac93edf7416324e215e1f4f11d491212c3a094710b6c6159e6bd43a5229627f689520ec1b0e8d007b386c71ceabb3af176a155df95172db28dd5d190942c4b2af5dbc0c0522441533bd4537161a065d73eea7bd3f6f65e9c7af636fc80c15b7607845e60f695e0fd523d6d1e40d732bb6862c64ff563ee9fa0f82fd6a3f3870e4a6f14ccb8d465"}, {&(0x7f0000000440)="6367bda0bdb3c807af84c039f974d6c4706d9c776531f5dc7c5dc0e669d29a05a6c035e1ed3c1ff13e1c0525c441d0bec2b1eaa36d0470d88d7993a6ba865ed15bc589aa9adee7397869a683bb20e0e1e1a13f8374fd77133ce1dedfa398b2b53ae0bbe2d5436586f251a8c35f5e0fdbdb2acd444a14e0ec6a571f6d695ab9247d3a0f242e520cd82ee3a678e7fa3f48b76319ce18a2def027c347be03b64fc85cbb132c111ff5747ebe77c09a3b56e6684d4595a2a7694b24fa275e0b341260e9d93f4664"}, {&(0x7f0000000540)="60b9148526c742949b2da7bcc413b2b03101dc336c80e50e9aa596de606493cde0fa0db4473f3cebca9abaac0691f57adb4d05aa183ac69d93be2218a3e5fc0a07eae949b9f450ca603cb7189a38ac9a5e6eff3fe1e1eb9e9254892e596d9ee07c0d928aef7014fe27f93c7cdb269143e10a690f4b3c6264b003e5623619d857e941f9edb19e860d4a6d3c8f10f40edaffaf03a0f150d43e51ea31e98ba7f0a7ccd2dd761d64182d0a2ac381e6ec609b8cf27661cfa18eb9172c7a171c4b8eebfd99b7acc0855dbf044fee0aa1e76eb492aad01b47b2"}, {&(0x7f0000000640)="192852b5d7a8bf02a0c516ccd6f4e9"}], 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000050465548ae1cb7e16b50000e10576b2a4a9e94e8ee4a5e492aa85bd768866bf110dbdcda21d38683ca83786b976b9ce88b447213d6d3d8c523e29b4bc3cbed4e9b7a18e90e2000000000000000000000000000008010000050000007c334a597165335da510972e27eb6e4298c1bdca5a0f2a9cf5c9a43bc1dc1cefd922286d54645edc5cd8229a1215e4a561f2fc4072a3738741ad811868d16f3843885893d66e58afeb35923b54f66c718089ed23a1165fde9663ea75070df943d9fbbd5ebfe9fc15c81444acee61961a81846c048cb84749b769bfee400cb0be06de9eb892173aa29f5f506a02cfe81c8c231c64903f72321f56b9848df900000000000000000fd810010000020000002794b3d34f9d9c4f2deae5a1e17f68ae7e8c2ec97b7a48e803f297eb7500ab1bc63d4f6b07264f8a939013406efc4eff9eb627c0cd9bb7b8cbea3b0000000000"]}}, {{&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x2}, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)="06517c1912e12e504d4af89c07c8574580cf70676f06f9706d6d50e8136e2177dfe035f1df8965d1e27ea12fa289542a4987d0dec16b73c731f07549382ed2f74e26ebb3c42d771cd715d7002dbe64a5998187937588c8515d6c9a526e8b90d7"}, {&(0x7f0000000940)="542f60c3262c20a831f073592c5dfecbde0166a699351cbb03b861017a9617a7b75db691b92bbce7d6504abfa822a26377050410534f650501f4e30c5e5e7ef010b92da127c11c0a7df7631f9621d920dc0f65e59d053829443fd4b6b77f589cccc7ac96598cfc6134489f7e8961d6cf4daa80557be51f429a197e8dadf71abdd35c5dbb76afd73d9e27807ce6728e62b705d9947ac3f23d66046c7b7bcf7fc748e9c5db32566c87ba82632a71abc308de8e521c1055c4fc9c46f016e52a25b40311f5c46ff9d32d62f6d13cc3941749"}], 0x0, &(0x7f0000000a80)=[{0x0, 0x114, 0x7ff, "14231cea1f3004efc55f00dabd63d92ce2e679c7352c72ccb354337818d50accde2ca30db7f03dccaf32132c56ebe73688c51dd39c8403490f815418e1ae90bcda28b72301b9ae1ac21cf6b5a2731e0a9fe965dfd2fa8a9af52b5fa8dd96177b514ead983f644abbd7868ae107ae75be5d8773a3a2a834ba60e379b5c2df7f1eeee9f05412d4ff"}, {0x0, 0x119, 0x7, "fbea574bcd3bcfbe36e31eed694cdc2916e2487038c0c6bf0e9fb515fec9894bb8ade31860416a51e90e5dfb372e46d4178e56ad9e548bac194f9f7257dfcf1cddbd2336a54e902c593084e1782552b938b6910bb08cf94c3272afde994bf0f6fbb1b0a7d7f7f9a2bff4148e097cf03fb7cfe71952cc8fbd353ac4b45646f4c8a81883766a69ba1c8abe98a57b334e339c7d245d8db4c2a135a335cb1c28674f82a47e03a579b20aa9422b35"}]}}], 0x400000000000181, 0x9200000004000080) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080002000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r4, 0x215eb000) unshare(0x400) r5 = socket(0x2a, 0x2, 0x0) bind$pptp(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000b0000160000000180c200000188a8200081002e0086dd67"], 0x50) socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYRESDEC=r1, @ANYRES32=r10, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}, 0x1, 0x17, 0x0, 0x844}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000d80)={&(0x7f0000000340), 0xc, &(0x7f0000000a40)={&(0x7f0000000380)={0x5c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40014) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) 17.30216069s ago: executing program 1 (id=1405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="170000000200", 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = socket(0x3b, 0x80805, 0xfffffffe) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f0000000300)={r3, 0x10, 0x7}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000000c02000000000000000200000d200000000300000005000000090000000400000000005f0000000000000000"], 0x0, 0x44, 0x0, 0x0, 0x400}, 0x28) 17.235830817s ago: executing program 3 (id=1406): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 17.221063155s ago: executing program 1 (id=1407): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="74000000f10501020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc0000000000000000f2ff000000000006cd5646d48e2bfb4400070084000000060005403a273e09e197f979d863983d02e2224d91071d3eb9352c679abcd5694d3eab70698809db19802497d66acc81d9c409da5a5a2ed03932bb391e9e35700908697376e67c774ed00af38b"], 0x74}, 0x1, 0x0, 0x0, 0xc800}, 0x4881) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x0, 0xfffff024}, {0x6, 0x4, 0x0, 0x8}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000280"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x1a, 0xa, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 17.001421183s ago: executing program 4 (id=1408): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x9f3b, 0x2}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)='X\x00\x00', 0x3}], 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) write(r1, &(0x7f0000000380)="7c30d83571813c648fbe219adb", 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x0, 0x1, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 16.820234734s ago: executing program 4 (id=1409): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f4, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x38000}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc00}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5aa8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x70000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x22000080}, 0x8810) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x100, 0x70bd26, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r6, 0x800, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x811) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000780)={@dev={0xfe, 0x80, '\x00', 0x28}, 0xd, 0x1, 0x0, 0x0, 0x6a}, &(0x7f00000007c0)=0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x1a}}}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x7}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "ad5d7382e62659480a4fc22140ec"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "c8aaa53b9c4ffeb5bb0933bd"}]]}, 0x64}}, 0x10) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000009c0), 0x2, 0x0) write$cgroup_freezer_state(r10, &(0x7f0000000a00)='THAWED\x00', 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6gre0\x00', 0x0, 0x0, 0x1, 0x4c, 0x8, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x20, 0x40, 0x11, 0xd517}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'pimreg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, 0x0, 0x328, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x40812) connect$netlink(r4, &(0x7f0000000cc0)=@unspec, 0xc) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x4, 0x5}, {0xffe0, 0xc}, {0x5, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x24}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc6}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x34d8, 0x3, 0x1, 0x1, 0x6, 0xa6, 0x3, 0x3}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x959}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_RATE={0x6, 0x5, {0x0, 0xa}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0xa800, 0x0) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x114, r15, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x62}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r8, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x4f}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16.661838568s ago: executing program 3 (id=1410): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01e6ffffffffffffff000a0000010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x0, 0x3, 0x20, @dev={0xfe, 0x80, '\x00', 0x27}, @remote, 0x1, 0x7, 0xc, 0x41}}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r5 = socket$key(0xf, 0x3, 0x2) recvfrom(0xffffffffffffffff, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB=':'], 0x20) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20000090) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc00000000000000e9ffffffffffffffe000000100000000000000000000000000000004000000000a0060803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000140)={r3, 0x4, 0x5, 0x1}) 16.52949073s ago: executing program 4 (id=1411): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r0, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x7, 0xfff1}, {0xfffc, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x7f}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf87}, @TCA_RATE={0x6, 0x5, {0x2d, 0x91}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xcb}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) r2 = socket(0x1, 0x803, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x2c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r3, 0x2, 0x5, 0xff, 0x9, 0xd92d, 0xe, 0x3, {r5, @in={{0x2, 0x4e22, @empty}}, 0x3, 0x0, 0x4, 0x6, 0x7}}, &(0x7f0000000300)=0xb0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ppoll(&(0x7f00000002c0)=[{r9, 0x3c10}], 0x1, &(0x7f0000000340), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf25030000000c000600e15014950000000005000a000000000008000100000000000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x40008000}, 0x4800) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x4098) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 16.529213946s ago: executing program 1 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r2, 0x1, 0x26, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x70bd25, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x8, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 16.437857865s ago: executing program 3 (id=1413): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000180), r1, 0x0, 0x2000000000004, 0xa) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r4, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000440)="800000800000", 0x6, 0x4ba346f6d29095b8, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @broadcast}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006d0004002dbd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="0a90010064dba9fa0000140076657468315f746f5f626174616476001400030070696d360928940f0000000000000000"], 0x4c}}, 0x4000) 16.332519925s ago: executing program 1 (id=1414): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="18020000100000003e000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b000000870000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 16.105111683s ago: executing program 0 (id=1415): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffffff], 'bond_slave_0\x00', 'netpci0\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6, 0x8}, {0x0, 0x5, 0x4}, {0x0, 0x2, 0x1}, 0x98, 0x9}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [0x0, 0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0xffffffffffffffff, 0x0, 0x3}, {{0x7}, 0x5}, {{}, 0x1}, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x3b, 0x1, 0x20, 0x0, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.104538838s ago: executing program 3 (id=1416): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x122, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x80, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @private1}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}, @IFLA_GTP_FD0={0x8}, @IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @private0}]}}}]}, 0x80}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703080008000000b704000055b6809985000000830000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r6, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @fwd={0x8}, @typedef={0x1000000c, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x10, [{0xa, 0x1, 0x81}, {0x3, 0x5}, {0x8, 0x1, 0xe34f}, {0x4, 0x5, 0x5}, {0x5, 0x5, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000a00)=""/59, 0x99, 0x3b, 0x0, 0x4}, 0x28) (async, rerun: 32) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) (rerun: 32) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x98c, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x58e}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x5, 0x3c, &(0x7f00000008c0)=""/60, 0x41000, 0x20, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x7, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r8, r9], 0x0, 0x10, 0x5a}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='GPL\x00'}, 0x94) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280800020000000025bd700037dbdf2500002000d78dffbcd7674f456d7487cb86420170ea40fdc525e0a66e41020e6b2683236a901963c51c93f816991f48030ae23f4622629c234e278ff181", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async, rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 64) 16.095608046s ago: executing program 1 (id=1417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x20000000) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x86, 0x5, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8, 0x3}, 0xe) shutdown(r3, 0x0) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) (async) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r6, @ANYRES16], 0x14) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x84) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4004011) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={r11, 0x37}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000640)={r12, 0x4080, 0x8, 0xe}, &(0x7f0000000680)=0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x98}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r14, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) shutdown(r1, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x4004000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1, 0x4, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x10}, 0x94) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040)) 15.104889146s ago: executing program 2 (id=1418): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000bc0)={0x0, 0x100, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000fc0)={0x0, 0xfffffffffffffffd, @start={r2, 0x1, "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", "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"}, [0xb, 0xffffffff, 0x81, 0x2, 0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0xff, 0xfff, 0xffffffff, 0x60875798, 0xfffffffffffff51f, 0x0, 0x101, 0x9, 0x1, 0x7, 0x4, 0x1000, 0x5, 0x800, 0x46fc, 0x0, 0x5117223, 0xf9, 0x7, 0xb15, 0x9, 0x25a, 0x3, 0x3, 0x0, 0x7ff, 0x0, 0x2, 0x7, 0x3, 0x8001, 0x40, 0xe57b, 0xe6cd, 0x4, 0x9, 0x10001, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8, 0x0, 0x1, 0xffffffff, 0xfffffffffffffffb, 0x8478, 0xe83, 0x80000000, 0x40, 0xffffffff, 0x4]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x8000000000000000, 0x9) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf251d0000000c002f80080001000400000008000300", @ANYRES32=r8, @ANYBLOB="d2eaa6da39983adb4f498c3a925f95409e5719c821055db51d08d471872cc6235244e55e9e76af6e09c6ab91b222ba941b3597c07f491b49b467e9f9f508217969058eaeab4e69e2a25e29c487a2a5742b1e5fff09285c169846b01ca6891188cf58448d4de8dd3e0b3d44653396204b2176e8fac4f2dad031c010e4259d22c60f9c0126c6f31cb67567"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x40400a0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000500)={0x7, 0x9, 0x1000, 0x8}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r10, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb014, 0x4, 0x3c8, 0x1f8, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0xd, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'erspan0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='cubic', 0x5) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) 1.544047298s ago: executing program 32 (id=1411): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r0, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x7, 0xfff1}, {0xfffc, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x7f}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf87}, @TCA_RATE={0x6, 0x5, {0x2d, 0x91}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xcb}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) r2 = socket(0x1, 0x803, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x2c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r3, 0x2, 0x5, 0xff, 0x9, 0xd92d, 0xe, 0x3, {r5, @in={{0x2, 0x4e22, @empty}}, 0x3, 0x0, 0x4, 0x6, 0x7}}, &(0x7f0000000300)=0xb0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ppoll(&(0x7f00000002c0)=[{r9, 0x3c10}], 0x1, &(0x7f0000000340), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf25030000000c000600e15014950000000005000a000000000008000100000000000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x40008000}, 0x4800) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x4098) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 514.375996ms ago: executing program 33 (id=1415): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffffff], 'bond_slave_0\x00', 'netpci0\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6, 0x8}, {0x0, 0x5, 0x4}, {0x0, 0x2, 0x1}, 0x98, 0x9}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [0x0, 0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0xffffffffffffffff, 0x0, 0x3}, {{0x7}, 0x5}, {{}, 0x1}, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x3b, 0x1, 0x20, 0x0, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 463.568265ms ago: executing program 34 (id=1417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x20000000) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x86, 0x5, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8, 0x3}, 0xe) shutdown(r3, 0x0) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) (async) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r6, @ANYRES16], 0x14) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x84) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4004011) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={r11, 0x37}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000640)={r12, 0x4080, 0x8, 0xe}, &(0x7f0000000680)=0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x98}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r14, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) shutdown(r1, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x4004000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1, 0x4, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x10}, 0x94) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040)) 403.21039ms ago: executing program 35 (id=1416): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x122, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x80, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @private1}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}, @IFLA_GTP_FD0={0x8}, @IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @private0}]}}}]}, 0x80}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703080008000000b704000055b6809985000000830000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r6, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x1}, @fwd={0x8}, @typedef={0x1000000c, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x5, 0x0, 0x4, 0x0, 0x10, [{0xa, 0x1, 0x81}, {0x3, 0x5}, {0x8, 0x1, 0xe34f}, {0x4, 0x5, 0x5}, {0x5, 0x5, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000a00)=""/59, 0x99, 0x3b, 0x0, 0x4}, 0x28) (async, rerun: 32) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) (rerun: 32) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x98c, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x58e}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x5, 0x3c, &(0x7f00000008c0)=""/60, 0x41000, 0x20, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x7, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r8, r9], 0x0, 0x10, 0x5a}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='GPL\x00'}, 0x94) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280800020000000025bd700037dbdf2500002000d78dffbcd7674f456d7487cb86420170ea40fdc525e0a66e41020e6b2683236a901963c51c93f816991f48030ae23f4622629c234e278ff181", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async, rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 64) 0s ago: executing program 36 (id=1418): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000bc0)={0x0, 0x100, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000fc0)={0x0, 0xfffffffffffffffd, @start={r2, 0x1, "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", "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"}, [0xb, 0xffffffff, 0x81, 0x2, 0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0xff, 0xfff, 0xffffffff, 0x60875798, 0xfffffffffffff51f, 0x0, 0x101, 0x9, 0x1, 0x7, 0x4, 0x1000, 0x5, 0x800, 0x46fc, 0x0, 0x5117223, 0xf9, 0x7, 0xb15, 0x9, 0x25a, 0x3, 0x3, 0x0, 0x7ff, 0x0, 0x2, 0x7, 0x3, 0x8001, 0x40, 0xe57b, 0xe6cd, 0x4, 0x9, 0x10001, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8, 0x0, 0x1, 0xffffffff, 0xfffffffffffffffb, 0x8478, 0xe83, 0x80000000, 0x40, 0xffffffff, 0x4]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r6, r6, &(0x7f0000000040)=0x8000000000000000, 0x9) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf251d0000000c002f80080001000400000008000300", @ANYRES32=r8, @ANYBLOB="d2eaa6da39983adb4f498c3a925f95409e5719c821055db51d08d471872cc6235244e55e9e76af6e09c6ab91b222ba941b3597c07f491b49b467e9f9f508217969058eaeab4e69e2a25e29c487a2a5742b1e5fff09285c169846b01ca6891188cf58448d4de8dd3e0b3d44653396204b2176e8fac4f2dad031c010e4259d22c60f9c0126c6f31cb67567"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x40400a0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000500)={0x7, 0x9, 0x1000, 0x8}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r10, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb014, 0x4, 0x3c8, 0x1f8, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0xd, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'erspan0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='cubic', 0x5) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @multicast}, 0x10) kernel console output (not intermixed with test programs): 4593][ T7359] netlink: 'syz.0.333': attribute type 6 has an invalid length. [ 139.834609][ T7359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.333'. [ 140.115952][ T7371] dummy0: entered promiscuous mode [ 141.213326][ T7408] tc_dump_action: action bad kind [ 141.261639][ T7388] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 141.280544][ T7388] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 141.451052][ T7418] validate_nla: 2 callbacks suppressed [ 141.451073][ T7418] netlink: 'syz.1.346': attribute type 21 has an invalid length. [ 141.451125][ T7418] netlink: 'syz.1.346': attribute type 6 has an invalid length. [ 141.735856][ T7388] Dev vda: unable to read RDB block 8 [ 141.736115][ T7388] vda: unable to read partition table [ 141.743247][ T7420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.778362][ T7421] __nla_validate_parse: 7 callbacks suppressed [ 141.778381][ T7421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.349'. [ 142.051218][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 142.120416][ T7427] netlink: 'syz.3.351': attribute type 361 has an invalid length. [ 142.454181][ T7447] netlink: 'syz.4.357': attribute type 11 has an invalid length. [ 142.603860][ T5927] IPVS: starting estimator thread 0... [ 142.673455][ T7455] IPVS: Scheduler module ip_vs_mh not found [ 142.691604][ T7456] IPVS: using max 27 ests per chain, 64800 per kthread [ 142.884332][ T7463] netlink: 'syz.4.362': attribute type 21 has an invalid length. [ 142.884390][ T7463] netlink: 'syz.4.362': attribute type 6 has an invalid length. [ 142.884403][ T7463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.362'. [ 143.134334][ T7465] bond3: invalid ARP target 0.0.0.0 specified for addition [ 143.134355][ T7465] bond3: option arp_ip_target: invalid value (0) [ 143.163963][ T7465] bond3 (unregistering): Released all slaves [ 143.449323][ T7473] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 143.669335][ T7487] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 143.747988][ T7488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.372'. [ 143.797413][ T7488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.799713][ T7501] lo: entered allmulticast mode [ 143.849442][ T7487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.869114][ T7487] bond1: (slave geneve2): making interface the new active one [ 143.870635][ T7487] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 143.893362][ T5928] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 143.900263][ T5928] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 143.900388][ T5928] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 143.900470][ T5928] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.030619][ T7508] lo: left allmulticast mode [ 144.077438][ T7509] netlink: 'syz.3.376': attribute type 21 has an invalid length. [ 144.077551][ T7509] netlink: 'syz.3.376': attribute type 6 has an invalid length. [ 144.077569][ T7509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.376'. [ 144.657461][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 144.679596][ T7533] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 144.824922][ T7534] ip6t_rt: unknown flags 1F [ 144.837975][ T7537] gretap0: entered promiscuous mode [ 144.840922][ T7537] vlan3: entered promiscuous mode [ 144.872381][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 145.042327][ T7544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 145.180054][ T7545] netlink: 'syz.4.388': attribute type 10 has an invalid length. [ 145.202900][ T7545] netlink: 'syz.4.388': attribute type 10 has an invalid length. [ 145.270757][ T7554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.390'. [ 146.028498][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.034939][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.188523][ T7612] validate_nla: 2 callbacks suppressed [ 147.188542][ T7612] netlink: 'syz.3.405': attribute type 21 has an invalid length. [ 147.188595][ T7612] netlink: 'syz.3.405': attribute type 6 has an invalid length. [ 147.188609][ T7612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.405'. [ 147.311001][ T7618] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.326192][ T7619] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 147.461902][ T7622] netlink: 'syz.1.412': attribute type 11 has an invalid length. [ 147.530022][ T7622] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 147.696569][ T7624] 8021q: VLANs not supported on syzkaller0 [ 147.776942][ T7631] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 147.849701][ T7631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.070677][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 148.122030][ T7640] team1: entered promiscuous mode [ 148.123322][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 148.123325][ T7640] team1: entered allmulticast mode [ 148.123767][ T7640] 8021q: adding VLAN 0 to HW filter on device team1 [ 148.132040][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 148.596737][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 148.596762][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 148.596799][ T7652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.419'. [ 148.649774][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 148.970896][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 149.095538][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 149.133674][ T7668] netlink: 'syz.3.423': attribute type 21 has an invalid length. [ 149.133731][ T7668] netlink: 'syz.3.423': attribute type 6 has an invalid length. [ 149.210217][ T7669] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 149.483168][ T7677] netlink: 'syz.0.426': attribute type 32 has an invalid length. [ 150.987917][ T7731] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 151.101106][ T7707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.101130][ T7707] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 151.208174][ T7707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.208199][ T7707] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 151.236067][ T7742] netlink: 'syz.3.439': attribute type 21 has an invalid length. [ 151.236128][ T7742] netlink: 'syz.3.439': attribute type 6 has an invalid length. [ 151.312197][ T7707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.312222][ T7707] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 151.384319][ T7707] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.384343][ T7707] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 151.816809][ T7757] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.504459][ T7817] netlink: 'syz.2.452': attribute type 21 has an invalid length. [ 153.504516][ T7817] netlink: 'syz.2.452': attribute type 6 has an invalid length. [ 153.504539][ T7817] __nla_validate_parse: 4 callbacks suppressed [ 153.504551][ T7817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.452'. [ 153.557264][ T7824] netlink: 72 bytes leftover after parsing attributes in process `syz.1.449'. [ 153.885424][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.921370][ T7837] netlink: 'syz.2.455': attribute type 21 has an invalid length. [ 153.925049][ T7838] netlink: 'syz.2.455': attribute type 21 has an invalid length. [ 153.956883][ T7837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.455'. [ 153.956925][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'. [ 153.959851][ T7838] netlink: 132 bytes leftover after parsing attributes in process `syz.2.455'. [ 153.959888][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'. [ 154.136609][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 154.136633][ T7841] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 154.136647][ T7841] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 154.184665][ T7841] syz.3.459 (7841) used obsolete PPPIOCDETACH ioctl [ 154.489765][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 154.490463][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 154.549688][ T7863] netlink: 96 bytes leftover after parsing attributes in process `syz.2.464'. [ 154.776456][ T7863] 8021q: VLANs not supported on sit0 [ 155.083548][ T7873] netlink: 'syz.0.466': attribute type 21 has an invalid length. [ 155.098926][ T7873] netlink: 'syz.0.466': attribute type 6 has an invalid length. [ 155.297230][ T7877] netlink: 'syz.4.467': attribute type 34 has an invalid length. [ 155.428858][ T7877] bond1: option lacp_strict: invalid value (5) [ 155.431728][ T7877] bond1 (unregistering): Released all slaves [ 156.971465][ T7952] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 156.984959][ T7952] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 158.065673][ T7988] syzkaller0: entered promiscuous mode [ 158.065698][ T7988] syzkaller0: entered allmulticast mode [ 158.394857][ T7990] batadv_slave_1: entered promiscuous mode [ 158.398863][ T7999] syzkaller1: entered allmulticast mode [ 158.523650][ T7989] batadv_slave_1: left promiscuous mode [ 159.832334][ T8062] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 162.039653][ T8068] __nla_validate_parse: 12 callbacks suppressed [ 162.039673][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 162.137878][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 162.320140][ T8090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.510'. [ 162.341760][ T8091] netlink: 48 bytes leftover after parsing attributes in process `syz.4.510'. [ 162.390796][ T8090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.510'. [ 162.391033][ T8090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.510'. [ 162.391258][ T8090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.510'. [ 162.395144][ T8090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.510'. [ 162.403149][ T8091] netlink: 48 bytes leftover after parsing attributes in process `syz.4.510'. [ 162.403765][ T8091] netlink: 48 bytes leftover after parsing attributes in process `syz.4.510'. [ 163.301451][ T8127] netlink: 'syz.3.514': attribute type 6 has an invalid length. [ 163.763477][ T8145] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 163.846913][ T8145] bond3: entered promiscuous mode [ 163.846939][ T8145] bond3: entered allmulticast mode [ 163.847335][ T8145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.877142][ T8146] erspan1: entered allmulticast mode [ 164.038355][ T8159] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 165.701179][ T8193] netlink: 'syz.1.533': attribute type 13 has an invalid length. [ 165.813112][ T8196] netlink: 'syz.2.534': attribute type 4 has an invalid length. [ 165.813136][ T8196] netlink: 'syz.2.534': attribute type 8 has an invalid length. [ 165.813148][ T8196] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 165.813184][ T8196] NCSI netlink: No device for ifindex 48485 [ 165.893350][ T8196] ip6tnl1: entered allmulticast mode [ 166.185428][ T8206] batman_adv: batadv0: Adding interface: gretap1 [ 166.185447][ T8206] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.185479][ T8206] batman_adv: batadv0: Interface activated: gretap1 [ 166.212641][ T8203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.329833][ T8214] tipc: Started in network mode [ 166.329866][ T8214] tipc: Node identity ac14140f, cluster identity 4711 [ 166.330902][ T8214] tipc: New replicast peer: 255.255.255.255 [ 166.374539][ T8214] tipc: Enabled bearer , priority 10 [ 166.387545][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.387817][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.417154][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.449907][ T8219] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 166.512954][ T8219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.533018][ T8219] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 166.615677][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.689855][ T5625] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.985817][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.113754][ T8253] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 167.459047][ T5740] tipc: Node number set to 2886997007 [ 167.509437][ T8260] __nla_validate_parse: 41 callbacks suppressed [ 167.509457][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 167.543958][ T8265] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 168.329121][ T8295] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 168.329152][ T8295] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 168.702054][ T8305] netlink: 'syz.4.558': attribute type 1 has an invalid length. [ 168.862233][ T8309] netlink: 'syz.4.558': attribute type 10 has an invalid length. [ 168.862256][ T8309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.558'. [ 168.893984][ T8311] netlink: 'syz.0.560': attribute type 16 has an invalid length. [ 168.894007][ T8311] netlink: 'syz.0.560': attribute type 17 has an invalid length. [ 168.940786][ T8305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.044244][ T8311] dummy0: left promiscuous mode [ 169.100394][ T8311] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.128966][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 169.364743][ T8311] xt_bpf: check failed: parse error [ 169.709815][ T8339] netlink: 2 bytes leftover after parsing attributes in process `syz.3.570'. [ 169.781632][ T8349] netlink: 'syz.4.573': attribute type 1 has an invalid length. [ 169.817734][ T8349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.833657][ T8349] netlink: 'syz.4.573': attribute type 10 has an invalid length. [ 169.833679][ T8349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.573'. [ 169.911929][ T8352] Dead loop on virtual device lo (net 37), fix it urgently! [ 169.912104][ T8352] Dead loop on virtual device lo (net 37), fix it urgently! [ 169.912247][ T8352] Dead loop on virtual device lo (net 37), fix it urgently! [ 169.965746][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 170.028449][ T8358] netlink: 72 bytes leftover after parsing attributes in process `syz.4.576'. [ 170.029951][ T8359] netlink: 72 bytes leftover after parsing attributes in process `syz.4.576'. [ 170.119574][ T8362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'. [ 170.430417][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 170.530499][ T8377] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 170.530529][ T8377] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 170.551093][ T8376] syzkaller1: entered promiscuous mode [ 170.551116][ T8376] syzkaller1: entered allmulticast mode [ 170.969597][ T8384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.583'. [ 171.189282][ T8399] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 171.317914][ T8403] netlink: 'syz.3.586': attribute type 10 has an invalid length. [ 171.357718][ T8399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.610069][ T8414] netlink: 'syz.3.590': attribute type 15 has an invalid length. [ 171.969013][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.975043][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.056925][ T8406] batman_adv: batadv0: Interface deactivated: gretap1 [ 172.095628][ T5937] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.096217][ T5937] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.096261][ T5937] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.096299][ T5937] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.399027][ T8439] xt_MASQUERADE: bad MAP_IPS. [ 172.602547][ T8451] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 172.694763][ T8454] __nla_validate_parse: 11 callbacks suppressed [ 172.694786][ T8454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.600'. [ 172.732421][ T8451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.862681][ T8454] dummy0: entered promiscuous mode [ 172.935362][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 172.938585][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 172.938616][ T8456] net_ratelimit: 48 callbacks suppressed [ 172.938630][ T8456] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 173.118150][ T8472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.605'. [ 173.122599][ T8472] netlink: 224 bytes leftover after parsing attributes in process `syz.0.605'. [ 173.171059][ T8476] can: request_module (can-proto-0) failed. [ 173.641624][ T8482] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 173.641662][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.913545][ T8489] netlink: 7 bytes leftover after parsing attributes in process `syz.4.610'. [ 174.196347][ T8501] validate_nla: 4 callbacks suppressed [ 174.196368][ T8501] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 174.226564][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 174.226600][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 174.312333][ T8506] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 174.325610][ T8507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.369184][ T8501] bond3: entered promiscuous mode [ 174.369608][ T8501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.400625][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 174.467864][ T8511] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 174.467888][ T8511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.615'. [ 174.552494][ T8506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.599148][ T8508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.600814][ T8508] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 174.601771][ T8508] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 174.633579][ T8508] bond3: (slave gre2): making interface the new active one [ 174.633604][ T8508] gre2: entered promiscuous mode [ 174.652268][ T8508] bond3: (slave gre2): Enslaving as an active interface with an up link [ 174.680429][ T8501] bond3 (unregistering): (slave gre2): Releasing backup interface [ 174.680495][ T8501] gre2: left promiscuous mode [ 174.711547][ T8501] bond3 (unregistering): Released all slaves [ 174.848268][ T5928] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 174.849327][ T5927] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 174.849381][ T5927] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 174.849419][ T5927] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 175.190356][ T8505] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 175.190395][ T8505] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 176.011071][ T8560] pimreg: tun_chr_ioctl cmd 1074812118 [ 176.186411][ T8565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.557472][ T8577] hsr0: entered promiscuous mode [ 176.573290][ T8577] hsr_slave_0: left promiscuous mode [ 176.587251][ T8577] hsr_slave_1: left promiscuous mode [ 176.593903][ T8577] hsr0 (unregistering): left promiscuous mode [ 177.248310][ T8600] vlan2: entered allmulticast mode [ 177.248334][ T8600] bridge2: entered allmulticast mode [ 177.340845][ T8619] Cannot find del_set index 2 as target [ 177.660731][ T8635] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.724780][ T8637] __nla_validate_parse: 18 callbacks suppressed [ 177.724802][ T8637] netlink: 132 bytes leftover after parsing attributes in process `syz.4.650'. [ 178.012098][ T8649] bridge2: entered promiscuous mode [ 178.012122][ T8649] bridge2: entered allmulticast mode [ 178.205465][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 178.361342][ T8656] sctp: [Deprecated]: syz.3.654 (pid 8656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.361342][ T8656] Use struct sctp_sack_info instead [ 178.361492][ T8656] sctp: [Deprecated]: syz.3.654 (pid 8656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.361492][ T8656] Use struct sctp_sack_info instead [ 178.634661][ T8661] netlink: 'syz.1.657': attribute type 39 has an invalid length. [ 178.738632][ T8663] netlink: 'syz.0.659': attribute type 3 has an invalid length. [ 178.738831][ T8663] netlink: 'syz.0.659': attribute type 3 has an invalid length. [ 178.894388][ T8673] sit0: entered promiscuous mode [ 178.927241][ T8673] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 178.927265][ T8673] netlink: 1 bytes leftover after parsing attributes in process `syz.0.660'. [ 179.184474][ T8686] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 179.287633][ T8686] bond5: entered promiscuous mode [ 179.288195][ T8686] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.379048][ T8688] bond5: (slave bridge3): making interface the new active one [ 179.379070][ T8688] bridge3: entered promiscuous mode [ 179.405174][ T8688] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 180.073207][ T8727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.670'. [ 180.122535][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 180.180412][ T8729] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.237973][ T8727] team0: Port device team_slave_0 removed [ 180.284811][ T8729] xt_CT: No such helper "netbios-ns" [ 180.651850][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 180.668153][ T8737] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 180.668180][ T8737] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 180.668357][ T8737] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 180.751828][ T8736] netlink: 68 bytes leftover after parsing attributes in process `syz.4.671'. [ 180.752752][ T8742] tipc: Enabled bearer , priority 0 [ 180.786494][ T8741] tipc: Disabling bearer [ 181.193088][ T8764] netlink: 'syz.0.680': attribute type 21 has an invalid length. [ 181.193151][ T8764] netlink: 'syz.0.680': attribute type 6 has an invalid length. [ 181.193168][ T8764] netlink: 132 bytes leftover after parsing attributes in process `syz.0.680'. [ 181.274823][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 181.320107][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 181.447399][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 181.845374][ T5937] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.845423][ T5937] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.845459][ T5937] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.845502][ T5937] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.459701][ T8809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.460729][ T8809] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 182.912126][ T8827] netlink: 'syz.4.693': attribute type 21 has an invalid length. [ 182.912182][ T8827] netlink: 'syz.4.693': attribute type 6 has an invalid length. [ 182.912196][ T8827] __nla_validate_parse: 3 callbacks suppressed [ 182.912208][ T8827] netlink: 132 bytes leftover after parsing attributes in process `syz.4.693'. [ 183.009584][ T8832] tipc: Enabling of bearer rejected, media not registered [ 183.441400][ T8853] netlink: 'syz.4.701': attribute type 8 has an invalid length. [ 183.858148][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 183.858173][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 183.889143][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 183.889168][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 183.914968][ T8868] netlink: 'syz.0.705': attribute type 8 has an invalid length. [ 183.914988][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 183.922737][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.931472][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.148633][ T8878] netlink: 'syz.2.706': attribute type 21 has an invalid length. [ 184.148691][ T8878] netlink: 'syz.2.706': attribute type 6 has an invalid length. [ 184.148729][ T8878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.706'. [ 184.551804][ T8865] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 184.551950][ T8865] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 184.596268][ T8899] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.826764][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 184.862198][ T8914] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.897688][ T8914] ovs-s: entered promiscuous mode [ 184.915366][ T8904] sit0: left promiscuous mode [ 185.022045][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.022180][ T8904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.022521][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.022651][ T8904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.077867][ T8904] dummy0: left promiscuous mode [ 185.112016][ T8904] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 185.288940][ T8928] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 185.403660][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 185.446987][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 185.742888][ T8953] netlink: 'syz.4.723': attribute type 10 has an invalid length. [ 185.801197][ T8953] team0 (unregistering): Port device team_slave_0 removed [ 185.841783][ T8953] team0 (unregistering): Port device team_slave_1 removed [ 186.400232][ T8982] netlink: zone id is out of range [ 186.400249][ T8982] netlink: zone id is out of range [ 186.400258][ T8982] netlink: zone id is out of range [ 186.400266][ T8982] netlink: zone id is out of range [ 186.400274][ T8982] netlink: zone id is out of range [ 186.400282][ T8982] netlink: zone id is out of range [ 186.400295][ T8982] netlink: zone id is out of range [ 186.400303][ T8982] netlink: zone id is out of range [ 186.400311][ T8982] netlink: zone id is out of range [ 186.400319][ T8982] netlink: zone id is out of range [ 186.640404][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.641392][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.722083][ T8976] dummy0: left promiscuous mode [ 186.724733][ T8998] validate_nla: 3 callbacks suppressed [ 186.724748][ T8998] netlink: 'syz.1.727': attribute type 39 has an invalid length. [ 186.865635][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.871378][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.104556][ T8976] vlan2: left promiscuous mode [ 187.104580][ T8976] erspan0: left promiscuous mode [ 187.129920][ T8976] bond1: left promiscuous mode [ 187.131127][ T8976] geneve2: left promiscuous mode [ 187.131148][ T8976] geneve2: left allmulticast mode [ 187.321516][ T8976] bond2: left promiscuous mode [ 187.321541][ T8976] geneve3: left promiscuous mode [ 187.344065][ T8976] ip6tnl1: left allmulticast mode [ 187.365577][ T5941] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.365616][ T5941] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 51243 - 0 [ 187.365644][ T5941] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 187.475369][ T5955] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.475406][ T5955] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 51243 - 0 [ 187.475434][ T5955] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 187.475472][ T5955] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.475498][ T5955] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 51243 - 0 [ 187.475524][ T5955] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 187.475560][ T5955] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.475588][ T5955] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 51243 - 0 [ 187.475615][ T5955] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 187.916062][ T9041] __nla_validate_parse: 41 callbacks suppressed [ 187.916085][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.917077][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.917318][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.918848][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.919106][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.921168][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.921402][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.921635][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.921891][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 187.924027][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 188.544238][ T9058] netlink: 'syz.0.738': attribute type 21 has an invalid length. [ 188.544304][ T9058] netlink: 'syz.0.738': attribute type 6 has an invalid length. [ 188.936340][ T9066] netlink: 'syz.4.742': attribute type 23 has an invalid length. [ 188.958188][ T9073] netlink: 'syz.0.740': attribute type 4 has an invalid length. [ 189.440859][ T9094] netlink: 'syz.4.751': attribute type 1 has an invalid length. [ 189.502853][ T9100] set match dimension is over the limit! [ 189.525468][ T9098] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 189.534447][ T9094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.586819][ T9097] netlink: 'syz.0.750': attribute type 21 has an invalid length. [ 189.652805][ T9097] netlink: 'syz.0.750': attribute type 6 has an invalid length. [ 190.422628][ T9140] tipc: New replicast peer: 0000:0000:0400:0000:0000:0000:0000:0001 [ 190.423376][ T9140] tipc: Enabled bearer , priority 10 [ 190.712730][ T9155] netlink: 'syz.2.763': attribute type 11 has an invalid length. [ 191.153524][ T9162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.534650][ T9194] tipc: Started in network mode [ 191.534683][ T9194] tipc: Node identity ac1414aa, cluster identity 4711 [ 191.535947][ T9194] tipc: Enabled bearer , priority 10 [ 192.150146][ T9225] 8021q: VLANs not supported on syzkaller0 [ 192.247683][ T9233] validate_nla: 7 callbacks suppressed [ 192.247705][ T9233] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 192.290912][ T9233] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 192.291000][ T9233] dummy0: entered promiscuous mode [ 192.505403][ T9242] netlink: 'syz.1.781': attribute type 21 has an invalid length. [ 192.505460][ T9242] netlink: 'syz.1.781': attribute type 6 has an invalid length. [ 192.628562][ T9252] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 192.656731][ T9251] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 192.770726][ T9257] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 192.787498][ T9251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.790121][ T9016] tipc: Node number set to 2886997162 [ 193.126288][ T9270] macvlan2: entered promiscuous mode [ 193.126313][ T9270] macvlan2: entered allmulticast mode [ 193.126750][ T9270] bond2: entered allmulticast mode [ 193.126808][ T9270] bond2: entered promiscuous mode [ 193.127779][ T9270] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.134480][ T9270] team0: Port device macvlan2 added [ 193.234075][ T9263] bond2: (slave ip6gretap1): making interface the new active one [ 193.234103][ T9263] ip6gretap1: entered promiscuous mode [ 193.234261][ T9263] ip6gretap1: entered allmulticast mode [ 193.287819][ T9263] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 193.440335][ T9278] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 193.513051][ T9278] netlink: 'syz.4.791': attribute type 10 has an invalid length. [ 193.513072][ T9278] __nla_validate_parse: 70 callbacks suppressed [ 193.513082][ T9278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.791'. [ 193.556316][ T9280] netlink: 48 bytes leftover after parsing attributes in process `syz.1.792'. [ 193.604737][ T9280] macsec0: entered promiscuous mode [ 193.604763][ T9280] macsec0: entered allmulticast mode [ 193.813021][ T9287] sit0: entered promiscuous mode [ 193.846210][ T9287] netlink: 'syz.1.797': attribute type 1 has an invalid length. [ 193.846234][ T9287] netlink: 1 bytes leftover after parsing attributes in process `syz.1.797'. [ 194.209178][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.209313][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.443363][ T9309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.795'. [ 195.022153][ T9331] netlink: 136 bytes leftover after parsing attributes in process `syz.2.804'. [ 195.112058][ T9336] tc_dump_action: action bad kind [ 195.199966][ T9338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.806'. [ 195.200462][ T9338] dummy0: entered promiscuous mode [ 195.205003][ T9342] netlink: 60 bytes leftover after parsing attributes in process `syz.2.809'. [ 195.230778][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 195.560027][ T9345] sysfs: cannot create duplicate filename '/class/ieee80211/.PÑè'óG!DEÒSˆ' [ 195.560062][ T9345] CPU: 0 UID: 0 PID: 9345 Comm: syz.1.808 Not tainted syzkaller #0 PREEMPT(full) [ 195.560098][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.560111][ T9345] Call Trace: [ 195.560119][ T9345] [ 195.560128][ T9345] dump_stack_lvl+0xe8/0x150 [ 195.560167][ T9345] sysfs_warn_dup+0x8e/0xa0 [ 195.560199][ T9345] sysfs_do_create_link_sd+0xc0/0x110 [ 195.560253][ T9345] device_add_class_symlinks+0x1cf/0x240 [ 195.560282][ T9345] device_add+0x467/0xb80 [ 195.560316][ T9345] wiphy_register+0x1fc8/0x2ff0 [ 195.560360][ T9345] ? __pfx_wiphy_register+0x10/0x10 [ 195.560383][ T9345] ? __pfx_netdev_run_todo+0x10/0x10 [ 195.560428][ T9345] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 195.560467][ T9345] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 195.560496][ T9345] ieee80211_register_hw+0x3d7c/0x4b40 [ 195.560538][ T9345] ? ieee80211_register_hw+0x1961/0x4b40 [ 195.560590][ T9345] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 195.560639][ T9345] ? __asan_memset+0x22/0x50 [ 195.560673][ T9345] ? __hrtimer_setup+0x1b7/0x260 [ 195.560703][ T9345] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 195.560734][ T9345] mac80211_hwsim_new_radio+0x3264/0x5720 [ 195.560795][ T9345] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 195.560820][ T9345] ? kstrndup+0xbd/0x160 [ 195.560849][ T9345] ? kstrndup+0xbd/0x160 [ 195.560875][ T9345] hwsim_new_radio_nl+0xd8b/0xf90 [ 195.560917][ T9345] genl_family_rcv_msg_doit+0x233/0x340 [ 195.560953][ T9345] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 195.560996][ T9345] ? bpf_lsm_capable+0x9/0x20 [ 195.561016][ T9345] ? security_capable+0x7e/0x2c0 [ 195.561050][ T9345] genl_rcv_msg+0x614/0x7a0 [ 195.561085][ T9345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.561111][ T9345] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 195.561153][ T9345] netlink_rcv_skb+0x226/0x4a0 [ 195.561188][ T9345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.561216][ T9345] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.561267][ T9345] ? down_read+0x2be/0x330 [ 195.561310][ T9345] genl_rcv+0x28/0x40 [ 195.561334][ T9345] netlink_unicast+0x7bd/0x940 [ 195.561377][ T9345] netlink_sendmsg+0x813/0xb40 [ 195.561410][ T9345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.561441][ T9345] ? apparmor_socket_sendmsg+0x98/0x360 [ 195.561468][ T9345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.561488][ T9345] sock_sendmsg_nosec+0x13a/0x180 [ 195.561513][ T9345] ____sys_sendmsg+0x54e/0x850 [ 195.561549][ T9345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.561589][ T9345] ? import_iovec+0x73/0xa0 [ 195.561633][ T9345] ___sys_sendmsg+0x2a5/0x360 [ 195.561659][ T9345] ? __lock_acquire+0x747/0x2de0 [ 195.561686][ T9345] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.561718][ T9345] ? futex_wait+0x2a2/0x390 [ 195.561781][ T9345] ? __fget_files+0x2a/0x420 [ 195.561809][ T9345] ? __fget_files+0x3a2/0x420 [ 195.561849][ T9345] __x64_sys_sendmsg+0x1b1/0x290 [ 195.561881][ T9345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.561951][ T9345] do_syscall_64+0x166/0x520 [ 195.561978][ T9345] ? trace_irq_disable+0x3b/0x140 [ 195.562000][ T9345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.562023][ T9345] ? clear_bhb_loop+0x70/0xc0 [ 195.562051][ T9345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.562073][ T9345] RIP: 0033:0x7fd7b079e159 [ 195.562092][ T9345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.562110][ T9345] RSP: 002b:00007fd7b170f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.562133][ T9345] RAX: ffffffffffffffda RBX: 00007fd7b0a26090 RCX: 00007fd7b079e159 [ 195.562161][ T9345] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 195.562175][ T9345] RBP: 00007fd7b083506b R08: 0000000000000000 R09: 0000000000000000 [ 195.562187][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.562199][ T9345] R13: 00007fd7b0a26128 R14: 00007fd7b0a26090 R15: 00007ffd5ace51f8 [ 195.562233][ T9345] [ 195.913669][ T9354] syzkaller1: entered promiscuous mode [ 195.913694][ T9354] syzkaller1: entered allmulticast mode [ 196.174087][ T9365] netlink: 132 bytes leftover after parsing attributes in process `syz.2.811'. [ 196.353558][ T9380] ipvlan2: entered allmulticast mode [ 196.353581][ T9380] macvlan1: entered allmulticast mode [ 196.369648][ T9380] batman_adv: batadv0: Adding interface: ipvlan2 [ 196.369665][ T9380] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.369698][ T9380] batman_adv: batadv0: Interface activated: ipvlan2 [ 196.500467][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.817'. [ 196.778448][ T9401] dummy0: entered promiscuous mode [ 197.304210][ T9433] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 197.390412][ T9434] validate_nla: 10 callbacks suppressed [ 197.390431][ T9434] netlink: 'syz.1.827': attribute type 21 has an invalid length. [ 197.390480][ T9434] netlink: 'syz.1.827': attribute type 6 has an invalid length. [ 197.687285][ T9444] sctp: [Deprecated]: syz.1.830 (pid 9444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.687285][ T9444] Use struct sctp_sack_info instead [ 197.693521][ T9444] sctp: [Deprecated]: syz.1.830 (pid 9444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.693521][ T9444] Use struct sctp_sack_info instead [ 197.740980][ T9446] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.964186][ T9462] netlink: 'syz.2.834': attribute type 1 has an invalid length. [ 197.980733][ T9462] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 198.131774][ T9467] pimreg: entered allmulticast mode [ 198.170763][ T9467] pimreg: left allmulticast mode [ 198.584346][ T9484] netlink: 'syz.4.840': attribute type 21 has an invalid length. [ 198.584404][ T9484] netlink: 'syz.4.840': attribute type 6 has an invalid length. [ 198.584418][ T9484] __nla_validate_parse: 6 callbacks suppressed [ 198.584430][ T9484] netlink: 132 bytes leftover after parsing attributes in process `syz.4.840'. [ 198.741205][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 198.743183][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 198.824120][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'. [ 198.902228][ T9498] netlink: 312 bytes leftover after parsing attributes in process `syz.1.844'. [ 198.969088][ T9500] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 198.974103][ T9500] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 198.974132][ T9500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.845'. [ 199.243117][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 199.244322][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 199.332419][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 199.786419][ T9522] net_ratelimit: 493 callbacks suppressed [ 199.786441][ T9522] netlink: Invalid conntrack timeout [ 199.786532][ T9522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.870345][ T9528] netlink: 'syz.3.853': attribute type 21 has an invalid length. [ 199.870407][ T9528] netlink: 'syz.3.853': attribute type 6 has an invalid length. [ 199.870422][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.853'. [ 219.898257][ T9591] validate_nla: 1 callbacks suppressed [ 219.898276][ T9591] netlink: 'syz.4.873': attribute type 10 has an invalid length. [ 219.898298][ T9591] __nla_validate_parse: 5 callbacks suppressed [ 219.898310][ T9591] netlink: 40 bytes leftover after parsing attributes in process `syz.4.873'. [ 219.997278][ T9601] netlink: Conntrack attr has 8 unknown bytes [ 219.997322][ T9601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.651089][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'. [ 220.651116][ T9622] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.180617][ T9648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.881'. [ 221.199950][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 221.470735][ T9658] netlink: 'syz.0.884': attribute type 10 has an invalid length. [ 221.470758][ T9658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.884'. [ 221.662478][ T9664] nbd0: detected capacity change from 0 to 63 [ 221.680948][ T52] block nbd0: Receive control failed (result -104) [ 221.689029][ T1733] block nbd0: Dead connection, failed to find a fallback [ 221.689100][ T1733] block nbd0: shutting down sockets [ 221.689353][ T1733] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.689572][ T1733] Buffer I/O error on dev nbd0, logical block 1, async page read [ 221.689826][ T1733] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 221.689898][ T1733] Buffer I/O error on dev nbd0, logical block 2, async page read [ 221.689954][ T1733] Buffer I/O error on dev nbd0, logical block 3, async page read [ 222.082327][ T9678] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 222.288922][ T9685] netlink: 52 bytes leftover after parsing attributes in process `syz.1.892'. [ 223.309720][ T9700] FAULT_INJECTION: forcing a failure. [ 223.309720][ T9700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.309755][ T9700] CPU: 1 UID: 0 PID: 9700 Comm: syz.4.895 Not tainted syzkaller #0 PREEMPT(full) [ 223.309780][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.309793][ T9700] Call Trace: [ 223.309802][ T9700] [ 223.309812][ T9700] dump_stack_lvl+0xe8/0x150 [ 223.309850][ T9700] should_fail_ex+0x410/0x560 [ 223.309883][ T9700] _copy_from_user+0x2d/0xb0 [ 223.309914][ T9700] vlan_ioctl_handler+0xbd/0x630 [ 223.309941][ T9700] ? __pfx___mutex_lock+0x10/0x10 [ 223.309971][ T9700] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 223.309995][ T9700] ? hook_file_ioctl+0x1f2/0x600 [ 223.310037][ T9700] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 223.310063][ T9700] sock_ioctl+0x612/0x7e0 [ 223.310103][ T9700] ? __pfx_sock_ioctl+0x10/0x10 [ 223.310138][ T9700] ? __fget_files+0x2a/0x420 [ 223.310168][ T9700] ? __fget_files+0x3a2/0x420 [ 223.310198][ T9700] ? __fget_files+0x2a/0x420 [ 223.310233][ T9700] ? bpf_lsm_file_ioctl+0x9/0x20 [ 223.310265][ T9700] ? __pfx_sock_ioctl+0x10/0x10 [ 223.310299][ T9700] __se_sys_ioctl+0xfc/0x170 [ 223.310328][ T9700] do_syscall_64+0x166/0x520 [ 223.310363][ T9700] ? trace_irq_disable+0x3b/0x140 [ 223.310385][ T9700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.310408][ T9700] ? clear_bhb_loop+0x70/0xc0 [ 223.310436][ T9700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.310459][ T9700] RIP: 0033:0x7fa46299e159 [ 223.310479][ T9700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.310498][ T9700] RSP: 002b:00007fa4638bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.310522][ T9700] RAX: ffffffffffffffda RBX: 00007fa462c25fa0 RCX: 00007fa46299e159 [ 223.310539][ T9700] RDX: 000020000000e580 RSI: 0000000000008983 RDI: 0000000000000003 [ 223.310553][ T9700] RBP: 00007fa4638bc090 R08: 0000000000000000 R09: 0000000000000000 [ 223.310567][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.310580][ T9700] R13: 00007fa462c26038 R14: 00007fa462c25fa0 R15: 00007fff8b48b328 [ 223.310620][ T9700] [ 223.588800][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 223.736920][ T9702] netlink: 'syz.4.896': attribute type 10 has an invalid length. [ 223.736945][ T9702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.896'. [ 224.024202][ T9709] xt_hashlimit: size too large, truncated to 1048576 [ 224.653867][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 224.685386][ T9735] FAULT_INJECTION: forcing a failure. [ 224.685386][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.685438][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: syz.2.906 Not tainted syzkaller #0 PREEMPT(full) [ 224.685463][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.685476][ T9735] Call Trace: [ 224.685485][ T9735] [ 224.685495][ T9735] dump_stack_lvl+0xe8/0x150 [ 224.685532][ T9735] should_fail_ex+0x410/0x560 [ 224.685563][ T9735] _copy_to_user+0x31/0xb0 [ 224.685594][ T9735] simple_read_from_buffer+0xe1/0x170 [ 224.685631][ T9735] proc_fail_nth_read+0x1bb/0x230 [ 224.685665][ T9735] ? common_file_perm+0x20e/0x2b0 [ 224.685695][ T9735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.685735][ T9735] ? rw_verify_area+0x24a/0x4c0 [ 224.685769][ T9735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.685807][ T9735] vfs_read+0x213/0xa80 [ 224.685846][ T9735] ? __pfx___mutex_lock+0x10/0x10 [ 224.685888][ T9735] ? __pfx_vfs_read+0x10/0x10 [ 224.685941][ T9735] ? __fget_files+0x2a/0x420 [ 224.685977][ T9735] ? __fget_files+0x3a2/0x420 [ 224.686007][ T9735] ? __fget_files+0x2a/0x420 [ 224.686047][ T9735] ksys_read+0x150/0x270 [ 224.686083][ T9735] ? __pfx_ksys_read+0x10/0x10 [ 224.686130][ T9735] do_syscall_64+0x166/0x520 [ 224.686156][ T9735] ? trace_irq_disable+0x3b/0x140 [ 224.686178][ T9735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.686201][ T9735] ? clear_bhb_loop+0x70/0xc0 [ 224.686228][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.686251][ T9735] RIP: 0033:0x7f6a8d35e98e [ 224.686278][ T9735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.686296][ T9735] RSP: 002b:00007f6a8b5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.686320][ T9735] RAX: ffffffffffffffda RBX: 00007f6a8b5f66c0 RCX: 00007f6a8d35e98e [ 224.686337][ T9735] RDX: 000000000000000f RSI: 00007f6a8b5f60a0 RDI: 0000000000000005 [ 224.686350][ T9735] RBP: 00007f6a8b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.686364][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.686377][ T9735] R13: 00007f6a8d626038 R14: 00007f6a8d625fa0 R15: 00007ffe2d2d1368 [ 224.686413][ T9735] [ 224.824875][ T9731] vlan3: entered allmulticast mode [ 224.824928][ T9731] bridge4: entered allmulticast mode [ 224.835509][ T9737] bridge4: port 1(erspan0) entered blocking state [ 224.838423][ T9737] bridge4: port 1(erspan0) entered disabled state [ 224.842708][ T9737] erspan0: entered allmulticast mode [ 224.965046][ T9737] erspan0: entered promiscuous mode [ 224.971672][ T9737] bridge4: port 1(erspan0) entered blocking state [ 224.971829][ T9737] bridge4: port 1(erspan0) entered forwarding state [ 225.080532][ T9743] netlink: 5 bytes leftover after parsing attributes in process `syz.2.907'. [ 225.262838][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 225.377202][ T9733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.780998][ T9779] netlink: 'syz.4.917': attribute type 1 has an invalid length. [ 225.844586][ T9779] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.856912][ T9779] netlink: 'syz.4.917': attribute type 1 has an invalid length. [ 226.025034][ T9788] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 226.025059][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.919'. [ 226.104278][ T9793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.921'. [ 226.326060][ T9805] tipc: Enabled bearer , priority 0 [ 226.326491][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.326980][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.334197][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.334717][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.377722][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.383423][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.383921][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.384372][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.419312][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.419807][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.420352][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.420829][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.421340][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.421823][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.422271][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.422829][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.423270][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.423841][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.424281][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.424823][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.527596][ T9805] tipc: Enabling of bearer rejected, already enabled [ 226.831747][ T9803] tipc: Disabling bearer [ 227.203448][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 227.391729][ T9834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.392553][ T9832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.428806][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 227.689482][ T9846] netlink: 'syz.0.932': attribute type 4 has an invalid length. [ 227.732330][ T9846] netlink: 'syz.0.932': attribute type 4 has an invalid length. [ 227.792608][ T9848] 8021q: VLANs not supported on wg0 [ 227.973265][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 228.274802][ T9868] syzkaller1: entered promiscuous mode [ 228.274827][ T9868] syzkaller1: entered allmulticast mode [ 228.932802][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 229.305816][ T9900] bridge0: port 3(vlan0) entered blocking state [ 229.305946][ T9900] bridge0: port 3(vlan0) entered disabled state [ 229.307244][ T9900] vlan0: entered allmulticast mode [ 229.307264][ T9900] geneve0: entered allmulticast mode [ 229.313443][ T9900] vlan0: entered promiscuous mode [ 229.314909][ T9900] geneve0: entered promiscuous mode [ 229.693329][ T9919] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 229.702110][ T9916] vlan2: entered promiscuous mode [ 229.702130][ T9916] bridge0: entered promiscuous mode [ 229.866160][ T9921] netlink: 104 bytes leftover after parsing attributes in process `syz.1.955'. [ 229.893906][ T9921] netlink: 16359 bytes leftover after parsing attributes in process `syz.1.955'. [ 230.135117][ T9928] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 230.209122][ T9939] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 230.246421][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 230.727470][ T9962] xt_hashlimit: size too large, truncated to 1048576 [ 231.827778][T10000] 8021q: VLANs not supported on syzkaller0 [ 232.944550][T10068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'. [ 233.054324][T10073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.768088][T10109] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 1, id = 0 [ 234.100647][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 234.100671][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 234.147572][T10117] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.149807][T10119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.216744][T10124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.248821][T10124] bond6: (slave bond0): making interface the new active one [ 234.253460][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 234.253481][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 234.253507][T10134] netlink: 'syz.0.1009': attribute type 18 has an invalid length. [ 234.341391][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 234.341416][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 234.341444][T10136] netlink: 'syz.0.1009': attribute type 18 has an invalid length. [ 234.343546][T10124] bond6: (slave bond0): Enslaving as an active interface with an up link [ 234.484288][T10117] bond6 (unregistering): (slave bond0): Releasing active interface [ 234.507121][T10117] bond6 (unregistering): Released all slaves [ 234.808671][T10149] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1015'. [ 234.830129][T10149] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1015'. [ 235.237485][T10170] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 235.975719][T10210] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1027'. [ 236.151154][T10216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1028'. [ 236.561269][T10241] block nbd1: server does not support multiple connections per device. [ 236.591832][T10241] block nbd1: shutting down sockets [ 236.637506][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 236.654921][T10246] netlink: 'syz.4.1035': attribute type 4 has an invalid length. [ 236.709135][T10253] ip_tables: iptables: counters copy to user failed while replacing table [ 236.755530][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.756534][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.756584][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.756621][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.798557][T10240] netlink: 'syz.2.1034': attribute type 14 has an invalid length. [ 236.836466][T10258] netlink: 'syz.4.1035': attribute type 4 has an invalid length. [ 236.856657][T10261] ip_tables: iptables: counters copy to user failed while replacing table [ 237.325998][ C1] IPVS: fo: FWM 1 0x00000001 - no destination available [ 237.879145][T10289] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.902659][T10289] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.919236][T10292] netlink: 'syz.3.1039': attribute type 16 has an invalid length. [ 237.919260][T10292] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1039'. [ 238.301118][T10300] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 239.083291][T10300] netlink: 'syz.4.1041': attribute type 4 has an invalid length. [ 239.084380][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 239.850912][T10363] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 240.212703][T10380] netlink: 'syz.4.1053': attribute type 9 has an invalid length. [ 240.909469][T10399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1054'. [ 241.780342][T10430] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1062'. [ 242.695796][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1062'. [ 242.786390][T10460] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 243.115432][T10473] No such timeout policy "syz0" [ 243.179311][T10479] xt_check_table_hooks: 55 callbacks suppressed [ 243.179333][T10479] x_tables: duplicate underflow at hook 1 [ 243.363876][T10478] IPVS: Error connecting to the multicast addr [ 244.035588][T10511] netlink: 'syz.4.1078': attribute type 61 has an invalid length. [ 244.035612][T10511] netlink: 'syz.4.1078': attribute type 62 has an invalid length. [ 244.295040][T10532] netlink: 'syz.0.1081': attribute type 21 has an invalid length. [ 244.295100][T10532] netlink: 'syz.0.1081': attribute type 6 has an invalid length. [ 244.295116][T10532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1081'. [ 244.443382][T10541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1082'. [ 244.569428][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 244.877153][T10560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1086'. [ 244.930197][T10562] netlink: 'syz.4.1087': attribute type 32 has an invalid length. [ 245.420062][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1088'. [ 245.951569][T10581] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1091'. [ 246.429742][T10581] hsr_slave_0 (unregistering): left promiscuous mode [ 247.614760][T10635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.943292][T10641] xt_CT: No such helper "netbios-ns" [ 248.371908][T10676] netlink: NAT attribute has 8 unknown bytes [ 248.371947][T10676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.548795][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 248.548877][T10682] bond1: left allmulticast mode [ 248.571892][T10682] bond1: left promiscuous mode [ 248.572219][T10682] bridge0: port 3(bond1) entered disabled state [ 248.645029][T10682] bridge_slave_1: left allmulticast mode [ 248.645057][T10682] bridge_slave_1: left promiscuous mode [ 248.660182][T10682] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.711078][T10682] bridge_slave_0: left allmulticast mode [ 248.711318][T10682] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.877188][T10701] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1107'. [ 248.938906][T10703] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1107'. [ 249.124981][T10703] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1107'. [ 249.291305][T10699] 8021q: VLANs not supported on syzkaller0 [ 249.615617][ T95] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.615655][ T95] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 249.615709][ T95] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.644085][T10731] tap0: tun_chr_ioctl cmd 1074025677 [ 249.644185][T10731] tap0: linktype set to 805 [ 249.699959][T10731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.737121][T10737] trusted_key: syz.0.1112 sent an empty control message without MSG_MORE. [ 249.829394][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 249.829430][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 249.902668][T10750] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 249.902693][T10750] netlink: 'syz.2.1114': attribute type 2 has an invalid length. [ 249.902708][T10750] netlink: 'syz.2.1114': attribute type 3 has an invalid length. [ 249.902723][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 250.162827][T10761] netlink: 'syz.3.1119': attribute type 14 has an invalid length. [ 250.297422][T10766] veth1_to_bond: entered allmulticast mode [ 250.301944][T10766] veth1_to_bond: entered promiscuous mode [ 250.586174][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1121'. [ 250.588050][T10766] veth1_to_bond (unregistering): left allmulticast mode [ 250.588090][T10766] veth1_to_bond (unregistering): left promiscuous mode [ 250.619513][T10766] bond0: (slave bond_slave_1): Releasing backup interface [ 251.052468][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 251.052493][T10799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'. [ 251.808945][ T9665] block nbd0: Possible stuck request ffff888027067000: control (read@0,1024B). Runtime 30 seconds [ 252.995830][T10873] syzkaller1: entered promiscuous mode [ 252.995855][T10873] syzkaller1: entered allmulticast mode [ 253.527126][T10911] netlink: 'syz.0.1155': attribute type 7 has an invalid length. [ 253.744487][T10918] __nla_validate_parse: 81 callbacks suppressed [ 253.744510][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 253.781205][T10918] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 253.829568][T10920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1159'. [ 253.973521][T10921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1159'. [ 253.973540][T10921] openvswitch: netlink: Flow actions attr not present in new flow. [ 254.077522][T10928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.301968][T10939] netlink: 'syz.1.1164': attribute type 21 has an invalid length. [ 254.302031][T10939] netlink: 'syz.1.1164': attribute type 6 has an invalid length. [ 254.302047][T10939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1164'. [ 254.337722][T10940] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1163'. [ 254.619320][T10945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1167'. [ 255.030323][T10960] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.139331][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 255.504884][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 255.649027][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.649091][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.202975][T10998] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 258.230653][T10998] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 258.499306][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 258.661006][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1185'. [ 259.321839][T11005] sit0: left promiscuous mode [ 259.358178][T11005] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 259.434592][T11019] __nla_validate_parse: 2 callbacks suppressed [ 259.434614][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1185'. [ 259.554852][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1193'. [ 259.609242][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'. [ 259.686750][T11034] veth5: entered promiscuous mode [ 260.226051][T11062] netlink: 'syz.3.1199': attribute type 14 has an invalid length. [ 260.242324][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1199'. [ 260.272044][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1199'. [ 260.327314][T11044] syzkaller1: entered promiscuous mode [ 260.327367][T11044] syzkaller1: entered allmulticast mode [ 260.426144][T11070] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 260.426172][T11070] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 260.428861][T11070] tipc: Enabled bearer , priority 0 [ 260.683619][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 260.992190][T11093] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1209'. [ 261.154119][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 261.249788][T11095] vlan4: entered allmulticast mode [ 261.249811][T11095] veth0_virt_wifi: entered allmulticast mode [ 261.270895][T11095] bridge4: port 1(erspan0) entered disabled state [ 261.296197][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.300864][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.719393][T11114] tipc: Enabling of bearer rejected, already enabled [ 261.797566][T11125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1220'. [ 261.861412][T11125] ipvlan0: entered promiscuous mode [ 261.887735][T11125] ipvlan0: left promiscuous mode [ 261.993254][T11118] tipc: Resetting bearer [ 262.107597][T11141] tipc: Failed to remove unknown binding: 66,0,0/0:637113077/637113079 [ 262.107625][T11141] tipc: Failed to remove unknown binding: 66,0,0/0:637113077/637113078 [ 262.107997][T11141] tipc: Failed to remove unknown binding: 66,0,0/0:637113077/637113079 [ 262.108022][T11141] tipc: Failed to remove unknown binding: 66,0,0/0:637113077/637113078 [ 262.339617][T11153] netlink: 'syz.0.1224': attribute type 39 has an invalid length. [ 262.482180][T11158] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 262.523878][T11158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.569480][T11158] netlink: 'syz.1.1225': attribute type 10 has an invalid length. [ 262.569502][T11158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1225'. [ 262.799866][T11166] netlink: 'syz.2.1228': attribute type 30 has an invalid length. [ 262.976330][T11166] netlink: 'syz.2.1228': attribute type 30 has an invalid length. [ 263.150217][T11184] netlink: 'syz.0.1233': attribute type 9 has an invalid length. [ 263.409042][T11194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.594012][T11200] netlink: 'syz.4.1237': attribute type 10 has an invalid length. [ 264.509929][T11238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.510407][T11238] __nla_validate_parse: 3 callbacks suppressed [ 264.510424][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 264.724715][T11243] bridge4: port 1(erspan0) entered disabled state [ 264.895666][T11243] dummy0: left promiscuous mode [ 265.020913][T11243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.035719][T11243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.183159][T11243] team1: left promiscuous mode [ 265.183178][T11243] team1: left allmulticast mode [ 265.184325][T11243] bond3: left promiscuous mode [ 265.184340][T11243] bond3: left allmulticast mode [ 265.185043][T11243] erspan1: left allmulticast mode [ 265.213569][T11243] bridge2: left promiscuous mode [ 265.213585][T11243] bridge2: left allmulticast mode [ 265.214079][T11243] bond5: left promiscuous mode [ 265.214091][T11243] bridge3: left promiscuous mode [ 265.240349][T11243] vlan3: left allmulticast mode [ 265.240369][T11243] bridge4: left allmulticast mode [ 265.290754][T11243] vlan4: left allmulticast mode [ 265.290776][T11243] veth0_virt_wifi: left allmulticast mode [ 265.355476][ T5940] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 265.355516][ T5940] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.355543][ T5940] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.355583][ T5940] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 265.355611][ T5940] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.355638][ T5940] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.355675][ T5940] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 265.355731][ T5940] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.355759][ T5940] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.355796][ T5940] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 265.355824][ T5940] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.355851][ T5940] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 265.829749][T11289] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 265.829774][T11289] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1256'. [ 266.056249][T11304] bond0: option min_links: invalid value (18446744073709551615) [ 266.056300][T11304] bond0: option min_links: allowed values 0 - 2147483647 [ 266.057729][T11304] syzkaller1: entered promiscuous mode [ 266.057749][T11304] syzkaller1: entered allmulticast mode [ 266.245954][T11314] xt_addrtype: ipv6 does not support BROADCAST matching [ 266.249354][T11314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1260'. [ 266.505843][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 266.505867][T11327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1264'. [ 266.509823][T11327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1264'. [ 266.821700][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 268.117582][T11358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1273'. [ 268.259161][T11369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1277'. [ 268.295705][T11369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.303261][T11369] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1277'. [ 268.459568][T11380] Bluetooth: ISO socket layer initialized [ 268.562933][T11392] veth1_to_bond: entered allmulticast mode [ 268.732266][T11380] veth1_to_bond: entered promiscuous mode [ 268.908317][T11389] veth1_to_bond (unregistering): left allmulticast mode [ 268.908361][T11389] veth1_to_bond (unregistering): left promiscuous mode [ 268.987127][T11389] bond0: (slave bond_slave_1): Releasing backup interface [ 269.429413][T11438] ip_tables: iptables: counters copy to user failed while replacing table [ 269.477401][T11442] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 270.174215][T11428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.227093][T11428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.729794][T11428] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 270.753345][T11428] ip6gre1: left allmulticast mode [ 270.771740][T11428] ip6erspan0: left allmulticast mode [ 270.772014][T11428] geneve2: left allmulticast mode [ 270.787895][T11428] veth1: left allmulticast mode [ 270.790210][T11428] ip6gre2: left allmulticast mode [ 270.891084][T11442] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 270.936825][ T5952] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.936865][ T5952] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.940059][ T5939] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.940150][ T5939] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.940243][ T5939] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.940304][ T5939] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.940393][ T5939] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.940448][ T5939] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.442050][T11483] __nla_validate_parse: 2 callbacks suppressed [ 271.442069][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 271.457071][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 271.486606][T11476] 8021q: VLANs not supported on syzkaller0 [ 271.774786][T11502] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1301'. [ 271.938687][T11502] pim6reg1: entered promiscuous mode [ 271.938711][T11502] pim6reg1: entered allmulticast mode [ 271.958042][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1298'. [ 271.998162][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 272.609661][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1308'. [ 272.609764][T11536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1308'. [ 272.781745][T11542] netlink: 'syz.1.1310': attribute type 2 has an invalid length. [ 272.798503][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1310'. [ 272.978651][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'. [ 273.563059][T11570] xt_policy: output policy not valid in PREROUTING and INPUT [ 274.087727][T11594] xfrm1: entered allmulticast mode [ 274.093993][T11594] tipc: Enabling of bearer rejected, already enabled [ 274.457575][T11603] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 274.478102][T11603] netlink: 'syz.2.1325': attribute type 16 has an invalid length. [ 274.478126][T11603] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1325'. [ 274.857951][T11609] netlink: 'syz.3.1326': attribute type 9 has an invalid length. [ 275.149947][T11640] netlink: 'syz.2.1328': attribute type 4 has an invalid length. [ 275.374333][T11640] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 275.522100][T11648] x_tables: duplicate underflow at hook 1 [ 275.863252][T11664] openvswitch: netlink: IP tunnel dst address not specified [ 276.050637][T11673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.341757][T11675] netlink: 'syz.3.1335': attribute type 29 has an invalid length. [ 276.901654][T11700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.904322][T11700] __nla_validate_parse: 7 callbacks suppressed [ 276.904340][T11700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1342'. [ 276.904374][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1342'. [ 276.944430][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1343'. [ 276.993698][T11701] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.215379][T11714] netlink: 'syz.3.1346': attribute type 1 has an invalid length. [ 277.289303][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 277.450124][T11722] netlink: 'syz.4.1349': attribute type 4 has an invalid length. [ 278.621128][T11757] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 278.650663][T11759] netlink: 'syz.2.1357': attribute type 2 has an invalid length. [ 278.664659][T11759] wg2 speed is unknown, defaulting to 1000 [ 278.664793][T11759] wg2 speed is unknown, defaulting to 1000 [ 278.683652][T11759] wg2 speed is unknown, defaulting to 1000 [ 278.693696][T11759] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 278.693734][T11759] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 278.693793][T11759] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 278.784702][T11759] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 278.864979][T11759] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 279.010999][T11759] wg2 speed is unknown, defaulting to 1000 [ 279.065193][T11759] wg2 speed is unknown, defaulting to 1000 [ 279.085449][T11759] wg2 speed is unknown, defaulting to 1000 [ 279.098029][T11759] wg2 speed is unknown, defaulting to 1000 [ 279.113121][T11759] wg2 speed is unknown, defaulting to 1000 [ 279.222431][T11775] netlink: Unknown conntrack attr (type=4854, max=9) [ 279.581058][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'. [ 279.803221][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 279.914232][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 280.510009][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 280.871164][T11861] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 280.887939][T11861] veth0_to_bond: entered allmulticast mode [ 281.131407][T11869] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1388'. [ 281.158366][T11870] syzkaller0: entered promiscuous mode [ 281.158391][T11870] syzkaller0: entered allmulticast mode [ 281.455690][T11880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1392'. [ 281.889368][ T9665] block nbd0: Possible stuck request ffff888027067000: control (read@0,1024B). Runtime 60 seconds [ 282.788183][T11911] syzkaller0: entered promiscuous mode [ 282.788211][T11911] syzkaller0: entered allmulticast mode [ 282.975386][T11914] __nla_validate_parse: 2 callbacks suppressed [ 282.975410][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 283.368806][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 283.534274][T11930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1406'. [ 283.592437][T11934] netlink: 'syz.3.1406': attribute type 1 has an invalid length. [ 283.756484][T11934] bond3: entered promiscuous mode [ 283.758642][T11934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.793137][T11935] vlan2: entered allmulticast mode [ 283.793160][T11935] bond3: entered allmulticast mode [ 283.900610][T11930] bond3: (slave bridge0): making interface the new active one [ 283.900637][T11930] bridge0: entered promiscuous mode [ 283.900849][T11930] bridge0: entered allmulticast mode [ 283.926376][T11933] netlink: Failed to add helper -22 [ 283.926433][T11933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.930860][T11930] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 284.061428][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 284.350146][T11957] bridge2: entered promiscuous mode [ 284.350220][T11957] bridge2: entered allmulticast mode [ 284.382771][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 284.396014][T11958] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1411'. [ 284.396040][T11958] openvswitch: netlink: Message has 512 unknown bytes. [ 284.784470][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 285.701589][T11988] x_tables: unsorted underflow at hook 4 [ 285.701906][T11988] batadv_slave_1: entered promiscuous mode [ 286.443287][T11985] batadv_slave_1: left promiscuous mode [ 288.524783][ T4983] udevd[4983]: worker [9620] /devices/virtual/block/nbd0 is taking a long time [ 299.222320][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.224229][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.224945][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.252595][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.254513][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.280242][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.280664][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.280989][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.281926][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.282609][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.604989][T11990] wg2 speed is unknown, defaulting to 1000 [ 299.836736][T11990] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.836886][T11990] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.836995][T11990] bridge_slave_0: entered allmulticast mode [ 299.838237][T11990] bridge_slave_0: entered promiscuous mode [ 299.844581][T11990] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.844879][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.846449][T11990] bridge_slave_1: entered allmulticast mode [ 299.850049][T11990] bridge_slave_1: entered promiscuous mode [ 299.910195][T11990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.913650][T11990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.953254][T11990] team0: Port device team_slave_0 added [ 299.956699][T11990] team0: Port device team_slave_1 added [ 299.987494][T11990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.987517][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.987538][T11990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.989182][T11990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.989196][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.989226][T11990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.097544][T11990] hsr_slave_0: entered promiscuous mode [ 300.098654][T11990] hsr_slave_1: entered promiscuous mode [ 300.099207][T11990] debugfs: 'hsr0' already exists in 'hsr' [ 300.099228][T11990] Cannot create hsr debugfs directory [ 300.476478][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.485984][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.493892][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.510925][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.519685][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.535455][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.541442][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.574715][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.584618][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.592774][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.707568][ T4933] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 300.711826][ T4933] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 300.712554][ T4933] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 300.730341][ T4933] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 300.745737][ T4933] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 300.959420][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 300.962775][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 300.964453][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 300.984194][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 300.988011][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 301.326339][ T52] Bluetooth: hci5: command tx timeout [ 301.560789][T12012] wg2 speed is unknown, defaulting to 1000 [ 301.632664][T12011] wg2 speed is unknown, defaulting to 1000 [ 301.752415][T12017] wg2 speed is unknown, defaulting to 1000 [ 301.794159][T12024] wg2 speed is unknown, defaulting to 1000 [ 302.356882][T12012] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.357072][T12012] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.357221][T12012] bridge_slave_0: entered allmulticast mode [ 302.359172][T12012] bridge_slave_0: entered promiscuous mode [ 302.409531][T12012] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.409690][T12012] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.409836][T12012] bridge_slave_1: entered allmulticast mode [ 302.413196][T12012] bridge_slave_1: entered promiscuous mode [ 302.450275][T12011] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.450429][T12011] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.450869][T12011] bridge_slave_0: entered allmulticast mode [ 302.453035][T12011] bridge_slave_0: entered promiscuous mode [ 302.493334][T12011] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.493441][T12011] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.493574][T12011] bridge_slave_1: entered allmulticast mode [ 302.496401][T12011] bridge_slave_1: entered promiscuous mode [ 302.566309][T12012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.592638][T12011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.597255][T12012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.605744][ T52] Bluetooth: hci6: command tx timeout [ 302.652598][T12011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.685732][ T52] Bluetooth: hci7: command tx timeout [ 302.708908][T12012] team0: Port device team_slave_0 added [ 302.709177][T12017] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.709407][T12017] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.709562][T12017] bridge_slave_0: entered allmulticast mode [ 302.711253][T12017] bridge_slave_0: entered promiscuous mode [ 302.758339][T12012] team0: Port device team_slave_1 added [ 302.758585][T12017] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.758758][T12017] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.758877][T12017] bridge_slave_1: entered allmulticast mode [ 302.760220][T12017] bridge_slave_1: entered promiscuous mode [ 302.806080][T12011] team0: Port device team_slave_0 added [ 302.809004][T12011] team0: Port device team_slave_1 added [ 302.846723][ T52] Bluetooth: hci8: command tx timeout [ 302.892668][T12024] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.892847][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.893006][T12024] bridge_slave_0: entered allmulticast mode [ 302.894593][T12024] bridge_slave_0: entered promiscuous mode [ 302.935907][T12012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.935926][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.935963][T12012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.936948][T12011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.936962][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.936985][T12011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.938070][T12024] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.938178][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.938315][T12024] bridge_slave_1: entered allmulticast mode [ 302.940023][T12024] bridge_slave_1: entered promiscuous mode [ 302.951724][T12017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.959835][T12011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.959876][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.960142][T12011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.096235][T12012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.096282][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.096344][T12012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.106405][ T52] Bluetooth: hci9: command tx timeout [ 303.166482][T12017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.206719][T12024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.210449][T12024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.250967][T12017] team0: Port device team_slave_0 added [ 303.253513][T12017] team0: Port device team_slave_1 added [ 303.274955][T12024] team0: Port device team_slave_0 added [ 303.314903][T12024] team0: Port device team_slave_1 added [ 303.348477][T12011] hsr_slave_0: entered promiscuous mode [ 303.349461][T12011] hsr_slave_1: entered promiscuous mode [ 303.350065][T12011] debugfs: 'hsr0' already exists in 'hsr' [ 303.350086][T12011] Cannot create hsr debugfs directory [ 303.383997][T12012] hsr_slave_0: entered promiscuous mode [ 303.385000][T12012] hsr_slave_1: entered promiscuous mode [ 303.387097][T12012] debugfs: 'hsr0' already exists in 'hsr' [ 303.387144][T12012] Cannot create hsr debugfs directory [ 303.390967][T12017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.391001][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.391078][T12017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.420739][ T52] Bluetooth: hci5: command tx timeout [ 303.448352][T12017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.448403][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.448468][T12017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.516869][T12024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.516886][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.516910][T12024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.581097][T12024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.581116][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.581145][T12024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.724879][T12017] hsr_slave_0: entered promiscuous mode [ 303.730062][T12017] hsr_slave_1: entered promiscuous mode [ 303.732071][T12017] debugfs: 'hsr0' already exists in 'hsr' [ 303.732315][T12017] Cannot create hsr debugfs directory [ 303.787803][T12024] hsr_slave_0: entered promiscuous mode [ 303.788601][T12024] hsr_slave_1: entered promiscuous mode [ 303.789388][T12024] debugfs: 'hsr0' already exists in 'hsr' [ 303.789409][T12024] Cannot create hsr debugfs directory [ 304.685545][ T52] Bluetooth: hci6: command tx timeout [ 304.765389][ T52] Bluetooth: hci7: command tx timeout [ 304.925555][ T52] Bluetooth: hci8: command tx timeout [ 305.165449][ T52] Bluetooth: hci9: command tx timeout [ 305.485358][ T52] Bluetooth: hci5: command tx timeout [ 306.765542][ T52] Bluetooth: hci6: command tx timeout [ 306.845755][ T52] Bluetooth: hci7: command tx timeout [ 307.005822][ T52] Bluetooth: hci8: command tx timeout [ 307.245364][ T52] Bluetooth: hci9: command tx timeout [ 307.565712][ T52] Bluetooth: hci5: command tx timeout [ 308.845337][ T52] Bluetooth: hci6: command tx timeout [ 308.925566][ T52] Bluetooth: hci7: command tx timeout [ 309.086756][ T52] Bluetooth: hci8: command tx timeout [ 309.325851][ T52] Bluetooth: hci9: command tx timeout [ 311.969750][ T9665] block nbd0: Possible stuck request ffff888027067000: control (read@0,1024B). Runtime 90 seconds [ 317.086974][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.087034][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.045865][ T9665] block nbd0: Possible stuck request ffff888027067000: control (read@0,1024B). Runtime 120 seconds [ 359.787148][ T4933] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 359.789287][ T4933] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 359.790116][ T4933] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 359.791211][ T4933] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 359.791923][ T4933] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 360.115540][T12085] wg2 speed is unknown, defaulting to 1000 [ 360.343823][ T4933] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 360.359203][ T4933] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 360.360045][ T4933] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 360.361003][ T4933] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 360.362309][ T4933] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 360.516878][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.517088][T12085] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.517229][T12085] bridge_slave_0: entered allmulticast mode [ 360.519253][T12085] bridge_slave_0: entered promiscuous mode [ 360.529900][T12085] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.531852][T12085] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.533037][T12085] bridge_slave_1: entered allmulticast mode [ 360.548386][T12085] bridge_slave_1: entered promiscuous mode [ 360.605485][T12085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.608890][T12085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.658230][T12085] team0: Port device team_slave_0 added [ 360.661571][T12085] team0: Port device team_slave_1 added [ 360.727199][T12085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.727219][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.727248][T12085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.729504][T12085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.729519][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.729548][T12085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.942699][T12085] hsr_slave_0: entered promiscuous mode [ 360.944284][T12085] hsr_slave_1: entered promiscuous mode [ 360.945077][T12085] debugfs: 'hsr0' already exists in 'hsr' [ 360.945098][T12085] Cannot create hsr debugfs directory [ 361.009990][ T4933] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 361.014729][ T4933] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 361.030943][ T4933] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 361.031977][ T4933] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 361.033042][ T4933] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 361.177191][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 361.180486][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 361.182211][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 361.183634][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 361.221491][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 361.457046][T12100] wg2 speed is unknown, defaulting to 1000 [ 361.653139][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 361.664924][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 361.673810][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 361.686356][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 361.687098][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 361.885661][ T52] Bluetooth: hci10: command tx timeout [ 362.100270][T12118] wg2 speed is unknown, defaulting to 1000 [ 362.246113][T12114] wg2 speed is unknown, defaulting to 1000 [ 362.368303][ T52] Bluetooth: hci11: command tx timeout [ 362.479032][T12129] wg2 speed is unknown, defaulting to 1000 [ 362.532439][T12100] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.532619][T12100] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.532732][T12100] bridge_slave_0: entered allmulticast mode [ 362.534021][T12100] bridge_slave_0: entered promiscuous mode [ 362.610251][T12100] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.610404][T12100] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.610511][T12100] bridge_slave_1: entered allmulticast mode [ 362.611903][T12100] bridge_slave_1: entered promiscuous mode [ 362.710916][T12100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.741712][T12100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.818213][T12100] team0: Port device team_slave_0 added [ 362.849898][T12100] team0: Port device team_slave_1 added [ 362.935641][T12100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.935661][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.935688][T12100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.992588][T12100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.992615][T12100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.992643][T12100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.085480][ T52] Bluetooth: hci12: command tx timeout [ 363.143139][T12118] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.143325][T12118] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.143439][T12118] bridge_slave_0: entered allmulticast mode [ 363.144764][T12118] bridge_slave_0: entered promiscuous mode [ 363.209442][T12118] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.209536][T12118] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.209665][T12118] bridge_slave_1: entered allmulticast mode [ 363.211490][T12118] bridge_slave_1: entered promiscuous mode [ 363.248063][T12100] hsr_slave_0: entered promiscuous mode [ 363.249146][T12100] hsr_slave_1: entered promiscuous mode [ 363.249898][T12100] debugfs: 'hsr0' already exists in 'hsr' [ 363.249919][T12100] Cannot create hsr debugfs directory [ 363.325736][ T52] Bluetooth: hci13: command tx timeout [ 363.327425][T12118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.371893][T12118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.479668][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.479827][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.480243][T12114] bridge_slave_0: entered allmulticast mode [ 363.481805][T12114] bridge_slave_0: entered promiscuous mode [ 363.492996][T12118] team0: Port device team_slave_0 added [ 363.525952][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.526120][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.526257][T12114] bridge_slave_1: entered allmulticast mode [ 363.527768][T12114] bridge_slave_1: entered promiscuous mode [ 363.537143][T12118] team0: Port device team_slave_1 added [ 363.605080][T12129] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.605281][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.605652][T12129] bridge_slave_0: entered allmulticast mode [ 363.607188][T12129] bridge_slave_0: entered promiscuous mode [ 363.660073][T12129] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.660190][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.660333][T12129] bridge_slave_1: entered allmulticast mode [ 363.663483][T12129] bridge_slave_1: entered promiscuous mode [ 363.694831][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.705630][T12118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.705647][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.705674][T12118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.713469][T12118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.713511][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.713580][T12118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.726211][ T52] Bluetooth: hci14: command tx timeout [ 363.818368][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.875926][T12114] team0: Port device team_slave_0 added [ 363.878694][T12129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.881947][T12129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.927804][T12114] team0: Port device team_slave_1 added [ 363.965546][ T52] Bluetooth: hci10: command tx timeout [ 363.999430][T12129] team0: Port device team_slave_0 added [ 364.008384][T12118] hsr_slave_0: entered promiscuous mode [ 364.011223][T12118] hsr_slave_1: entered promiscuous mode [ 364.013269][T12118] debugfs: 'hsr0' already exists in 'hsr' [ 364.013321][T12118] Cannot create hsr debugfs directory [ 364.054361][T12129] team0: Port device team_slave_1 added [ 364.084461][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.084479][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.084508][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.094959][T12129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.094994][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.095062][T12129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.181395][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.181412][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.181436][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.219063][T12129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.219083][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.219111][T12129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.400289][T12114] hsr_slave_0: entered promiscuous mode [ 364.401350][T12114] hsr_slave_1: entered promiscuous mode [ 364.401897][T12114] debugfs: 'hsr0' already exists in 'hsr' [ 364.401916][T12114] Cannot create hsr debugfs directory [ 364.440284][T12129] hsr_slave_0: entered promiscuous mode [ 364.441093][T12129] hsr_slave_1: entered promiscuous mode [ 364.441622][T12129] debugfs: 'hsr0' already exists in 'hsr' [ 364.441641][T12129] Cannot create hsr debugfs directory [ 364.447037][ T52] Bluetooth: hci11: command tx timeout [ 365.165330][ T52] Bluetooth: hci12: command tx timeout [ 365.407424][ T52] Bluetooth: hci13: command tx timeout [ 365.805611][ T52] Bluetooth: hci14: command tx timeout [ 366.045510][ T52] Bluetooth: hci10: command tx timeout [ 366.525331][ T52] Bluetooth: hci11: command tx timeout [ 367.245871][ T52] Bluetooth: hci12: command tx timeout [ 367.485315][ T52] Bluetooth: hci13: command tx timeout [ 367.885758][ T52] Bluetooth: hci14: command tx timeout [ 368.125859][ T52] Bluetooth: hci10: command tx timeout [ 368.605676][ T52] Bluetooth: hci11: command tx timeout [ 369.325789][ T52] Bluetooth: hci12: command tx timeout [ 369.565539][ T52] Bluetooth: hci13: command tx timeout [ 369.966226][ T52] Bluetooth: hci14: command tx timeout [ 372.126700][ T9665] block nbd0: Possible stuck request ffff888027067000: control (read@0,1024B). Runtime 150 seconds [ 378.527272][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.527337][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.205797][ T9665] block nbd0: Possible stuck request ffff888027067000: control (read@0,1024B). Runtime 180 seconds [ 404.542494][ T4983] udevd[4983]: worker [9620] /devices/virtual/block/nbd0 timeout; kill it [ 404.543348][ T4983] udevd[4983]: seq 14029 '/devices/virtual/block/nbd0' killed [ 419.841527][ T5627] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 419.842506][ T5627] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 419.843203][ T5627] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 419.844169][ T5627] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 419.844781][ T5627] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 420.153725][T12179] wg2 speed is unknown, defaulting to 1000 [ 420.390250][ T5627] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 420.402107][ T5627] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 420.414672][ T5627] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 420.426164][ T5627] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 420.427422][ T5627] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 420.560315][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.560498][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.560938][T12179] bridge_slave_0: entered allmulticast mode [ 420.562938][T12179] bridge_slave_0: entered promiscuous mode [ 420.592274][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.592509][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.592715][T12179] bridge_slave_1: entered allmulticast mode [ 420.594704][T12179] bridge_slave_1: entered promiscuous mode [ 420.655296][T12179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.658671][T12179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.709933][T12179] team0: Port device team_slave_0 added [ 420.713162][T12179] team0: Port device team_slave_1 added [ 420.755974][T12179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.755993][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.756021][T12179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.758030][T12179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.758046][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.758074][T12179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.904849][T12179] hsr_slave_0: entered promiscuous mode [ 420.911753][T12179] hsr_slave_1: entered promiscuous mode [ 420.921196][T12179] debugfs: 'hsr0' already exists in 'hsr' [ 420.921219][T12179] Cannot create hsr debugfs directory [ 421.054069][T12194] wg2 speed is unknown, defaulting to 1000 [ 421.498726][ T5627] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 421.503172][ T5627] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 421.504588][ T5627] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 421.513285][ T5627] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 421.513937][ T5627] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 421.556582][T12194] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.556762][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.557215][T12194] bridge_slave_0: entered allmulticast mode [ 421.561665][T12194] bridge_slave_0: entered promiscuous mode [ 421.571268][ T4933] Bluetooth: hci5: command 0x0406 tx timeout [ 421.627045][T12194] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.627160][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.627336][T12194] bridge_slave_1: entered allmulticast mode [ 421.633215][T12194] bridge_slave_1: entered promiscuous mode [ 421.677723][ T4933] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 421.687387][ T4933] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 421.693298][ T4933] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 421.706291][ T4933] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 421.708485][ T4933] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 421.753883][T12194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.779468][T12194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.853889][T12194] team0: Port device team_slave_0 added [ 421.877154][T12194] team0: Port device team_slave_1 added [ 421.903789][ T52] Bluetooth: hci15: command tx timeout [ 421.941765][T12194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.941784][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.941813][T12194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.943766][T12194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.943778][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.943800][T12194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.120415][T12194] hsr_slave_0: entered promiscuous mode [ 422.123956][T12194] hsr_slave_1: entered promiscuous mode [ 422.124740][T12194] debugfs: 'hsr0' already exists in 'hsr' [ 422.124760][T12194] Cannot create hsr debugfs directory [ 422.262499][ T4933] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 422.276401][ T4933] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 422.279302][ T4933] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 422.280255][ T4933] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 422.280889][ T4933] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 422.446009][ T52] Bluetooth: hci16: command tx timeout [ 422.847827][T12216] wg2 speed is unknown, defaulting to 1000 [ 422.910638][T12219] wg2 speed is unknown, defaulting to 1000 [ 423.017491][T12228] wg2 speed is unknown, defaulting to 1000 [ 423.566382][ T52] Bluetooth: hci17: command tx timeout [ 423.637669][T12216] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.637847][T12216] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.638131][T12216] bridge_slave_0: entered allmulticast mode [ 423.639998][T12216] bridge_slave_0: entered promiscuous mode [ 423.648379][T12216] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.648485][T12216] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.650931][T12216] bridge_slave_1: entered allmulticast mode [ 423.664307][T12216] bridge_slave_1: entered promiscuous mode [ 423.769318][T12216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.769523][T12219] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.769636][T12219] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.770026][T12219] bridge_slave_0: entered allmulticast mode [ 423.772302][T12219] bridge_slave_0: entered promiscuous mode [ 423.808908][ T52] Bluetooth: hci18: command tx timeout [ 423.822431][T12216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.822677][T12219] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.822835][T12219] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.822951][T12219] bridge_slave_1: entered allmulticast mode [ 423.824306][T12219] bridge_slave_1: entered promiscuous mode [ 423.904732][T12228] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.904941][T12228] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.905174][T12228] bridge_slave_0: entered allmulticast mode [ 423.910178][T12228] bridge_slave_0: entered promiscuous mode [ 423.942717][T12219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.948933][T12216] team0: Port device team_slave_0 added [ 423.950967][T12228] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.951389][T12228] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.953979][T12228] bridge_slave_1: entered allmulticast mode [ 423.962409][T12228] bridge_slave_1: entered promiscuous mode [ 423.969226][ T52] Bluetooth: hci15: command tx timeout [ 424.005752][T12219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.007690][T12216] team0: Port device team_slave_1 added [ 424.055810][T12228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.059115][T12228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.112143][T12219] team0: Port device team_slave_0 added [ 424.113749][T12216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.113760][T12216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.113780][T12216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.161828][T12219] team0: Port device team_slave_1 added [ 424.164378][T12216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.164410][T12216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.164480][T12216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.194801][T12228] team0: Port device team_slave_0 added [ 424.203679][T12228] team0: Port device team_slave_1 added [ 424.280326][T12219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.280344][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.280368][T12219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.281434][T12228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.281449][T12228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.281477][T12228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.282588][T12219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.282602][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.282629][T12219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.284859][T12228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.284872][T12228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.284897][T12228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.366466][ T52] Bluetooth: hci19: command tx timeout [ 424.488149][T12216] hsr_slave_0: entered promiscuous mode [ 424.489167][T12216] hsr_slave_1: entered promiscuous mode [ 424.489736][T12216] debugfs: 'hsr0' already exists in 'hsr' [ 424.489778][T12216] Cannot create hsr debugfs directory [ 424.526260][ T52] Bluetooth: hci16: command tx timeout [ 424.587295][T12219] hsr_slave_0: entered promiscuous mode [ 424.588127][T12219] hsr_slave_1: entered promiscuous mode [ 424.588723][T12219] debugfs: 'hsr0' already exists in 'hsr' [ 424.588754][T12219] Cannot create hsr debugfs directory [ 424.646767][T12228] hsr_slave_0: entered promiscuous mode [ 424.647659][T12228] hsr_slave_1: entered promiscuous mode [ 424.648216][T12228] debugfs: 'hsr0' already exists in 'hsr' [ 424.648236][T12228] Cannot create hsr debugfs directory [ 425.645739][T12270] Bluetooth: hci17: command tx timeout [ 425.885803][T12270] Bluetooth: hci18: command tx timeout [ 426.045513][T12270] Bluetooth: hci15: command tx timeout [ 426.445343][T12270] Bluetooth: hci19: command tx timeout [ 426.605869][T12270] Bluetooth: hci16: command tx timeout [ 426.706308][T12270] Bluetooth: hci7: command 0x0406 tx timeout [ 426.706350][T12270] Bluetooth: hci6: command 0x0406 tx timeout [ 426.706377][T12270] Bluetooth: hci8: command 0x0406 tx timeout [ 426.706403][T12270] Bluetooth: hci9: command 0x0406 tx timeout [ 427.725644][ T4933] Bluetooth: hci17: command tx timeout [ 427.965526][ T4933] Bluetooth: hci18: command tx timeout [ 428.125234][ T4933] Bluetooth: hci15: command tx timeout [ 428.526654][ T4933] Bluetooth: hci19: command tx timeout [ 428.686205][ T4933] Bluetooth: hci16: command tx timeout [ 429.805656][ T4933] Bluetooth: hci17: command tx timeout [ 430.045417][ T4933] Bluetooth: hci18: command tx timeout [ 430.605380][ T4933] Bluetooth: hci19: command tx timeout [ 432.285648][ T9665] block nbd0: Possible stuck request ffff888027067000: control (read@0,1024B). Runtime 210 seconds [ 439.966798][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.966868][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.725926][ T32] INFO: task syz.4.1411:11955 blocked for more than 143 seconds. [ 445.725953][ T32] Not tainted syzkaller #0 [ 445.725966][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disabl ** replaying previous printk message ** [ 445.725966][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.726007][ T32] task:syz.4.1411 state:D stack:26536 pid:11955 tgid:11950 ppid:5617 task_flags:0x480140 flags:0x00080002 [ 445.726084][ T32] Call Trace: [ 445.726096][ T32] [ 445.726111][ T32] __schedule+0x17db/0x58f0 [ 445.726144][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.726196][ T32] ? __pfx___schedule+0x10/0x10 [ 445.726220][ T32] ? lock_acquire+0x115/0x350 [ 445.726265][ T32] ? schedule+0x90/0x2b0 [ 445.726293][ T32] schedule+0x164/0x2b0 [ 445.726320][ T32] blk_mq_freeze_queue_wait+0x101/0x180 [ 445.726355][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 445.726389][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 445.726434][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 445.726463][ T32] nbd_set_size+0x4c5/0x7d0 [ 445.726493][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 445.726539][ T32] ? nla_memcpy+0x5b/0xc0 [ 445.726578][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 445.726614][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 445.726641][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 445.726666][ T32] ? __nla_parse+0x40/0x60 [ 445.726699][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 445.726738][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 445.726773][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 445.726828][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.726863][ T32] genl_rcv_msg+0x614/0x7a0 [ 445.726898][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.726925][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 445.726964][ T32] netlink_rcv_skb+0x226/0x4a0 [ 445.727004][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.727033][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.727083][ T32] ? down_read+0x2be/0x330 [ 445.727117][ T32] genl_rcv+0x28/0x40 [ 445.727142][ T32] netlink_unicast+0x7bd/0x940 [ 445.728082][ T32] netlink_sendmsg+0x813/0xb40 [ 445.728119][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.728150][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 445.728178][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.728198][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 445.728224][ T32] ____sys_sendmsg+0x54e/0x850 [ 445.728260][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.728300][ T32] ? import_iovec+0x73/0xa0 [ 445.728332][ T32] ___sys_sendmsg+0x2a5/0x360 [ 445.728360][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.728386][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.728421][ T32] ? futex_wait+0x2a2/0x390 [ 445.728491][ T32] ? __fget_files+0x2a/0x420 [ 445.728522][ T32] ? __fget_files+0x3a2/0x420 [ 445.728563][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 445.728598][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.728652][ T32] do_syscall_64+0x166/0x520 [ 445.728680][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.728702][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.728725][ T32] ? clear_bhb_loop+0x70/0xc0 [ 445.728753][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.728777][ T32] RIP: 0033:0x7fa46299e159 [ 445.728864][ T32] RSP: 002b:00007fa46387a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.728887][ T32] RAX: ffffffffffffffda RBX: 00007fa462c26180 RCX: 00007fa46299e159 [ 445.728904][ T32] RDX: 0000000000004800 RSI: 0000200000000340 RDI: 0000000000000009 [ 445.728919][ T32] RBP: 00007fa462a3506b R08: 0000000000000000 R09: 0000000000000000 [ 445.728940][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.728954][ T32] R13: 00007fa462c26218 R14: 00007fa462c26180 R15: 00007fff8b48b328 [ 445.729009][ T32] [ 445.729020][ T32] INFO: task syz.0.1415:11964 blocked for more than 143 seconds. [ 445.729036][ T32] Not tainted syzkaller #0 [ 445.729048][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.729058][ T32] task:syz.0.1415 state:D stack:26584 pid:11964 tgid:11963 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 445.729137][ T32] Call Trace: [ 445.729145][ T32] [ 445.729159][ T32] __schedule+0x17db/0x58f0 [ 445.729256][ T32] ? __pfx___schedule+0x10/0x10 [ 445.729294][ T32] ? schedule+0x90/0x2b0 [ 445.729323][ T32] schedule+0x164/0x2b0 [ 445.729352][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.729378][ T32] __mutex_lock+0x7c1/0x1550 [ 445.729413][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.729446][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 445.729475][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.729512][ T32] ? stack_trace_save+0xa9/0x100 [ 445.729537][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.729566][ T32] ? radix_tree_lookup+0x240/0x290 [ 445.729594][ T32] genl_rcv_msg+0x10b/0x7a0 [ 445.729628][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.729674][ T32] netlink_rcv_skb+0x226/0x4a0 [ 445.729709][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.729739][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.729791][ T32] ? down_read+0x2be/0x330 [ 445.729827][ T32] genl_rcv+0x28/0x40 [ 445.729852][ T32] netlink_unicast+0x7bd/0x940 [ 445.729897][ T32] netlink_sendmsg+0x813/0xb40 [ 445.729929][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.729961][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 445.729989][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.730009][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 445.730036][ T32] ____sys_sendmsg+0x54e/0x850 [ 445.730073][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.730114][ T32] ? import_iovec+0x73/0xa0 [ 445.730147][ T32] ___sys_sendmsg+0x2a5/0x360 [ 445.730175][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.730214][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.730249][ T32] ? futex_wait+0x2a2/0x390 [ 445.730314][ T32] ? __fget_files+0x2a/0x420 [ 445.730343][ T32] ? __fget_files+0x3a2/0x420 [ 445.730384][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 445.730418][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.730471][ T32] do_syscall_64+0x166/0x520 [ 445.730503][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.730525][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.730548][ T32] ? clear_bhb_loop+0x70/0xc0 [ 445.730576][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.730598][ T32] RIP: 0033:0x7f2e64f9e159 [ 445.730616][ T32] RSP: 002b:00007f2e65da2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.730639][ T32] RAX: ffffffffffffffda RBX: 00007f2e65225fa0 RCX: 00007f2e64f9e159 [ 445.730656][ T32] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000004 [ 445.730671][ T32] RBP: 00007f2e6503506b R08: 0000000000000000 R09: 0000000000000000 [ 445.730684][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.730698][ T32] R13: 00007f2e65226038 R14: 00007f2e65225fa0 R15: 00007ffd10cad908 [ 445.730733][ T32] [ 445.730742][ T32] INFO: task syz.3.1416:11972 blocked for more than 143 seconds. [ 445.730758][ T32] Not tainted syzkaller #0 [ 445.730769][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.730779][ T32] task:syz.3.1416 state:D stack:27976 pid:11972 tgid:11965 ppid:5618 task_flags:0x400040 flags:0x00080002 [ 445.730842][ T32] Call Trace: [ 445.730850][ T32] [ 445.730863][ T32] __schedule+0x17db/0x58f0 [ 445.730919][ T32] ? __pfx___schedule+0x10/0x10 [ 445.730953][ T32] ? schedule+0x90/0x2b0 [ 445.730981][ T32] schedule+0x164/0x2b0 [ 445.731009][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.731034][ T32] __mutex_lock+0x7c1/0x1550 [ 445.731067][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.731100][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 445.731128][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.731158][ T32] ? stack_trace_save+0xa9/0x100 [ 445.731182][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.731210][ T32] ? radix_tree_lookup+0x240/0x290 [ 445.731237][ T32] genl_rcv_msg+0x10b/0x7a0 [ 445.731270][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.731314][ T32] netlink_rcv_skb+0x226/0x4a0 [ 445.731348][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.731393][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.731445][ T32] ? down_read+0x2be/0x330 [ 445.731486][ T32] genl_rcv+0x28/0x40 [ 445.731510][ T32] netlink_unicast+0x7bd/0x940 [ 445.731555][ T32] netlink_sendmsg+0x813/0xb40 [ 445.731587][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.731619][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 445.731647][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.731668][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 445.731695][ T32] __sys_sendto+0x408/0x5a0 [ 445.731729][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 445.731789][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 445.731818][ T32] __x64_sys_sendto+0xde/0x100 [ 445.731864][ T32] do_syscall_64+0x166/0x520 [ 445.731892][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.731914][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.731937][ T32] ? clear_bhb_loop+0x70/0xc0 [ 445.731965][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.731988][ T32] RIP: 0033:0x7f6ccaf5e98e [ 445.732007][ T32] RSP: 002b:00007f6cc91b2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.732029][ T32] RAX: ffffffffffffffda RBX: 00007f6cc91b46c0 RCX: 00007f6ccaf5e98e [ 445.732046][ T32] RDX: 000000000000001c RSI: 00007f6cc91b3000 RDI: 00000000000000af [ 445.732062][ T32] RBP: 0000000000000000 R08: 00007f6cc91b2f04 R09: 000000000000000c [ 445.732076][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000af [ 445.732090][ T32] R13: 00007f6cc91b2f58 R14: 00007f6cc91b3000 R15: 0000000000000000 [ 445.732126][ T32] [ 445.732135][ T32] INFO: task syz.1.1417:11969 blocked for more than 143 seconds. [ 445.732151][ T32] Not tainted syzkaller #0 [ 445.732163][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.732173][ T32] task:syz.1.1417 state:D stack:27768 pid:11969 tgid:11968 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 445.732238][ T32] Call Trace: [ 445.732246][ T32] [ 445.732259][ T32] __schedule+0x17db/0x58f0 [ 445.732316][ T32] ? __pfx___schedule+0x10/0x10 [ 445.732353][ T32] ? schedule+0x90/0x2b0 [ 445.732382][ T32] schedule+0x164/0x2b0 [ 445.732410][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.732435][ T32] __mutex_lock+0x7c1/0x1550 [ 445.732469][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.732509][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 445.732537][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.732568][ T32] ? stack_trace_save+0xa9/0x100 [ 445.732593][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.732620][ T32] ? radix_tree_lookup+0x240/0x290 [ 445.732647][ T32] genl_rcv_msg+0x10b/0x7a0 [ 445.732681][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.732728][ T32] netlink_rcv_skb+0x226/0x4a0 [ 445.732764][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.732794][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.732846][ T32] ? down_read+0x2be/0x330 [ 445.732881][ T32] genl_rcv+0x28/0x40 [ 445.732906][ T32] netlink_unicast+0x7bd/0x940 [ 445.732950][ T32] netlink_sendmsg+0x813/0xb40 [ 445.732983][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.733015][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 445.733043][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.733063][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 445.733090][ T32] __sys_sendto+0x408/0x5a0 [ 445.733124][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 445.733186][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 445.733215][ T32] __x64_sys_sendto+0xde/0x100 [ 445.733247][ T32] do_syscall_64+0x166/0x520 [ 445.733274][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.733297][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.733320][ T32] ? clear_bhb_loop+0x70/0xc0 [ 445.733349][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.733371][ T32] RIP: 0033:0x7fd7b075e98e [ 445.733390][ T32] RSP: 002b:00007fd7b172ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.733413][ T32] RAX: ffffffffffffffda RBX: 00007fd7b17306c0 RCX: 00007fd7b075e98e [ 445.733430][ T32] RDX: 000000000000001c RSI: 00007fd7b172f000 RDI: 0000000000000020 [ 445.733445][ T32] RBP: 0000000000000000 R08: 00007fd7b172ef04 R09: 000000000000000c [ 445.733460][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 445.733474][ T32] R13: 00007fd7b172ef58 R14: 00007fd7b172f000 R15: 0000000000000000 [ 445.733516][ T32] [ 445.733526][ T32] INFO: task syz.1.1417:11974 blocked for more than 143 seconds. [ 445.733542][ T32] Not tainted syzkaller #0 [ 445.733553][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.733563][ T32] task:syz.1.1417 state:D stack:28808 pid:11974 tgid:11968 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 445.733628][ T32] Call Trace: [ 445.733635][ T32] [ 445.733649][ T32] __schedule+0x17db/0x58f0 [ 445.733706][ T32] ? __pfx___schedule+0x10/0x10 [ 445.733742][ T32] ? schedule+0x90/0x2b0 [ 445.733771][ T32] schedule+0x164/0x2b0 [ 445.733799][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.733824][ T32] __mutex_lock+0x7c1/0x1550 [ 445.733858][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.733890][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 445.733919][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.733949][ T32] ? stack_trace_save+0xa9/0x100 [ 445.733974][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.734003][ T32] ? radix_tree_lookup+0x240/0x290 [ 445.734032][ T32] genl_rcv_msg+0x10b/0x7a0 [ 445.734065][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.734111][ T32] netlink_rcv_skb+0x226/0x4a0 [ 445.734147][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.734177][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.734228][ T32] ? down_read+0x2be/0x330 [ 445.734264][ T32] genl_rcv+0x28/0x40 [ 445.734288][ T32] netlink_unicast+0x7bd/0x940 [ 445.734343][ T32] netlink_sendmsg+0x813/0xb40 [ 445.734365][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.734386][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 445.734405][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.734419][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 445.734437][ T32] __sys_sendto+0x408/0x5a0 [ 445.734460][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 445.734506][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 445.734526][ T32] __x64_sys_sendto+0xde/0x100 [ 445.734548][ T32] do_syscall_64+0x166/0x520 [ 445.734567][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.734583][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.734599][ T32] ? clear_bhb_loop+0x70/0xc0 [ 445.734618][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.734634][ T32] RIP: 0033:0x7fd7b075e98e [ 445.734647][ T32] RSP: 002b:00007fd7b16ece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.734663][ T32] RAX: ffffffffffffffda RBX: 00007fd7b16ee6c0 RCX: 00007fd7b075e98e [ 445.734674][ T32] RDX: 0000000000000028 RSI: 00007fd7b16ed000 RDI: 0000000000000004 [ 445.734684][ T32] RBP: 0000000000000000 R08: 00007fd7b16ecf04 R09: 000000000000000c [ 445.734694][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 445.734703][ T32] R13: 00007fd7b16ecf58 R14: 00007fd7b16ed000 R15: 0000000000000000 [ 445.734727][ T32] [ 445.734734][ T32] INFO: task syz.1.1417:11981 blocked for more than 143 seconds. [ 445.734764][ T32] Not tainted syzkaller #0 [ 445.734772][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.734779][ T32] task:syz.1.1417 state:D stack:28808 pid:11981 tgid:11968 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 445.734827][ T32] Call Trace: [ 445.734832][ T32] [ 445.734842][ T32] __schedule+0x17db/0x58f0 [ 445.734881][ T32] ? __pfx___schedule+0x10/0x10 [ 445.734907][ T32] ? schedule+0x90/0x2b0 [ 445.734928][ T32] schedule+0x164/0x2b0 [ 445.734947][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.734965][ T32] __mutex_lock+0x7c1/0x1550 [ 445.734993][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.735016][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 445.735037][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.735060][ T32] ? stack_trace_save+0xa9/0x100 [ 445.735236][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.735349][ T32] ? radix_tree_lookup+0x240/0x290 [ 445.735426][ T32] genl_rcv_msg+0x10b/0x7a0 [ 445.735521][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.735628][ T32] netlink_rcv_skb+0x226/0x4a0 [ 445.735716][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.735786][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.735905][ T32] ? down_read+0x2be/0x330 [ 445.735987][ T32] genl_rcv+0x28/0x40 [ 445.736039][ T32] netlink_unicast+0x7bd/0x940 [ 445.736135][ T32] netlink_sendmsg+0x813/0xb40 [ 445.736214][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.736285][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 445.736347][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.736397][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 445.736457][ T32] __sys_sendto+0x408/0x5a0 [ 445.736536][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 445.736684][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 445.736773][ T32] __x64_sys_sendto+0xde/0x100 [ 445.736845][ T32] do_syscall_64+0x166/0x520 [ 445.736907][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.736964][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.737019][ T32] ? clear_bhb_loop+0x70/0xc0 [ 445.737054][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.737099][ T32] RIP: 0033:0x7fd7b075e98e [ 445.737162][ T32] RSP: 002b:00007fd7b1689e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.737223][ T32] RAX: ffffffffffffffda RBX: 00007fd7b168b6c0 RCX: 00007fd7b075e98e [ 445.737264][ T32] RDX: 0000000000000024 RSI: 00007fd7b168a000 RDI: 0000000000000020 [ 445.737303][ T32] RBP: 0000000000000000 R08: 00007fd7b1689f04 R09: 000000000000000c [ 445.737335][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 445.737367][ T32] R13: 00007fd7b1689f58 R14: 00007fd7b168a000 R15: 0000000000000000 [ 445.737443][ T32] [ 445.737472][ T32] INFO: task syz.2.1418:11987 blocked for more than 143 seconds. [ 445.737514][ T32] Not tainted syzkaller #0 [ 445.737544][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.737565][ T32] task:syz.2.1418 state:D stack:27544 pid:11987 tgid:11985 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 445.737719][ T32] Call Trace: [ 445.737739][ T32] [ 445.737777][ T32] __schedule+0x17db/0x58f0 [ 445.737930][ T32] ? __pfx___schedule+0x10/0x10 [ 445.738005][ T32] ? schedule+0x90/0x2b0 [ 445.738081][ T32] schedule+0x164/0x2b0 [ 445.738164][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.738229][ T32] __mutex_lock+0x7c1/0x1550 [ 445.738308][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.738388][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 445.738451][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.738529][ T32] ? stack_trace_save+0xa9/0x100 [ 445.738589][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.738658][ T32] ? radix_tree_lookup+0x240/0x290 [ 445.738714][ T32] genl_rcv_msg+0x10b/0x7a0 [ 445.738786][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.738895][ T32] netlink_rcv_skb+0x226/0x4a0 [ 445.739001][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.739076][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.739202][ T32] ? down_read+0x2be/0x330 [ 445.739285][ T32] genl_rcv+0x28/0x40 [ 445.739346][ T32] netlink_unicast+0x7bd/0x940 [ 445.739463][ T32] netlink_sendmsg+0x813/0xb40 [ 445.739565][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.739645][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 445.739716][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.739767][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 445.739836][ T32] __sys_sendto+0x408/0x5a0 [ 445.739920][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 445.740066][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 445.740138][ T32] __x64_sys_sendto+0xde/0x100 [ 445.740224][ T32] do_syscall_64+0x166/0x520 [ 445.740291][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.740343][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.740402][ T32] ? clear_bhb_loop+0x70/0xc0 [ 445.740471][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.740531][ T32] RIP: 0033:0x7f6a8d35e98e [ 445.740578][ T32] RSP: 002b:00007f6a8b5d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.740630][ T32] RAX: ffffffffffffffda RBX: 00007f6a8b5d56c0 RCX: 00007f6a8d35e98e [ 445.740670][ T32] RDX: 0000000000000024 RSI: 00007f6a8b5d4000 RDI: 0000000000000006 [ 445.740707][ T32] RBP: 0000000000000000 R08: 00007f6a8b5d3f04 R09: 000000000000000c [ 445.740739][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 445.740776][ T32] R13: 00007f6a8b5d3f58 R14: 00007f6a8b5d4000 R15: 0000000000000000 [ 445.740864][ T32] [ 445.740890][ T32] INFO: task syz-executor:11990 blocked for more than 143 seconds. [ 445.740935][ T32] Not tainted syzkaller #0 [ 445.740963][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.740985][ T32] task:syz-executor state:D stack:22440 pid:11990 tgid:11990 ppid:1 task_flags:0x400140 flags:0x00080002 [ 445.741117][ T32] Call Trace: [ 445.741136][ T32] [ 445.741167][ T32] __schedule+0x17db/0x58f0 [ 445.741304][ T32] ? __pfx___schedule+0x10/0x10 [ 445.741385][ T32] ? schedule+0x90/0x2b0 [ 445.741455][ T32] schedule+0x164/0x2b0 [ 445.741533][ T32] schedule_preempt_disabled+0x13/0x30 [ 445.741591][ T32] __mutex_lock+0x7c1/0x1550 [ 445.741671][ T32] ? __mutex_lock+0x5d4/0x1550 [ 445.741750][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 445.741819][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 445.741914][ T32] ? stack_trace_save+0xa9/0x100 [ 445.741963][ T32] ? __lock_acquire+0x747/0x2de0 [ 445.742028][ T32] ? radix_tree_lookup+0x240/0x290 [ 445.742100][ T32] genl_rcv_msg+0x10b/0x7a0 [ 445.742183][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.742310][ T32] netlink_rcv_skb+0x226/0x4a0 [ 445.742393][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.742472][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.742598][ T32] ? down_read+0x2be/0x330 [ 445.742681][ T32] genl_rcv+0x28/0x40 [ 445.742742][ T32] netlink_unicast+0x7bd/0x940 [ 445.742853][ T32] netlink_sendmsg+0x813/0xb40 [ 445.742927][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.742959][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 445.742986][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.743008][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 445.743034][ T32] __sys_sendto+0x408/0x5a0 [ 445.743069][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 445.743094][ T32] ? errseq_sample+0x40/0x70 [ 445.743149][ T32] ? fd_install+0x94/0x3d0 [ 445.743173][ T32] ? fd_install+0x309/0x3d0 [ 445.743210][ T32] __x64_sys_sendto+0xde/0x100 [ 445.743239][ T32] do_syscall_64+0x166/0x520 [ 445.743889][ T32] ? trace_irq_disable+0x3b/0x140 [ 445.743916][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.743940][ T32] ? clear_bhb_loop+0x70/0xc0 [ 445.743969][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.743993][ T32] RIP: 0033:0x7fc48ed5e98e [ 445.744013][ T32] RSP: 002b:00007ffdf48045d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 445.744037][ T32] RAX: ffffffffffffffda RBX: 000055556547a500 RCX: 00007fc48ed5e98e [ 445.744054][ T32] RDX: 0000000000000020 RSI: 00007fc48fb54670 RDI: 0000000000000005 [ 445.744068][ T32] RBP: 0000000000000001 R08: 00007ffdf4804654 R09: 000000000000000c [ 445.744083][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 445.744097][ T32] R13: 00007ffdf48046a8 R14: 00007fc48fb54670 R15: 0000000000000000 [ 445.744133][ T32] [ 445.744197][ T32] [ 445.744197][ T32] Showing all locks held in the system: [ 445.744209][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 445.744225][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 445.744288][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 445.744304][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 445.744381][ T32] locks held by klogd/4972: 1, last CPU#1: [ 445.744397][ T32] #0: ffff8880b8728298 (hrtimer_bases.lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 445.744528][ T32] locks held by getty/5376: 2, on CPU#0: [ 445.744578][ T32] #0: ffff888035ed90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 445.744775][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 445.744967][ T32] locks held by udevd/9620: 1, on CPU#1: [ 445.744994][ T32] #0: ffff888026adf350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 445.746381][ T32] locks held by syz.4.1411/11955: 6, on CPU#1: [ 445.746422][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.746616][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.746765][ T32] #2: ffff888026a9aa60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 445.746900][ T32] #3: ffff888026af47c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 445.747028][ T32] #4: ffff888026af4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 445.747190][ T32] #5: ffff888026af41c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 445.747358][ T32] locks held by syz.0.1415/11964: 2, on CPU#0: [ 445.747405][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.747548][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.747697][ T32] locks held by syz.3.1416/11972: 2, on CPU#0: [ 445.747724][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.747858][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.747995][ T32] locks held by syz.1.1417/11969: 2, on CPU#1: [ 445.748035][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.748171][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.748322][ T32] locks held by syz.1.1417/11974: 2, on CPU#1: [ 445.748356][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.748497][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.748647][ T32] locks held by syz.1.1417/11981: 2, on CPU#0: [ 445.748687][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.748836][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.748980][ T32] locks held by syz.2.1418/11987: 2, on CPU#0: [ 445.749001][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.749131][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.749282][ T32] locks held by syz-executor/11990: 2, on CPU#1: [ 445.749315][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.749410][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.749468][ T32] locks held by syz-executor/12011: 2, on CPU#1: [ 445.749490][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.749545][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.749601][ T32] locks held by syz-executor/12012: 2, on CPU#0: [ 445.749617][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.749671][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.749727][ T32] locks held by syz-executor/12017: 2, on CPU#1: [ 445.749743][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.749796][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.749852][ T32] locks held by syz-executor/12024: 2, on CPU#0: [ 445.749867][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.749921][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.749980][ T32] locks held by syz-executor/12085: 2, on CPU#1: [ 445.749996][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.750172][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.750316][ T32] locks held by syz-executor/12100: 2, on CPU#1: [ 445.750357][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.750500][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.750643][ T32] locks held by syz-executor/12114: 2, on CPU#0: [ 445.750682][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.750825][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.750963][ T32] locks held by syz-executor/12118: 2, on CPU#0: [ 445.751008][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.751143][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.751292][ T32] locks held by syz-executor/12129: 2, on CPU#1: [ 445.751326][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.751466][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.751658][ T32] locks held by syz-executor/12179: 2, on CPU#1: [ 445.751698][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.751861][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.751990][ T32] locks held by syz-executor/12194: 2, on CPU#1: [ 445.752031][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.752198][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.752343][ T32] locks held by syz-executor/12216: 2, on CPU#0: [ 445.752384][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.752525][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.752667][ T32] locks held by syz-executor/12219: 2, on CPU#0: [ 445.752701][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.752842][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.753017][ T32] locks held by syz-executor/12228: 2, on CPU#1: [ 445.753050][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 445.753192][ T32] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 445.753346][ T32] [ 445.753365][ T32] ============================================= [ 445.753365][ T32] [ 445.753404][ T32] NMI backtrace for cpu 0 [ 445.753445][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 445.753514][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.753545][ T32] Call Trace: [ 445.753566][ T32] [ 445.753587][ T32] dump_stack_lvl+0xe8/0x150 [ 445.753669][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 445.753729][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.753822][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 445.753890][ T32] sys_info+0x135/0x170 [ 445.753964][ T32] watchdog+0xfd7/0x1030 [ 445.754053][ T32] ? watchdog+0x1c7/0x1030 [ 445.754125][ T32] kthread+0x38b/0x480 [ 445.754185][ T32] ? __pfx_watchdog+0x10/0x10 [ 445.754236][ T32] ? __pfx_kthread+0x10/0x10 [ 445.754310][ T32] ret_from_fork+0x514/0xb70 [ 445.754377][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 445.754429][ T32] ? __switch_to+0xc89/0x1420 [ 445.754520][ T32] ? __pfx_kthread+0x10/0x10 [ 445.754581][ T32] ret_from_fork_asm+0x1a/0x30 [ 445.754706][ T32] [ 445.754726][ T32] Sending NMI from CPU 0 to CPUs 1: [ 445.754828][ C1] NMI backtrace for cpu 1 [ 445.754842][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 445.754863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.754873][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 445.754897][ C1] Code: e8 2e de 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef e5 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 54 76 06 cc 44 89 f9 80 e1 07 [ 445.754914][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 445.754930][ C1] RAX: 1ffffffff35a8200 RBX: 00000000000003fd RCX: 0000000000000000 [ 445.754943][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 445.754955][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 445.754967][ C1] R10: dffffc0000000000 R11: ffffffff8572f400 R12: dffffc0000000000 [ 445.754987][ C1] R13: 0000000000000000 R14: ffffffff9ad410c0 R15: 0000000000000000 [ 445.754999][ C1] FS: 0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 445.755014][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.755027][ C1] CR2: 00005591016ed168 CR3: 000000007f1de000 CR4: 00000000003526f0 [ 445.755044][ C1] Call Trace: [ 445.755051][ C1] [ 445.755059][ C1] wait_for_lsr+0x184/0x2f0 [ 445.755083][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 445.755120][ C1] serial8250_console_write+0xaa1/0x1200 [ 445.755151][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 445.755175][ C1] ? __schedule+0x17f1/0x58f0 [ 445.755204][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 445.755234][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 445.755258][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 445.755287][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 445.755309][ C1] nbcon_kthread_func+0x679/0x880 [ 445.755332][ C1] ? nbcon_kthread_func+0x163/0x880 [ 445.755351][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 445.755375][ C1] ? __kthread_parkme+0x71/0x1f0 [ 445.755403][ C1] ? __kthread_parkme+0x199/0x1f0 [ 445.755432][ C1] kthread+0x38b/0x480 [ 445.755450][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 445.755468][ C1] ? __pfx_kthread+0x10/0x10 [ 445.755487][ C1] ret_from_fork+0x514/0xb70 [ 445.755506][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 445.755523][ C1] ? __switch_to+0xc89/0x1420 [ 445.755549][ C1] ? __pfx_kthread+0x10/0x10 [ 445.755568][ C1] ret_from_fork_asm+0x1a/0x30 [ 445.755605][ C1] [ 445.755996][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 448.994210][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 449.003339][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.013409][ T32] Call Trace: [ 449.016705][ T32] [ 449.019649][ T32] vpanic+0x56d/0xa60 [ 449.023662][ T32] ? __pfx___schedule+0x10/0x10 [ 449.028530][ T32] ? __pfx_vpanic+0x10/0x10 [ 449.033152][ T32] panic+0xc5/0xd0 [ 449.036897][ T32] ? __pfx_panic+0x10/0x10 [ 449.041333][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 449.046806][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 449.052197][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 449.058367][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 449.064535][ T32] watchdog+0x1030/0x1030 [ 449.068889][ T32] ? watchdog+0x1c7/0x1030 [ 449.073323][ T32] kthread+0x38b/0x480 [ 449.077408][ T32] ? __pfx_watchdog+0x10/0x10 [ 449.082107][ T32] ? __pfx_kthread+0x10/0x10 [ 449.086718][ T32] ret_from_fork+0x514/0xb70 [ 449.091322][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 449.096450][ T32] ? __switch_to+0xc89/0x1420 [ 449.101153][ T32] ? __pfx_kthread+0x10/0x10 [ 449.105761][ T32] ret_from_fork_asm+0x1a/0x30 [ 449.110563][ T32] [ 449.114246][ T32] Kernel Offset: disabled [ 449.118581][ T32] Rebooting in 86400 seconds..