last executing test programs: 19.040504335s ago: executing program 0 (id=4341): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f0000009c600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b04000000f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcb9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f6b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670594acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f674eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d895a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5d1fe58a00c6855ada17dcbb20a2f03164292a1e4e53e4140224ba82b599de2604398b860906dccd87c1bf0e8d0cce2e34589ef2bd3672907b7604034d4697fa3f957622eaa59df5c02b307bceaf138b419ce49f4850328069ed4d5559babf388329d6605f74dc1c21c9f0f1aa9826ba2936f14affb0b06d0aeb1054b2d044cafe64979590000000000000000000000784de836bec51a9db6533248165f79bf47b13d6d2c83a7442632f60f9eb0cc4fa54e08e5e349cc3afdff6f3175a80c4015d380ee0880a8a822d0a630a864c823392420ec93fab6d4d98a53c8b75221a9576e8204169fa1046355a0342539527e882e7fcaf062f0733fc0fb97"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) 18.817424165s ago: executing program 0 (id=4346): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={r0, &(0x7f0000000140)='ip6gre\x00', 0x4580, &(0x7f0000000200)={@align=0x4, {0x1000, 0x1164, 0x6, 0x1}}, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8001}) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000003580)={0x2, 0x0, @empty}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0xfffc, 0x202, 0x6, 0x0, r6}, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="8500000015000000186000000200000000000000040000006f910400040000001858000006000000000000000000f128f1cde6c3", @ANYRES32=r1, @ANYBLOB="000000000000000018670000080000000000000002000000"], &(0x7f0000000440)='GPL\x00', 0xc, 0x18, &(0x7f0000000480)=""/24, 0x41000, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0x2, 0x4}, 0x10, r3, r4, 0x5, 0x0, &(0x7f0000000540)=[{0x1, 0x4, 0xc, 0x9}, {0x1, 0x1, 0x10, 0x5}, {0x4, 0x4, 0xc, 0x4}, {0x3, 0x1, 0xc, 0xc}, {0x4, 0x3, 0x1, 0x6}], 0x10, 0xfffffe01}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x0, 0x0, 0x12, 0x0, "ab59f3772a04a80d9db259fe35400b73b108d4db98f6c561ce06a2ad591ecea31dcde90f5df67247b8ea9380b69ca44a03109075913e31616aacebc0f3242594498244d5c77cc6d4290b3690de2f1484"}, 0xd8) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0xffffff04}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) ioctl(r8, 0x5c, &(0x7f0000000680)="d80e0cc133f37e8462f583340f9ac89b258d548e9018f2c0b703987b2ab1a51154f3cb2530c07d15809e4da66319e621e95ac66c948e181bfe88a25fffab997770cd33f424389fb984311ad433d5f304f708b9cde94490ec570aed6a66a1e25ef297acd706d453bda96152e17c73efa7a5e1fcc5c0929d0d718b865e7e735065ce45590c827cea689c0010bf45b9a4ab4c088f437cf91f8a565bb75787309713c28762a40643d0ea5c7f2c19b331d77a930e49f7e7a1796c20c2f8de8edd7cb68053ec732def65b4bfe53f03dedea531705907") 18.753296478s ago: executing program 2 (id=4347): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000100)={'team0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7800, 0x10, 0x81, 0x1, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, {[@timestamp={0x44, 0x24, 0xd8, 0x0, 0x1, [0x7f, 0x0, 0xb, 0x8, 0x89e, 0x6, 0xfffffff9, 0x3]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000b00)={0x558, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x3a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "767ecb7ea7432488f9f59ca2a11a7fdfc695117f56f2403f9913767114d5d2f04f7353e7b0107c9858c513d09d948f3bdf6e27a4149099bb23f4886c74ba0fe928fbd92d577be72d9779daf7fc584419c36294aaf93599ef595a691f63f31508c6032201930231b53aa1cbe7af30be708971c8b2eefce72bb38523d84d086828275388840c2f4e81bb5bc38138b6d2f5e30531e3ff002161d36932db7470babc3a1c12f57ceb674e27bd7b1f2c0a083be0d5c767548f79b080078aea84a4b36176f2f3b02e654a9bae5719ffc5f90894e6f08013ca2426c11aa08b78b050f6bc03b7e1d44b09d237e0a960edcdb6027b11da32"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '\'+%[]+H-@^%{:,..\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ']!#7-\'-@\'!#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x87, 0x4, "bcc816e3109e381588593312f532067af09ce7a5851845c689b27e39abcc91f259662dd0d3a2e8ce74c17a30746dc5979210c9d64dd4b00ec1106187a0cab28b9943ff53f40121d8f8d832b2ead765ebfdb8dd2b307b78e5ee11f8a17515a579dc5d0fbb1b1d4cbf0e58bbc74f3ae304273148bb2bdc0f2e0db08ef57d8d8744b06e02"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}-${\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}]}, @ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "2bba3ee6cccda5f9a1e741b62b89b534daa7f98e78dff8045588e2642dcf75ec8eababd26a2bf6e23fa80ee46183851d378ab50df19f2303c3530168b4529a8b7a4ce3415a7ca22948b6e76b7f21daad7a329103d0f2520dfaf1a6812499a5d12ca24e7c7e3ffd773b70b7a303d62c1f9b43c31d31179d5dbc18db0d33964c06017b793f4a6f7ddf6a8bb6c5f166f86144b90e3ebe9c6b1933c1facb4cf8c32a7b"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.(\xe2\xd9#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7e8a}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x7a, 0x4, "176376b4c1cd963b9d98c197581c5616389008ff3f2daefc062e2acc4554e9626599c3c6e8c72b9e2ad0f550c308aa509a01dea914eaaeba39d60b3e878322132338c22a67f3c732ed4038ee6d55a5e990b5d366749f287a46481fa5391470ac46c46019c71011cf0bb8efaadf7e64dacfb1f5d14704"}, @ETHTOOL_A_BITSET_MASK={0x89, 0x5, "a4abfb453c227ce90b38c1dc11d4eacb40cb262bc85b98c45fdefdb9304a9edb7d3bb3dccfe0bb430a7660636bf9f3f1e67e3e4fe658a07ff163ff5c42a94e41444d325c98d987502b2d11b6abaa6c939a56b048bad87a13ec8818eb3b59ebff12e885cd335c7e4282b5bc5ea050ad5bbbf3ae01c89553284556ba7e495ce3fbd5abff1562"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "f01e5e8ee2f7ff53e41160ced05587843ab5300b9264ad297d5627df04cff8bc97232f92063332f74edc89aec29aea33568c3e1a1a02d275d828b5735e6f7823629788b4b9"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x558}, 0x1, 0x0, 0x0, 0x84}, 0x20040005) (async) recvfrom$inet6(r3, 0x0, 0x0, 0x6122, 0x0, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r12, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCSFLAGS(r11, 0x40047459, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.608865723s ago: executing program 3 (id=4348): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth0_to_bond\x00', 0xfff3}) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth0_to_bond\x00', 0xfff3}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000806"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@empty, @in6=@dev}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) 18.502126597s ago: executing program 0 (id=4349): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0x21) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x6, @remote, 0xbef}}}, &(0x7f00000000c0)=0x84) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r1, 0x0) accept$inet6(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getpeername$packet(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)="6dd3403ec9c826f56189fb0c6a1002117696cfd7084e1678380770558aba4b3f5b88118f709b50bfad31a66f0aff8883d12d40625164b7d326fcc6f193d128cd6c3ecc"}, {&(0x7f0000000140)="5a29ab02dc835f848614f44e33664ff94a326ed7ac6bd1ae2838ade4379fefd9aef255af0d0a504d1ac58232f6470aabfc71057ea359d3e1ea3ca2da4ada7d583087cf176ae639ed82863cd18d3963908660b131208a0f099e2154f7e0ec4ea06cacf6591008c3bf56a0b1d5dce69d822e4250260bd9d96232ba0b22073b7f178e29bea4f9dbee7feb36c1c746f336c4b76de70bea5963764a7cd10dec4823bd00d9602bcf822fa7fc56a9bfd22b9a44f79f15f1b0db5e593dae3a08b1de382346367109fe9a2a79885d5cf9319d7a736cc9a1c8c3182169"}], 0x127d) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x112}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001400233f00fd00"/20, @ANYRES32=0x0, @ANYBLOB="14000200200100"/20], 0x2c}}, 0x0) write(r7, &(0x7f0000000280)="0a7c0fa4028cd650e2a9d406c0e0def39b1da9018d78b449b7d1a6ba7d49b999dcf2a6a05897b2ebb68a5b05f65a0035d727903165ce20225401c7adf0f3e7886bfd365a341f23cd319536299aa22ff761fb5ce4b9e5075bd4de46c7990662aa5224f860e9a9797496405307c4b7a9c2ac46677855d5d29b844c2d4431c2a3d701835c9fcd5c09e18c57", 0x8a) 18.479194742s ago: executing program 2 (id=4351): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) close(r1) sendto(0xffffffffffffffff, &(0x7f0000000080)="9580bd1c861aabf64c1fecbdba3205145ffd4a2bce36b0e04dc8e5533da5bc19e226b98a0e50a842691c22a9cbd93fc2d91c0c54adcceabef3bbb5cdb0ce1a09810151565e305d6f8a62", 0x4a, 0x30000000, &(0x7f0000000100)=@in6={0xa, 0xff7f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x9, 0xa}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmmsg(r4, &(0x7f0000000740)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e20, 0xa, @empty, 0x6}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000780)="42da4a726ba36d5319b2a64842d4104c690b0023a15a69b9476beb4fcc34100d45eaa8ef0926a3480f4a41f8e12316949b4060923c6e6828f7a5a8335a30508c7cb60575600449a649f932eaa800727f2a06113bf26ae54c22fea3cfb0ebf493aecc4d2378233fadde2a4caec1b870ff6aa52c619f92c192b5029f8cc631e5446c17a35984537ef20c6ac2dd77bf0e9346dc8f9902ce8c43a49ef62317826f9309774825b0477f63bb9781ecc31c249f5d200d30389229698ce4278fd3fe9b8d0f2da57de8192241c02dfa0a480a4af371794449526723862e60a795d4a222764645286c79e0bf37a234cab7ae3ad3af508fa35f85f2b7777666eedbcf91ec9c5c3883efbaef51d7686c09da076333c546594aca5949a06ec0c06c8a277d41cc67684c68c5235d", 0x127}, {&(0x7f00000003c0)="84ba8328ff82df23cfe084483c81216de5e494dc6d847b3d860459363b0b0445e985066fbb049046b7a69f9216c326b863343b6f4c119954788ae64db3ca04bfe0aae2ecc5b043edd7c8bf5f0e3037ad63223f3bc03d8896df2761e1666202f4d29504bda6c4503adbe1cfe5a7f642c728cf9b", 0x73}], 0x2, &(0x7f0000000440)=[{0x58, 0x84, 0x100, "5387ad88926cb88c3c44759d32fabb8971ead13184cb3a86f444f84a06a78765cd064b07be58fb3cdf58fca98bfbbda8ec5e8de783998bd50e7ea00bd316d68006817eeff532"}, {0x48, 0x88, 0x9, "e9748c313367186a2155c7dac71fe4659a6d3339e2fdd576f50f14f4d51c8b84b1e75c87bb07b8483c82d4d6c42f1013814cc262"}, {0xd0, 0x109, 0x5, "86fea4190c81f76d974a0e02ad488d2152ade011a92741e2d6e7e741655ead7df001ce73fd3c18edf46db4b76d1bbfb1350566489de3e02e13261e568bcf325c5f620620ae2cfebc2a5d7a2c889cbdde0de18a25140dd804c34fca07a3d2020bc46eace5a4b65adcb9fd1e2f806b614de196c7f3c5dbd3532d4d5fd87aa5f6e0c9f11fb6cb92d5dd3bbd9183989e6f27b60aa2140bcf3ea56a629711fcadf0c939de52b513be7b9c9649124315764a8addfd6bd2d22b8894fc"}, {0xd8, 0x10c, 0x7524283a, "5d663e43dcf606501e104cc1652a92a6936c62116a4ffac46f2057e4c4024474d568bbc3180db8cd85087f1860b4aaab342af8f61bac218486e78012ebf2eec3b3d5b390b3e0dc4605ea6c431131b0da7bc0163c1a6d6f2605e0614026ee38c044b0622a8ce05c82c5ff5f95d8ea4661c93473d0704eee0883ce5aa4c368ab1318c03ddee6ca108ab5855fe4e5437d0d830566df9c9a6d8151bb7b6505639b11323aff5bce4c8c58087b80733c2b5b5dfa6ecfc145e8e39f9cbc2ea861483d66baa0e01764"}, {0xb8, 0x10d, 0x2, "5a943c4aedc930fcc1af6276482aaaebf79f87d0c49a06ce42f487e0a2a3efeea04b823e40550a3d46e679d9a18c791597d6fdaf993d55735a613e51a5a886e8e201a1dbdb75d6b28fc109e17d463164189bd764ac1812d65f92766b5ea21dfe81542e64654e13cb61bae495679bf94080b9b3cb03c93182a28b07666f071d12e599ceba04eed0a5bc423ad3e0cf426418f3e6e26b04f5348f0b6a7bcf7360d03696bb"}], 0x300}}], 0x1, 0x48881) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) 18.273884748s ago: executing program 4 (id=4352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18ffffffff00090700000020d4a59c15", @ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x0, 0xcb) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$ax25(r2, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x20009}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="0a0001"], 0x48}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000d80)={{r1, &(0x7f00000002c0)='wlan0\x00', 0x101000, &(0x7f0000000300)={@align=0x10001, {0x2, 0x7, 0x5, 0x200}}, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x80000001}, 0x9, &(0x7f0000000c40)=[{0x3, 0x6, &(0x7f00000003c0)='team0\x00', &(0x7f0000000580)="99224518828905c1d2c3b1e520e97d15961bda1f68546c70d72d5c4ef32779dedfa93043a8a68bd57e3d7a775759ae82be9cdc7179ad3df318d5367dbab922924578eab856c0eef2cc2c276e6788c8d7838c1dc132669633f769846b2431d05a27e4b4a821b31afdce2e22e907cd551334b3e916548ba400364ed39a93972fed1e5d05e4d82165367a50e196da1b7d59f37daf3985896f", 0x97, 0x20}, {0x3, 0x6, &(0x7f00000004c0)=',*\x00', &(0x7f0000000640)="83872fd988e92459134a329e5fac0116baf387906acdb9a4b6aa674632355fa351cbd91578870c95eef9e346ee5e838e777421742a43d4fa0d33c1a42362110a497c677db07d57304952b03f965bb91f5f3283fbd5cd8460b93a3ce1f7b5fa14a59483fc55bcea6af847087fa5359d46dfe5fa", 0x73, 0x32}, {0x3, 0x7, &(0x7f0000000500)='\x00', &(0x7f00000006c0)="d8228e8fde4b628d58619d03c6650fd562a9e8f7db333b907de75d444595b0d0f23612fa38b4e43686c55729256074bc2ede1ebd579cd98e961e6f0528cd3ab13e820eae514ce28c2836cc0557a4c797bec6e97afa621311f88b4c7acdd66e452a05ba97462e073679f9c663393297a7ba144c61aad99f3961d6f7d91a833cd93a1ea6b836b7100d13d8840c1e3ef07e", 0x90, 0x12}, {0x2, 0x2, &(0x7f0000000780)='wlan0\x00', &(0x7f00000007c0)="8dfeb3b92235fdd9fcb099782b54a1a7ceab7af770aaa01e451282ede64662abf49b7963279b91e4c3be5a56afb69971dce11ef264c93936cdce0b", 0x3b, 0x10}, {0x2, 0xfff, &(0x7f0000000800)='wlan0\x00', &(0x7f0000000880)="683cfce88af0091ae403c85c910cf9e370948e87430da9a69ddecc22194cf9277ba6b686506ad1a7255bcd18c4b1512699c17cad990121a81f9360ee602dc3162ff59ad2cceb493b6c599615b04a5b4c32fbe07ed50a2eca13b98c690b6f75d2a020855c1893b963ebed58e2832bea9485a90dad336ca13d938925bb78fe615e5ead6e85ed4d9476e8373568772fb26e14c00d2ea6283d1089f2414ccee7fd2c71de69e540a327f97638a4ea7eee6e7ba8e30731487123632598e8", 0xbb, 0x28}, {0x3, 0xf, &(0x7f0000000940)='\x00', &(0x7f0000000980)="eb50e4712eeffd0156338406461ccb523c4b0af090b65307654bf259a5fef9b7331a13bc6ab595abee812ee7bf320d2322dcf0a0d43522e137cfb9ac65e121536c94425eb84a2b5816f38f6355c76e63e1dac0c3d713619fbbfea30b423bd4c9ee2eda734e62f8300c93f9747450fe1e4f0aa838cde9002a9f20e173085e6d1d2cfd095e03e1db853d09010dd365e35158a297d7cc98c8d66fa4e7ea6bedf5634be3c88c1d13a8d1f2c9eea35d035ed74f8ec1d9a0ae8426b587d3cef9aa", 0xbe, 0x12}, {0x3, 0x101, &(0x7f0000000a40)='@$\x00', &(0x7f0000000ac0)="579e4f64b4f407680c937ff175cf02f12b70", 0x12, 0x2a}, {0x2, 0x9, &(0x7f0000000b00)='-}#\x00', &(0x7f0000000b40)="7993d039ed35e709f530e61fd37568cc29d7c9b0e24ab11d10813f997f163044ffadd74db26cf28bf05952269f3416738dadd37c9c", 0x35, 0x20}, {0x1, 0x4, &(0x7f0000000b80)='team0\x00', &(0x7f0000000bc0)="87893f186acd7dcc5065a468679c086b6312795120f4599b6afcc54b19cb91451a7d0c812f25c4b124c5bf437d252a37543c941bbe19fb8d3e6e3a42936f7687a57eac7e6bb07c210763c4b41b5059a0ba42e5e8cd2cbb", 0x57, 0x8}]}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000e00)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000f00)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000f40)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x7, 0x4e23, 0x0, 0xa, 0x0, 0xa0, 0x0, r4, r8}, {0x5, 0x10001, 0x10000, 0xfffffffffffffffa, 0x9, 0x38, 0x101, 0xac1}, {0x4, 0x0, 0x0, 0xf9a}, 0x9f7, 0x6e6bbe, 0x2, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d3, 0x6c}, 0xa, @in=@multicast1, 0x3501, 0x2, 0x3, 0x9, 0x9, 0x7, 0xd54e}}, 0xe8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000009030000000000000000000700000008000540000000000c00048008000140000000040900010073797a3000000000240002001400018008000100e000000208000200000000000c0002800500010084000000eb615988a946bc958debf5fe7352364f97d8e2a7313b29bbdbe29b2f75b9a8cda7d335ce588adcacb81473b61ccbb3c5d307b510dab727d47d6a5b021a90b449c005b66a2f4471b7520914e14f8f34b3d2c1400a3a523fb7e6259981d7607db24ef4f848aea851c0ee7559"], 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r9, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x85) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000140)=""/128, 0x80, 0x40010140, &(0x7f0000000080)={0xa, 0x4e24, 0x7709, @local, 0x5}, 0x1c) 18.273172322s ago: executing program 2 (id=4353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xd4bc, 0xf, 0xab, 0xed46}, {0x0, 0x7, 0x0, 0x200}, {0x101, 0x2, 0x9, 0x8001}, {0x1b7, 0x1, 0x8d, 0x8}, {0x5cb, 0x8, 0x9, 0x5}, {0x2, 0x6, 0xd, 0x9}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa595b49a5eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc4ee8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000050000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6623065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf8d5d0b9ad0ff7ee6ea51cb3a490a85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b78495516df750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000080d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c00000000000000007bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce100e4ab79494c84bd51ef08ec095a40862fa81210c5e4d8176cec133e10061804b9c4b9fc6b0b76e86fb515dbbbf555f41dd17e57c21ca82b13495312b6ed454a3106bec17583da68803cd09e40792ba6d9a4051c9fdf23b292a980b335cdc1c883a79cec6f9663ab7bcdb28f11257301ac9fa7b95ce09be8b346a07c6889a421c4f7492ea5dfa1577c9c81ebe1abb08e8b4496d937b2952e7a4c93510c2b6f8b067b151176535421e2bb019b1eb2558f60f1614006c160109434624d72a603cc818b965aeaf8499464f09c1c4529c93c0a7f05967d16323a1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 18.254712275s ago: executing program 3 (id=4354): getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0xfff7, 0x0, 0xe, 0x6, 0x7, 0x3, 0x7, 0x8, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={r0, 0xf7, "94b4914fc92822bf1c8a1757fb34f46e1ea9160ab9973d1716b0c816e3e67689870ca80679e2a65e67b36a3b70ae0513c054610a0031494c3241ddafca3017095da9b5377b6d6c640ecf8462571e319e85d8b89dbfd073197712536bc4c6c2d76878cb7af33768084b2f4fb06eb94e62df5571296dd6fa331098683d98d95af7af7833d5b0ecd0093167e1023447e60e023e61000e74c861b08854721fdbae5d722577ffd46ad38cb030cbef25ab39d38003041b218b2f0b2b4521b3ed5c06a6be758cb9ac73059ac748814ad791d485e6d2ffa1c7a035895ffd47bb7768ea749c9084cbdf3e501e4d31003647c2afc91de39eafced925"}, &(0x7f0000000180)=0xff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x3de0}, &(0x7f0000000200)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x53}}}}}, 0x28}}, 0x44881) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0xdd65b1522bbf091e, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x50a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008002) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x200208c0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000005c0)={r0, 0x8, 0x5, [0x9, 0x9, 0x200, 0x4, 0x3]}, &(0x7f0000000600)=0x12) getpeername$inet6(r5, &(0x7f0000000640)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000680)=0x1c) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={r2}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000900)={&(0x7f0000000780), 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xbc, r8, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000980)={r6, 0x10, &(0x7f0000000940)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}]}, &(0x7f00000009c0)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000a00)={r10, @in6={{0xa, 0x4e21, 0xe066, @private0, 0x8}}}, 0x84) splice(r1, &(0x7f0000000ac0)=0x4, r7, &(0x7f0000000b00)=0x800, 0x7fffffff, 0xb) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='cgroup.freeze\x00', 0x0, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r11, 0x2, &(0x7f0000000b80)=0x5) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c00)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000c40)={'vxcan0\x00', 0x0}) getpeername$packet(r11, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000cc0)=0x14) getsockname$packet(r11, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x134, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x9}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3e}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x134}, 0x1, 0x0, 0x0, 0x8005}, 0x800) r16 = socket(0x2, 0xa, 0x514e) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r16, 0x84, 0x9, &(0x7f0000000f40)={r6, @in6={{0xa, 0x4e21, 0x6, @remote, 0x1}}, 0xfffffffa, 0xb30, 0x4, 0x5d1, 0x0, 0x12c, 0xaf}, 0x9c) 18.119688124s ago: executing program 3 (id=4355): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0x1, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @link_local={0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, 'I', "282896", 0xd, "f69b32a2a5cb407308"}}}}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140a, 0x1f95844b79e8a54d, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x24000880) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 18.014026555s ago: executing program 4 (id=4356): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32=r4, @ANYBLOB="080008f5ff0300000800080004010000080002007f0000010800090006000000080004000a01010008000a0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 17.983130469s ago: executing program 2 (id=4357): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) socket$inet(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a1400000011000100"], 0x70}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000640)={r7, &(0x7f00000002c0)='bond0\x00', 0x240000, &(0x7f0000000580)={@_ha_fsid={[0xffffe6e1, 0x5]}, {0x2713, 0x2, 0x38, 0x7}}, 0x5, &(0x7f00000005c0), &(0x7f0000000600)=0x5}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000640)={r7, &(0x7f00000002c0)='bond0\x00', 0x240000, &(0x7f0000000580)={@_ha_fsid={[0xffffe6e1, 0x5]}, {0x2713, 0x2, 0x38, 0x7}}, 0x5, &(0x7f00000005c0), &(0x7f0000000600)=0x5}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r11, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0xf, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x47ad}}], &(0x7f00000001c0)='GPL\x00', 0xd04f, 0xb8, &(0x7f00000004c0)=""/184, 0x40f00, 0x0, '\x00', r2, @fallback=0x2, r9, 0x8, &(0x7f0000000680)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0x7ff, 0x5}, 0x10, r11, 0xffffffffffffffff, 0x5, &(0x7f0000000840)=[r12, r13], &(0x7f0000000880)=[{0x2, 0x3, 0x5, 0x9}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x2, 0x8, 0x1}, {0x0, 0x4, 0xc, 0x9}, {0x4, 0x2, 0xb, 0x1}], 0x10, 0x7f}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0xf, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x47ad}}], &(0x7f00000001c0)='GPL\x00', 0xd04f, 0xb8, &(0x7f00000004c0)=""/184, 0x40f00, 0x0, '\x00', r2, @fallback=0x2, r9, 0x8, &(0x7f0000000680)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0x7ff, 0x5}, 0x10, r11, 0xffffffffffffffff, 0x5, &(0x7f0000000840)=[r12, r13], &(0x7f0000000880)=[{0x2, 0x3, 0x5, 0x9}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x2, 0x8, 0x1}, {0x0, 0x4, 0xc, 0x9}, {0x4, 0x2, 0xb, 0x1}], 0x10, 0x7f}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="81a9362a", @ANYRES16=r14, @ANYBLOB="01002dbd7000ffdbdf250200000008000300", @ANYRES32=r15, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r14, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff0001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7368}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x96c}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x4004) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r16, &(0x7f0000000e00)={0xa, 0x4e22, 0xde, @mcast1, 0x91}, 0x1c) 17.891219256s ago: executing program 4 (id=4358): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r1, 0x29, 0x3e, 0x0, &(0x7f0000000040)) setsockopt$inet6_int(r0, 0x29, 0x2b, 0x0, 0xfff3) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) 17.76431405s ago: executing program 3 (id=4360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)={0x3e0, r3, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@NL80211_ATTR_IE={0x4c, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_chsw={0x76, 0x6, {0x9, 0x5, 0x3d, 0xfff8}}, @chsw_timing={0x68, 0x4, {0x9, 0xd}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@initial, @device_b}}, @peer_mgmt={0x75, 0x8, {0x0, 0x1ff, @val=0x3, @val=0x26, @void}}, @challenge={0x10, 0x1, 0x5d}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2f, 0x38, 0x9}}]}, @NL80211_ATTR_IE={0xbe, 0x2a, [@perr={0x84, 0x82, {0x4, 0x8, [{{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x18}, {{}, @broadcast, 0x0, @void, 0x14}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x28}, {{}, @broadcast, 0x2, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x2e}, {{0x0, 0x1}, @device_b, 0xedf1, @value=@broadcast, 0x40}, {{}, @broadcast, 0x6d, @void, 0x2}, {{}, @broadcast, 0x40, @void, 0x24}]}}, @supported_rates={0x1, 0x1, [{0x36, 0x1}]}, @dsss={0x3, 0x1, 0x88}, @dsss={0x3, 0x1, 0x95}, @challenge={0x10, 0x1, 0x83}, @chsw_timing={0x68, 0x4, {0x5, 0x2}}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x1, 0x0, {0x1, 0x4, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x7ff, 0x7f}}, @supported_rates={0x1, 0x6, [{0x60, 0x1}, {0x9, 0x1}, {0x6}, {0x5, 0x1}, {0x1b, 0x1}, {0x16, 0x1}]}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x76af}, @NL80211_ATTR_IE={0xe2, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @fast_bss_trans={0x37, 0xc7, {0xed, 0x6, "0383dc6a524f6d28c31ad9b541fe641d", "5436ee24320388d2bd0d8d61d4d3b0b04be8dfe98108a878a13943e8fce771f8", "e2001616d06d473d931f5c7195c678b578d90c1674f8ea2bc3a845bde9bb0462", [{0x3, 0xf, "43065a42a5d9f6b537fced5d149452"}, {0x2, 0xe, "f62cf514ce101f1d68279653f52f"}, {0x4, 0x4, "8caddbb1"}, {0x1, 0x19, "05e2a51a0f90ba0016191f1a64e87d088346454578312281bc"}, {0x1, 0xb, "46e253aa925fc798568e06"}, {0x1, 0x24, "2e31d0ee56602401d24d62a7e0397a3d88f66bcbceea1bb07930d9ae62f61eeecb48d599"}]}}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x7}}, @mesh_id={0x72, 0x6}, @supported_rates]}, @NL80211_ATTR_IE={0x152, 0x2a, [@measure_req={0x26, 0x32, {0x5, 0x9, 0x10, "f48ffd2d5e22d73ccedb9fc208a74f45fc142800790535a8c5b9520dad7669a07ab44101576d9acee3ce85b85f3b8f"}}, @channel_switch={0x25, 0x3, {0x0, 0xb9, 0x6}}, @rann={0x7e, 0x15, {{0x1, 0x67}, 0xfd, 0x3, @broadcast, 0xaee, 0x2, 0xfffffff8}}, @random_vendor={0xdd, 0xec, "5a2dde018379c65867888f9e87765c102c4dc3bea87bf56e6234f997d67b50168d5c4d92a9658fd69bc2f3e744e2b35633fff9e6e20b92ef785ac7050e30fd37af954da052a7f333f8a5f828c706b64f5a0e70420cfa23542fba65fe4d109d330e96879c10b44458fc5e632b0c9183e3e3f0aa5185c8db353c596426e5921af2a8b195cdb02ba60bdc7751777e7e777c0f53dcb6a1e27f8826292f431ceb8c31878207057be374d017db4d8829723e92624a0772b4412a7949ba6a18cb6f8a5929d05c2a76b6afdbaf19cd11d267abf00aafa8b7a7b8953ad70522a23419a468396ae1076f6277c087061a33"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0x6, 0x2, 0x1, 0x2}}]}, @NL80211_ATTR_IE={0x69, 0x2a, [@cf={0x4, 0x6, {0xb, 0x2, 0x8, 0x400}}, @random_vendor={0xdd, 0x4e, "ad728dbfcf8ea2be5771d00126895e9c8bc4f9d68839b0ddfa065675c104358765e5a450dbd31e4f1aa0d62ca095823938f35480a59d347d4fc6c49a1e1ebecc05d93c4c5873944da216b4b1972d"}, @challenge={0x10, 0x1, 0x79}, @supported_rates={0x1, 0x2, [{0x60}, {0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0xe, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1f}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4000840}, 0x8c04) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r3, 0x801, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x24005820}, 0x20000800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099", @ANYBLOB="6401e8b279921be3c637378b8bb2d5"], 0x38}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x3c, 0x26, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0x4}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r10, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)={0x28, r11, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4b}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000560000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async, rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x3, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 17.522066752s ago: executing program 0 (id=4361): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160871c0c4f543ebf29bd4dfed00010000000000000000000a003800", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX], 0x27) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 17.438793303s ago: executing program 2 (id=4362): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000200), &(0x7f0000000140)=@udp6=r6, 0x3}, 0x20) syz_emit_ethernet(0xd6, &(0x7f0000000780)={@local, @empty, @void, {@llc={0x4, {@llc={0x80, 0xf4, "974f", "8abc2d8daa623a3818428eee27a034ed6c2db079007883cd8d9e6dbb91503538af6bdefb1b018dd14ade39f75f22a31a71f28e3de4ff06d1faab4b4839065143f2de6e2efb0cb0f6a4eee449d3b4ae7840831023660daa485bf14947681b3ee8522bd5cb00078f987bc0766695bfc7f96645ec6c93f5e743069d2db5c250fdbf253c6618b0f262966b608002b270bebcc460d8a29e3af8bc241a10e4e29a3c1b070742406e34a31cf97a589a262dcaa7a8a1b553fbf694390b93e50ec9512ba87bbe6257"}}}}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000200), &(0x7f0000000140)=@udp6=r6, 0x3}, 0x20) (async) syz_emit_ethernet(0xd6, &(0x7f0000000780)={@local, @empty, @void, {@llc={0x4, {@llc={0x80, 0xf4, "974f", "8abc2d8daa623a3818428eee27a034ed6c2db079007883cd8d9e6dbb91503538af6bdefb1b018dd14ade39f75f22a31a71f28e3de4ff06d1faab4b4839065143f2de6e2efb0cb0f6a4eee449d3b4ae7840831023660daa485bf14947681b3ee8522bd5cb00078f987bc0766695bfc7f96645ec6c93f5e743069d2db5c250fdbf253c6618b0f262966b608002b270bebcc460d8a29e3af8bc241a10e4e29a3c1b070742406e34a31cf97a589a262dcaa7a8a1b553fbf694390b93e50ec9512ba87bbe6257"}}}}}, 0x0) (async) 17.366606357s ago: executing program 0 (id=4364): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xb7}}, 0xe8) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @enum={0xa, 0x2, 0x0, 0x6, 0x4, [{0x8, 0xff}, {0xa, 0x2e}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x6}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x2}]}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000000c0)=""/63, 0x70, 0x3f, 0x1, 0x7b3, 0x10000, @value=r2}, 0x28) 17.267682624s ago: executing program 3 (id=4365): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x1a, &(0x7f0000000240), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_getaddr={0x80, 0x16, 0x800, 0x70bd2c, 0x25dfdbfe, {0xa, 0x18, 0x0, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x7ff, 0x9, 0x101, 0x3}}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x104}]}, 0x80}}, 0x40) 17.162698175s ago: executing program 0 (id=4366): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001540)={&(0x7f0000000400)="b478168c", &(0x7f0000000440)=""/4096, &(0x7f0000001440)="a0f3611d4f670505bf74b3fd839f3ca6e6a782b01baa95e477affcd3fb37ad9dcc110362d59ed770d564df24d952a50e16da783488b3ffd2c5d8a9255095f8443a191c61e65f341ac3c576a4e173020244af762268e0b9dc2ac571e9be6d614b84f50e6dd4e723f314c6bb475263ab76b3706446b9d4537e13c5a381b3", &(0x7f00000014c0)="1fbd26ba9553dca57f5b", 0x100, r1}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x238, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffb}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e0700af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7013}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x407a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x102e37f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e7a6c43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27adfe50}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64af45e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf51c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x184, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x98912e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x971a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x120a7fc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60f7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6825d9bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6500db5f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41c92473}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13c7e8a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f8e}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19a332ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x848c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a6bb248}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa545}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c78a27a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ca97632}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa88b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x109e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x461c9237}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67d41fcf}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74e24783}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x476269e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4aa7b9e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61d9db1b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aa71c5f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9af5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20a377b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9484}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14f2be9e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f0af1d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49a044dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b12cbe4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37c76ac9}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ed3cc41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74c1c93b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53b5ea3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb94f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc69b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd2b6f00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x367b2104}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x238}, 0x1, 0x0, 0x0, 0x40}, 0x20008001) 17.161440621s ago: executing program 2 (id=4367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) (async) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200211700000000000000f706000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004002b"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="05000000800400000100010000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="040000a001000000000800f707030000d074fbbea1"], 0x48}}, 0x4) (async) sendmsg$802154_dgram(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) (async) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) 17.161242278s ago: executing program 3 (id=4368): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000a6"], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x84, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-@\x1c+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xef}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040840}, 0x8) 16.998040013s ago: executing program 4 (id=4369): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge_slave_1\x00') syz_emit_ethernet(0x6e, &(0x7f0000000580)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00@', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "d2c4c6", 0x0, 0x2f, 0xff, @empty, @private1, [@fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}]}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d616373656330"], 0x40}}, 0x0) 16.924699512s ago: executing program 4 (id=4370): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x21001, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0xfffffffffffffe65) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000240)=0x202, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 16.726745216s ago: executing program 4 (id=4371): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) close(0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 16.183021096s ago: executing program 1 (id=4377): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000000000000010300000000000000000000000000002001000000000000000000000000000100000000ff00000002bbae00fe8800000000000000000000000000010000000004"], 0x1bc}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) 16.014350212s ago: executing program 1 (id=4378): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES32, @ANYBLOB="000000dcc24e9e08aa000000000000f3c8dec80000"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffff190}, {0x3, 0x0, 0x80, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0x6, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.975958254s ago: executing program 1 (id=4379): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) 15.889714043s ago: executing program 1 (id=4380): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0xa4}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r3, 0x15, 0x0, @void}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x300, 0x70bd29, 0x25dfdbfc, {0x80, 0x14, 0x0, 0x4, 0xff, 0x0, 0xff, 0x4, 0x200}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) 15.886566093s ago: executing program 1 (id=4381): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x632f, 0x7, 0x4, 0x64, 0x1ff, 0x5}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x4}, 0x8) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, "e9"}}}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000480)=ANY=[], 0x2e) sendmsg$xdp(r2, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x12b4, 0x0, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x8}, 0x3, 0xb, 0x2b9, 0x6, 0x15, 'syz1\x00', "ef8b79876810c3fa9a1e04794857a6f90738eae707dfb7c5ef3a421aa0bb8278", "e82ad5201bc680f713b055ab6019d118c8150632af95063d041e4ae442d122df", [{0x9, 0x9, {0x0, 0x81}}, {0x3, 0x6, {0x3, 0x2}}, {0x6, 0x1, {0x1, 0x2}}, {0xd, 0x2, {0x2, 0x7}}, {0x8, 0x2, {0x1, 0x9}}, {0x2, 0x4, {0x2, 0x40}}, {0x3e1e, 0x8, {0x0, 0x2}}, {0xb, 0x8, {0x2, 0x4}}, {0x7, 0x7f, {0x3, 0x6}}, {0x7, 0xff33, {0xb3f5d702089526e, 0xd4}}, {0x5, 0x3, {0x1, 0x9}}, {0x406, 0x7, {0xabb2c8ea62d16553, 0x84}}, {0x5, 0xf2, {0x0, 0x1}}, {0x3, 0xc, {0x2, 0xfc21}}, {0x7c4, 0x7ff, {0x0, 0x40000}}, {0x158e, 0xfff, {0x0, 0x1}}, {0x0, 0x8, {0x0, 0x9}}, {0x8000, 0x327b, {0x1, 0x7}}, {0xf, 0xfffd, {0x3, 0x7}}, {0xe, 0xf, {0x3, 0x100}}, {0x1, 0x4, {0x2, 0x8000}}, {0x7, 0xfff7, {0x1, 0x4}}, {0x800, 0x3ff, {0x1, 0x5}}, {0x6, 0x280, {0x3, 0x7fff}}, {0x9, 0x0, {0x3, 0x1}}, {0x5, 0x0, {0x1, 0x10}}, {0x401, 0x1, {0x1}}, {0x2, 0x0, {0x0, 0x8000}}, {0x8, 0x1, {0x4, 0x7acf}}, {0x8, 0x7, {0x0, 0x4d5}}, {0x0, 0x0, {0x3}}, {0x463, 0xc, {0x1, 0x711a}}, {0x32d, 0xc, {0x2, 0x5}}, {0x7, 0x6, {0x3, 0x2}}, {0x101, 0xfffc, {0x2, 0x2}}, {0xa407, 0x1, {0x0, 0x6}}, {0x7, 0x8000, {0x3, 0x3}}, {0x3ff, 0x7, {0x0, 0x3}}, {0x28b, 0x10, {0x3, 0x986}}, {0xf8, 0x40, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0xffffffff}, 0x6, 0xe0, 0x8000, 0x8, 0x14, 'syz0\x00', "1365dfa2f17ffe3704bc7875d8157da1ad71a967a8b3f57b2621cb62e5eb71fd", "768ce0b736118759a9df2c2d4861b6fd69a2fcba444ed5ce66f90fb7ddb1eb9b", [{0x2c14, 0x2, {0x0, 0x8000}}, {0x4, 0x3, {0x3, 0xc}}, {0x8, 0x3, {0x0, 0x8}}, {0xfaa4, 0x4, {0x3, 0x8d}}, {0x8a, 0x7f, {0x0, 0x1ff}}, {0x1000, 0x4, {0x2, 0x200}}, {0x401, 0x7, {0x3, 0x1c}}, {0x40, 0x1, {0x1, 0x4}}, {0x2, 0xff, {0x3, 0x8}}, {0x10, 0x3ff, {0x1, 0x4}}, {0x1, 0x7, {0x2, 0x3}}, {0x5, 0x4, {0x3, 0x9}}, {0xc, 0xd2f, {0x2, 0x9}}, {0x3, 0xa, {0x2, 0x7ff}}, {0x106e, 0x6, {0x2, 0x4}}, {0x375b, 0x8000, {0x1, 0x5f0a}}, {0x6490, 0x1, {0x2, 0x40000}}, {0x211, 0x8c, {0x2}}, {0x9, 0x4, {0x0, 0x9}}, {0xb57, 0x725, {0x1, 0x2}}, {0x8, 0x7, {0x2, 0x5}}, {0x22, 0x4, {0x1, 0x400000}}, {0x1, 0x5, {0x3, 0x39c2}}, {0x81, 0x5, {0x3, 0x38a}}, {0x3, 0x9, {0x1}}, {0x7958, 0x1e00, {0x2, 0x1ff}}, {0x8001, 0x5, {0x0, 0x8}}, {0xa23d, 0x8, {0x3, 0x4}}, {0x0, 0x1, {0x3, 0x2}}, {0x9, 0x7bb5, {0x1}}, {0x3ff, 0x2, {0x0, 0x2}}, {0x40, 0x1, {0x1, 0x37}}, {0x0, 0xe8, {0x2, 0x71}}, {0x9, 0x4, {0x0, 0x1}}, {0x0, 0xc7c8, {0x3, 0x2}}, {0x7ff, 0x48f5, {0x1, 0x4}}, {0x9, 0x5, {0x0, 0x9}}, {0x7ff, 0x4, {0x0, 0x80}}, {0x10, 0x7, {0x0, 0x9}}, {0x9, 0xc5e, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x3}, 0x6, 0x1, 0x3, 0x0, 0x1a, 'syz0\x00', "6f1ad46985e721e9ad1099ddce1cd0c269437e3d5f1c53d79f9194b8028f7084", "d5affdbcfd9d2ad8d97bd52bb22c93b03506938205bd449bc3c468b2da12f882", [{0x4, 0x1, {0x2, 0x9}}, {0x7ff, 0x813, {0x3, 0x3}}, {0x7, 0xc, {0x0, 0x4}}, {0x7, 0x5, {0x0, 0x2}}, {0x0, 0x6, {0x2, 0x3}}, {0xfff, 0x2, {0x1, 0x5f}}, {0x2, 0x4, {0x3, 0x4}}, {0x9, 0x4ee6, {0x3, 0x1}}, {0x4b0a, 0x8, {0x2, 0x2}}, {0x5, 0x0, {0x1, 0x8}}, {0x4, 0x0, {0x2, 0x4}}, {0xfffb, 0xc, {0x0, 0x3}}, {0xbab0, 0x5, {0x0, 0x7}}, {0x401, 0x2, {0x1, 0x8}}, {0x1, 0xff68, {0x2, 0x3}}, {0x4, 0x81e, {0x0, 0x7f}}, {0x7, 0x9, {0x1, 0x80}}, {0xfff7, 0x6, {0x2, 0xc}}, {0x5, 0x9, {0x2, 0xffff}}, {0xff, 0x0, {0x2, 0x2}}, {0x0, 0x8726, {0x2, 0x6c}}, {0xccd6, 0x6, {0x3, 0x40}}, {0x6, 0x5, {0x1, 0x8001}}, {0x8, 0x1, {0x2}}, {0xe, 0x3, {0x3}}, {0x6, 0xffa3, {0x2, 0x9}}, {0x4, 0x7, {0x1, 0x8}}, {0xff11, 0x2, {0x1, 0x5}}, {0x1, 0x8, {0x2, 0xd}}, {0x2, 0x7, {0x0, 0x3ff}}, {0xfff8, 0x8, {0x2, 0x7}}, {0x4, 0xc, {0x1, 0x4}}, {0x0, 0x7, {0x0, 0xf8000000}}, {0xff, 0xfffb, {0x1, 0x4}}, {0x7fff, 0xc074, {0x2, 0x7fffffff}}, {0x1, 0x246e, {0x0, 0xffff6c9c}}, {0x0, 0x9, {0x1, 0x5}}, {0x9, 0x5, {0x0, 0x7}}, {0x101, 0x7, {0x1, 0x3}}, {0x7, 0x7fff, {0x3, 0xffff}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x0, 0x4, 0x7, 0x2, 0xf, 'syz0\x00', "08d7b2ef0f1562b2ff649f520449ca9ddabbff51d8607d4c41581039c1121fd9", "7f804bcf6e70240d7c2fcdc5d9df9ed1e22b6ad18034b806b771e9a99d47b5fd", [{0x0, 0x2, {0x1, 0xb4}}, {0x3, 0x1, {0x3, 0x6}}, {0x8001, 0x6, {0x3, 0x9}}, {0x4, 0xffff, {0x0, 0x1}}, {0x1000, 0x2, {0x3, 0x1}}, {0x0, 0xefd2, {0x3, 0x39}}, {0x7, 0x9, {0x0, 0x7}}, {0x2, 0x9, {0x0, 0x101}}, {0xfbff, 0x40, {0x3, 0xa}}, {0x6, 0xfffe, {0x2, 0x2}}, {0x3, 0x4, {0x3, 0xffffffff}}, {0x1, 0x8001, {0x0, 0x9}}, {0x1, 0x3, {0x2, 0xcc}}, {0xa7c, 0x7, {0x2, 0x200}}, {0x100, 0x4, {0x0, 0x81}}, {0xb47, 0x3, {0x0, 0x842b}}, {0x200, 0x7, {0x1, 0x7}}, {0x3, 0xffff, {0x2, 0x8}}, {0x8001, 0xc323, {0x2, 0x1}}, {0x2, 0x1, {0x0, 0x4}}, {0x200, 0x7, {0x0, 0x5}}, {0xf5a7, 0x3, {0x1}}, {0x5, 0x7cf0, {0x3, 0x5}}, {0x1a91, 0x4, {0x3, 0x101}}, {0x7, 0x9, {0x1, 0x40}}, {0x3, 0x80, {0x0, 0x80000001}}, {0x80, 0x6, {0x1}}, {0x6, 0x7, {0x3, 0x1}}, {0xe6b, 0x2, {0x1, 0x1}}, {0x6, 0x2, {0x0, 0x2e96}}, {0x7, 0xb, {0x2, 0x2}}, {0xfff, 0x3, {0x1, 0x1000}}, {0x0, 0x3, {0x3, 0x8}}, {0x0, 0x9, {0x3, 0x9}}, {0x64, 0x8, {0x3, 0x9}}, {0x0, 0x8, {0x2}}, {0x8ae, 0x5, {0x3, 0xb}}, {0x8, 0x0, {0x2, 0x3}}, {0x7, 0x8, {0x2, 0x2e}}, {0x9, 0x2, {0x3, 0xda1}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffff7}, 0xc, 0xbb, 0x12, 0x8001, 0x11, 'syz1\x00', "f257b1ffe60279ae1fbae936b2c85d8256061f6e07387b0d4642b45bdc30253a", "d030e8c9eaeb9b6c86b015e2233fc3b72f7d884b0c99e58eed376bee866b9373", [{0x5, 0x9, {0x2, 0x9}}, {0x1, 0xd, {0x1, 0xe}}, {0x4, 0x0, {0x3, 0x4}}, {0x5, 0x4, {0x2, 0xcbaa}}, {0x1, 0x3, {0x3, 0x80}}, {0x10, 0x3ff, {0x2, 0x2}}, {0x5, 0x5, {0x1, 0x8}}, {0x7, 0x6, {0x3, 0x7f1e98a6}}, {0x29, 0xfff, {0x1, 0x80000000}}, {0x8000, 0x9, {0x0, 0x4}}, {0x1, 0x1ff, {0x1, 0x9}}, {0x2, 0x6, {0x2, 0xb8b2}}, {0x8, 0x5, {0x0, 0x80000001}}, {0x8, 0x2, {0x0, 0x3}}, {0xca, 0x8000, {0x2, 0xc}}, {0xd925, 0x4, {0x3}}, {0x4, 0x4, {0x2, 0xffffffff}}, {0x4, 0x3, {0x2, 0x9}}, {0x1ff, 0x0, {0x3, 0x80000000}}, {0x2ae, 0xff, {0x2, 0x4}}, {0x0, 0x400, {0x0, 0x7}}, {0xee9f, 0xe2d3, {0x0, 0x800}}, {0x400, 0x3f00, {0x2, 0xee7}}, {0xa2fd, 0x7ff, {0x0, 0x9}}, {0x2, 0xd0a, {0x3, 0xbb}}, {0x89, 0x5f, {0x2, 0xffff}}, {0x8, 0x0, {0x2, 0x3ff}}, {0xfe01, 0xff01, {0x3, 0x97d6}}, {0x3, 0x5, {0x3, 0x5}}, {0x7, 0x7, {0x0, 0x498f}}, {0xfe01, 0x9, {0x0, 0x9}}, {0x0, 0x8, {0x3, 0x40}}, {0x8, 0xfff7, {0x0, 0xe}}, {0x0, 0x8000, {0x2, 0x1}}, {0x3, 0x9, {0x3, 0x3}}, {0x9a, 0xfffa, {0x1, 0x6}}, {0x5, 0xffff, {0x3, 0x9}}, {0x3, 0x1, {0x1, 0x8}}, {0xb, 0x3, {0x3, 0xfffffff6}}, {0x65, 0x2, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x2, 0xa, 0xffff, 0x8, 0x1d, 'syz1\x00', "d423bdb7483d3b33e03ec31194f34cc2781909cfdefcfb0b4ec85980d84a181c", "56568fca98e3e8f2ec65bbeceeb4146782b7153a1f2d86678ddc6d243a7722e6", [{0x1400, 0x5, {0x3, 0xffffff80}}, {0x7f, 0x3, {0x0, 0x5}}, {0x0, 0xff91, {0x1, 0xd1}}, {0x5, 0x101, {0x3, 0xf7}}, {0x4, 0xfffd, {0x3, 0x1}}, {0x8, 0x3, {0x2, 0x3}}, {0x4, 0x2, {0x2, 0xff}}, {0x1ff, 0xd0ac, {0x2, 0x7c}}, {0xcb2, 0x9, {0x3, 0x1000}}, {0x1, 0x0, {0x1, 0x8001}}, {0x7, 0x2, {0x0, 0x5}}, {0x2, 0x1}, {0x100, 0x9, {0x3, 0x9}}, {0x7, 0xfffe, {0x2, 0x8}}, {0x7, 0x8, {0x1, 0xf60}}, {0x9, 0x3ff, {0x3, 0x56c}}, {0x2, 0x7361, {0x2, 0x8}}, {0x0, 0xfc83, {0x2, 0x5}}, {0x8, 0x200, {0x2, 0x585}}, {0x1b, 0x0, {0x2, 0x8}}, {0x3, 0x9, {0x0, 0x8}}, {0xa, 0x7, {0x0, 0x4}}, {0x7, 0xf, {0x1, 0x1000}}, {0x7ff, 0x800, {0x1, 0x4}}, {0x7f, 0xcf, {0x2, 0x6}}, {0x3, 0x5, {0x0, 0x5}}, {0xe, 0x0, {0x2, 0xb3}}, {0x81d, 0x5, {0x1}}, {0xfffe, 0xfff, {0x3, 0x8}}, {0x9, 0x400, {0x0, 0x4}}, {0x3, 0x5, {0x1, 0x3}}, {0xfb8, 0x5, {0x2}}, {0x2, 0x1ff, {0x1, 0x1}}, {0xa, 0x8, {0x3, 0x8000}}, {0x0, 0x6, {0x0, 0x6}}, {0x14, 0x2, {0x3, 0xf}}, {0x2, 0x0, {0x0, 0x8001}}, {0x1da0, 0x9d, {0x1, 0x100}}, {0x9, 0x0, {0x3, 0x7fffffff}}, {0xfffc, 0x7, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x2a60d7ddbf983bfc, 0x6}, 0xf, 0xf, 0x4, 0x4, 0x19, 'syz0\x00', "b8a141bab9b69befdce5fc670b9754f75e7c4e16d7199dac07f280fa82ac037d", "41e34bb54dabcd7472dd27aa5f9abed3a125da6be4ca0f1367f4f275cb983f4d", [{0x2, 0x96a, {0x3, 0x3}}, {0x6a, 0xc979, {0x0, 0x2}}, {0x800, 0x8000, {0x1, 0x400}}, {0x1, 0xf, {0x1, 0xccb4eb8}}, {0x8, 0x5, {0x0, 0xc}}, {0x0, 0x80, {0x3, 0x6}}, {0x1, 0x7ff, {0x0, 0x8}}, {0x7, 0xd, {0x0, 0x7fffffff}}, {0xff, 0x5, {0x1, 0xfffffffd}}, {0x40, 0x83, {0x1, 0x80000000}}, {0x7f, 0x9}, {0xffff, 0x8, {0x0, 0x6}}, {0x5, 0x6}, {0x1, 0x7, {0x3, 0x5}}, {0x8, 0x2, {0x3, 0x6}}, {0x4, 0x2, {0x3, 0x2}}, {0xfff8, 0x101, {0x0, 0x98}}, {0x7, 0x9, {0x3, 0x5f}}, {0xfed5, 0x8000, {0x1, 0x10001}}, {0x9, 0x1, {0x2, 0x8}}, {0xf0, 0x8, {0x0, 0x6}}, {0x1ff, 0x3, {0x2, 0x7}}, {0x2, 0x4}, {0x9, 0xd, {0x0, 0x7}}, {0x1000, 0x0, {0x0, 0x6}}, {0x5, 0x1, {0x2, 0x5}}, {0x1ff, 0x5fe4, {0x2, 0x6}}, {0xb, 0x0, {0x3, 0x68}}, {0xfffb, 0xb, {0x2, 0xffffffff}}, {0x7ff, 0x9}, {0x6, 0xff6e, {0x1, 0x6e}}, {0xf8, 0x7, {0x0, 0x1}}, {0xc3e0, 0x6, {0x1, 0x3}}, {0x0, 0x8, {0x3, 0x3}}, {0x1, 0x3}, {0x0, 0xffff, {0x2, 0x21}}, {0x800, 0x6, {0x0, 0xeb}}, {0x1, 0x2, {0x0, 0x7}}, {0x101, 0x200, {0x0, 0x1}}, {0x5, 0x5, {0x2, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x0, 0x80}, 0xfa, 0x10, 0xfffa, 0xe87, 0x14, 'syz1\x00', "bc1d7b147076125d30bd05c02dba347318d225c1d96209fd6f9c82a4ff90ad7f", "f04d4c6949f62b267f559d8e8cfb2bb34471062dc4e01c7509ff7863b7cc675a", [{0x39, 0x4, {0x1, 0xfffffffe}}, {0x400, 0x0, {0x3, 0x7}}, {0x6, 0x9, {0x3, 0x1}}, {0xf, 0x452, {0x1, 0xfffffff8}}, {0xffff, 0x7, {0x3, 0x7fffffff}}, {0xffff, 0x2, {0x3, 0x9}}, {0xffff, 0x227, {0x2, 0xc}}, {0x3, 0x5, {0x0, 0x374}}, {0x6, 0x5, {0x3, 0x9}}, {0x0, 0x6, {0x2, 0x8000}}, {0xfff8, 0x1, {0x2, 0x480f}}, {0x0, 0x0, {0x2, 0x5}}, {0x1, 0xfff7, {0x1}}, {0x6, 0x7, {0x0, 0xd2f}}, {0x3ff, 0x6, {0x2, 0x2}}, {0xb5b5, 0x6, {0x1, 0xffffffff}}, {0x4, 0x7, {0x2, 0x1}}, {0xe, 0x5c, {0x2, 0x6}}, {0x4, 0x48, {0x2, 0xb}}, {0x3, 0x1, {0x1, 0x200}}, {0xe4, 0x6, {0x3, 0x6}}, {0x40, 0xff, {0x1}}, {0x5, 0xe1b, {0x1, 0x4}}, {0x9, 0xfffd, {0x2, 0x9}}, {0x7, 0x1ff, {0x3}}, {0xf5e5, 0x8, {0x3, 0x8a7}}, {0x7f, 0x8000, {0x3, 0x94}}, {0xc, 0x0, {0x3, 0xfffff800}}, {0x0, 0x0, {0x1, 0x80000000}}, {0x400, 0x8001, {0x0, 0xffffffff}}, {0x3, 0x5, {0x2, 0x2}}, {0x6, 0x4, {0x2, 0xffffffad}}, {0x7, 0x7ff, {0x0, 0x200}}, {0x1, 0x4, {0x0, 0x967a}}, {0x5, 0x101, {0x3, 0x1}}, {0x0, 0xbdac, {0x3, 0x9}}, {0xa, 0x2, {0x2, 0xfffffffe}}, {0x3ff, 0x9, {0x1, 0x8}}, {0x7, 0x3, {0x1, 0x7f}}, {0x4, 0x72, {0x2, 0x7}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x24040000}, 0x80010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x1000000, 0x0, 0x4040000}, 0x0) 15.708321506s ago: executing program 1 (id=4382): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000000)={0x100000000, 0xa}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r1, 0x2d04b000) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 2.181557083s ago: executing program 32 (id=4366): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001540)={&(0x7f0000000400)="b478168c", &(0x7f0000000440)=""/4096, &(0x7f0000001440)="a0f3611d4f670505bf74b3fd839f3ca6e6a782b01baa95e477affcd3fb37ad9dcc110362d59ed770d564df24d952a50e16da783488b3ffd2c5d8a9255095f8443a191c61e65f341ac3c576a4e173020244af762268e0b9dc2ac571e9be6d614b84f50e6dd4e723f314c6bb475263ab76b3706446b9d4537e13c5a381b3", &(0x7f00000014c0)="1fbd26ba9553dca57f5b", 0x100, r1}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x238, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffb}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e0700af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7013}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x407a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x102e37f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e7a6c43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27adfe50}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64af45e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf51c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x184, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x98912e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x971a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x120a7fc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60f7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6825d9bd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6500db5f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41c92473}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13c7e8a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f8e}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19a332ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x848c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a6bb248}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa545}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c78a27a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ca97632}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa88b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x109e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x461c9237}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67d41fcf}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74e24783}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x476269e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4aa7b9e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61d9db1b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aa71c5f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9af5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20a377b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9484}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14f2be9e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f0af1d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49a044dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b12cbe4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37c76ac9}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ed3cc41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74c1c93b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53b5ea3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb94f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc69b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd2b6f00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x367b2104}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x238}, 0x1, 0x0, 0x0, 0x40}, 0x20008001) 2.137978563s ago: executing program 33 (id=4367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) (async) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200211700000000000000f706000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004002b"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="05000000800400000100010000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="040000a001000000000800f707030000d074fbbea1"], 0x48}}, 0x4) (async) sendmsg$802154_dgram(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080) (async) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) 1.130532173s ago: executing program 34 (id=4368): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000a6"], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x84, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-@\x1c+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xef}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040840}, 0x8) 1.033765319s ago: executing program 35 (id=4371): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) close(0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 0s ago: executing program 36 (id=4382): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000000)={0x100000000, 0xa}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r1, 0x2d04b000) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 0 [ 386.115804][T17562] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3136'. [ 386.154473][T14934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.166446][T14934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.178918][T14934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 386.338165][T14934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.354396][T17566] netlink: 'syz.2.3139': attribute type 1 has an invalid length. [ 386.362717][T14934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.373284][T14934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 386.404887][T17566] bond0: entered promiscuous mode [ 386.411847][T17566] bond_slave_0: entered promiscuous mode [ 386.417746][T17566] bond_slave_1: entered promiscuous mode [ 386.429449][T17566] bond0: entered allmulticast mode [ 386.434608][T17566] bond_slave_0: entered allmulticast mode [ 386.440888][T17566] bond_slave_1: entered allmulticast mode [ 386.462493][T17573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.477460][T14934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.489376][T14934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.501636][T14934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 386.532210][T10310] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.555117][T17566] bridge1: entered promiscuous mode [ 386.562049][T17566] bridge1: entered allmulticast mode [ 386.568560][T17566] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 386.637007][T17575] bridge2: entered promiscuous mode [ 386.643495][T17575] bridge2: entered allmulticast mode [ 386.654659][T17575] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 386.689232][T10316] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.765143][T14924] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.818465][T10316] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.922564][T17586] netlink: 'syz.4.3143': attribute type 11 has an invalid length. [ 386.922866][T17580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3141'. [ 386.930815][T17586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3143'. [ 386.994398][T17526] chnl_net:caif_netlink_parms(): no params data found [ 387.029656][ T5843] Bluetooth: hci2: command tx timeout [ 387.060694][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3144'. [ 387.127517][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3144'. [ 387.138805][T17593] netlink: 'syz.2.3145': attribute type 1 has an invalid length. [ 387.151026][T17593] netlink: 'syz.2.3145': attribute type 1 has an invalid length. [ 387.159080][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3144'. [ 387.172403][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'. [ 387.226679][T14934] tipc: Resetting bearer [ 387.259312][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 387.267548][ C0] lec:lec_tx_timeout: lec0 [ 387.272440][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 387.280187][ T5843] Bluetooth: hci3: command tx timeout [ 387.685221][T14934] tipc: Disabling bearer [ 388.093571][T14934] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 388.102007][T14934] bridge6 (unregistering): left promiscuous mode [ 388.265997][T14934] bond0 (unregistering): Released all slaves [ 388.275867][T14934] bond1 (unregistering): Released all slaves [ 388.294246][T14934] bond2 (unregistering): Released all slaves [ 388.307705][T14934] bond3 (unregistering): Released all slaves [ 388.323803][T14934] bond4 (unregistering): Released all slaves [ 388.342218][T14934] bond5 (unregistering): Released all slaves [ 388.355582][T14934] bond6 (unregistering): Released all slaves [ 388.370949][T14934] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 388.384866][T14934] bond7 (unregistering): Released all slaves [ 388.405141][T14934] bond8 (unregistering): Released all slaves [ 388.418446][T14934] bond9 (unregistering): Released all slaves [ 388.674548][T17526] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.681977][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.691426][T17526] bridge_slave_0: entered allmulticast mode [ 388.704901][T17526] bridge_slave_0: entered promiscuous mode [ 388.714161][T17526] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.721676][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.728957][T17526] bridge_slave_1: entered allmulticast mode [ 388.737526][T17526] bridge_slave_1: entered promiscuous mode [ 388.758321][T14934] tipc: Left network mode [ 388.842026][T14934] IPVS: stopping master sync thread 14826 ... [ 388.855604][T17526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.935857][T17526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.111753][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 389.349568][ T5843] Bluetooth: hci3: command tx timeout [ 389.385468][T17652] netlink: 'syz.0.3156': attribute type 5 has an invalid length. [ 389.455770][T17526] team0: Port device team_slave_0 added [ 389.505231][T17526] team0: Port device team_slave_1 added [ 389.527239][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'. [ 389.572907][T17664] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 389.736342][T17526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.765193][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.853781][T17526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.886262][T17526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.943287][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.970016][T17526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.106618][T17690] syzkaller0: entered promiscuous mode [ 390.128285][T17690] syzkaller0: entered allmulticast mode [ 390.353246][T17526] hsr_slave_0: entered promiscuous mode [ 390.364583][T17526] hsr_slave_1: entered promiscuous mode [ 390.382791][T17526] debugfs: 'hsr0' already exists in 'hsr' [ 390.391074][T17526] Cannot create hsr debugfs directory [ 390.571682][T14934] hsr_slave_0: left promiscuous mode [ 390.585617][T14934] hsr_slave_1: left promiscuous mode [ 390.614414][T14934] veth1_vlan: left allmulticast mode [ 390.621724][T14934] veth1_vlan: left promiscuous mode [ 390.627343][T14934] veth1_macvtap: left promiscuous mode [ 390.644916][T14934] veth0_macvtap: left promiscuous mode [ 390.652142][T14934] veth0_vlan: left promiscuous mode [ 391.051310][T17710] tipc: Enabled bearer , priority 0 [ 391.127398][T17713] syzkaller0: entered promiscuous mode [ 391.133666][T17713] syzkaller0: entered allmulticast mode [ 391.141493][T17713] tipc: Resetting bearer [ 391.156006][T17719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.222414][T14923] tipc: Resetting bearer [ 391.240178][T17727] bridge0: port 3(batadv1) entered blocking state [ 391.246919][T17727] bridge0: port 3(batadv1) entered disabled state [ 391.254394][T17727] batadv1: entered allmulticast mode [ 391.264077][T17727] batadv1: entered promiscuous mode [ 391.429259][ T5843] Bluetooth: hci3: command tx timeout [ 391.739409][T10310] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 391.749438][T10310] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 391.994854][T17709] tipc: Resetting bearer [ 392.279237][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 392.287783][ C0] lec:lec_tx_timeout: lec0 [ 393.441790][T17709] tipc: Disabling bearer [ 393.476580][T17737] smc: net device wlan0 applied user defined pnetid SYZ0 [ 393.521060][ T5843] Bluetooth: hci3: command tx timeout [ 393.756213][T17754] openvswitch: netlink: Message has 93 unknown bytes. [ 393.765429][T17754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.879048][T17761] netlink: 'syz.4.3180': attribute type 2 has an invalid length. [ 393.974583][T17758] netlink: 'syz.2.3179': attribute type 1 has an invalid length. [ 394.098381][T14934] IPVS: stop unused estimator thread 0... [ 394.160953][T17773] netlink: 'syz.4.3181': attribute type 1 has an invalid length. [ 394.168937][T17773] netlink: 'syz.4.3181': attribute type 1 has an invalid length. [ 394.279386][T17777] IPVS: length: 8 != 1152 [ 394.333918][T17782] __nla_validate_parse: 2 callbacks suppressed [ 394.333940][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3182'. [ 394.794381][T17803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 394.850624][T17804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 395.036620][T17810] netlink: 'syz.0.3189': attribute type 1 has an invalid length. [ 395.244763][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3191'. [ 395.266077][T17823] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3189'. [ 395.315383][T17829] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3193'. [ 395.390400][T17810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.451297][T17820] bond2: (slave veth0_to_bond): making interface the new active one [ 395.462203][T17820] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 395.534057][T17526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 395.569054][T17526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 395.591264][ T5843] Bluetooth: hci3: command tx timeout [ 395.646755][T17526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.710996][T17526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 395.782173][T17852] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3197'. [ 395.846396][T17854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3198'. [ 396.127457][T17526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.224873][T17526] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.294395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.301633][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.320749][T17878] xt_SECMARK: invalid mode: 9 [ 396.371278][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.378497][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.813677][T17900] ip6gre1: entered allmulticast mode [ 397.084590][T17526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.316551][T17526] veth0_vlan: entered promiscuous mode [ 397.393739][T17526] veth1_vlan: entered promiscuous mode [ 397.490828][T17526] veth0_macvtap: entered promiscuous mode [ 397.524759][T17526] veth1_macvtap: entered promiscuous mode [ 397.557449][T17935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3214'. [ 397.595226][T17935] tipc: Invalid UDP bearer configuration [ 397.595290][T17935] tipc: Enabling of bearer rejected, failed to enable media [ 397.653137][T17526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.698526][T17526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.734522][T14934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.757675][T14934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.819421][T10316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.829064][T10312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.103081][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'. [ 398.309062][T10316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.327182][T10316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.386650][T10312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.417432][T10312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.281936][T18010] netlink: 'syz.2.3230': attribute type 4 has an invalid length. [ 399.344714][T18010] netlink: 'syz.2.3230': attribute type 4 has an invalid length. [ 399.412518][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.428386][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.441416][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.465680][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.474104][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.715422][T18030] __nla_validate_parse: 4 callbacks suppressed [ 399.715443][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'. [ 400.028011][T18043] IPVS: set_ctl: invalid protocol: 1 172.30.0.5:20001 [ 400.041546][T18044] netlink: 'syz.2.3237': attribute type 2 has an invalid length. [ 400.159876][T18044] : entered promiscuous mode [ 400.190703][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'. [ 400.240401][T18053] openvswitch: netlink: Flow actions attr not present in new flow. [ 400.256051][T18020] chnl_net:caif_netlink_parms(): no params data found [ 400.606950][T18067] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 400.854474][T18020] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.862594][T18020] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.875749][T18020] bridge_slave_0: entered allmulticast mode [ 400.884070][T18020] bridge_slave_0: entered promiscuous mode [ 400.895002][T18020] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.902816][T18020] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.911176][T18020] bridge_slave_1: entered allmulticast mode [ 400.919904][T18020] bridge_slave_1: entered promiscuous mode [ 400.998656][T18020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.019982][T18094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3250'. [ 401.040783][T18020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.141842][T18104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3252'. [ 401.245512][T18020] team0: Port device team_slave_0 added [ 401.268037][T18020] team0: Port device team_slave_1 added [ 401.434209][T18118] xt_hashlimit: size too large, truncated to 1048576 [ 401.449588][T18020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.466801][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.497099][T18020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.525163][T18112] C: renamed from lo [ 401.533560][T18112] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 401.556796][T18020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.565569][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.589451][ T5843] Bluetooth: hci0: command tx timeout [ 401.604442][T18020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.738400][T18121] pim6reg: entered allmulticast mode [ 401.846300][T18020] hsr_slave_0: entered promiscuous mode [ 401.870789][T18020] hsr_slave_1: entered promiscuous mode [ 401.897740][T18020] debugfs: 'hsr0' already exists in 'hsr' [ 401.917667][T18020] Cannot create hsr debugfs directory [ 402.056000][T18142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.085766][T18143] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3262'. [ 402.116625][T18143] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3262'. [ 402.601532][T18020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.760606][T18168] syzkaller0: entered promiscuous mode [ 402.767502][T18168] syzkaller0: entered allmulticast mode [ 402.785490][T18166] Bluetooth: MGMT ver 1.23 [ 402.893043][T18020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.932528][T18179] netlink: 'syz.2.3271': attribute type 2 has an invalid length. [ 403.068738][T18179] netlink: 'syz.2.3271': attribute type 2 has an invalid length. [ 403.105968][T18020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.153452][T18179] netlink: 'syz.2.3271': attribute type 2 has an invalid length. [ 403.206598][T18179] netlink: 'syz.2.3271': attribute type 2 has an invalid length. [ 403.233244][T18196] netlink: 'syz.4.3275': attribute type 10 has an invalid length. [ 403.283292][T18020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.323173][T18179] netlink: 'syz.2.3271': attribute type 2 has an invalid length. [ 403.338234][T18196] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.353659][T18196] bond0: (slave team0): Enslaving as an active interface with an up link [ 403.362791][T18179] netlink: 'syz.2.3271': attribute type 2 has an invalid length. [ 403.670261][ T5843] Bluetooth: hci0: command tx timeout [ 403.687753][T18205] syzkaller0: entered promiscuous mode [ 403.694647][T18205] syzkaller0: entered allmulticast mode [ 403.733401][T18205] 0: reclassify loop, rule prio 0, protocol 800 [ 403.754350][T18020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 403.767615][T18020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 403.781931][T18205] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3278'. [ 403.794985][T18020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 403.811709][T18020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 403.812234][T18205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.850525][T18216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3281'. [ 403.875241][T18205] pim6reg1: entered promiscuous mode [ 403.886692][T18205] pim6reg1: entered allmulticast mode [ 404.102609][T18233] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3285'. [ 404.130198][T18236] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.3286'. [ 404.160961][T18232] pimreg3: entered allmulticast mode [ 404.291023][T18241] bond4: entered promiscuous mode [ 404.296676][T18241] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.302971][T18244] ip6t_srh: unknown srh invflags 4000 [ 404.371492][T18241] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.378717][T18241] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 404.410506][T18241] bond4: (slave sit1): Error -95 calling set_mac_address [ 404.458245][T18247] syzkaller0: entered promiscuous mode [ 404.468244][T18247] syzkaller0: entered allmulticast mode [ 404.479622][T18249] validate_nla: 61 callbacks suppressed [ 404.479639][T18249] netlink: 'syz.3.3290': attribute type 1 has an invalid length. [ 404.551229][T18251] netlink: 'syz.4.3291': attribute type 29 has an invalid length. [ 404.594312][T18020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.607342][T18251] netlink: 'syz.4.3291': attribute type 29 has an invalid length. [ 404.636764][T18020] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.656871][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.664174][T10310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.671169][T18257] netlink: 'syz.0.3293': attribute type 6 has an invalid length. [ 404.691962][T18257] netlink: 'syz.0.3293': attribute type 5 has an invalid length. [ 404.728495][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.735730][T10310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.120167][T18020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.212547][T18020] veth0_vlan: entered promiscuous mode [ 405.245139][T18020] veth1_vlan: entered promiscuous mode [ 405.348740][T18020] veth0_macvtap: entered promiscuous mode [ 405.376987][T18020] veth1_macvtap: entered promiscuous mode [ 405.381017][T18289] x_tables: duplicate underflow at hook 1 [ 405.409930][T18020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.434399][T18020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.470003][T10312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.491672][T10312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.505439][T10312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.536936][T10312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.548630][T18295] __nla_validate_parse: 5 callbacks suppressed [ 405.548650][T18295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3307'. [ 405.709358][T14923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.744656][T14923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.749481][ T5843] Bluetooth: hci0: command tx timeout [ 405.824725][T10316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.852039][T10316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.906453][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3310'. [ 405.981725][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 406.027949][T18306] veth0_macvtap: left promiscuous mode [ 406.053048][T18311] netlink: 'syz.2.3313': attribute type 9 has an invalid length. [ 406.058815][T18306] netlink: 'syz.0.3311': attribute type 1 has an invalid length. [ 406.070879][T18306] netlink: 'syz.0.3311': attribute type 2 has an invalid length. [ 406.075873][T18311] netlink: 'syz.2.3313': attribute type 11 has an invalid length. [ 406.094227][T18311] netlink: 'syz.2.3313': attribute type 12 has an invalid length. [ 406.094759][T18312] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3229'. [ 406.104052][T18311] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3313'. [ 406.128004][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 406.139919][T18308] openvswitch: netlink: IP tunnel dst address not specified [ 406.344806][T18328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.405401][T18334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3319'. [ 406.451043][T18336] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 406.514396][T18337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3320'. [ 406.527261][T18340] x_tables: duplicate underflow at hook 1 [ 406.711449][T18346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3322'. [ 406.733064][T18344] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.940001][T18361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3327'. [ 407.176150][T18375] delete_channel: no stack [ 407.570809][T18392] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 407.606176][T18392] bond5 (unregistering): Released all slaves [ 407.637046][T18396] tipc: Started in network mode [ 407.642344][T18396] tipc: Node identity aeec3f467991, cluster identity 4711 [ 407.653314][T18396] tipc: Enabled bearer , priority 0 [ 407.822701][T18411] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 407.830114][ T5843] Bluetooth: hci0: command tx timeout [ 407.848537][T18406] syzkaller0: entered promiscuous mode [ 407.854224][T18406] syzkaller0: entered allmulticast mode [ 407.861979][T18406] tipc: Resetting bearer [ 408.017823][T18391] tipc: Resetting bearer [ 408.134944][T18429] "syz.3.3347" (18429) uses obsolete ecb(arc4) skcipher [ 409.772146][T18391] tipc: Disabling bearer [ 409.790391][ T10] tipc: Node number set to 3615309638 [ 409.998638][T18446] ieee802154 phy0 wpan0: encryption failed: -22 [ 410.024674][T18441] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 410.082177][T18441] bond1 (unregistering): Released all slaves [ 410.127657][T18451] validate_nla: 6 callbacks suppressed [ 410.127676][T18451] netlink: 'syz.0.3356': attribute type 32 has an invalid length. [ 410.290281][T18451] bond5: option coupled_control: invalid value (52) [ 410.298383][T18451] bond5 (unregistering): Released all slaves [ 410.371536][T18462] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 410.385962][T18462] bond1 (unregistering): Released all slaves [ 410.700448][T18478] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 410.727050][T18483] __nla_validate_parse: 10 callbacks suppressed [ 410.727073][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 410.779462][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 410.820634][T18489] tipc: Started in network mode [ 410.825807][T18489] tipc: Node identity ea001b74fe01, cluster identity 4711 [ 410.835756][T18492] netlink: 'syz.2.3365': attribute type 6 has an invalid length. [ 410.844095][T18489] tipc: Enabled bearer , priority 0 [ 410.878414][T18489] syzkaller0: entered promiscuous mode [ 410.911724][T18489] syzkaller0: entered allmulticast mode [ 410.970597][T18489] tipc: Resetting bearer [ 410.986762][T18501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3368'. [ 410.997989][T18485] tipc: Resetting bearer [ 411.033488][T18485] tipc: Disabling bearer [ 411.383400][T18517] bridge1: entered promiscuous mode [ 411.389649][T18524] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3372'. [ 411.401129][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3372'. [ 411.411324][T18470] delete_channel: no stack [ 411.416195][T18524] netlink: 'syz.3.3372': attribute type 5 has an invalid length. [ 411.425961][T18525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.452673][T18517] bridge1: entered allmulticast mode [ 411.476052][T18523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.563229][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.573018][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3376'. [ 411.579169][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.625008][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.666507][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.715417][T18542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3379'. [ 411.784209][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3379'. [ 411.840372][T18542] openvswitch: netlink: Message has 292 unknown bytes. [ 411.938284][T18554] netem: incorrect ge model size [ 411.954857][T18554] netem: change failed [ 412.118144][T18564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3386'. [ 412.303184][T18579] netlink: 'syz.0.3389': attribute type 12 has an invalid length. [ 412.349264][T18579] netlink: 'syz.0.3389': attribute type 29 has an invalid length. [ 412.373770][T18579] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3389'. [ 412.840187][ T5486] veth1_macvtap: left promiscuous mode [ 413.158375][T18630] sctp: [Deprecated]: syz.0.3402 (pid 18630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.158375][T18630] Use struct sctp_sack_info instead [ 413.453310][T18643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.710915][T18656] IPv6: addrconf: prefix option has invalid lifetime [ 413.911105][T18669] openvswitch: netlink: Missing key (keys=40, expected=80) [ 415.368307][T18729] netlink: 'syz.2.3427': attribute type 8 has an invalid length. [ 415.442422][T14923] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 416.134917][T18768] netlink: 'syz.4.3436': attribute type 1 has an invalid length. [ 416.212832][T18768] bond1: entered promiscuous mode [ 416.218254][T18768] bond1: entered allmulticast mode [ 416.224693][T18768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.244402][T18766] erspan1: entered allmulticast mode [ 416.254408][T18766] bond1: (slave erspan1): making interface the new active one [ 416.264045][T18766] erspan1: entered promiscuous mode [ 416.271684][T18766] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 416.289810][T18776] netlink: 'syz.3.3438': attribute type 1 has an invalid length. [ 416.308331][T18775] __nla_validate_parse: 13 callbacks suppressed [ 416.308349][T18775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3438'. [ 416.336641][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3438'. [ 416.485348][T18786] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3441'. [ 416.555318][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3443'. [ 416.578652][T18797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3444'. [ 416.592768][T18793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3443'. [ 417.125184][T18810] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3447'. [ 417.142435][T18830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3452'. [ 417.159260][T18830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3452'. [ 417.753806][T18831] sit0: entered promiscuous mode [ 417.775767][T18831] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 417.807307][T18831] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3452'. [ 418.206692][T18853] can: request_module (can-proto-3) failed. [ 419.521978][T18899] netlink: 'syz.2.3471': attribute type 11 has an invalid length. [ 419.532137][T18899] netlink: 'syz.2.3471': attribute type 11 has an invalid length. [ 419.649878][T18897] syzkaller0: entered promiscuous mode [ 419.655500][T18897] syzkaller0: entered allmulticast mode [ 420.565848][T18946] netlink: 'syz.1.3482': attribute type 2 has an invalid length. [ 420.575980][T18948] netlink: 'syz.4.3483': attribute type 21 has an invalid length. [ 421.358398][T18958] __nla_validate_parse: 11 callbacks suppressed [ 421.358419][T18958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3486'. [ 421.560476][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'. [ 421.571911][T19000] "syz.1.3496" (19000) uses obsolete ecb(arc4) skcipher [ 421.601596][T19000] "syz.1.3496" (19000) uses obsolete ecb(arc4) skcipher [ 421.747670][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3499'. [ 421.778374][T19008] netlink: 'syz.3.3499': attribute type 39 has an invalid length. [ 422.249525][T19038] syzkaller0: entered promiscuous mode [ 422.255113][T19038] syzkaller0: entered allmulticast mode [ 422.264417][T19038] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3504'. [ 422.274691][T19038] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.284085][T19038] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.346212][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3506'. [ 422.993195][T19081] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3512'. [ 422.994357][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3511'. [ 423.128608][T19083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3513'. [ 423.163157][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3514'. [ 423.327404][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 423.434870][T19092] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 423.703819][T19106] xt_addrtype: ipv6 does not support BROADCAST matching [ 423.828964][T19119] netlink: 'syz.4.3523': attribute type 1 has an invalid length. [ 423.911731][T19119] bond2: entered promiscuous mode [ 423.917620][T19119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.993286][T19119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.020070][T19119] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 424.030974][T19119] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 424.045945][T19119] bond2: (slave vcan1): making interface the new active one [ 424.059516][T19119] vcan1: entered promiscuous mode [ 424.070645][T19119] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 424.404408][T19137] ªªªªªª5gæ¹Q[Ô: entered promiscuous mode [ 424.413738][T19137] netlink: 'syz.3.3528': attribute type 2 has an invalid length. [ 424.432009][T19137] A link change request failed with some changes committed already. Interface ªªªªªª5gæ¹Q[Ô may have been left with an inconsistent configuration, please check. [ 424.797036][T19170] netlink: 'syz.1.3539': attribute type 1 has an invalid length. [ 425.470808][T19201] syzkaller0: entered promiscuous mode [ 425.476356][T19201] syzkaller0: entered allmulticast mode [ 425.661084][T19214] netlink: 'syz.1.3554': attribute type 13 has an invalid length. [ 426.557663][T19252] __nla_validate_parse: 78 callbacks suppressed [ 426.557684][T19252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3564'. [ 426.695733][T19271] macvlan2: entered promiscuous mode [ 426.740104][T19271] macvlan2: entered allmulticast mode [ 426.764907][T19271] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 426.806720][T19274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3571'. [ 426.942405][ T2978] bond0: (slave bond_slave_0): interface is now down [ 426.967030][T19283] netlink: 'syz.0.3574': attribute type 2 has an invalid length. [ 426.983847][T19283] 9: entered promiscuous mode [ 426.999309][ T2978] bond0: (slave bond_slave_1): interface is now down [ 427.026755][ T2978] bond0: now running without any active interface! [ 427.462539][T19313] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3577'. [ 428.128838][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'. [ 428.202297][T19342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.381563][ T794] IPVS: starting estimator thread 0... [ 429.424523][T19407] tipc: Started in network mode [ 429.457647][T19407] tipc: Node identity ac1414aa, cluster identity 4711 [ 429.481462][T19404] IPVS: using max 26 ests per chain, 62400 per kthread [ 429.506191][T19407] tipc: Enabled bearer , priority 10 [ 429.556036][T19407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3603'. [ 429.569655][T19407] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3603'. [ 429.580883][T19407] netlink: 'syz.1.3603': attribute type 6 has an invalid length. [ 429.592903][T19407] netlink: 'syz.1.3603': attribute type 5 has an invalid length. [ 429.615960][T19407] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3603'. [ 429.847318][T19423] vlan2: entered promiscuous mode [ 429.853676][T19423] vlan2: entered allmulticast mode [ 429.858835][T19423] hsr_slave_1: entered allmulticast mode [ 429.884515][T19424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3606'. [ 429.894152][T19424] netlink: 'syz.4.3606': attribute type 7 has an invalid length. [ 429.903912][T19424] netlink: 'syz.4.3606': attribute type 8 has an invalid length. [ 429.915074][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3606'. [ 430.268970][T19442] syzkaller1: entered promiscuous mode [ 430.285162][T19442] syzkaller1: entered allmulticast mode [ 430.402254][T19454] xt_hashlimit: size too large, truncated to 1048576 [ 430.411347][T19447] syzkaller0: entered promiscuous mode [ 430.416961][T19447] syzkaller0: entered allmulticast mode [ 430.651298][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3620'. [ 430.871538][ T794] tipc: Node number set to 2886997162 [ 430.948593][T19470] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 430.972138][T19475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.183952][T19486] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 431.443388][T19506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.767558][T19531] netlink: 'syz.2.3640': attribute type 16 has an invalid length. [ 431.796309][T19531] netlink: 'syz.2.3640': attribute type 17 has an invalid length. [ 432.022888][T19554] __nla_validate_parse: 1 callbacks suppressed [ 432.022909][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'. [ 432.144465][T19531] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.152354][T19531] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.729317][T19531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.793255][T19531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.830072][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'. [ 433.238846][ T3029] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.270420][ T3029] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.406967][ T3029] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.437125][ T3029] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.789880][T19613] netlink: 'syz.0.3661': attribute type 1 has an invalid length. [ 433.907511][T19613] bond5: entered promiscuous mode [ 433.913617][T19613] bond5: entered allmulticast mode [ 433.919463][T19613] 8021q: adding VLAN 0 to HW filter on device bond5 [ 433.972201][T19617] macvlan2: entered promiscuous mode [ 433.996261][T19617] macvlan2: entered allmulticast mode [ 434.030646][T19617] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 434.037172][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3666'. [ 434.425360][T19649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3672'. [ 434.461882][T19649] block nbd2: Unsupported socket: should be TCP or UNIX. [ 434.523464][T19655] netlink: 'syz.3.3673': attribute type 1 has an invalid length. [ 434.777639][T19673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3670'. [ 434.842770][T19679] netlink: 'syz.2.3678': attribute type 1 has an invalid length. [ 434.996306][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'. [ 435.356805][T19699] netlink: 'syz.4.3679': attribute type 4 has an invalid length. [ 435.458829][T19704] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 435.627680][T19712] vcan0: tx address claim with dest, not broadcast [ 435.647591][T19713] s5ÿÿø: renamed from vlan1 (while UP) [ 435.647592][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3683'. [ 435.926602][T19712] 8021q: adding VLAN 0 to HW filter on device bond6 [ 435.956439][T19718] macvlan2: entered promiscuous mode [ 435.963297][T19718] macvlan2: entered allmulticast mode [ 435.969728][T19718] bond6: entered allmulticast mode [ 435.974955][T19718] bond6: entered promiscuous mode [ 435.986418][T19718] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 436.001375][T19718] team0: Port device macvlan2 added [ 436.023361][T19720] vlan0: entered promiscuous mode [ 436.041482][T19720] geneve1: entered promiscuous mode [ 436.067562][T19720] vlan0: entered allmulticast mode [ 436.094998][T19720] geneve1: entered allmulticast mode [ 436.224157][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3688'. [ 436.286340][T19745] netlink: 'syz.1.3691': attribute type 9 has an invalid length. [ 436.320428][T19745] netlink: 'syz.1.3691': attribute type 11 has an invalid length. [ 436.338012][T19746] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3691'. [ 436.339255][T19745] netlink: 'syz.1.3691': attribute type 12 has an invalid length. [ 436.347396][T19746] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3691'. [ 437.039415][T19792] __nla_validate_parse: 3 callbacks suppressed [ 437.039437][T19792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3700'. [ 437.192416][T19798] pimreg3: entered allmulticast mode [ 437.254498][T19804] netlink: 'syz.1.3703': attribute type 1 has an invalid length. [ 437.280775][T19805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3702'. [ 437.415342][T19810] gretap1: entered promiscuous mode [ 437.426784][T19810] bond1: (slave gretap1): making interface the new active one [ 437.438398][T19810] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 437.478020][T19804] macvlan0: entered promiscuous mode [ 437.507536][T19804] macvlan0: entered allmulticast mode [ 437.517923][T19804] bond1: entered promiscuous mode [ 437.557315][T19804] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 437.597723][T19804] bond1: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 437.642660][T19804] bond1: left promiscuous mode [ 437.654152][T19826] netlink: 'syz.4.3706': attribute type 1 has an invalid length. [ 437.902794][T19831] bond3: (slave bridge1): making interface the new active one [ 437.915511][T19831] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 437.929466][T19839] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 437.935846][T19839] syzkaller1: linktype set to 823 [ 437.949036][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 437.983561][T19838] : entered promiscuous mode [ 438.170759][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3712'. [ 438.814935][T19885] bond4: entered promiscuous mode [ 438.821653][T19885] bond4: entered allmulticast mode [ 438.827502][T19885] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.085690][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'. [ 439.258996][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3724'. [ 440.243447][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.265277][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 440.337091][T19918] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3728'. [ 440.558496][T19924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3729'. [ 441.342140][T19902] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 441.427725][T19927] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 441.553931][T19935] netlink: 'syz.1.3733': attribute type 2 has an invalid length. [ 441.563752][T19935] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3733'. [ 441.746643][T19948] netlink: 'syz.3.3737': attribute type 32 has an invalid length. [ 441.758226][T19948] netlink: 412 bytes leftover after parsing attributes in process `syz.3.3737'. [ 441.805742][T19948] netlink: 'syz.3.3737': attribute type 2 has an invalid length. [ 442.048532][T19965] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 442.061434][T19963] netlink: 'syz.2.3741': attribute type 24 has an invalid length. [ 442.061555][T19965] bond0: (slave gre0): Error -95 calling set_mac_address [ 442.171002][T19963] netlink: 'syz.2.3741': attribute type 1 has an invalid length. [ 442.180661][T19963] netlink: 'syz.2.3741': attribute type 2 has an invalid length. [ 442.188582][T19963] netlink: 'syz.2.3741': attribute type 1 has an invalid length. [ 442.196974][T19963] netlink: 'syz.2.3741': attribute type 3 has an invalid length. [ 442.208572][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3741'. [ 442.226195][T19976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3744'. [ 442.247977][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3744'. [ 442.414718][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 442.444250][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3748'. [ 442.547035][T19988] netlink: 'syz.0.3749': attribute type 19 has an invalid length. [ 442.787858][T20006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 442.825652][T20009] sctp: [Deprecated]: syz.1.3755 (pid 20009) Use of int in maxseg socket option. [ 442.825652][T20009] Use struct sctp_assoc_value instead [ 442.951798][T20019] netlink: 'syz.1.3758': attribute type 33 has an invalid length. [ 442.982288][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'. [ 442.997712][T20019] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 443.012564][T20019] bond2 (unregistering): Released all slaves [ 443.272445][T20039] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3765'. [ 443.540506][T20055] sctp: [Deprecated]: syz.0.3770 (pid 20055) Use of int in max_burst socket option. [ 443.540506][T20055] Use struct sctp_assoc_value instead [ 444.112864][T20084] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3778'. [ 444.146056][T20086] netlink: 512 bytes leftover after parsing attributes in process `syz.0.3777'. [ 444.691050][T20112] netlink: 'syz.3.3785': attribute type 1 has an invalid length. [ 444.893283][T20115] gretap1: entered promiscuous mode [ 444.931004][T20115] bond2: (slave gretap1): making interface the new active one [ 444.948700][T20115] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 444.978904][T20127] syzkaller0: entered promiscuous mode [ 444.985357][T20127] syzkaller0: entered allmulticast mode [ 445.150027][ T51] Bluetooth: hci0: link tx timeout [ 445.155733][ T51] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 445.279538][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.287738][ C0] lec:lec_tx_timeout: lec0 [ 445.292763][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.620301][ T5831] Bluetooth: hci0: link tx timeout [ 445.625494][ T5831] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 445.644861][ T5831] Bluetooth: hci0: link tx timeout [ 445.656039][ T5831] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 445.893444][ T5831] Bluetooth: hci0: link tx timeout [ 445.898626][ T5831] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 445.922048][ T5141] Bluetooth: hci0: link tx timeout [ 445.927445][ T5141] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 446.027551][T20186] netlink: 'syz.3.3801': attribute type 3 has an invalid length. [ 446.044762][T20186] netlink: 'syz.3.3801': attribute type 3 has an invalid length. [ 446.206630][T20190] syzkaller0: entered promiscuous mode [ 446.227736][T20190] syzkaller0: entered allmulticast mode [ 446.443436][T20222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 446.728609][T20233] batadv_slave_0: entered promiscuous mode [ 446.903303][T20232] batadv_slave_0: left promiscuous mode [ 446.974443][ T5141] Bluetooth: hci0: link tx timeout [ 446.979790][ T5141] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 447.059668][T20256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.189696][ T5141] Bluetooth: hci0: command 0x0406 tx timeout [ 447.266154][T20264] __nla_validate_parse: 8 callbacks suppressed [ 447.266174][T20264] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3817'. [ 447.316628][T20264] vlan1: entered allmulticast mode [ 447.381057][T20264] erspan0: entered allmulticast mode [ 447.441012][T20274] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3821'. [ 447.456322][T20272] geneve3: entered promiscuous mode [ 447.479303][T20272] geneve3: entered allmulticast mode [ 447.505118][T10312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 447.517631][T10312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 447.535405][ T2978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 447.548458][T20284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3821'. [ 447.559624][T20284] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 447.568800][ T2978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 447.706031][T20275] NFSD: Failed to start, no listeners configured. [ 447.735470][T20294] bond0: entered promiscuous mode [ 447.751587][T20294] bond_slave_0: entered promiscuous mode [ 447.757684][T20294] bond_slave_1: entered promiscuous mode [ 447.855209][T20295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3824'. [ 447.885215][T20300] Cannot find add_set index 65532 as target [ 447.978378][T20305] netlink: 'syz.3.3828': attribute type 10 has an invalid length. [ 448.012871][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3829'. [ 448.013509][T20305] team0: Port device dummy0 added [ 448.196963][T20312] netlink: 212208 bytes leftover after parsing attributes in process `syz.4.3831'. [ 448.366710][T20326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 448.587737][T20338] netlink: 'syz.3.3838': attribute type 4 has an invalid length. [ 448.658134][T20342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3841'. [ 448.764263][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3842'. [ 448.776697][T20341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.785666][T20341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.803259][T20341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.813670][T20341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.826122][T20344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.845781][T20361] netlink: 'syz.3.3846': attribute type 3 has an invalid length. [ 448.847359][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3842'. [ 448.855261][T20361] netlink: 'syz.3.3846': attribute type 3 has an invalid length. [ 449.044502][T20371] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 449.355935][T20392] netlink: 'syz.0.3856': attribute type 2 has an invalid length. [ 449.554959][T20404] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 449.717322][T20410] tipc: Started in network mode [ 449.723649][T20410] tipc: Node identity ca0d97d31e22, cluster identity 4711 [ 449.739387][T20410] tipc: Enabled bearer , priority 0 [ 449.851971][T20410] syzkaller0: entered promiscuous mode [ 449.857597][T20410] syzkaller0: entered allmulticast mode [ 449.881899][T20410] tipc: Resetting bearer [ 449.929599][T20409] tipc: Resetting bearer [ 450.047359][T20430] netlink: 'syz.3.3869': attribute type 1 has an invalid length. [ 451.109131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 451.117391][ C0] lec:lec_tx_timeout: lec0 [ 451.733988][T20409] tipc: Disabling bearer [ 451.755815][ T5947] tipc: Node number set to 3559888851 [ 452.132001][T20462] netlink: 'syz.1.3877': attribute type 4 has an invalid length. [ 452.142418][T20464] xt_hashlimit: size too large, truncated to 1048576 [ 452.184862][T20467] netlink: 'syz.3.3879': attribute type 29 has an invalid length. [ 452.300968][T20475] sctp: [Deprecated]: syz.3.3882 (pid 20475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.300968][T20475] Use struct sctp_sack_info instead [ 452.353022][T20475] sctp: [Deprecated]: syz.3.3882 (pid 20475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.353022][T20475] Use struct sctp_sack_info instead [ 452.381132][T20478] netlink: 'syz.1.3881': attribute type 1 has an invalid length. [ 452.388910][T20478] __nla_validate_parse: 10 callbacks suppressed [ 452.388927][T20478] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3881'. [ 452.668770][T20487] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3883'. [ 452.861857][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 452.878052][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 453.199860][T20512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 453.304365][T20518] netlink: 'syz.0.3896': attribute type 63 has an invalid length. [ 453.353830][T20518] netlink: 'syz.0.3896': attribute type 63 has an invalid length. [ 453.382479][T20518] netlink: 'syz.0.3896': attribute type 10 has an invalid length. [ 453.420016][T20518] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.447977][T20518] bridge_slave_1: left allmulticast mode [ 453.457775][T20518] bridge_slave_1: left promiscuous mode [ 453.473602][T20518] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.521557][T20518] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 453.725406][T20549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3901'. [ 453.789601][T20551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3902'. [ 453.876760][T20554] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3903'. [ 454.046656][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3906'. [ 454.174160][T20563] hsr_slave_0 (unregistering): left promiscuous mode [ 454.183550][T20576] netlink: 'syz.3.3907': attribute type 1 has an invalid length. [ 454.191992][T20572] A link change request failed with some changes committed already. Interface ªªªªªª5gæ¹Q[Ô may have been left with an inconsistent configuration, please check. [ 454.210613][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'. [ 456.764044][T20551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.042927][T20618] digital: digital_start_poll: Unknown protocol [ 457.127286][T20617] syzkaller1: entered promiscuous mode [ 457.151146][T20617] syzkaller1: entered allmulticast mode [ 457.180662][T20626] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 457.201379][T20626] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 457.223486][T20626] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 457.232146][T20628] netlink: 'syz.2.3917': attribute type 11 has an invalid length. [ 457.243282][T20626] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 457.255691][T20628] netlink: 'syz.2.3917': attribute type 11 has an invalid length. [ 457.377835][T20633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.388688][T20635] netlink: 'syz.2.3917': attribute type 58 has an invalid length. [ 457.406593][T20635] __nla_validate_parse: 2 callbacks suppressed [ 457.406612][T20635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3917'. [ 457.423299][T20633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.438881][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 457.463393][T20633] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 457.482046][T20633] bond0 (unregistering): Released all slaves [ 457.493620][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3920'. [ 457.721048][T20649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3922'. [ 457.770560][T14923] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 457.818308][T14923] bond2: now running without any active interface! [ 457.913872][T20654] netlink: 'syz.4.3925': attribute type 2 has an invalid length. [ 457.932923][T20658] veth0: entered promiscuous mode [ 457.988291][T20651] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3923'. [ 457.992433][T20652] veth0: left promiscuous mode [ 458.087333][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3927'. [ 458.164973][T20669] netlink: 'syz.4.3926': attribute type 1 has an invalid length. [ 458.208035][T20669] netlink: 476 bytes leftover after parsing attributes in process `syz.4.3926'. [ 458.237222][T20669] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3926'. [ 458.522365][T20687] netlink: 'syz.4.3930': attribute type 21 has an invalid length. [ 458.691150][T20698] netlink: 'syz.3.3934': attribute type 10 has an invalid length. [ 458.708393][T20699] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3931'. [ 458.798644][T20698] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 458.859862][T20698] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 458.913109][T20710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3936'. [ 458.966304][T20710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.042468][T20710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.127577][T20723] ip6gre1: entered promiscuous mode [ 459.133302][T20723] ip6gre1: entered allmulticast mode [ 459.870825][T20769] tipc: Enabled bearer , priority 11 [ 459.885399][T10312] tipc: Subscription rejected, illegal request [ 460.179527][T20787] netlink: 'syz.1.3952': attribute type 10 has an invalid length. [ 460.217973][T20787] bridge_slave_1: left allmulticast mode [ 460.295984][T20787] bridge_slave_1: left promiscuous mode [ 460.302519][T20787] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.369809][ T9] IPVS: starting estimator thread 0... [ 460.392877][T20787] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 460.479381][T20803] IPVS: using max 29 ests per chain, 69600 per kthread [ 460.992503][ T9] tipc: Node number set to 335616884 [ 461.100205][T20843] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 461.108224][T20838] syzkaller0: entered promiscuous mode [ 461.149545][T20838] syzkaller0: entered allmulticast mode [ 462.255894][T20920] netlink: 'syz.0.3987': attribute type 21 has an invalid length. [ 462.312073][T20924] netlink: 'syz.1.3989': attribute type 11 has an invalid length. [ 462.650978][T20944] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 462.881483][T20951] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 462.952513][T20954] __nla_validate_parse: 15 callbacks suppressed [ 462.952536][T20954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3996'. [ 463.025336][T20951] netlink: 'syz.1.3996': attribute type 1 has an invalid length. [ 463.314562][T20959] netlink: 'syz.0.3999': attribute type 33 has an invalid length. [ 463.908775][T20991] bond5: Unable to set down delay as MII monitoring is disabled [ 463.968692][T21009] netlink: 'syz.4.4014': attribute type 1 has an invalid length. [ 463.977004][T21010] netlink: 'syz.4.4014': attribute type 1 has an invalid length. [ 463.978364][T20991] bond5 (unregistering): Released all slaves [ 464.042563][T21009] netlink: 'syz.4.4014': attribute type 4 has an invalid length. [ 464.096867][T21009] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4014'. [ 464.155739][T21009] `: renamed from bond0 (while UP) [ 464.260520][T21022] netlink: 'syz.2.4018': attribute type 21 has an invalid length. [ 464.273737][T21018] syzkaller0: entered promiscuous mode [ 464.279389][T21018] syzkaller0: entered allmulticast mode [ 464.292607][T21021] netlink: 'syz.2.4018': attribute type 21 has an invalid length. [ 464.309415][T21022] netlink: 'syz.2.4018': attribute type 6 has an invalid length. [ 464.318119][T21022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4018'. [ 464.361037][T21021] netlink: 'syz.2.4018': attribute type 6 has an invalid length. [ 464.379296][ T10] IPVS: starting estimator thread 0... [ 464.386042][T21021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4018'. [ 464.444893][T21032] sctp: [Deprecated]: syz.0.4022 (pid 21032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.444893][T21032] Use struct sctp_sack_info instead [ 464.469361][T21030] sctp: [Deprecated]: syz.0.4022 (pid 21030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.469361][T21030] Use struct sctp_sack_info instead [ 464.486742][T21033] netlink: 'syz.1.4021': attribute type 1 has an invalid length. [ 464.496241][T21027] IPVS: using max 25 ests per chain, 60000 per kthread [ 464.882800][T21058] sctp: [Deprecated]: syz.2.4028 (pid 21058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.882800][T21058] Use struct sctp_sack_info instead [ 465.092650][T21072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4035'. [ 465.101939][T21072] bridge_slave_0: left allmulticast mode [ 465.107660][T21072] bridge_slave_0: left promiscuous mode [ 465.127690][ T5832] IPVS: starting estimator thread 0... [ 465.134056][T21072] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.140859][T21070] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 465.198447][T21075] openvswitch: netlink: Missing key (keys=40, expected=100) [ 465.236685][T21075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4035'. [ 465.250205][T21074] IPVS: using max 25 ests per chain, 60000 per kthread [ 465.303154][T21081] lo speed is unknown, defaulting to 1000 [ 465.310479][T21081] lo speed is unknown, defaulting to 1000 [ 465.317429][T21081] lo speed is unknown, defaulting to 1000 [ 465.377412][T21081] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 465.400197][T21086] sctp: [Deprecated]: syz.2.4039 (pid 21086) Use of int in maxseg socket option. [ 465.400197][T21086] Use struct sctp_assoc_value instead [ 465.425307][T21081] lo speed is unknown, defaulting to 1000 [ 465.437919][T21081] lo speed is unknown, defaulting to 1000 [ 465.463961][T21081] lo speed is unknown, defaulting to 1000 [ 465.516872][T21081] lo speed is unknown, defaulting to 1000 [ 465.549865][T21081] lo speed is unknown, defaulting to 1000 [ 465.580248][T21081] lo speed is unknown, defaulting to 1000 [ 465.588057][T21081] lo speed is unknown, defaulting to 1000 [ 465.612994][T21081] lo speed is unknown, defaulting to 1000 [ 465.851162][T21112] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 466.677953][T21160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4064'. [ 466.810585][T21169] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4065'. [ 466.986850][T21185] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 467.126405][T21191] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 467.172503][T21188] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 467.444204][T21217] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 467.521044][T21213] netlink: 'syz.3.4079': attribute type 1 has an invalid length. [ 467.529886][T21213] netlink: 'syz.3.4079': attribute type 2 has an invalid length. [ 467.537656][T21213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4079'. [ 467.608466][T21227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4081'. [ 467.985725][T21254] __nla_validate_parse: 1 callbacks suppressed [ 467.985746][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4085'. [ 468.107306][T21259] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4087'. [ 468.408305][T21276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4092'. [ 468.462961][T21276] vlan2: entered allmulticast mode [ 468.481851][T21276] erspan0: entered allmulticast mode [ 468.487722][T21276] bridge0: port 4(vlan2) entered blocking state [ 468.509414][T21276] bridge0: port 4(vlan2) entered disabled state [ 468.524462][T21276] vlan2: entered promiscuous mode [ 468.531739][T21276] erspan0: entered promiscuous mode [ 468.552297][T21280] syzkaller0: entered promiscuous mode [ 468.557925][T21280] syzkaller0: entered allmulticast mode [ 468.617565][T21288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4096'. [ 468.768456][T21290] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4097'. [ 468.880986][T21306] sctp: [Deprecated]: syz.1.4100 (pid 21306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.880986][T21306] Use struct sctp_sack_info instead [ 468.948360][T21306] sctp: [Deprecated]: syz.1.4100 (pid 21306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.948360][T21306] Use struct sctp_sack_info instead [ 469.034550][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'. [ 469.044109][T21318] block nbd3: Unsupported socket: should be TCP or UNIX. [ 469.117610][T21318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4104'. [ 469.266496][T21330] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4107'. [ 469.299648][T21330] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4107'. [ 469.594727][T21350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4113'. [ 469.645397][T21350] validate_nla: 3 callbacks suppressed [ 469.645418][T21350] netlink: 'syz.4.4113': attribute type 2 has an invalid length. [ 469.667176][T21350] netlink: 'syz.4.4113': attribute type 1 has an invalid length. [ 469.684817][T21350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.834068][T21357] netlink: 'syz.1.4117': attribute type 1 has an invalid length. [ 470.154036][T21381] netlink: 'syz.4.4126': attribute type 11 has an invalid length. [ 470.202850][T21378] netlink: 'syz.0.4125': attribute type 8 has an invalid length. [ 470.305920][T21391] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 471.448433][T21471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.466882][T21474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.527574][T21478] ipvlan0: entered allmulticast mode [ 471.552671][T21478] veth1: entered allmulticast mode [ 473.338530][T21539] __nla_validate_parse: 11 callbacks suppressed [ 473.338554][T21539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4167'. [ 473.399145][ T3029] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.434404][ T3029] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.506108][ T3029] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.520551][ T3029] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.562819][T21542] : entered promiscuous mode [ 473.807430][T21564] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4174'. [ 473.825659][T21568] xt_hashlimit: size too large, truncated to 1048576 [ 473.841050][T21564] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4174'. [ 474.000980][T21579] netlink: 'syz.2.4177': attribute type 1 has an invalid length. [ 474.048557][T21579] 8021q: adding VLAN 0 to HW filter on device bond5 [ 474.073341][T21584] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.4178'. [ 474.154343][T21588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4179'. [ 474.362891][T21601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4181'. [ 474.390539][T21601] netlink: 'syz.0.4181': attribute type 5 has an invalid length. [ 474.410030][T21601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4181'. [ 474.479658][T21601] geneve2: entered promiscuous mode [ 474.500206][T21601] geneve2: entered allmulticast mode [ 474.528646][T14923] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 474.551219][T14923] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 474.575487][T21608] netlink: 'syz.4.4185': attribute type 10 has an invalid length. [ 474.607561][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'. [ 474.615771][T14923] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 474.638068][T21611] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4184'. [ 474.651349][T14923] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 474.845302][T21619] tipc: Failed to remove unknown binding: 66,0,0/0:3942380899/3942380900 [ 474.859002][T21619] tipc: Failed to remove unknown binding: 66,0,0/0:3942380899/3942380900 [ 475.008677][T21629] team_slave_1: entered promiscuous mode [ 475.037659][T21629] team_slave_1: entered allmulticast mode [ 475.078528][T21634] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 475.104850][T21639] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 475.550560][T21661] netlink: 209608 bytes leftover after parsing attributes in process `syz.2.4198'. [ 475.568488][T21658] lo speed is unknown, defaulting to 1000 [ 476.051031][T21689] netlink: 'syz.0.4203': attribute type 3 has an invalid length. [ 476.778726][T21728] netlink: 'syz.2.4216': attribute type 29 has an invalid length. [ 476.793506][T21728] netlink: 'syz.2.4216': attribute type 29 has an invalid length. [ 476.802779][T21728] netlink: 'syz.2.4216': attribute type 29 has an invalid length. [ 476.813164][T21728] netlink: 'syz.2.4216': attribute type 29 has an invalid length. [ 476.822396][T21728] netlink: 'syz.2.4216': attribute type 29 has an invalid length. [ 476.831760][T21728] netlink: 'syz.2.4216': attribute type 29 has an invalid length. [ 476.843364][T21728] netlink: 'syz.2.4216': attribute type 29 has an invalid length. [ 477.208881][T21748] pim6reg: entered allmulticast mode [ 477.223123][T21751] netlink: 'syz.2.4226': attribute type 12 has an invalid length. [ 477.237666][T21755] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 477.295852][T21758] netlink: 'syz.4.4227': attribute type 12 has an invalid length. [ 477.390745][T21758] bond0: option primary_reselect: invalid value (255) [ 477.402953][T21758] bond0 (unregistering): Released all slaves [ 477.410928][T21764] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 477.474021][T21764] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 477.623901][T21770] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 478.417150][T21827] block nbd3: not configured, cannot reconfigure [ 478.709588][T21837] __nla_validate_parse: 11 callbacks suppressed [ 478.709610][T21837] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4254'. [ 478.755421][T21842] gre0: entered promiscuous mode [ 478.769264][T21842] gre0: entered allmulticast mode [ 479.112433][T21863] netlink: 476 bytes leftover after parsing attributes in process `syz.3.4263'. [ 479.113641][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4261'. [ 479.148390][T21863] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4263'. [ 479.173293][T21863] batadv1: entered allmulticast mode [ 479.237664][T21869] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4262'. [ 479.535430][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4266'. [ 479.614788][T21885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4267'. [ 480.206685][T21905] veth0_virt_wifi: entered allmulticast mode [ 482.448364][T21877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.817489][T21932] IPv6: sit1: Disabled Multicast RS [ 483.000428][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4283'. [ 483.020140][T21940] syzkaller0: entered promiscuous mode [ 483.025854][T21940] syzkaller0: entered allmulticast mode [ 483.170580][T21950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4288'. [ 483.170580][T21955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4288'. [ 483.275129][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 483.347130][T21968] IPVS: set_ctl: invalid protocol: 0 172.20.20.15:21 [ 483.485262][T21973] veth5: entered allmulticast mode [ 483.567764][T21979] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:52769 [ 483.857391][T21998] validate_nla: 4 callbacks suppressed [ 483.857526][T21998] netlink: 'syz.3.4300': attribute type 2 has an invalid length. [ 483.882478][T21996] syz_tun: entered allmulticast mode [ 483.911710][T22000] netlink: 'syz.4.4301': attribute type 3 has an invalid length. [ 483.930998][T22000] __nla_validate_parse: 3 callbacks suppressed [ 483.931015][T22000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4301'. [ 483.941037][T21996] dvmrp1: entered allmulticast mode [ 484.157782][T22017] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4304'. [ 484.212371][T21995] syz_tun: left allmulticast mode [ 484.218315][T22017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4304'. [ 484.425677][T22030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4308'. [ 484.538737][T22036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4309'. [ 484.554484][T22023] bond3: (slave ªªªªªª5gæ¹Q[Ô): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 484.628256][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4310'. [ 484.654411][T22023] bond3: (slave ªªªªªª5gæ¹Q[Ô): Enslaving as an active interface with an up link [ 484.666885][T22023] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 484.690908][T22043] nbd3: detected capacity change from 0 to 127 [ 484.718956][ T5141] block nbd3: Receive control failed (result -104) [ 484.877196][T22050] lo speed is unknown, defaulting to 1000 [ 484.886134][T22054] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4315'. [ 484.948396][T22062] netlink: 'syz.4.4313': attribute type 1 has an invalid length. [ 485.005107][T22064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4318'. [ 485.319530][T22062] bond0: entered promiscuous mode [ 485.325268][T22062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.388452][T22065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.411014][T22065] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 485.429255][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4322'. [ 485.461686][T22065] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 485.483318][T22065] bond0: (slave vti0): making interface the new active one [ 485.496378][T22065] vti0: entered promiscuous mode [ 485.526860][T22065] bond0: (slave vti0): Enslaving as an active interface with an up link [ 485.623127][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4323'. [ 486.149303][T22117] netlink: 'syz.4.4330': attribute type 12 has an invalid length. [ 486.203621][T22118] netlink: 'syz.4.4330': attribute type 12 has an invalid length. [ 486.459468][T22137] netlink: 'syz.3.4336': attribute type 1 has an invalid length. [ 486.716079][T22144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 486.747200][T22144] bond4: (slave bond5): making interface the new active one [ 486.807133][T22144] bond4: (slave bond5): Enslaving as an active interface with an up link [ 487.371759][T22193] syzkaller1: entered promiscuous mode [ 487.400114][T22193] syzkaller1: entered allmulticast mode [ 487.638829][T22214] netlink: 'syz.4.4352': attribute type 1 has an invalid length. [ 487.668752][T22214] netlink: 'syz.4.4352': attribute type 2 has an invalid length. [ 487.794567][T22216] xt_TPROXY: Can be used only with -p tcp or -p udp [ 487.839540][T22216] netlink: 'syz.3.4355': attribute type 7 has an invalid length. [ 488.171813][T22234] veth0: entered promiscuous mode [ 488.256578][T22231] veth0: left promiscuous mode [ 488.978368][T22280] __nla_validate_parse: 16 callbacks suppressed [ 488.978388][T22280] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4370'. [ 489.482513][T22295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4374'. [ 489.854780][T22317] netlink: 'syz.1.4379': attribute type 2 has an invalid length. [ 489.897316][T22319] netlink: 'syz.1.4380': attribute type 7 has an invalid length. [ 490.008737][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4381'. [ 501.676162][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.685053][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 503.751199][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 503.809525][ T5141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 503.816638][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 503.820112][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 503.826665][ T5141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 503.834513][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 503.839953][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 503.854533][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 503.856794][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 503.862288][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 503.870385][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 503.924156][T22348] lo speed is unknown, defaulting to 1000 [ 503.966071][T22347] lo speed is unknown, defaulting to 1000 [ 504.158162][T22348] chnl_net:caif_netlink_parms(): no params data found [ 504.250794][T22347] chnl_net:caif_netlink_parms(): no params data found [ 504.302218][T22348] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.309780][T22348] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.316996][T22348] bridge_slave_0: entered allmulticast mode [ 504.324723][T22348] bridge_slave_0: entered promiscuous mode [ 504.343711][T22348] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.351105][T22348] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.359195][T22348] bridge_slave_1: entered allmulticast mode [ 504.367873][T22348] bridge_slave_1: entered promiscuous mode [ 504.415473][T22348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.434172][T22348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.487858][T22348] team0: Port device team_slave_0 added [ 504.493926][T22347] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.502172][T22347] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.511335][T22347] bridge_slave_0: entered allmulticast mode [ 504.519687][T22347] bridge_slave_0: entered promiscuous mode [ 504.528929][T22348] team0: Port device team_slave_1 added [ 504.535162][T22347] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.542850][T22347] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.550417][T22347] bridge_slave_1: entered allmulticast mode [ 504.558039][T22347] bridge_slave_1: entered promiscuous mode [ 504.606987][T22348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.614466][T22348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.641339][T22348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.655934][T22347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.670548][T22347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.680967][T22348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.687943][T22348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.715442][T22348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.793423][T22347] team0: Port device team_slave_0 added [ 504.822535][T22347] team0: Port device team_slave_1 added [ 504.911442][T22348] hsr_slave_0: entered promiscuous mode [ 504.918810][T22348] hsr_slave_1: entered promiscuous mode [ 504.935060][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 504.947492][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 504.959366][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 504.967753][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 504.977522][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 504.987447][ T5141] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 504.997926][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 504.999897][T22348] debugfs: 'hsr0' already exists in 'hsr' [ 505.011612][T22348] Cannot create hsr debugfs directory [ 505.033987][ T5824] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 505.041480][T22347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.043957][ T5824] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 505.048443][T22347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.057472][ T5824] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 505.083704][T22347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.127684][T22347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.134881][T22347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.162003][T22347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.292432][T22347] hsr_slave_0: entered promiscuous mode [ 505.298810][T22347] hsr_slave_1: entered promiscuous mode [ 505.305977][T22347] debugfs: 'hsr0' already exists in 'hsr' [ 505.313496][T22347] Cannot create hsr debugfs directory [ 505.319377][T22367] lo speed is unknown, defaulting to 1000 [ 505.354685][T22369] lo speed is unknown, defaulting to 1000 [ 505.796119][T22367] chnl_net:caif_netlink_parms(): no params data found [ 505.909334][ T5824] Bluetooth: hci4: command tx timeout [ 505.948630][T22369] chnl_net:caif_netlink_parms(): no params data found [ 505.989352][ T5824] Bluetooth: hci6: command tx timeout [ 506.033974][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 506.044130][T22367] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.051779][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 506.051786][T22367] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.058994][T22367] bridge_slave_0: entered allmulticast mode [ 506.074974][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 506.076977][T22367] bridge_slave_0: entered promiscuous mode [ 506.091791][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 506.093342][T22367] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.106857][T22367] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.114491][T22367] bridge_slave_1: entered allmulticast mode [ 506.122096][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 506.131174][T22367] bridge_slave_1: entered promiscuous mode [ 506.196225][T22367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.210226][T22367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.277186][T22369] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.285258][T22369] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.293362][T22369] bridge_slave_0: entered allmulticast mode [ 506.301553][T22369] bridge_slave_0: entered promiscuous mode [ 506.318717][T22367] team0: Port device team_slave_0 added [ 506.324714][T22369] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.332881][T22369] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.340438][T22369] bridge_slave_1: entered allmulticast mode [ 506.347849][T22369] bridge_slave_1: entered promiscuous mode [ 506.356359][T22381] lo speed is unknown, defaulting to 1000 [ 506.373713][T22367] team0: Port device team_slave_1 added [ 506.398668][T22369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.437810][T22369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.457639][T22367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.464988][T22367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.492076][T22367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.504424][T22367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.512309][T22367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.538570][T22367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.592612][T22369] team0: Port device team_slave_0 added [ 506.621642][T22369] team0: Port device team_slave_1 added [ 506.651102][T22367] hsr_slave_0: entered promiscuous mode [ 506.657823][T22367] hsr_slave_1: entered promiscuous mode [ 506.664395][T22367] debugfs: 'hsr0' already exists in 'hsr' [ 506.670783][T22367] Cannot create hsr debugfs directory [ 506.708734][T22369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.716918][T22369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.744313][T22369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.763055][T22369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.770380][T22369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.801175][T22369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.921563][T22369] hsr_slave_0: entered promiscuous mode [ 506.928143][T22369] hsr_slave_1: entered promiscuous mode [ 506.934904][T22369] debugfs: 'hsr0' already exists in 'hsr' [ 506.941165][T22369] Cannot create hsr debugfs directory [ 507.029361][ T5824] Bluetooth: hci7: command tx timeout [ 507.109108][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 507.117269][ C0] lec:lec_tx_timeout: lec0 [ 507.129293][ T5824] Bluetooth: hci8: command tx timeout [ 507.169823][T22381] chnl_net:caif_netlink_parms(): no params data found [ 507.317175][T22381] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.327051][T22381] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.335070][T22381] bridge_slave_0: entered allmulticast mode [ 507.342727][T22381] bridge_slave_0: entered promiscuous mode [ 507.352675][T22381] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.360461][T22381] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.367801][T22381] bridge_slave_1: entered allmulticast mode [ 507.375644][T22381] bridge_slave_1: entered promiscuous mode [ 507.423017][T22381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.445213][T22381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.490301][T22381] team0: Port device team_slave_0 added [ 507.506758][T22381] team0: Port device team_slave_1 added [ 507.539461][T22381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.546424][T22381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.573279][T22381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.586436][T22381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.594207][T22381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.620575][T22381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.668688][T22381] hsr_slave_0: entered promiscuous mode [ 507.675475][T22381] hsr_slave_1: entered promiscuous mode [ 507.682183][T22381] debugfs: 'hsr0' already exists in 'hsr' [ 507.687932][T22381] Cannot create hsr debugfs directory [ 507.989194][ T5824] Bluetooth: hci4: command tx timeout [ 508.069755][ T5824] Bluetooth: hci6: command tx timeout [ 508.149270][ T5824] Bluetooth: hci9: command tx timeout [ 508.870104][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 509.109498][ T51] Bluetooth: hci7: command tx timeout [ 509.189856][ T51] Bluetooth: hci8: command tx timeout [ 509.217919][ T51] Bluetooth: hci0: link tx timeout [ 509.223816][ T51] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 509.760799][ T7545] lec:lec_start_xmit: lec0:No lecd attached [ 510.069381][ T5824] Bluetooth: hci4: command tx timeout [ 510.149537][ T5824] Bluetooth: hci6: command tx timeout [ 510.229315][ T5824] Bluetooth: hci9: command tx timeout [ 511.189443][ T5824] Bluetooth: hci7: command tx timeout [ 511.269858][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 511.276003][ T5824] Bluetooth: hci8: command tx timeout [ 512.149343][ T51] Bluetooth: hci4: command tx timeout [ 512.229389][ T51] Bluetooth: hci6: command tx timeout [ 512.310185][ T51] Bluetooth: hci9: command tx timeout [ 513.269592][ T51] Bluetooth: hci7: command tx timeout [ 513.350575][ T51] Bluetooth: hci8: command tx timeout [ 513.992567][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 514.389302][ T5824] Bluetooth: hci9: command tx timeout [ 515.109376][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 515.117428][ C0] lec:lec_tx_timeout: lec0 [ 515.122240][ T5156] block nbd3: Possible stuck request ffff888026028000: control (read@0,1024B). Runtime 30 seconds [ 515.134526][ T5156] block nbd3: Possible stuck request ffff888026028200: control (read@1024,1024B). Runtime 30 seconds [ 515.145766][ T5156] block nbd3: Possible stuck request ffff888026028400: control (read@2048,1024B). Runtime 30 seconds [ 515.158310][ T5156] block nbd3: Possible stuck request ffff888026028600: control (read@3072,1024B). Runtime 30 seconds [ 545.190922][ T5156] block nbd3: Possible stuck request ffff888026028000: control (read@0,1024B). Runtime 60 seconds [ 545.202077][ T5156] block nbd3: Possible stuck request ffff888026028200: control (read@1024,1024B). Runtime 60 seconds [ 545.214168][ T5156] block nbd3: Possible stuck request ffff888026028400: control (read@2048,1024B). Runtime 60 seconds [ 545.226965][ T5156] block nbd3: Possible stuck request ffff888026028600: control (read@3072,1024B). Runtime 60 seconds [ 547.039345][ T5191] udevd[5191]: worker [16014] /devices/virtual/block/nbd3 is taking a long time [ 563.115696][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.123639][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 563.830297][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 563.846057][ T5141] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 563.846122][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 563.861384][ T5141] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 563.870399][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 563.870522][ T5141] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 563.889320][ T5141] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 563.896696][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 563.898783][ T5141] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 563.910569][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 563.975250][T22505] lo speed is unknown, defaulting to 1000 [ 563.987621][T22507] lo speed is unknown, defaulting to 1000 [ 564.230279][T22507] chnl_net:caif_netlink_parms(): no params data found [ 564.262396][T22505] chnl_net:caif_netlink_parms(): no params data found [ 564.399357][T22507] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.406834][T22507] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.414502][T22507] bridge_slave_0: entered allmulticast mode [ 564.422023][T22507] bridge_slave_0: entered promiscuous mode [ 564.430378][T22505] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.437582][T22505] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.446994][T22505] bridge_slave_0: entered allmulticast mode [ 564.454408][T22505] bridge_slave_0: entered promiscuous mode [ 564.462613][T22505] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.470628][T22505] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.478021][T22505] bridge_slave_1: entered allmulticast mode [ 564.486124][T22505] bridge_slave_1: entered promiscuous mode [ 564.493717][T22507] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.502207][T22507] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.509817][T22507] bridge_slave_1: entered allmulticast mode [ 564.517190][T22507] bridge_slave_1: entered promiscuous mode [ 564.572528][T22505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.586518][T22507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.600827][T22507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.613627][T22505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.671894][T22507] team0: Port device team_slave_0 added [ 564.680385][T22505] team0: Port device team_slave_0 added [ 564.688156][T22507] team0: Port device team_slave_1 added [ 564.696218][T22505] team0: Port device team_slave_1 added [ 564.745328][T22507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.752976][T22507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.781334][T22507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.794879][T22507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.802197][T22507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.828641][T22507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.841957][T22505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.849965][T22505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.877724][T22505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.898282][T22505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.906855][T22505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.932994][T22505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.997491][T22507] hsr_slave_0: entered promiscuous mode [ 565.004195][T22507] hsr_slave_1: entered promiscuous mode [ 565.012055][T22507] debugfs: 'hsr0' already exists in 'hsr' [ 565.017914][T22507] Cannot create hsr debugfs directory [ 565.045123][T22505] hsr_slave_0: entered promiscuous mode [ 565.051873][T22505] hsr_slave_1: entered promiscuous mode [ 565.058084][T22505] debugfs: 'hsr0' already exists in 'hsr' [ 565.064816][T22505] Cannot create hsr debugfs directory [ 565.939341][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 565.949156][ T51] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 565.959468][ T51] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 565.971176][ T5824] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 565.971398][ T51] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 565.981410][ T5824] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 565.993171][ T51] Bluetooth: hci11: command tx timeout [ 565.994524][ T5824] Bluetooth: hci10: command tx timeout [ 566.008024][T22528] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 566.015899][T22509] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 566.020167][T22528] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 566.032439][T22509] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 566.101254][T22526] lo speed is unknown, defaulting to 1000 [ 566.115321][T22524] lo speed is unknown, defaulting to 1000 [ 566.333772][T22526] chnl_net:caif_netlink_parms(): no params data found [ 566.402591][T22524] chnl_net:caif_netlink_parms(): no params data found [ 566.485686][T22526] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.493090][T22526] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.500924][T22526] bridge_slave_0: entered allmulticast mode [ 566.508324][T22526] bridge_slave_0: entered promiscuous mode [ 566.522766][T22526] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.530590][T22526] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.538311][T22526] bridge_slave_1: entered allmulticast mode [ 566.546398][T22526] bridge_slave_1: entered promiscuous mode [ 566.611594][T22526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.625256][T22526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.635283][T22524] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.643874][T22524] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.651514][T22524] bridge_slave_0: entered allmulticast mode [ 566.659608][T22524] bridge_slave_0: entered promiscuous mode [ 566.677718][T22524] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.685561][T22524] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.693908][T22524] bridge_slave_1: entered allmulticast mode [ 566.702626][T22524] bridge_slave_1: entered promiscuous mode [ 566.747103][T22526] team0: Port device team_slave_0 added [ 566.756305][T22526] team0: Port device team_slave_1 added [ 566.766695][T22524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.782071][T22524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.864802][T22526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.873322][T22526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.900531][T22526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.916116][T22524] team0: Port device team_slave_0 added [ 566.924390][T22526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.933596][ T5831] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 566.933804][T22526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.970024][ T5831] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 566.975950][T22526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.988404][ T5831] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 566.992154][T22524] team0: Port device team_slave_1 added [ 567.002700][ T5831] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 567.011198][ T5831] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 567.084903][T22524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.092201][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.119559][T22524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.140511][T22526] hsr_slave_0: entered promiscuous mode [ 567.147336][T22526] hsr_slave_1: entered promiscuous mode [ 567.154024][T22526] debugfs: 'hsr0' already exists in 'hsr' [ 567.160188][T22526] Cannot create hsr debugfs directory [ 567.167159][T22524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.174790][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.201670][T22524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.246145][T22542] lo speed is unknown, defaulting to 1000 [ 567.340080][T22524] hsr_slave_0: entered promiscuous mode [ 567.346739][T22524] hsr_slave_1: entered promiscuous mode [ 567.353720][T22524] debugfs: 'hsr0' already exists in 'hsr' [ 567.360574][T22524] Cannot create hsr debugfs directory [ 567.709944][T22542] chnl_net:caif_netlink_parms(): no params data found [ 567.830690][T22542] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.838523][T22542] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.848182][T22542] bridge_slave_0: entered allmulticast mode [ 567.856147][T22542] bridge_slave_0: entered promiscuous mode [ 567.865402][T22542] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.873034][T22542] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.880838][T22542] bridge_slave_1: entered allmulticast mode [ 567.888453][T22542] bridge_slave_1: entered promiscuous mode [ 567.946190][T22542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.967715][T22542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.015976][T22542] team0: Port device team_slave_0 added [ 568.038066][T22542] team0: Port device team_slave_1 added [ 568.070234][ T5141] Bluetooth: hci10: command tx timeout [ 568.079336][ T5141] Bluetooth: hci13: command tx timeout [ 568.079616][ T5831] Bluetooth: hci12: command tx timeout [ 568.085765][ T5141] Bluetooth: hci11: command tx timeout [ 568.118373][T22542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.125721][T22542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.151874][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 568.151900][ C0] lec:lec_tx_timeout: lec0 [ 568.166651][T22542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.181151][T22542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.188212][T22542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.215415][T22542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.284782][T22542] hsr_slave_0: entered promiscuous mode [ 568.292483][T22542] hsr_slave_1: entered promiscuous mode [ 568.298996][T22542] debugfs: 'hsr0' already exists in 'hsr' [ 568.305612][T22542] Cannot create hsr debugfs directory [ 569.109410][ T5141] Bluetooth: hci14: command tx timeout [ 570.149862][ T5141] Bluetooth: hci11: command tx timeout [ 570.149871][ T5831] Bluetooth: hci10: command tx timeout [ 570.159356][T22509] Bluetooth: hci13: command tx timeout [ 570.166833][ T5831] Bluetooth: hci12: command tx timeout [ 571.189495][ T5831] Bluetooth: hci14: command tx timeout [ 572.229679][ T5831] Bluetooth: hci11: command tx timeout [ 572.229705][T22509] Bluetooth: hci12: command tx timeout [ 572.229735][T22509] Bluetooth: hci13: command tx timeout [ 572.235410][ T5141] Bluetooth: hci10: command tx timeout [ 573.269388][ T5141] Bluetooth: hci14: command tx timeout [ 573.290272][ T7545] lec:lec_start_xmit: lec0:No lecd attached [ 573.352032][ T5843] block nbd2: Receive control failed (result -101) [ 574.309435][ T5843] Bluetooth: hci12: command tx timeout [ 574.309481][ T5141] Bluetooth: hci13: command tx timeout [ 575.269913][ T5156] block nbd3: Possible stuck request ffff888026028000: control (read@0,1024B). Runtime 90 seconds [ 575.283487][ T5156] block nbd3: Possible stuck request ffff888026028200: control (read@1024,1024B). Runtime 90 seconds [ 575.294713][ T5156] block nbd3: Possible stuck request ffff888026028400: control (read@2048,1024B). Runtime 90 seconds [ 575.305874][ T5156] block nbd3: Possible stuck request ffff888026028600: control (read@3072,1024B). Runtime 90 seconds [ 575.349439][ T5141] Bluetooth: hci14: command tx timeout [ 579.109494][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 579.117565][ C0] lec:lec_tx_timeout: lec0 [ 605.353078][ T5156] block nbd3: Possible stuck request ffff888026028000: control (read@0,1024B). Runtime 120 seconds [ 605.363990][ T5156] block nbd3: Possible stuck request ffff888026028200: control (read@1024,1024B). Runtime 120 seconds [ 605.375115][ T5156] block nbd3: Possible stuck request ffff888026028400: control (read@2048,1024B). Runtime 120 seconds [ 605.386179][ T5156] block nbd3: Possible stuck request ffff888026028600: control (read@3072,1024B). Runtime 120 seconds [ 619.445075][T14924] dummy0: left allmulticast mode [ 619.451719][T14924] bridge0: port 3(dummy0) entered disabled state [ 619.461914][T14924] bridge_slave_1: left allmulticast mode [ 619.467592][T14924] bridge_slave_1: left promiscuous mode [ 619.474539][T14924] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.484621][T14924] bridge_slave_0: left allmulticast mode [ 619.490445][T14924] bridge_slave_0: left promiscuous mode [ 619.496240][T14924] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.603290][T14924] bond5 (unregistering): (slave ip6erspan0): Releasing active interface [ 619.611907][T14924] ip6erspan0 (unregistering): left allmulticast mode [ 619.725011][T14924] dvmrp0 (unregistering): left allmulticast mode [ 619.735502][T14924] dvmrp1 (unregistering): left allmulticast mode [ 619.751215][T14924] bond1 (unregistering): (slave geneve2): Releasing active interface [ 620.062132][T14924] bond0 (unregistering): left promiscuous mode [ 620.068606][T14924] bond_slave_0: left promiscuous mode [ 620.074784][T14924] bond_slave_1: left promiscuous mode [ 620.088717][T14924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.100700][T14924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.111585][T14924] bond0 (unregistering): Released all slaves [ 620.122009][T14924] bond1 (unregistering): Released all slaves [ 620.137618][T14924] bond2 (unregistering): Released all slaves [ 620.156297][T14924] bond3 (unregistering): Released all slaves [ 620.171121][T14924] bond4 (unregistering): Released all slaves [ 620.189430][T14924] bond5 (unregistering): Released all slaves [ 620.203954][T14924] bond6 (unregistering): (slave veth13): Releasing active interface [ 620.214142][T14924] bond6 (unregistering): Released all slaves [ 620.227475][T14924] bond7 (unregistering): Released all slaves [ 620.248161][T14924] bond8 (unregistering): Released all slaves [ 620.385775][T14924] tipc: Left network mode [ 620.432864][T14924] IPVS: stopping master sync thread 17065 ... [ 620.558199][T14924] hsr_slave_0: left promiscuous mode [ 620.564741][T14924] hsr_slave_1: left promiscuous mode [ 620.582618][T14924] veth1_vlan: left promiscuous mode [ 620.588103][T14924] veth0_vlan: left promiscuous mode [ 621.082327][T14924] IPVS: stop unused estimator thread 0... [ 624.388115][ T5843] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 624.404256][ T5843] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 624.413646][ T5843] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 624.427981][ T5843] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 624.436912][ T5843] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 624.446282][T22528] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 624.455851][T22528] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 624.465476][ T5141] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 624.482942][ T5141] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 624.494506][ T5141] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 624.525195][T22561] lo speed is unknown, defaulting to 1000 [ 624.557247][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.572029][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 624.589446][T22563] lo speed is unknown, defaulting to 1000 [ 624.787483][T22561] chnl_net:caif_netlink_parms(): no params data found [ 624.855288][T22563] chnl_net:caif_netlink_parms(): no params data found [ 624.922125][T22561] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.930356][T22561] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.937838][T22561] bridge_slave_0: entered allmulticast mode [ 624.945546][T22561] bridge_slave_0: entered promiscuous mode [ 624.959904][T22561] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.967074][T22561] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.974567][T22561] bridge_slave_1: entered allmulticast mode [ 624.982933][T22561] bridge_slave_1: entered promiscuous mode [ 625.037817][T22561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.064475][T22561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.074077][T22563] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.081400][T22563] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.089743][T22563] bridge_slave_0: entered allmulticast mode [ 625.097018][T22563] bridge_slave_0: entered promiscuous mode [ 625.120963][T22563] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.128154][T22563] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.135648][T22563] bridge_slave_1: entered allmulticast mode [ 625.143192][T22563] bridge_slave_1: entered promiscuous mode [ 625.174566][T22561] team0: Port device team_slave_0 added [ 625.183662][T22561] team0: Port device team_slave_1 added [ 625.215612][T22563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.229172][T22563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.261622][T22561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.268606][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.296125][T22561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.318606][T22561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.326300][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.353160][T22561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.366923][T22563] team0: Port device team_slave_0 added [ 625.383413][T22563] team0: Port device team_slave_1 added [ 625.413743][T22563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.421155][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.447335][T22563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.471391][T22563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.478567][T22563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.505867][T22563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.541411][T22561] hsr_slave_0: entered promiscuous mode [ 625.548221][T22561] hsr_slave_1: entered promiscuous mode [ 625.555487][T22561] debugfs: 'hsr0' already exists in 'hsr' [ 625.561433][T22561] Cannot create hsr debugfs directory [ 625.617174][T22563] hsr_slave_0: entered promiscuous mode [ 625.624176][T22563] hsr_slave_1: entered promiscuous mode [ 625.631307][T22563] debugfs: 'hsr0' already exists in 'hsr' [ 625.637306][T22563] Cannot create hsr debugfs directory [ 626.477064][ T5843] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 626.490782][ T5843] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 626.499423][ T5843] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 626.507681][ T5843] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 626.522321][ T5831] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 626.531843][ T5824] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 626.533530][ T5831] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 626.548699][ T5824] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 626.559312][T22528] Bluetooth: hci16: command tx timeout [ 626.562890][ T5824] Bluetooth: hci15: command tx timeout [ 626.574895][ T5824] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 626.583914][ T5824] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 626.603658][T22579] lo speed is unknown, defaulting to 1000 [ 626.629440][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 626.630069][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 626.675824][T22581] lo speed is unknown, defaulting to 1000 [ 626.868207][T22579] chnl_net:caif_netlink_parms(): no params data found [ 626.937808][T22581] chnl_net:caif_netlink_parms(): no params data found [ 627.040733][T22579] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.048039][T22579] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.055625][T22579] bridge_slave_0: entered allmulticast mode [ 627.063094][T22579] bridge_slave_0: entered promiscuous mode [ 627.071434][T22579] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.078779][T22579] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.086509][T22579] bridge_slave_1: entered allmulticast mode [ 627.094186][T22579] bridge_slave_1: entered promiscuous mode [ 627.127246][T22581] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.135176][T22581] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.142683][T22581] bridge_slave_0: entered allmulticast mode [ 627.150534][T22581] bridge_slave_0: entered promiscuous mode [ 627.168702][T22581] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.176124][T22581] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.184079][T22581] bridge_slave_1: entered allmulticast mode [ 627.192639][T22581] bridge_slave_1: entered promiscuous mode [ 627.203844][T22579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.217394][T22579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.276209][T22581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.290467][T22579] team0: Port device team_slave_0 added [ 627.298840][T22581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.311294][T22579] team0: Port device team_slave_1 added [ 627.364255][T22581] team0: Port device team_slave_0 added [ 627.374441][T22581] team0: Port device team_slave_1 added [ 627.381414][T22579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.388385][T22579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.415306][T22579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.429572][T22579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.436551][T22579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.463632][T22579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.561187][T22581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.569111][T22581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.596508][ T5141] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 627.599636][T22581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.615343][ T5141] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 627.617881][T22581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.629657][ T5141] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 627.630843][ T5141] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 627.637602][T22581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.672102][ T5141] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 627.674494][T22581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.698280][T22579] hsr_slave_0: entered promiscuous mode [ 627.713278][T22579] hsr_slave_1: entered promiscuous mode [ 627.720018][T22579] debugfs: 'hsr0' already exists in 'hsr' [ 627.725889][T22579] Cannot create hsr debugfs directory [ 627.829477][T22581] hsr_slave_0: entered promiscuous mode [ 627.837004][T22581] hsr_slave_1: entered promiscuous mode [ 627.844070][T22581] debugfs: 'hsr0' already exists in 'hsr' [ 627.850279][T22581] Cannot create hsr debugfs directory [ 627.863163][T22597] lo speed is unknown, defaulting to 1000 [ 628.225754][T22597] chnl_net:caif_netlink_parms(): no params data found [ 628.316137][T22597] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.323444][T22597] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.331466][T22597] bridge_slave_0: entered allmulticast mode [ 628.339742][T22597] bridge_slave_0: entered promiscuous mode [ 628.348091][T22597] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.356045][T22597] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.363820][T22597] bridge_slave_1: entered allmulticast mode [ 628.371331][T22597] bridge_slave_1: entered promiscuous mode [ 628.414883][T22597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.429221][T22597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.483691][T22597] team0: Port device team_slave_0 added [ 628.494422][T22597] team0: Port device team_slave_1 added [ 628.541460][T22597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.548452][T22597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.576349][T22597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.579659][T22509] Bluetooth: hci17: command tx timeout [ 628.589697][T22597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.600009][T22597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.627006][T22597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.637911][T22509] Bluetooth: hci15: command tx timeout [ 628.639455][T22509] Bluetooth: hci18: command tx timeout [ 628.644985][ T5141] Bluetooth: hci16: command tx timeout [ 628.720737][T22597] hsr_slave_0: entered promiscuous mode [ 628.727363][T22597] hsr_slave_1: entered promiscuous mode [ 628.734422][T22597] debugfs: 'hsr0' already exists in 'hsr' [ 628.740311][T22597] Cannot create hsr debugfs directory [ 629.749887][ T5141] Bluetooth: hci19: command tx timeout [ 630.069125][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 630.077280][ C0] lec:lec_tx_timeout: lec0 [ 630.629286][ T5141] Bluetooth: hci17: command tx timeout [ 630.709499][ T5141] Bluetooth: hci16: command tx timeout [ 630.709517][T22583] Bluetooth: hci18: command tx timeout [ 630.709557][T22583] Bluetooth: hci15: command tx timeout [ 631.751891][T22583] Bluetooth: hci7: command 0x0406 tx timeout [ 631.758069][ T51] Bluetooth: hci9: command 0x0406 tx timeout [ 631.758368][ T5141] Bluetooth: hci8: command 0x0406 tx timeout [ 631.829712][T22509] Bluetooth: hci19: command tx timeout [ 632.709373][T22509] Bluetooth: hci17: command tx timeout [ 632.789521][ T5843] Bluetooth: hci18: command tx timeout [ 632.795054][ T5843] Bluetooth: hci15: command tx timeout [ 632.800951][T22509] Bluetooth: hci16: command tx timeout [ 633.909542][ T5843] Bluetooth: hci19: command tx timeout [ 634.149425][ T31] INFO: task syz.2.4367:22261 blocked for more than 143 seconds. [ 634.157227][ T31] Not tainted syzkaller #0 [ 634.162943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.172064][ T31] task:syz.2.4367 state:D stack:26712 pid:22261 tgid:22260 ppid:17230 task_flags:0x400140 flags:0x00080002 [ 634.184695][ T31] Call Trace: [ 634.188003][ T31] [ 634.191657][ T31] __schedule+0x1568/0x5290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 634.196284][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 634.202754][ T31] ? __pfx___schedule+0x10/0x10 [ 634.207749][ T31] ? schedule+0x90/0x360 [ 634.213051][ T31] schedule+0x164/0x360 [ 634.217257][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.223572][ T31] __mutex_lock+0x7fe/0x1300 [ 634.229661][ T31] ? __mutex_lock+0x5ac/0x1300 [ 634.234572][ T31] ? genl_dumpit+0xdb/0x1b0 [ 634.259155][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.269501][ T31] ? trace_kmalloc+0x1f/0xb0 [ 634.274172][ T31] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 634.292645][ T31] genl_dumpit+0xdb/0x1b0 [ 634.297063][ T31] netlink_dump+0x722/0xe80 [ 634.302542][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 634.308070][ T31] ? netlink_recvmsg+0x5d6/0xa50 [ 634.313643][ T31] ? kmem_cache_free+0x180/0x610 [ 634.318636][ T31] netlink_recvmsg+0x690/0xa50 [ 634.323778][ T31] ? finish_task_switch+0x240/0x920 [ 634.329496][ T31] ? __pfx_netlink_recvmsg+0x10/0x10 [ 634.334836][ T31] ? trace_sched_exit_tp+0x36/0xf0 [ 634.340251][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.345232][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.350347][ T31] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 634.355680][ T31] ? security_socket_recvmsg+0x7e/0x2c0 [ 634.361352][ T31] ? __pfx_netlink_recvmsg+0x10/0x10 [ 634.366842][ T31] sock_recvmsg+0x22c/0x270 [ 634.371679][ T31] ____sys_recvmsg+0x1e6/0x4a0 [ 634.376491][ T31] ? __pfx_____sys_recvmsg+0x10/0x10 [ 634.382197][ T31] ? import_iovec+0x73/0xa0 [ 634.386822][ T31] ___sys_recvmsg+0x215/0x590 [ 634.391936][ T31] ? __pfx____sys_recvmsg+0x10/0x10 [ 634.397705][ T31] ? __fget_files+0x2a/0x420 [ 634.402855][ T31] ? __fget_files+0x3a0/0x420 [ 634.407572][ T31] do_recvmmsg+0x334/0x800 [ 634.412151][ T31] ? vfs_write+0x9c3/0xb90 [ 634.416690][ T31] ? __pfx_do_recvmmsg+0x10/0x10 [ 634.421823][ T31] ? __pfx_do_futex+0x10/0x10 [ 634.426545][ T31] __x64_sys_recvmmsg+0x198/0x250 [ 634.431811][ T31] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 634.437407][ T31] do_syscall_64+0x14d/0xf80 [ 634.442639][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.448855][ T31] ? trace_irq_disable+0x37/0x100 [ 634.454183][ T31] ? clear_bhb_loop+0x40/0x90 [ 634.459069][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.465574][ T31] RIP: 0033:0x7fb67879bf79 [ 634.470297][ T31] RSP: 002b:00007fb679625028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 634.478943][ T31] RAX: ffffffffffffffda RBX: 00007fb678a15fa0 RCX: 00007fb67879bf79 [ 634.487095][ T31] RDX: 0000000000000001 RSI: 0000200000001580 RDI: 0000000000000003 [ 634.495346][ T31] RBP: 00007fb6788327e0 R08: 0000000000000000 R09: 0000000000000000 [ 634.503875][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.512523][ T31] R13: 00007fb678a16038 R14: 00007fb678a15fa0 R15: 00007ffefa550f68 [ 634.520931][ T31] [ 634.524078][ T31] INFO: task syz.2.4367:22262 blocked for more than 143 seconds. [ 634.532009][ T31] Not tainted syzkaller #0 [ 634.536998][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.546000][ T31] task:syz.2.4367 state:D stack:26776 pid:22262 tgid:22260 ppid:17230 task_flags:0x400140 flags:0x00080002 [ 634.558026][ T31] Call Trace: [ 634.561985][ T31] [ 634.564937][ T31] __schedule+0x1568/0x5290 [ 634.569889][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.574859][ T31] ? __pfx___schedule+0x10/0x10 [ 634.580085][ T31] ? schedule+0x90/0x360 [ 634.584352][ T31] schedule+0x164/0x360 [ 634.588508][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.594050][ T31] __mutex_lock+0x7fe/0x1300 [ 634.598758][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 634.604407][ T31] ? __mutex_lock+0x5ac/0x1300 [ 634.609547][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 634.614265][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.619376][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.624334][ T31] ? radix_tree_lookup+0x240/0x290 [ 634.630113][ T31] genl_rcv_msg+0x10b/0x7a0 [ 634.634648][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.639867][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.644837][ T31] netlink_rcv_skb+0x232/0x4b0 [ 634.649684][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.654827][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.660223][ T31] ? genl_rcv+0x19/0x40 [ 634.664414][ T31] ? down_read+0x272/0x2e0 [ 634.668827][ T31] ? genl_rcv+0xd/0x40 [ 634.673199][ T31] genl_rcv+0x28/0x40 [ 634.677209][ T31] netlink_unicast+0x80f/0x9b0 [ 634.682324][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 634.687645][ T31] ? netlink_sendmsg+0x650/0xb40 [ 634.693048][ T31] ? skb_put+0x11b/0x210 [ 634.697346][ T31] netlink_sendmsg+0x813/0xb40 [ 634.702366][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.707807][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.713457][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.718960][ T31] __sys_sendto+0x709/0x7a0 [ 634.723664][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 634.728904][ T31] ? exc_page_fault+0x6a/0xc0 [ 634.733743][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 634.739264][ T31] __x64_sys_sendto+0xde/0x100 [ 634.744156][ T31] do_syscall_64+0x14d/0xf80 [ 634.748857][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.755119][ T31] ? trace_irq_disable+0x37/0x100 [ 634.760396][ T31] ? clear_bhb_loop+0x40/0x90 [ 634.765361][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.771528][ T31] RIP: 0033:0x7fb67875c84e [ 634.776081][ T31] RSP: 002b:00007fb679602e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 634.784796][ T31] RAX: ffffffffffffffda RBX: 00007fb6796046c0 RCX: 00007fb67875c84e [ 634.791640][T22509] Bluetooth: hci17: command tx timeout [ 634.796121][ T31] RDX: 0000000000000020 RSI: 00007fb679603000 RDI: 0000000000000006 [ 634.806410][ T31] RBP: 0000000000000000 R08: 00007fb679602f04 R09: 000000000000000c [ 634.814998][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 634.823478][ T31] R13: 00007fb679602f58 R14: 00007fb679603000 R15: 0000000000000000 [ 634.831843][ T31] [ 634.835122][ T31] INFO: task syz.0.4366:22266 blocked for more than 144 seconds. [ 634.843123][ T31] Not tainted syzkaller #0 [ 634.848085][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.859560][ T31] task:syz.0.4366 state:D stack:26432 pid:22266 tgid:22264 ppid:16861 task_flags:0x400140 flags:0x00080002 [ 634.869516][ T5843] Bluetooth: hci18: command tx timeout [ 634.872076][ T31] Call Trace: [ 634.880639][ T31] [ 634.883618][ T31] __schedule+0x1568/0x5290 [ 634.888187][ T31] ? __pfx___schedule+0x10/0x10 [ 634.893415][ T31] ? schedule+0x90/0x360 [ 634.897872][ T31] schedule+0x164/0x360 [ 634.902149][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.907652][ T31] __mutex_lock+0x7fe/0x1300 [ 634.912420][ T31] ? __mutex_lock+0x5ac/0x1300 [ 634.917446][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 634.922233][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.927295][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 634.932549][ T31] ? radix_tree_lookup+0x240/0x290 [ 634.937706][ T31] genl_rcv_msg+0x10b/0x7a0 [ 634.942536][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.947619][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.953062][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 634.958795][ T31] netlink_rcv_skb+0x232/0x4b0 [ 634.963830][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.969209][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.974865][ T31] ? genl_rcv+0x19/0x40 [ 634.979246][ T31] ? down_read+0x272/0x2e0 [ 634.983682][ T31] ? genl_rcv+0xd/0x40 [ 634.987748][ T31] genl_rcv+0x28/0x40 [ 634.992032][ T31] netlink_unicast+0x80f/0x9b0 [ 634.996835][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 635.002430][ T31] ? netlink_sendmsg+0x650/0xb40 [ 635.007391][ T31] ? skb_put+0x11b/0x210 [ 635.011821][ T31] netlink_sendmsg+0x813/0xb40 [ 635.016728][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.022594][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.027572][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.033313][ T31] __sys_sendto+0x709/0x7a0 [ 635.037848][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 635.042980][ T31] ? exc_page_fault+0x6a/0xc0 [ 635.047803][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 635.053279][ T31] __x64_sys_sendto+0xde/0x100 [ 635.058085][ T31] do_syscall_64+0x14d/0xf80 [ 635.062817][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.068908][ T31] ? trace_irq_disable+0x37/0x100 [ 635.074061][ T31] ? clear_bhb_loop+0x40/0x90 [ 635.079089][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.085011][ T31] RIP: 0033:0x7f3e41d5c84e [ 635.089606][ T31] RSP: 002b:00007f3e42c83e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.098222][ T31] RAX: ffffffffffffffda RBX: 00007f3e42c856c0 RCX: 00007f3e41d5c84e [ 635.106392][ T31] RDX: 0000000000000028 RSI: 00007f3e42c84000 RDI: 0000000000000006 [ 635.114642][ T31] RBP: 0000000000000000 R08: 00007f3e42c83f04 R09: 000000000000000c [ 635.122988][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 635.131206][ T31] R13: 00007f3e42c83f58 R14: 00007f3e42c84000 R15: 0000000000000000 [ 635.139313][ T31] [ 635.142372][ T31] INFO: task syz.3.4368:22268 blocked for more than 144 seconds. [ 635.150388][ T31] Not tainted syzkaller #0 [ 635.155350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.164584][ T31] task:syz.3.4368 state:D stack:26200 pid:22268 tgid:22267 ppid:17526 task_flags:0x480140 flags:0x00080002 [ 635.176721][ T31] Call Trace: [ 635.180150][ T31] [ 635.183100][ T31] __schedule+0x1568/0x5290 [ 635.187609][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.192792][ T31] ? __pfx___schedule+0x10/0x10 [ 635.197690][ T31] ? schedule+0x90/0x360 [ 635.202139][ T31] schedule+0x164/0x360 [ 635.206461][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 635.212207][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 635.218481][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 635.225498][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 635.231875][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 635.238064][ T31] nbd_set_size+0x516/0x6d0 [ 635.243135][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 635.248395][ T31] ? nla_memcpy+0x5b/0xc0 [ 635.252857][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 635.258540][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 635.264658][ T31] ? rcu_is_watching+0x15/0xb0 [ 635.269670][ T31] ? __nla_parse+0x40/0x60 [ 635.274120][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 635.280569][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 635.286164][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 635.292391][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.297370][ T31] genl_rcv_msg+0x61c/0x7a0 [ 635.302119][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.307182][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 635.313068][ T31] netlink_rcv_skb+0x232/0x4b0 [ 635.317964][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.323087][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.328648][ T31] ? genl_rcv+0x19/0x40 [ 635.333074][ T31] ? down_read+0x272/0x2e0 [ 635.337531][ T31] ? genl_rcv+0xd/0x40 [ 635.341707][ T31] genl_rcv+0x28/0x40 [ 635.345726][ T31] netlink_unicast+0x80f/0x9b0 [ 635.350923][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 635.356430][ T31] ? netlink_sendmsg+0x650/0xb40 [ 635.361533][ T31] ? skb_put+0x11b/0x210 [ 635.365801][ T31] netlink_sendmsg+0x813/0xb40 [ 635.370652][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.375960][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.381011][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.386333][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.391689][ T31] ____sys_sendmsg+0xa68/0xad0 [ 635.396568][ T31] ? __might_fault+0xaf/0x130 [ 635.401420][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.406739][ T31] ? import_iovec+0x73/0xa0 [ 635.411505][ T31] ___sys_sendmsg+0x2a5/0x360 [ 635.416293][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.421456][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.427092][ T31] ? futex_wake+0x4ac/0x580 [ 635.434091][ T31] ? __fget_files+0x2a/0x420 [ 635.439368][ T5156] block nbd3: Possible stuck request ffff888026028000: control (read@0,1024B). Runtime 150 seconds [ 635.439379][ T31] ? __fget_files+0x3a0/0x420 [ 635.439416][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 635.450351][ T5156] block nbd3: Possible stuck request ffff888026028200: control (read@1024,1024B). Runtime 150 seconds [ 635.455304][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.460392][ T5156] block nbd3: Possible stuck request ffff888026028400: control (read@2048,1024B). Runtime 150 seconds [ 635.460423][ T5156] block nbd3: Possible stuck request ffff888026028600: control (read@3072,1024B). Runtime 150 seconds [ 635.500407][ T31] ? rcu_is_watching+0x15/0xb0 [ 635.505416][ T31] do_syscall_64+0x14d/0xf80 [ 635.512765][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.518941][ T31] ? trace_irq_disable+0x37/0x100 [ 635.524399][ T31] ? clear_bhb_loop+0x40/0x90 [ 635.529543][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.535576][ T31] RIP: 0033:0x7f3b0719bf79 [ 635.540202][ T31] RSP: 002b:00007f3b0806b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.548836][ T31] RAX: ffffffffffffffda RBX: 00007f3b07415fa0 RCX: 00007f3b0719bf79 [ 635.557082][ T31] RDX: 0000000000000008 RSI: 0000200000000800 RDI: 0000000000000004 [ 635.565275][ T31] RBP: 00007f3b072327e0 R08: 0000000000000000 R09: 0000000000000000 [ 635.573830][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.582275][ T31] R13: 00007f3b07416038 R14: 00007f3b07415fa0 R15: 00007ffed910a678 [ 635.590744][ T31] [ 635.593827][ T31] INFO: task syz.4.4371:22283 blocked for more than 144 seconds. [ 635.601645][ T31] Not tainted syzkaller #0 [ 635.606756][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.615799][ T31] task:syz.4.4371 state:D stack:26200 pid:22283 tgid:22282 ppid:16299 task_flags:0x400040 flags:0x00080002 [ 635.628107][ T31] Call Trace: [ 635.631937][ T31] [ 635.634895][ T31] __schedule+0x1568/0x5290 [ 635.639604][ T31] ? __pfx___schedule+0x10/0x10 [ 635.644485][ T31] ? schedule+0x90/0x360 [ 635.648742][ T31] schedule+0x164/0x360 [ 635.653127][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.658609][ T31] __mutex_lock+0x7fe/0x1300 [ 635.663374][ T31] ? __mutex_lock+0x5ac/0x1300 [ 635.668229][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 635.673193][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.678445][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 635.683876][ T31] ? radix_tree_lookup+0x240/0x290 [ 635.689412][ T31] genl_rcv_msg+0x10b/0x7a0 [ 635.694779][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.699916][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.704899][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.710862][ T31] netlink_rcv_skb+0x232/0x4b0 [ 635.715902][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.721050][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.726360][ T31] ? genl_rcv+0x19/0x40 [ 635.730684][ T31] ? down_read+0x272/0x2e0 [ 635.735477][ T31] ? genl_rcv+0xd/0x40 [ 635.739657][ T31] genl_rcv+0x28/0x40 [ 635.743826][ T31] netlink_unicast+0x80f/0x9b0 [ 635.748698][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 635.754308][ T31] ? netlink_sendmsg+0x650/0xb40 [ 635.759361][ T31] ? skb_put+0x11b/0x210 [ 635.763713][ T31] netlink_sendmsg+0x813/0xb40 [ 635.768604][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.774009][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.779146][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.784457][ T31] __sys_sendto+0x709/0x7a0 [ 635.789298][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 635.794455][ T31] ? exc_page_fault+0x6a/0xc0 [ 635.799529][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 635.804953][ T31] __x64_sys_sendto+0xde/0x100 [ 635.810075][ T31] do_syscall_64+0x14d/0xf80 [ 635.814720][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.820947][ T31] ? trace_irq_disable+0x37/0x100 [ 635.826036][ T31] ? clear_bhb_loop+0x40/0x90 [ 635.831025][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.837235][ T31] RIP: 0033:0x7efcb575c84e [ 635.842057][ T31] RSP: 002b:00007efcb66cce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.850721][ T31] RAX: ffffffffffffffda RBX: 00007efcb66ce6c0 RCX: 00007efcb575c84e [ 635.858753][ T31] RDX: 0000000000000020 RSI: 00007efcb66cd000 RDI: 0000000000000007 [ 635.867092][ T31] RBP: 0000000000000000 R08: 00007efcb66ccf04 R09: 000000000000000c [ 635.875476][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 635.883700][ T31] R13: 00007efcb66ccf58 R14: 00007efcb66cd000 R15: 0000000000000000 [ 635.891935][ T31] [ 635.895066][ T31] INFO: task syz.1.4382:22325 blocked for more than 145 seconds. [ 635.903422][ T31] Not tainted syzkaller #0 [ 635.908469][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.917427][ T31] task:syz.1.4382 state:D stack:27304 pid:22325 tgid:22324 ppid:18020 task_flags:0x400140 flags:0x00080002 [ 635.929584][ T31] Call Trace: [ 635.932902][ T31] [ 635.935851][ T31] __schedule+0x1568/0x5290 [ 635.940786][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.945811][ T31] ? __pfx___schedule+0x10/0x10 [ 635.950982][ T31] ? schedule+0x90/0x360 [ 635.955339][ T31] schedule+0x164/0x360 [ 635.959551][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.965294][ T31] __mutex_lock+0x7fe/0x1300 [ 635.970101][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 635.975370][ T31] ? __mutex_lock+0x5ac/0x1300 [ 635.980555][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 635.985347][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.989484][ T5843] Bluetooth: hci19: command tx timeout [ 635.990718][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 636.001085][ T31] ? radix_tree_lookup+0x240/0x290 [ 636.006285][ T31] genl_rcv_msg+0x10b/0x7a0 [ 636.011678][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.016734][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 636.021892][ T31] netlink_rcv_skb+0x232/0x4b0 [ 636.026694][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.031973][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.037384][ T31] ? genl_rcv+0x19/0x40 [ 636.041975][ T31] ? down_read+0x272/0x2e0 [ 636.046556][ T31] ? genl_rcv+0xd/0x40 [ 636.050906][ T31] genl_rcv+0x28/0x40 [ 636.055065][ T31] netlink_unicast+0x80f/0x9b0 [ 636.060212][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 636.065538][ T31] ? netlink_sendmsg+0x650/0xb40 [ 636.071310][ T31] ? skb_put+0x11b/0x210 [ 636.075604][ T31] netlink_sendmsg+0x813/0xb40 [ 636.080790][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.086109][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 636.091589][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.096999][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.102495][ T31] ____sys_sendmsg+0xa68/0xad0 [ 636.107484][ T31] ? __might_fault+0xaf/0x130 [ 636.112477][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.117774][ T31] ? import_iovec+0x73/0xa0 [ 636.122480][ T31] ___sys_sendmsg+0x2a5/0x360 [ 636.127202][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 636.133165][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.138588][ T31] ? futex_wait+0x29a/0x380 [ 636.144472][ T31] ? __fget_files+0x2a/0x420 [ 636.150841][ T31] ? __fget_files+0x3a0/0x420 [ 636.155654][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 636.160920][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.166509][ T31] do_syscall_64+0x14d/0xf80 [ 636.171804][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.178054][ T31] ? trace_irq_disable+0x37/0x100 [ 636.183167][ T31] ? clear_bhb_loop+0x40/0x90 [ 636.187882][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.194077][ T31] RIP: 0033:0x7f5b0379bf79 [ 636.198512][ T31] RSP: 002b:00007f5b045ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.207996][ T31] RAX: ffffffffffffffda RBX: 00007f5b03a15fa0 RCX: 00007f5b0379bf79 [ 636.216528][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 636.224593][ T31] RBP: 00007f5b038327e0 R08: 0000000000000000 R09: 0000000000000000 [ 636.233499][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.241715][ T31] R13: 00007f5b03a16038 R14: 00007f5b03a15fa0 R15: 00007ffe5233a018 [ 636.250291][ T31] [ 636.253384][ T31] [ 636.253384][ T31] Showing all locks held in the system: [ 636.262099][ T31] 1 lock held by khungtaskd/31: [ 636.267482][ T31] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 636.277787][ T31] 1 lock held by syslogd/5173: [ 636.282634][ T31] #0: ffff8880b863abe0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 636.293033][ T31] 2 locks held by getty/5576: [ 636.297989][ T31] #0: ffff88803533b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 636.308210][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 636.318634][ T31] 2 locks held by kworker/u8:14/10312: [ 636.324314][ T31] 1 lock held by udevd/16014: [ 636.329086][ T31] #0: ffff888025f43358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 636.339179][ T31] 2 locks held by syz.2.4367/22261: [ 636.344576][ T31] #0: ffff888032ccc6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: netlink_dump+0xe4/0xe80 [ 636.355005][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_dumpit+0xdb/0x1b0 [ 636.363928][ T31] 2 locks held by syz.2.4367/22262: [ 636.369284][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.377749][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.387171][ T31] 2 locks held by syz.0.4366/22266: [ 636.392480][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.400897][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.409975][ T31] 6 locks held by syz.3.4368/22268: [ 636.415276][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.423601][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.432683][ T31] #2: ffff888025ea6a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 636.443285][ T31] #3: ffff888025eab668 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 636.453493][ T31] #4: ffff888025eab008 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 636.465797][ T31] #5: ffff888025eab040 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 636.478275][ T31] 2 locks held by syz.4.4371/22283: [ 636.483727][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.492197][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.501344][ T31] 2 locks held by syz.1.4382/22325: [ 636.506658][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.515140][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.524401][ T31] 2 locks held by syz-executor/22347: [ 636.529832][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.538151][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.547262][ T31] 2 locks held by syz-executor/22348: [ 636.553312][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.561959][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.571221][ T31] 2 locks held by syz-executor/22367: [ 636.576714][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.585306][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.594470][ T31] 2 locks held by syz-executor/22369: [ 636.600059][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.608305][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.617839][ T31] 2 locks held by syz-executor/22381: [ 636.623377][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.632033][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.641089][ T31] 2 locks held by syz-executor/22505: [ 636.646460][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.654873][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.664431][ T31] 2 locks held by syz-executor/22507: [ 636.670059][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.678396][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.687504][ T31] 2 locks held by syz-executor/22524: [ 636.692961][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.701436][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.710823][ T31] 2 locks held by syz-executor/22526: [ 636.716221][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.724636][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.733820][ T31] 2 locks held by syz-executor/22542: [ 636.739255][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.747503][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.756625][ T31] 2 locks held by syz-executor/22561: [ 636.762274][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.770979][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.780211][ T31] 2 locks held by syz-executor/22563: [ 636.786120][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.794608][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.803674][ T31] 2 locks held by syz-executor/22579: [ 636.809118][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.818398][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.828293][ T31] 2 locks held by syz-executor/22581: [ 636.833840][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.842281][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.851537][ T31] 2 locks held by syz-executor/22597: [ 636.856926][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.865731][ T31] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.875061][ T31] [ 636.877440][ T31] ============================================= [ 636.877440][ T31] [ 636.886388][ T31] NMI backtrace for cpu 1 [ 636.886406][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 636.886426][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.886437][ T31] Call Trace: [ 636.886445][ T31] [ 636.886452][ T31] dump_stack_lvl+0xe8/0x150 [ 636.886481][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 636.886501][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 636.886524][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 636.886544][ T31] sys_info+0x135/0x170 [ 636.886568][ T31] watchdog+0xf90/0xfe0 [ 636.886597][ T31] ? watchdog+0x209/0xfe0 [ 636.886628][ T31] kthread+0x388/0x470 [ 636.886653][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.886672][ T31] ? __pfx_kthread+0x10/0x10 [ 636.886709][ T31] ret_from_fork+0x51e/0xb90 [ 636.886735][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 636.886756][ T31] ? __switch_to+0xc7d/0x1400 [ 636.886780][ T31] ? __pfx_kthread+0x10/0x10 [ 636.886808][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.886852][ T31] [ 636.886859][ T31] Sending NMI from CPU 1 to CPUs 0: [ 636.998994][ C0] NMI backtrace for cpu 0 [ 636.999013][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 636.999030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.999039][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 636.999063][ C0] Code: 34 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 28 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 636.999076][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 636.999091][ C0] RAX: 000000000028974d RBX: ffffffff8199661d RCX: 0000000080000001 [ 636.999103][ C0] RDX: 0000000000000001 RSI: ffffffff8dee25a4 RDI: ffffffff8c276500 [ 636.999113][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 636.999125][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 636.999136][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 636.999147][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 636.999160][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.999171][ C0] CR2: 000055ed24163ee8 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 636.999187][ C0] Call Trace: [ 636.999193][ C0] [ 636.999199][ C0] default_idle+0x9/0x20 [ 636.999220][ C0] default_idle_call+0x72/0xb0 [ 636.999241][ C0] do_idle+0x1bd/0x500 [ 636.999258][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 636.999278][ C0] ? __pfx_do_idle+0x10/0x10 [ 636.999300][ C0] cpu_startup_entry+0x43/0x60 [ 636.999317][ C0] rest_init+0x2de/0x300 [ 636.999332][ C0] start_kernel+0x380/0x3d0 [ 636.999351][ C0] x86_64_start_reservations+0x24/0x30 [ 636.999372][ C0] x86_64_start_kernel+0x143/0x1c0 [ 636.999392][ C0] common_startup_64+0x13e/0x147 [ 636.999421][ C0] [ 637.000070][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 637.000086][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 637.000105][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.000116][ T31] Call Trace: [ 637.000124][ T31] [ 637.000133][ T31] vpanic+0x1e0/0x670 [ 637.000160][ T31] panic+0xc5/0xd0 [ 637.000182][ T31] ? __pfx_panic+0x10/0x10 [ 637.000206][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 637.000229][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 637.000252][ T31] watchdog+0xfda/0xfe0 [ 637.000278][ T31] ? watchdog+0x209/0xfe0 [ 637.000305][ T31] kthread+0x388/0x470 [ 637.000328][ T31] ? __pfx_watchdog+0x10/0x10 [ 637.000347][ T31] ? __pfx_kthread+0x10/0x10 [ 637.000371][ T31] ret_from_fork+0x51e/0xb90 [ 637.000393][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 637.000411][ T31] ? __switch_to+0xc7d/0x1400 [ 637.000432][ T31] ? __pfx_kthread+0x10/0x10 [ 637.000456][ T31] ret_from_fork_asm+0x1a/0x30 [ 637.000493][ T31] [ 637.289880][ T31] Kernel Offset: disabled [ 637.294287][ T31] Rebooting in 86400 seconds..