last executing test programs: 20.635543895s ago: executing program 3 (id=3128): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000023000000611108000000000085000000cc0000009500000000080000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 20.498105217s ago: executing program 3 (id=3130): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x5, 0x1}, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYRES8=r3, @ANYRESDEC=r1], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newqdisc={0x34, 0x24, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x9, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000180), 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000000940)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd70005fdbdf250100000006000a000100000005000700030000000800000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000680)=@ethtool_drvinfo={0x3, "4c8c7347e32aa9e1919c70c199bc62daad66ce3db4830992be0a07d0e2edda49", "43ef0626e0c081542132d0ce4926e3c71697d7b2861b69fd144fbdd555d2b463", "48fc56f4f7189546b945e630bca6536abb8675503d0db872c33a48925fe26d22", "caf0c036527a0de8195ff3b19db6bee4baa2f54d3422c3f42344f6ba6e042706", "b5e2c9e1b009a67f0335ead0bda0c05ce1595fe59060e5efc038ddc648d30394", "356b668d9c9fd670b74d5817", 0xa51d, 0x612780, 0x4, 0x2, 0x7}}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000003400)=[{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000007c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730484ce5a978ed0045a057d25db4e4b3c73228a593a1fc29d2e8baa556e198c23e9307d9fda3cef99d9a2e67bd3f2bec56a618c57877ed74cc1eb308a5a67a3ec264bce5f7533f76fb9b7089f2", 0x98}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000640)="c9e58047ba4774d004e7", 0xa}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40004}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)="d86557fd9448b8fc09380a651f682f33d4e33697daf6061291f8adb2bea1291fc95afff316e76152a6", 0x29}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="a26b02e4ac7b9ab11a853d8da47d247ff427785a3a511f265010d1aa2c5435bae1caa9ff1e0302f555", 0x29}, {&(0x7f0000002500)="cef859", 0x3}, {&(0x7f0000002540)="196debe9eb49c8be6ca47ed220f1ffc90b79732303630d3098f8e5c78a8a84571500fa0c15243e578410fd7f9d151679b78355e30a50f3e63fd044f5696ab91d3bacad", 0x43}], 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="580000000000000017010000020047733a4f00009adefb74ebe4f9667743e382ea2734c45975b80e61de9e236b009a9e2539e4befd352f5630758d0254178bfcd902a0b8a83af77837fd609cdd0000004d1b66ad0e1a364d7800000000000000ea78305960a117010000020000005f000000c9338a4861ae6fca2a6418a410267eb271bac15444df7fca1470564c6367a08b76c5894440ac26c4e22bbe05340f2cd28bd0d062392d31baff316b4308e02798e2c4e6ae478bc1bde20f2320c5509a06f179e1af3515b93aba95c5012c33d500000000001800000000000700000000000300000000000000000000004500000000000000170100000300000001000000000000001800000000000000170100000300000000000000000000001800000000000000170100000400000000001800000000001800000000000000170100000400000000100000000000001800000000000000170100000300000000000000000000001800000000000000170100000300000000000000000000001800000000000000170100000300"/406], 0x190, 0x90}, {0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002800)="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", 0xfa}, {&(0x7f0000002900)="36593b672fcab4e429b549a80ebc61d25853fc3891b7304028c5695572ec9ba57e9da519da58f93c0458c247938cc5482a3e283581d00f28c9baa4fe8fa8d2167433c29c78fddd0ab6549ec2a8d01199823c831fcab03db93c58a57a6d1a2977b8d2f5d1912335e728be6feb509c4b39530ec05d639d07561609f0fb1e0654a0eca45bdcb5aa26509c619670c906d826edc31d911b0967feb66ad2b64a778938b637cdeb027a5907eba439", 0xab}, {&(0x7f00000029c0)="12f6dc1595c0a6bf5de3ef829856d9dd0be3fe911001b2c4e582f453b329366ce35e1e5e83725ccd2c15bf07d848edf12cd5b98d1f730d2967f561cdc03d17c35f1eb40681288d6bf070ed72d3b3907209eb823d08b95268bec762c8b54b8a808c7c7ffcc150453a99e8488c", 0x6c}, {&(0x7f0000002a40)="2eac43cde73119a8a39b3fb0bbea41076d29bf7e88b5cf2c1707728a3488c9023e861d7543ed90d6098347c8b01569ed2e43c707d9ec6ce6d4feefe85d7eaea7e0774a107d3f96d2e6590efb1915abd8b19f989bd5022176986cacdfc652", 0x5e}, {&(0x7f0000002ac0)="d234be898bc3733205d5b6fb2cade44830bfa41c79dbe79f707b255390f25e5f2507797495e8064abb3b4c1bd7f2d2ab0a1dd603b8f2a14c8c01fd1e7081b0dc6f2dd0faa8edd2936badb7b0f3f12cd9128172351c5facf7017de4dbd45853ed8f7b1897d67cb3dcd0242db4fd0af2c7dd4e314e443765758995692136eca3e7db9289b7a80c764488e73873ea779242b79aca17ac", 0x95}], 0x5, &(0x7f0000000b80), 0x0, 0x80}, {0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002cc0)="2142411c379ab928a431058c6a08b3d09d0cb5d14d022781d3656e889873561d3540eedd796fd47005a20de66972ddfc73e6bf0c94825ace8f5afabc56b65fa5f366b9f2d9c4aa27cfc41539c270f9a743fd935f994403f793f295450cfc23c3f0cbd44915d634b5bf6d0ac01efb15c23b90570c8bd9e982b7a8", 0x7a}, {&(0x7f0000002d40)="8079fe26ce11d20ad2479ddf7a4c9e5f2c137c3e3629f1861bdb878e006a47817b009485fe3946b1bf7c7439a36ae358b6ddb8a81e774ecbd3287869d0c9c3549e26b52cda195e89a32fba836bd087468686ff677440949657d6b3b61ff9b85eb050670dedef0157b5be904d818359a3182b3581fb601b8298bbef7d62df8392cc42e945e2ff692d30bb6d9f6ea041a5c2535877e3938657d08302b4569e63bb164b80b8cf265d74e841d83dbda676f5c132d5a6eb0f1bf481e25fa58e6c1025ef9053406076951618ca237fa5c3e8ea9a7e667edfd39fc7d7b393844d72bd193aba0a25838d6546f352ff11a89d6ef6ab95be98f3ed4b", 0xf7}, {&(0x7f0000002e40)="137b124ab756f030d34cc754cb3e90ae9f7de456905a28401d1b9fa9f9727a4e6df1706daafe84338df1d31f303c425628a366f23df38c99d6973df1da933ec07a93aa251abfc8e3aeb2510c49e23781df295cc2f69c661f98ea493ac5568a21149658c32474d5029e973df1f471677c0367b329eb7f3cfe81b551245476e04b28b183", 0x83}, {&(0x7f0000002f00)="7fabb4ec2907d6600b7ff36367d971c649670d01f1a7bd17f3607214f049446986ca4427afacbf474b7fcab27ec422de699619fcacfd7526a367031e7f9d608376", 0x41}, {&(0x7f0000002f80)="3502b766f68b728b98ad2f678c", 0xd}], 0x5, &(0x7f0000000940)=ANY=[], 0x160, 0x4048805}, {0x0, 0x0, &(0x7f00000031c0), 0x0, &(0x7f0000000c00), 0x0, 0x801}, {0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000003240)="a1ea0018bcdee3bd608c46c5204c135874595972b0266ba4c3c36bd50151fa1dea7aabc63f4b93b7a7a2aaced4e87d90", 0x30}, {&(0x7f0000000d00)="35db6f923255c03346a9d7e793d59c27d26a371ddd66c8e2b73381e50ff58ebfe60b1971fc8cf4a784164315f3f06bba66749271f60fee37005667c272c92b15d46ee82ff136278ec2cde9a5e0ad5a0b2b67ac458623c8952f85e8dd22dfa6bb825b443da109ec65cd8d1e6faa5bb4ab932166e91396b65ed1b086f52b402336760de638f2c91ac02464", 0x8a}], 0x2, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000000000001701010004000000410000000000000018000000000000001701000003000000000000000000000018000000000000001701000004000000060000000000000018000000000000001701000003000000010000000000000018000000000000001701000003000000060000000000020000004f000000ab20d670bb467d326e997d8d4e8d1f72326de6e70651633e6d5c0c7ad79ddc759bdd3a545763184473542481dbccb160cb583c5129c7fd2fd3cfaec1e9e49d13e450e11315df103816d5b492a98a3a7b4dee9384a57b3cf265f422104a0000000000f0cf37b6626e6e0fa9075145bc07ac7a178e0aa734fbaf13b1ade15781fed5816f6071716f5b4f897d08d5831becd425b4f5ac405695ffd43ec9d3d18d8e3287628c1e0f155c153fda2cc46c0134b6d12205f82c1191d8614b14d5218f7ce1537e9042b2a035426e8f4054ce28ea00"/364], 0xe0, 0x20008000}], 0x6, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000dc0)=0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) 19.894086551s ago: executing program 3 (id=3137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket(0x15, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000000)={0x0, @remote}) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000010901080000006000000000000200000c08000340000000360800054061000000000000000c00028005000100000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c000000030a0fdb00000000000000000a0020050900030073797a3000000000e3b7bc4c44e9bf3d0900010073797a3100000100008000000000010000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r7, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000700000000040014001a80100005800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xfffff45c, @mcast2, 0x6}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, 0x0, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}]}, 0x3c}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_FAMILY={0x5, 0xd, 0x28}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x20044000) r9 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000130426bd700040000000ac1414bb000000000000000000000000ac1e01010000000000000000000000004e2000074e1f00000a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) 18.795042328s ago: executing program 3 (id=3145): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$inet(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000001c0)=0xfffffc2e) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18.523225142s ago: executing program 2 (id=3149): r0 = socket(0x10, 0x3, 0x36) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) (async, rerun: 32) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) (async, rerun: 32) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000000)={0x8000, 0x4, 0x6a, 0x6}) 18.437002924s ago: executing program 3 (id=3151): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r4], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_newnexthop={0x60, 0x68, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0x12}, [@NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6}, @NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x40}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r10, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x22}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket(0xf, 0xa38c5af84306a91f, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="c55d8d0700000000000000000000000000000000000067da1300000000008ec20a65d5285c161ac8d8042ada1f393f0c7e63a7e68297cbe18e1732a740eb200472058b147056ebbeb4a1efb640ddf7d0f3a3d0987fdb", @ANYRES32=r12, @ANYBLOB="240012800b00010062726964676500001400028005000700060000000600270000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 18.234939407s ago: executing program 2 (id=3153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$kcm(0x10, 0x2, 0x0) setsockopt(r6, 0x84, 0x85, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0xa, 0x1, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x5, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xd, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r11}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, &(0x7f0000000000)={r11}) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r12) socket$nl_netfilter(0x10, 0x3, 0xc) 17.876914729s ago: executing program 3 (id=3155): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x1, 0xb, 0x1, 0x1, 0x5391, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000180), &(0x7f0000000340)=0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 17.746252167s ago: executing program 1 (id=3157): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x10, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010101}]}}}]}, 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000bc0)={0x0, 0x841, 0x0, [0x6, 0x3, 0x1, 0x2, 0x9], [0x101, 0x5, 0x7, 0x6b6c, 0x2, 0xfffffffffffffffd, 0x0, 0xffffffff, 0x4, 0xfffffffffffff000, 0xbc, 0x3, 0xecdf, 0x7fffffff, 0x871, 0x16, 0x4, 0x28, 0x90b3, 0xf16, 0x8, 0x3, 0x4, 0x505eb6a9, 0x9, 0x4, 0xc76, 0x694b, 0xb6a, 0x9, 0x4, 0xe3f, 0x1, 0x6, 0x3, 0xf54, 0x4, 0x4, 0x5, 0x45d, 0x3c73679e, 0x4, 0x6, 0x3, 0xfffffffffffffff9, 0x6, 0xffffffff, 0xe, 0x400, 0x2, 0x1, 0x0, 0x8000000000000001, 0x8, 0x80000000, 0x7ff, 0x67, 0x1, 0x7fffffffffffffff, 0x4, 0x10001, 0x6, 0x9, 0xee40, 0x0, 0x4, 0xd2bb, 0x1c2, 0x80, 0x4, 0x5, 0xa97, 0x6, 0xa0000000, 0x7, 0x5, 0xe, 0x6, 0xf7, 0x200, 0x4eca, 0xc14, 0x193e, 0x157, 0x8, 0x3, 0x5, 0x8, 0x4, 0x3217, 0x4, 0x8, 0x7, 0x4, 0xbc, 0x530000000000000, 0xa5a, 0x40, 0x3c4, 0x4, 0x1, 0x5, 0x7, 0x9, 0x3, 0xffffffffffffffff, 0xa, 0x46b27f19, 0x4, 0x0, 0x8000000000000000, 0x4, 0x8, 0x1, 0xfffffffffffffffe, 0x9, 0x5824, 0x8, 0x6, 0x1, 0x9c6]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001000)={{r0}, 0x0, 0xa, @inherit={0x60, &(0x7f0000000b40)={0x1, 0x3, 0x80000000, 0xeb, {0x2c, 0x5, 0x80, 0x7, 0x2}, [0x5, 0x1, 0x3]}}, @devid=r2}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c000040"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x18}}, 0x4090) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x10001, 0x0, r0, 0x1, '\x00', r4, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000ac0)={{r0, &(0x7f0000000080)='bridge0\x00', 0x28080, &(0x7f00000000c0)={@align=0x8, {0x401, 0xd180, 0x6, 0x100000000}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000380)=0x8}, 0x6, &(0x7f0000000a00)=[{0x1, 0x3, &(0x7f00000003c0)='bond\x00', &(0x7f0000000440)="559da32484e40db4b7dec50fce978525ea5e211fe964e56e22426df1afb0f3ce63d6228631495762c48720f60e1c24fc9186f85ec36cc05c91e70d12d7cfc71b336a182ddf665d92f8775ac6d5856c2537ed7845f6bd59104c88a2f25a51d30fd07fb4a71df4c03ce208e7c6439db1d846aa67af75867861f3f4fdca8e42eeb3f3a2ba36bcf99a409d6531b783cf50060ea4ac29880a501d5b43342105d48c84a35daf473d9d9276c843ad48d30fd74fd3900a8e11452af8611600f2dec5d1df9726f8b566b83787579b00b62294c3106aa0905cf2", 0xd5, 0x3c}, {0x3, 0xfffff3ac, &(0x7f0000000540)='bridge0\x00', &(0x7f0000000580)="fee64392a5f60bbc120a5c394240a8edf1f6454c3920554d66ee4654396a1a6fe48313715f06a6c35694818b63915d2d2a08d795d34046da0158aaa73596bdfbdb2a9066e6956292809b8cc1e036d1dd72f034cc0c54e0f42943bce07fef78ba0bab2789eb2cc61dfb021adbcef21c93b30196fdee4ea22b0a9e15cda5589df79e28100f0f2b98d6047cfa5ad547601fbd110604311c1f4a1253d1259d2d98ebf380d64db9ff7198869c8641a2bae2dd922ae4852bf74e872dcbabfcabbca8b1e5ef3bcae22d0a016ac57a9504e0f9c365cf76", 0xd3, 0x8}, {0x2, 0x4f, &(0x7f00000006c0)='%#\x00', &(0x7f0000000700)="78b4260a64197cb9bc733df8c226879f614ce21ac5d5ba4beb7a20ef72433945e29180f2156423a65fb817c89142903bb177a3c5c836b943e3903867bc33e825c5ed9c7a65a8518048f5717b49107be63cdd2a75e6527aaee2662fe1cd56a2fa4a6eb58c", 0x64, 0x2}, {0x824730c4c326c44, 0x100, &(0x7f0000000780)='\x00', &(0x7f00000007c0)="8c6e594e088becb1cbce9d55f2b63933df545012294c01ac31f1a1ea23effdeb7dcf6cbd80e31654ca22f17acb37eaf16c61c31596a4d8285691c3658664397694a6c94cf93b78f7d715b18a61913947d84568d9576ff30e49ae840252189564c1424421fffe3453bd84b7d49b7d9c8b6fd1cd199e7bd49566d180a20af25de9dbe0e61f60687168d737fa41611829d1fcebf4ada5", 0x95, 0x22}, {0x3, 0xed8, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="8fb9065719c3272babfbb2813606f2a3a04a6479466b", 0x16, 0xa}, {0x3, 0x10, &(0x7f0000000940)='bond\x00', &(0x7f0000000980)="14bd5bf09cf592141da59d0d77145c2bcb80fa8ece06209b2b1481f7a8e2c8ae9dc54e8064d21332fe3d1b70d83501f4cfedbb6cb6fdc142b83eda60b9a7450a7e70328bc261c06de747fb5554c6ca31453e6228373526e894e3f585c1b4a14b7ba07a29a474eddb1a257bf88f2904e5d691ad84a1bd8bf0182bf14cf93394", 0x7f, 0x10}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000180)="22a40b74c79f9817e483fa179b59a227b53b4798ae0f80456bd2944afa24f25276a1c15534521499b3e0695ec732b50ea1f7ef783dd18ab1277a99ff49a498072329a235eeb47fae086709c23f851b9e2dee836230cc6119aa6a0c94d4beae43f56e6c0dae7977e873a14884e282e156d05ae2ef28952e0662baeb1e587ea95f9aa520741088fd8f4705726bc96f4bcd7422840a74ed9f6d1a5e48e4e5db2a2431f5207b2a58511f9ce65558eecc353dee59bb106487feb3d7acd061115f303cd1e8e00808ae7aa3251a28e3cea87d8127c301c2c47697c95700a135cabf4033d6c297d5d7728e96ec158eb5d95e750c002151", &(0x7f0000000280)=@udp6=r6, 0x4}, 0x20) 17.718745688s ago: executing program 0 (id=3041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000990c0a010100000000000000000a00000609000200a373797a31000000000900010073797a3100000000480003801c0000800c00018006060e00d10300000c000440000000002df31ab3240000800c000440ff0000000000000508000340000000020c000540000000000000000404000080140000000000000000000100000a000000000000bce53e8a7df8def3ad77c70e"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, 0xffffffffffffffff, 0xf6695000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r2], 0x50}}, 0x0) accept4$tipc(r1, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x800) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0x1}, 0x1c) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="95cb57f7f9f5e9b19422fdbba16052a29a2d3be6e213bd75a97b56c7dc217216090e7c97", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)="05ba8c1cfb03f631fd2d06121541e78e6718599f7482f9b4b4464ff2d795", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) 17.571894013s ago: executing program 1 (id=3159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0x6}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='Q\x00\t\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fb15df256f00470f68040300", @ANYRES32=r7, @ANYBLOB="0500d600010000000a00060008021100000000000a000600ffffffffffff00000500d60001000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0xb4, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @NFT_MSG_NEWSETELEM={0x1f8, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c0, 0x3, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x66, 0x1, "eeea4383141432e99a57bd7019c515251f376e3a2b534d2d1fd4f2380eaef033f1aef9f41cba90f3f0188f32a46e499e03227b3e8318b16569ac4338c8fc61428537df9a15895074d75e837a2222db83f6cd0cfe8081af35150dc3f7ef7591a79b82"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x68, 0x1, "3d6d2222c71b3ea2b122ffbd23a91f01709a64eeaefa7acd8089c55b4a12c488a4474a6c5a26b5dfcd98b3367b7152f86ee8218925ae2dc479ff18d993066a9853ff03baf0b4e8ff2df71e814917c82f4d288ce5239c07ce47bd0830ad68fc189c7725a0"}, @NFTA_DATA_VALUE={0x2f, 0x1, "2f39d42e16e8e5cae1ee366a341128485e3f42c28ca05dd0596c3414944f2e931de02a0142f3866bfdbc83"}]}]}]}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x328}, 0x1, 0x0, 0x0, 0x801}, 0x0) accept4$alg(r9, 0x0, 0x0, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des-generic)\x00'}, 0x58) r11 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) 17.347038723s ago: executing program 4 (id=3161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x7f, 0x7, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5e}, 0x10}, 0x94) 17.34618463s ago: executing program 0 (id=3162): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0) 17.325158793s ago: executing program 2 (id=3163): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x1042}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x1042}, 0x10) socket(0xa, 0x2400000001, 0x0) (async) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) (async) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xb5, "b7f63e5733ebba1639744dfbbb895452f05a3dc43f1dcd97762a502b28684be26b1f7e831557d1c332cd6c5647eaad556475753bd82c693eda28d5b4ba0019877f0265d778ebcb0bdc7c417aee9575419e00b62fd4312017fd8f81775958aaf5cb61c936305687551da7445344c459e793834904520506e0a04a1966dd693778fcd59b79c1bfb8007ddd05a518bbaf5c0f8294eab3f36aaf942d1b4d1406c75bc2c784daba4ac80dea15b121d5476d44bae7980925"}, &(0x7f00000001c0)=0xbd) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e22, 0xba53, @loopback, 0x5}}, 0x4, 0x3, 0x2, 0x401}, &(0x7f00000003c0)=0x98) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r6, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600acff0100000000000000000006000f00b74b000060e588bf8441f3172a862bd519abbb7233641fa1c361f022aa63ef69e9c74a330bc33e5fdd176d7a96c64c29f59f49f5c7d96e997d82fea3633d51e840c583ddf2428dce614e97cb1f068ce031508035c3e943180073bb7d03fed57962ec57f3fb4101027b915504f338daa03034e5458f01e8d0b77d89"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r6, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600acff0100000000000000000006000f00b74b000060e588bf8441f3172a862bd519abbb7233641fa1c361f022aa63ef69e9c74a330bc33e5fdd176d7a96c64c29f59f49f5c7d96e997d82fea3633d51e840c583ddf2428dce614e97cb1f068ce031508035c3e943180073bb7d03fed57962ec57f3fb4101027b915504f338daa03034e5458f01e8d0b77d89"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880), 0x0, 0x4004000) 17.124779753s ago: executing program 4 (id=3164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7c9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @loopback, 0x5}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004800) (async) r2 = accept(r0, 0x0, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9a}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x100}, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x174, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x174}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8001) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x3, 0x7, 0xffff8000, 0x1, 0x3}, &(0x7f0000000740)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000780)={r5, 0x1000, "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"}, &(0x7f00000017c0)=0x1008) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001840), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040001}, 0x24000010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0xa8, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xe5c}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5c03}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xa0000000}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x433}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b00), r2) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9c}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4081}, 0x40040) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x28, 0x140a, 0x8, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x28}}, 0x20000044) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d40)={'vlan1\x00', 0x0}) (async) connect$inet6(r8, &(0x7f0000001d80)={0xa, 0x4e21, 0xb53b, @empty, 0x7}, 0x1c) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0xb4, r10, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x67}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ec0b86593527"}, @NL80211_ATTR_IE={0x69, 0x2a, [@preq={0x82, 0x25, {{0x1, 0x1}, 0x3, 0xde, 0x90, @device_a, 0x2, @void, 0x8, 0x9, 0x1, [{{}, @broadcast, 0x6}]}}, @channel_switch={0x25, 0x3, {0x1, 0x30, 0x80}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mic={0x8c, 0x18, {0x1c4, "75dc2a172b2d", @long="458d77ad5e2850b0c27ffc6db7a331b5"}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x6, 0x0, @broadcast, 0x0, 0x4, 0x2}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x8081) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002280)={0xffffffffffffffff, 0xe0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000002080)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000020c0), &(0x7f0000002100), 0x8, 0xa, 0x8, 0x8, &(0x7f0000002140)}}, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000023c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0x90, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x90}}, 0x80) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r12, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x14, r13, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x1) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002580), r12) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r12, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x14, r14, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc884}, 0x1) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002680), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x34, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4004010) 16.95894455s ago: executing program 2 (id=3165): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) pipe(&(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x884) 16.957374593s ago: executing program 0 (id=3166): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000f"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x6, 0x4, {{0x2b, 0x4, 0x2, 0x3, 0xac, 0x64, 0x0, 0x5, 0x2f, 0x0, @loopback, @local, {[@lsrr={0x83, 0x1b, 0x5b, [@remote, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1, @remote]}, @cipso={0x86, 0x36, 0x2, [{0x5, 0x5, "07ce87"}, {0x6, 0x12, "b3a2835c7e2eb68eb1872f15458123eb"}, {0x6, 0x9, "7eea1dad7e777d"}, {0x1, 0x10, "5ced3dddb3393f420e65a3dda5af"}]}, @end, @timestamp={0x44, 0xc, 0xac, 0x0, 0x6, [0x8, 0x7]}, @ssrr={0x89, 0x27, 0x13, [@local, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @multicast1, @local, @remote, @multicast2, @remote]}, @timestamp={0x44, 0x8, 0xdf, 0x0, 0x6, [0xb71]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r10, 0x0, 0x61, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001c00010429bd7000fddbdf2507000000", @ANYRES32=r9, @ANYBLOB="0200ee050a000200aa"], 0x44}, 0x1, 0x0, 0x0, 0xe144e469f031c35f}, 0x20040040) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000840)={@remote, 0x0}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=@newlink={0x90, 0x10, 0x49920d862a921f39, 0x800, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13408}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x60, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_LINK={0x8, 0x1, r7}, @IFLA_VTI_LINK={0x8, 0x1, r7}, @IFLA_VTI_LINK={0x8, 0x1, r9}], @IFLA_VTI_LOCAL={0x14, 0x4, @loopback}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x6}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8, 0x1, r11}]]}}}]}, 0x90}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="b6", 0x1}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'nr0\x00', {0x5}, 0x4}) 16.776415083s ago: executing program 4 (id=3167): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008460}, 0x1014) (async) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008460}, 0x1014) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48830}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 16.705547124s ago: executing program 1 (id=3168): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x9}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f000000d500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) sendmsg$sock(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xe2, 0x0, r0, 0x1, '\x00', 0x0, r1, 0x0, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 16.47154418s ago: executing program 1 (id=3169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x56, "78402a0e5ca4436c363f0fac6918b6cd90ecb8b6e39636fc0bc9e957a4248bc9ddb46e643dcc63cd033392a035d1fbdb6dd9a63fc2e86219b8e925f198aa58a4db0e1a9ababc709c0264816551b574c118092ecfd394"}, &(0x7f0000000080)=0x5e) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x24d7, 0x7, 0x5, 0x5}, &(0x7f0000000180)=0x98) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x0, 0x5}, &(0x7f0000000280)=0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80200, 0x44}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xed8}]}, 0x38}}, 0x44040) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r4) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6d4}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000580)={@rand_addr=0x64010100, @multicast2, 0x1, "113f526cfe2e94bf8837c3da6cd5a2924c6b6ae7b6479b82541d71e14f597002", 0x1648, 0x3ff, 0x6, 0xffffff5d}, 0x3c) ioctl$PPPIOCGIDLE64(r6, 0x8010743f, &(0x7f00000005c0)) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x841) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x15c, r11, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5c19c806}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x98}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4bd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80000}, 0x20040000) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000a00)={'vxcan1\x00', {0x2, 0x0, @remote}}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000a40)={r1, 0x1}, &(0x7f0000000a80)=0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan4\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) read(r0, &(0x7f0000000b80)=""/53, 0x35) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x94, r5, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x1d}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_SSID={0x1c, 0x34, @random="8042d15f1825a5cd89c8187ff6e20a2264a08cfa38f5de6d"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfffffffd}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x94}}, 0x80c0) socket$kcm(0x29, 0x5, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r13, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x0, 0x200, 0x1, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44010) 16.446797705s ago: executing program 4 (id=3170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) (async) connect$tipc(r1, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x84, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6cc}}, 0x84}, 0x1, 0x0, 0x0, 0x10040}, 0x24000000) 16.34843396s ago: executing program 2 (id=3171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "da7120", 0x18, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e23, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x8b5, 0x7ff}}}}}}}, 0x0) listen(r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettaction={0x20, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x30, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x6c}}, 0x8000002) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "da7120", 0x18, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e23, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x8b5, 0x7ff}}}}}}}, 0x0) (async) listen(r1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettaction={0x20, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x30, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x6c}}, 0x8000002) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) 16.28369917s ago: executing program 0 (id=3172): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000004c0)="b9fe030768045c8c989a14f088a865f986dd", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.201906383s ago: executing program 4 (id=3173): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x2, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r3, &(0x7f0000000480)="3111eb6e5f2afdd0c6cc47dfee49e3bd5614c000adeeac8e9aeac61f5dfc533f12403311fc5a4d720d20ce206c46c1a4a910a973c096579f9a33133d91509ad33f36f3ccca79e114cf4fb88edbef57d4600e01599713aefb0da195941fd9aad6f60a7534b9f98037ff7d24a38dfe86a498a859767f785f8616fec19f70dd98e5b0632b966ee9f4ce1085a3789531f55c37ae0b42250d4621c469bec830bc5bb878216d1d93e9ae36e6f61c214e4b935a1d5e6eadbd6600dfb1ce7509ba014c00db06c389fc73a68bbce4b4685c9481bd8779b81dc6d40e097d76342d82e1c56ade69a8dd676f4457a870c6bd1851e0dabd94ccba6e331e", &(0x7f0000000580)=""/242}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="df85631388ebf6e5da38cdf96ede7a761ea6971354b3b3dba72da0d2366e8351a26a57cdd9c47aedd9b10ba350c68d7e999cb40d8f5b62b5363fdee8114f841a207058206975125b26b928089b300ff52a6cc432d9a5d56518fdc27b9eb028cbd0ded668177889420d1c2fd8fd10f9605dc02a78f3832bb8b229d6bbd99d549f5ca116a2cecf3a0b21f13db4380637aaf3a52c2216d90ff16e3f2c52d9576fe7a6e6bbb80bec729cec7d2c194313ff50401bf6e1ed060a3465c60f074d", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="6d0fef80dec4e20b435182f1d613dd551c3b4b312ef0a2d591c1d075e4e9bc43117a07c4cd8438c6d4d6683a8d46aacd5f603d71f9edfc3d2d05b304dc7e6299c846e85dfb57372bce8ddf78b76c56cc0bb9fd22a256445cf0b6d91d95fab6bfde2cfd8e2c7fc904c47dc63ac0e5fd81336f7d35e92c2605ebdd4b30ae7d42a71587d800e61d1490f8a6b43114af9624f05050507a40a4a84d9433aa7035c9a9", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x52, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc001c06fcfe8000000000000000000000000000fffe8000000000008a5f010000b5e40409f0549dc8c81c83f9a902b69c19aef5f4a14bdfe0202fc06537abb8017113b4bc44bfdd8cf9faa5b7a094bc90843398be7648052378f0f5f0ed3fdec20cd1463a51e9980d3118c200", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe06e2d4c3d90000"], 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x1800}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r8, 0xcfa3f000) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x2004c085) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup, 0x26, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r3, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000009c0)={0xad, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32=r10, @ANYRES32=r1, @ANYBLOB="7d050b46113fcab4ceac1a258ea65476cacaad945eb3adce246913af17e7afc24d984087531a1f1459f0487c8f1d0ab0bc6abfb32da14acb60c5e0bc2f3c804f90ee4eb0de130f3975b3732fc91e4103021d631d9ef3730209cabac8e57b1e7c", @ANYRES32=r11, @ANYRES64=r9], 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) 16.099231823s ago: executing program 1 (id=3174): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 16.01577476s ago: executing program 0 (id=3175): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 16.014917176s ago: executing program 2 (id=3176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) socket$pptp(0x18, 0x1, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007800c"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000040}, 0x4000000) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3bb, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0x3, 0xc}, {0x0, 0xfff1}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4049080) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x1) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) 15.959376789s ago: executing program 1 (id=3177): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x8, 0x5df1, 0x15, @remote, @private2, 0x8009, 0x10, 0x693, 0xe}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="08002dbd700800010000473b06f34b000000000000000000002060496a7731ca3901066e60317fce57ca4e2c451abb0d05fd7c7c5d", @ANYRES32=r3, @ANYBLOB="140002006e65747063693000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="080003000100000008000300000000007c000180080003000200000014000200697036746e6c30000000000000000000140002006272696467655f736c6176655f310000140002006e657464657673696d3000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300010000000800030001000000140002007465616d5f736c6176655f3100000000080003000200000030000180140002006d616373656330000000000000000000080003000100000008000300000000000800030003000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r6, 0x1, {0x0, 0x0, 0x4}}, 0x18) r9 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3c, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r11, 0x2d306000) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5910fb597e0234899ea54c7b6c2", 0x11) sendmmsg(r0, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 15.864996535s ago: executing program 0 (id=3178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)={0x5, {{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x0, 0x3, [{{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x210) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r7, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xde0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, 0x0, 0x0, 0xe8469dacf6017451}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, 0x0, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x12, &(0x7f0000000100)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xb, 0x8, 0x1, 0xffffffffffffffe0, 0xffffffffffffffe0}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000200)='GPL\x00', 0x2b2, 0x84, &(0x7f00000002c0)=""/132, 0x41000, 0x15, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x4, 0x6, 0x2}, 0x10, 0x189dc, r10, 0x4, 0x0, &(0x7f00000007c0)=[{0x0, 0x3, 0x3, 0x5}, {0x1, 0x4, 0x9, 0x7}, {0x4, 0x1, 0x4, 0xe}, {0x1, 0x1, 0x1, 0x3}], 0x10, 0x332c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x4102, 0x1, 0x10000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x48, r4, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.203483888s ago: executing program 4 (id=3179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r1, 0x4, r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0x0, 0x0) unshare(0x2000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=r9, @ANYBLOB="bb423b773e41b28e67944c0544a062a604423e3768b943ed019fe8a37725691e8bbef7750800000000000000f24945d9d8bac580b4d37ef8f625bbf738218f2d99fb18effdb9a3afd81ea7b0c37fc07d581c4091fd8becdb9dfa2875ca4e308862d5429e9b6a0b5d22896d69157ec27e9cc7208ce071977e46800da4e8b6"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x8, 0x80, 0x0, 0x8eb6}, {0x7, 0xb2, 0x5, 0x5}, {0x8, 0x9a, 0x9, 0x6}, {0x7ff, 0x1, 0x9}, {0x9, 0x2, 0x3}]}) write$ppp(r6, &(0x7f0000000500)="0024f87b56de676d225a39c627c72a40b79b3ab9e9751a59a2beafb6a3b9c6df7da75e6857057d40d65af7b83d9349ad34151b7fbd76a8da794e995c524773d86c2b8f6037ba011bf245d55d9b154fd817042c473ad740f54c741af18cef1d3a94f7a1e8675cc324ae9e822d4ae66bcf5663b0f2c8dc305124fce284b17d61af5eac66618a5fb0d5346582883bad45aefef13844340de73cac98241a42f0e988f1b65f451b3cbbb166145f73897283e6b1dc61f5d6bf378ec1b9a3f28d872fcf6433c273f9", 0xc5) r10 = socket(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) close(0x4) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_genetlink_get_family_id$nl802154(&(0x7f00000096c0), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000009c80)={0x0, 0x0, &(0x7f0000009c40)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES64=r5, @ANYBLOB="193a21ee2bfd8a383e59f07704996632", @ANYRES16=r0, @ANYBLOB="bd4bd34c000300f40000ffffffe30000", @ANYRES64=r12, @ANYRESHEX=r11], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 172.783417ms ago: executing program 32 (id=3178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)={0x5, {{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x0, 0x3, [{{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x210) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r7, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xde0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, 0x0, 0x0, 0xe8469dacf6017451}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, 0x0, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x12, &(0x7f0000000100)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xb, 0x8, 0x1, 0xffffffffffffffe0, 0xffffffffffffffe0}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000200)='GPL\x00', 0x2b2, 0x84, &(0x7f00000002c0)=""/132, 0x41000, 0x15, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x4, 0x6, 0x2}, 0x10, 0x189dc, r10, 0x4, 0x0, &(0x7f00000007c0)=[{0x0, 0x3, 0x3, 0x5}, {0x1, 0x4, 0x9, 0x7}, {0x4, 0x1, 0x4, 0xe}, {0x1, 0x1, 0x1, 0x3}], 0x10, 0x332c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x4102, 0x1, 0x10000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x48, r4, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 133.18896ms ago: executing program 33 (id=3177): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x8, 0x5df1, 0x15, @remote, @private2, 0x8009, 0x10, 0x693, 0xe}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="08002dbd700800010000473b06f34b000000000000000000002060496a7731ca3901066e60317fce57ca4e2c451abb0d05fd7c7c5d", @ANYRES32=r3, @ANYBLOB="140002006e65747063693000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="080003000100000008000300000000007c000180080003000200000014000200697036746e6c30000000000000000000140002006272696467655f736c6176655f310000140002006e657464657673696d3000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300010000000800030001000000140002007465616d5f736c6176655f3100000000080003000200000030000180140002006d616373656330000000000000000000080003000100000008000300000000000800030003000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r6, 0x1, {0x0, 0x0, 0x4}}, 0x18) r9 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3c, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r11, 0x2d306000) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5910fb597e0234899ea54c7b6c2", 0x11) sendmmsg(r0, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 61.22182ms ago: executing program 34 (id=3176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) socket$pptp(0x18, 0x1, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007800c"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000040}, 0x4000000) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3bb, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0x3, 0xc}, {0x0, 0xfff1}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4049080) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r10, 0x400454cb, 0x1) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) 0s ago: executing program 35 (id=3179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r1, 0x4, r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0x0, 0x0) unshare(0x2000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=r9, @ANYBLOB="bb423b773e41b28e67944c0544a062a604423e3768b943ed019fe8a37725691e8bbef7750800000000000000f24945d9d8bac580b4d37ef8f625bbf738218f2d99fb18effdb9a3afd81ea7b0c37fc07d581c4091fd8becdb9dfa2875ca4e308862d5429e9b6a0b5d22896d69157ec27e9cc7208ce071977e46800da4e8b6"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{0x8, 0x80, 0x0, 0x8eb6}, {0x7, 0xb2, 0x5, 0x5}, {0x8, 0x9a, 0x9, 0x6}, {0x7ff, 0x1, 0x9}, {0x9, 0x2, 0x3}]}) write$ppp(r6, &(0x7f0000000500)="0024f87b56de676d225a39c627c72a40b79b3ab9e9751a59a2beafb6a3b9c6df7da75e6857057d40d65af7b83d9349ad34151b7fbd76a8da794e995c524773d86c2b8f6037ba011bf245d55d9b154fd817042c473ad740f54c741af18cef1d3a94f7a1e8675cc324ae9e822d4ae66bcf5663b0f2c8dc305124fce284b17d61af5eac66618a5fb0d5346582883bad45aefef13844340de73cac98241a42f0e988f1b65f451b3cbbb166145f73897283e6b1dc61f5d6bf378ec1b9a3f28d872fcf6433c273f9", 0xc5) r10 = socket(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) close(0x4) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_genetlink_get_family_id$nl802154(&(0x7f00000096c0), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000009c80)={0x0, 0x0, &(0x7f0000009c40)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES64=r5, @ANYBLOB="193a21ee2bfd8a383e59f07704996632", @ANYRES16=r0, @ANYBLOB="bd4bd34c000300f40000ffffffe30000", @ANYRES64=r12, @ANYRESHEX=r11], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) kernel console output (not intermixed with test programs): sr_slave_1: entered allmulticast mode [ 299.186267][T13049] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 299.273655][T13058] xt_hashlimit: size too large, truncated to 1048576 [ 300.111656][T13104] netlink: 'syz.1.1974': attribute type 1 has an invalid length. [ 300.142003][T13104] netlink: 'syz.1.1974': attribute type 2 has an invalid length. [ 300.422387][T13121] netlink: 'syz.2.1979': attribute type 11 has an invalid length. [ 300.464076][T13117] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 300.535011][T13117] bond5 (unregistering): Released all slaves [ 301.184449][T13145] bond5: invalid ARP target 0.0.0.0 specified for addition [ 301.206380][T13145] bond5: option arp_ip_target: invalid value (0) [ 301.225133][T13154] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 301.225186][T13145] bond5 (unregistering): Released all slaves [ 301.245016][T13154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.567735][T13150] syzkaller0: entered promiscuous mode [ 301.581343][T13150] syzkaller0: entered allmulticast mode [ 301.584737][T13173] __nla_validate_parse: 9 callbacks suppressed [ 301.584756][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 301.910209][T13180] netlink: 'syz.0.1992': attribute type 11 has an invalid length. [ 301.956878][T13180] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1992'. [ 301.978941][T13184] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1994'. [ 302.095767][ T5632] Bluetooth: hci4: link tx timeout [ 302.113189][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.200194][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 304.326902][T13189] ipvlan2: entered allmulticast mode [ 304.353854][T13189] batadv_slave_1: entered allmulticast mode [ 304.384748][T13189] batman_adv: batadv0: Adding interface: ipvlan2 [ 304.405445][T13189] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.432611][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.443986][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.454448][T13189] batman_adv: batadv0: Interface activated: ipvlan2 [ 304.787715][T13210] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2001'. [ 304.803460][T13210] netlink: 320 bytes leftover after parsing attributes in process `syz.2.2001'. [ 305.154917][T13235] openvswitch: netlink: Key 26 has unexpected len 256 expected 16 [ 305.208113][T13240] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2006'. [ 305.275515][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'. [ 305.330119][T13244] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 305.448687][T13250] bond0: Caught tx_queue_len zero misconfig [ 305.469855][T13258] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2011'. [ 305.665114][T13263] IPVS: Unknown mcast interface: vcan0 [ 305.725752][ T30] audit: type=1804 audit(1778373614.061:13): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2015" name="/newroot/402/cgroup.controllers" dev="tmpfs" ino=2064 res=1 errno=0 [ 305.784759][T13269] syzkaller0: entered promiscuous mode [ 305.790597][ T30] audit: type=1800 audit(1778373614.061:14): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2015" name="cgroup.controllers" dev="tmpfs" ino=2064 res=0 errno=0 [ 305.812785][T13269] syzkaller0: entered allmulticast mode [ 305.924642][T13269] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 305.945132][T13278] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2017'. [ 305.957790][T13269] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.181943][T13290] syz_tun: entered allmulticast mode [ 306.216298][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2022'. [ 306.233801][T13290] pimreg: entered allmulticast mode [ 306.263411][T13288] syz_tun: left allmulticast mode [ 306.945580][T13328] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 306.973017][T13328] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 307.049125][T13332] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 307.256047][T13335] syzkaller0: entered promiscuous mode [ 307.263196][T13335] syzkaller0: entered allmulticast mode [ 307.716035][T13371] __nla_validate_parse: 1 callbacks suppressed [ 307.716058][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'. [ 307.793246][T13367] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2042'. [ 307.833778][T13375] netlink: 'syz.0.2045': attribute type 1 has an invalid length. [ 307.844492][T13371] syzkaller0: entered promiscuous mode [ 307.857162][T13371] syzkaller0: entered allmulticast mode [ 308.059205][T13389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2047'. [ 308.069463][T13389] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2047'. [ 308.081520][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2047'. [ 308.091226][T13387] netlink: 'syz.0.2050': attribute type 4 has an invalid length. [ 308.104004][T13384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2048'. [ 308.642416][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068231800: rx timeout, send abort [ 308.671183][T13421] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 309.119539][ T9625] IPVS: starting estimator thread 0... [ 309.141154][T13439] tipc: Enabling of bearer rejected, failed to enable media [ 309.142606][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e791000: rx timeout, send abort [ 309.158304][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068231800: abort rx timeout. Force session deactivation [ 309.249627][T13443] IPVS: using max 28 ests per chain, 67200 per kthread [ 309.472316][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 309.492390][T13456] netlink: 'syz.0.2063': attribute type 39 has an invalid length. [ 309.594336][T13468] netlink: 'syz.4.2065': attribute type 4 has an invalid length. [ 309.657788][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e791000: abort rx timeout. Force session deactivation [ 310.065762][T13483] netlink: 191 bytes leftover after parsing attributes in process `syz.1.2070'. [ 310.106522][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 310.146625][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2072'. [ 310.188032][T13482] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 310.240197][T13482] bond6 (unregistering): Released all slaves [ 310.436995][T13508] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 310.457353][T13508] bond1: option mode: unable to set because the bond device is up [ 310.485562][T13508] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.589250][T13508] bond1: (slave lo): Enslaving as an active interface with an up link [ 310.627379][T13508] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 310.844009][T13537] bond7: entered promiscuous mode [ 310.850636][T13537] bond7: entered allmulticast mode [ 311.011846][T13545] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 311.019692][T13545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.032118][T13545] syzkaller0: entered promiscuous mode [ 311.037656][T13545] syzkaller0: entered allmulticast mode [ 313.584853][T13524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.832055][T13556] No such timeout policy "syz1" [ 314.313785][T13586] __nla_validate_parse: 5 callbacks suppressed [ 314.313806][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'. [ 314.680981][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'. [ 314.932322][T13614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.279184][T13628] netlink: 'syz.0.2113': attribute type 4 has an invalid length. [ 315.349568][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'. [ 315.368663][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'. [ 315.602414][T13641] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 315.792777][T13652] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 315.893630][T13655] tap0: tun_chr_ioctl cmd 1074025672 [ 315.903933][T13655] tap0: ignored: set checksum disabled [ 315.911842][T13655] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2124'. [ 316.107898][T13661] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 316.479106][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2129'. [ 316.544726][T13692] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 316.576680][T13695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2130'. [ 316.736358][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2133'. [ 316.760961][T13702] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 316.848398][T13702] netlink: 'syz.4.2133': attribute type 1 has an invalid length. [ 316.879463][T13702] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2133'. [ 317.206574][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2140'. [ 317.235317][T13726] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 317.283807][T13726] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 317.311320][T13726] netlink: 'syz.4.2139': attribute type 2 has an invalid length. [ 317.319737][T13726] netlink: 'syz.4.2139': attribute type 2 has an invalid length. [ 317.329860][T13726] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 317.545879][T13742] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 318.064442][T13768] syzkaller0: entered promiscuous mode [ 318.080326][T13768] syzkaller0: entered allmulticast mode [ 318.144106][T13776] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.264687][ T7967] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.286209][ T7967] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.319587][T13784] netlink: 'syz.1.2156': attribute type 4 has an invalid length. [ 318.343575][ T7967] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.368626][ T7967] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.571668][ T30] audit: type=1804 audit(1778373626.911:15): pid=13795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2158" name="/newroot/435/cgroup.controllers" dev="tmpfs" ino=2233 res=1 errno=0 [ 318.649555][ T30] audit: type=1800 audit(1778373626.911:16): pid=13795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2158" name="cgroup.controllers" dev="tmpfs" ino=2233 res=0 errno=0 [ 318.709441][T13804] tipc: Enabling of bearer rejected, media not registered [ 318.746314][T13804] syzkaller0: entered promiscuous mode [ 318.761633][T13804] syzkaller0: entered allmulticast mode [ 319.590061][T13847] syzkaller0: entered promiscuous mode [ 319.596861][T13847] syzkaller0: entered allmulticast mode [ 319.771925][T13821] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 319.779782][T13860] veth0: entered promiscuous mode [ 319.821968][T13861] veth0: left promiscuous mode [ 319.935337][T13868] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 319.949317][T13868] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.978726][T13868] __nla_validate_parse: 2 callbacks suppressed [ 319.978750][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 320.117613][T13881] netlink: 'syz.2.2181': attribute type 25 has an invalid length. [ 320.139130][T13881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2181'. [ 320.164325][T13881] syzkaller0: entered promiscuous mode [ 320.170192][T13881] syzkaller0: entered allmulticast mode [ 320.483938][T13897] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2186'. [ 320.523037][T13897] bond5: (slave bond_slave_1): Device is not our slave [ 320.530125][T13897] bond5: option active_slave: invalid value (bond_slave_1) [ 320.539690][T13897] bond5 (unregistering): Released all slaves [ 320.682160][T13906] sock: sock_timestamping_bind_phc: sock not bind to device [ 322.237786][T13833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.580889][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.674597][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 322.774920][T13930] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 322.870638][T13933] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 322.901762][T13938] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2198'. [ 322.974519][T13941] openvswitch: netlink: IPv6 tunnel dst address is zero [ 323.101796][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2200'. [ 323.251088][T13957] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 323.298776][T13957] veth0: Caught tx_queue_len zero misconfig [ 323.566405][T13961] syzkaller0: entered promiscuous mode [ 323.573673][T13961] syzkaller0: entered allmulticast mode [ 323.723294][T13979] netlink: 'syz.1.2209': attribute type 39 has an invalid length. [ 323.872739][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.879421][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.286696][T14005] netlink: 'syz.4.2213': attribute type 1 has an invalid length. [ 326.377647][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2213'. [ 326.476499][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 326.480179][T14019] netlink: 'syz.3.2217': attribute type 1 has an invalid length. [ 326.485966][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2213'. [ 326.494250][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'. [ 326.512313][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 326.533394][T14005] bond7: entered promiscuous mode [ 326.538994][T14005] 8021q: adding VLAN 0 to HW filter on device bond7 [ 326.568633][T14016] bond7: (slave bridge8): making interface the new active one [ 326.586996][T14016] bridge8: entered promiscuous mode [ 326.601442][T14016] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 326.674829][T14029] --map-set only usable from mangle table [ 326.783272][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 326.881829][T14042] openvswitch: netlink: IP tunnel TTL not specified. [ 327.054911][T14051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.154681][ T30] audit: type=1800 audit(1778373635.491:17): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2225" name="memory.events" dev="tmpfs" ino=2233 res=0 errno=0 [ 327.415478][T14079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2230'. [ 327.847778][T14096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2236'. [ 328.188078][T14108] xt_hashlimit: size too large, truncated to 1048576 [ 328.230196][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 328.616900][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2244'. [ 329.502682][T14133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.828142][T14171] tipc: Trying to set illegal importance in message [ 329.851666][T14176] tipc: Trying to set illegal importance in message [ 330.049805][T14175] syzkaller0: entered promiscuous mode [ 330.057480][T14175] syzkaller0: entered allmulticast mode [ 330.154289][T14189] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 330.179899][T14189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.271082][T14189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.738921][T14201] netlink: 'syz.4.2264': attribute type 2 has an invalid length. [ 331.034503][T14208] openvswitch: netlink: IP tunnel dst address not specified [ 332.688299][T14203] netlink: 'syz.4.2265': attribute type 4 has an invalid length. [ 333.023602][T14228] netlink: 'syz.1.2271': attribute type 3 has an invalid length. [ 333.977020][T14286] Cannot find add_set index 0 as target [ 333.986861][T14288] netlink: 'syz.3.2284': attribute type 8 has an invalid length. [ 334.026795][T14288] __nla_validate_parse: 8 callbacks suppressed [ 334.026814][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 334.052119][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 334.136446][T14288] bond0: entered promiscuous mode [ 334.193782][T14288] gretap0: entered promiscuous mode [ 334.201539][T14288] team0: entered promiscuous mode [ 334.207209][T14288] team_slave_0: entered promiscuous mode [ 334.213427][T14288] team_slave_1: entered promiscuous mode [ 334.226238][T14288] debugfs: 'hsr1' already exists in 'hsr' [ 334.232414][T14288] Cannot create hsr debugfs directory [ 334.238133][T14288] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 334.250772][T14288] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 334.262638][T14288] hsr1: entered promiscuous mode [ 334.462400][T14301] team0 (unregistering): Port device team_slave_0 removed [ 334.495449][T14312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2286'. [ 334.543444][T14301] team0 (unregistering): Port device team_slave_1 removed [ 334.709849][T14327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.776282][T14329] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2290'. [ 335.007851][T14339] C: Caught tx_queue_len zero misconfig [ 335.346780][T14363] netlink: 'syz.4.2298': attribute type 7 has an invalid length. [ 335.370741][T14363] netlink: 'syz.4.2298': attribute type 8 has an invalid length. [ 335.584102][T14381] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 335.637168][T14384] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 335.664473][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 335.805547][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2305'. [ 336.142201][T14413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2308'. [ 336.599075][T14436] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 337.088839][T14293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.423570][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2316'. [ 337.442046][T14469] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.459814][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2317'. [ 337.488664][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2317'. [ 337.519362][T14477] sctp: [Deprecated]: syz.1.2317 (pid 14477) Use of int in maxseg socket option. [ 337.519362][T14477] Use struct sctp_assoc_value instead [ 338.266324][T14518] netlink: 'syz.1.2330': attribute type 1 has an invalid length. [ 339.125527][T14573] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 339.422822][T14580] rdma_rxe: rxe_newlink: failed to add lo [ 339.771623][T14596] openvswitch: netlink: Flow key attribute not present in set flow. [ 340.341775][T14623] __nla_validate_parse: 4 callbacks suppressed [ 340.341799][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 340.440302][T14596] mac80211_hwsim hwsim9 wlan0: Caught tx_queue_len zero misconfig [ 340.751502][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'. [ 340.778399][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'. [ 340.939069][T14623] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 340.972642][ T8999] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 341.211350][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.231595][T14656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.282520][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.309782][T14656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.336599][T14663] netlink: 'syz.4.2355': attribute type 9 has an invalid length. [ 341.355228][T14663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2355'. [ 341.367617][T14656] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 341.383040][T14666] xt_recent: Unsupported userspace flags (000000b1) [ 341.389807][T14656] batman_adv: batadv0: Removing interface: ipvlan2 [ 341.500071][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2356'. [ 341.877386][T14689] block nbd3: not configured, cannot reconfigure [ 342.254476][T14710] openvswitch: netlink: IP tunnel dst address not specified [ 342.299949][T14717] netlink: 'syz.1.2371': attribute type 1 has an invalid length. [ 342.622546][T14729] netlink: 'syz.1.2374': attribute type 1 has an invalid length. [ 342.663639][T14729] netlink: 'syz.1.2374': attribute type 3 has an invalid length. [ 342.692769][T14729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2374'. [ 343.135765][T14763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.246097][T14571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.247518][T14767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2384'. [ 343.280906][T14571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.291678][T14766] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2384'. [ 343.303801][T14767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2384'. [ 343.527862][T14784] netlink: 'syz.2.2387': attribute type 1 has an invalid length. [ 343.719275][T14784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2387'. [ 343.772951][T14790] veth3: entered promiscuous mode [ 344.777032][T14828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.825286][T14841] gre0: entered promiscuous mode [ 344.836755][T14841] gre0: entered allmulticast mode [ 348.812733][T14878] netlink: 'syz.3.2403': attribute type 12 has an invalid length. [ 348.825390][T14878] netlink: 'syz.3.2403': attribute type 29 has an invalid length. [ 348.834125][T14878] __nla_validate_parse: 3 callbacks suppressed [ 348.834144][T14878] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2403'. [ 348.885676][T14887] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2408'. [ 348.898884][T14878] netlink: 'syz.3.2403': attribute type 3 has an invalid length. [ 348.908567][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'. [ 348.923029][T14878] netlink: 'syz.3.2403': attribute type 2 has an invalid length. [ 348.933559][T14878] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2403'. [ 348.989989][T14885] macvlan0: entered allmulticast mode [ 348.996384][T14885] dummy0: entered allmulticast mode [ 349.013934][T14885] dummy0: entered promiscuous mode [ 349.056796][T14896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2412'. [ 349.170242][T14903] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 349.195775][T14903] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 349.639233][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 349.650173][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 349.688291][T14931] batadv0: entered promiscuous mode [ 349.719125][T14931] macsec1: entered promiscuous mode [ 349.737118][T14931] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 349.794000][T14931] batadv0: left promiscuous mode [ 350.617789][T14991] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.646913][T14994] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.656209][T14982] lo speed is unknown, defaulting to 1000 [ 350.672528][T14982] hsr0 speed is unknown, defaulting to 1000 [ 350.886088][T15001] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2437'. [ 350.923873][T15001] xt_policy: neither incoming nor outgoing policy selected [ 351.216391][T15019] netlink: 'syz.2.2443': attribute type 11 has an invalid length. [ 351.252131][T15016] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2441'. [ 351.307123][T15015] can: request_module (can-proto-0) failed. [ 351.336807][T15009] syzkaller1: entered promiscuous mode [ 351.374434][T15009] syzkaller1: entered allmulticast mode [ 351.534281][T15027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2444'. [ 351.544533][T15030] Cannot find add_set index 3 as target [ 351.553225][T15026] veth0: entered promiscuous mode [ 351.753892][T15037] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 352.051832][T15056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.115525][T15051] lo speed is unknown, defaulting to 1000 [ 352.160177][T15051] hsr0 speed is unknown, defaulting to 1000 [ 352.349332][T15067] xt_hashlimit: size too large, truncated to 1048576 [ 352.466894][T15074] IPVS: set_ctl: invalid protocol: 154 224.0.0.2:20000 [ 353.329489][T15101] openvswitch: netlink: IP tunnel dst address not specified [ 353.876342][T15130] __nla_validate_parse: 7 callbacks suppressed [ 353.876365][T15130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2468'. [ 353.896657][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2468'. [ 353.907926][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'. [ 354.223691][T15155] syzkaller0: entered promiscuous mode [ 354.231294][T15149] openvswitch: netlink: EtherType 50a is less than min 600 [ 354.246999][T15155] syzkaller0: entered allmulticast mode [ 354.333988][T15159] netlink: 'syz.3.2476': attribute type 1 has an invalid length. [ 354.360754][T15162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.398067][T15159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.603407][T15177] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20002 [ 354.633438][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2482'. [ 354.650313][T15177] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2481'. [ 354.663419][T15177] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 354.679985][T15177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.702915][T15177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2481'. [ 354.759244][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 354.833566][T15191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2486'. [ 354.843878][T15191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2486'. [ 354.857443][T15186] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2484'. [ 354.868435][T15188] tipc: Enabled bearer , priority 0 [ 354.992531][T15188] syzkaller0: entered promiscuous mode [ 355.004883][T15188] syzkaller0: entered allmulticast mode [ 355.016962][T15188] tipc: Resetting bearer [ 355.042214][T15187] tipc: Resetting bearer [ 355.481617][T15214] netlink: 'syz.2.2491': attribute type 11 has an invalid length. [ 355.489775][T15214] netlink: 'syz.2.2491': attribute type 11 has an invalid length. [ 357.662399][T15187] tipc: Disabling bearer [ 357.677734][T15206] ip6erspan1: entered allmulticast mode [ 357.774288][ T9625] tipc: Node number set to 2700411491 [ 358.301379][T15248] syzkaller0: entered promiscuous mode [ 358.310781][T15248] syzkaller0: entered allmulticast mode [ 358.878171][T15275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.896055][T15258] dvmrp0: entered allmulticast mode [ 358.918451][T15271] batadv_slave_1: entered allmulticast mode [ 358.987015][T15258] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 360.108568][T15320] __nla_validate_parse: 4 callbacks suppressed [ 360.108592][T15320] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2514'. [ 360.317843][T15316] vlan3: entered allmulticast mode [ 360.427436][T15320]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.488256][T15320]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.516910][T15357] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.576609][T15361] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 360.597581][T15320]  (unregistering): Released all slaves [ 360.607947][T15363] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 360.638038][T15363] netlink: 'syz.2.2523': attribute type 2 has an invalid length. [ 360.667168][T15370] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 360.721498][T15370] netlink: 'syz.2.2523': attribute type 2 has an invalid length. [ 360.920086][T15365] bond9: (slave bridge9): making interface the new active one [ 360.932853][T15365] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 360.954921][T15373] vlan0: entered allmulticast mode [ 360.960148][T15373] bond0: entered allmulticast mode [ 361.058679][T15378] macvlan0: entered promiscuous mode [ 361.088994][T15378] macvlan0: entered allmulticast mode [ 361.101059][T15378] bond9: entered promiscuous mode [ 361.106319][T15378] bridge9: entered promiscuous mode [ 361.114683][T15378] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 361.123352][T15378] bond9: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 361.142638][T15387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.152237][T15378] bond9: left promiscuous mode [ 361.158683][T15378] bridge9: left promiscuous mode [ 361.524306][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'. [ 361.566390][T15414] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 361.617796][T15415] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2536'. [ 362.278264][T15450] netlink: 'syz.1.2547': attribute type 4 has an invalid length. [ 362.314027][T15450] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2547'. [ 362.527709][T15467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2551'. [ 362.789129][T15477] netlink: 'syz.4.2555': attribute type 1 has an invalid length. [ 362.815851][T15476] netlink: 'syz.4.2555': attribute type 1 has an invalid length. [ 362.848241][T15482] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2557'. [ 363.131604][T15450] bridge8: entered promiscuous mode [ 363.136953][T15450] bridge8: entered allmulticast mode [ 363.475231][T15511] xt_hashlimit: size too large, truncated to 1048576 [ 363.553610][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2567'. [ 363.587385][T15522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2567'. [ 363.963062][T15540] nbd0: detected capacity change from 0 to 127 [ 363.974084][T15547] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 364.009032][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2574'. [ 364.023733][T15545] tipc: Enabling of bearer rejected, media not registered [ 364.034209][ T5643] block nbd0: Receive control failed (result -104) [ 364.057566][T15548] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2575'. [ 364.660792][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 364.965946][T15589] syzkaller0: entered promiscuous mode [ 364.990613][T15589] syzkaller0: entered allmulticast mode [ 365.237159][T15616] __nla_validate_parse: 7 callbacks suppressed [ 365.237182][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'. [ 365.268961][T15616] macsec1: entered promiscuous mode [ 365.278145][T15616] bridge0: entered promiscuous mode [ 365.288971][T15616] macsec1: entered allmulticast mode [ 365.295634][T15616] bridge0: entered allmulticast mode [ 365.302304][T15616] bridge0: port 3(macsec1) entered blocking state [ 365.309184][T15616] bridge0: port 3(macsec1) entered disabled state [ 365.323136][T15616] bridge0: left allmulticast mode [ 365.357823][ T8996] bridge0: left promiscuous mode [ 365.364712][T15621] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 365.366743][T15619] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 365.416259][ T9625] bridge0: entered promiscuous mode [ 365.440235][T15622] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 365.477752][T15622] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 366.229920][T15653] validate_nla: 4 callbacks suppressed [ 366.229942][T15653] netlink: 'syz.4.2601': attribute type 25 has an invalid length. [ 366.440002][T15658] netlink: 'syz.0.2604': attribute type 2 has an invalid length. [ 366.448131][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'. [ 367.092156][T15661] x_tables: unsorted underflow at hook 3 [ 368.523135][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2610'. [ 368.636967][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'. [ 368.912537][T15703] netlink: 'syz.4.2616': attribute type 4 has an invalid length. [ 368.947975][T15697] netlink: 'syz.4.2616': attribute type 4 has an invalid length. [ 368.966879][T15703] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2616'. [ 368.978417][T15703] .`: renamed from .`¹ (while UP) [ 368.984823][T15697] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2616'. [ 369.126670][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 369.353703][T15722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2624'. [ 369.358039][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'. [ 369.368370][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 369.502343][T15725] tipc: Enabling of bearer rejected, media not registered [ 369.619762][T15728] netlink: 'syz.2.2626': attribute type 3 has an invalid length. [ 370.533821][T15765] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 370.568505][T15765] bond7: (slave lo): Enslaving as an active interface with an up link [ 370.612595][T15765] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 370.771636][T15779] __nla_validate_parse: 1 callbacks suppressed [ 370.771660][T15779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2642'. [ 371.058269][T15798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.196050][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2646'. [ 371.673387][T15836] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2652'. [ 371.953969][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 371.963493][T15854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2655'. [ 372.129985][T15866] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2658'. [ 372.452649][T15881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.613074][T15887] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2662'. [ 372.622933][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2662'. [ 372.634796][T15887] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2662'. [ 372.644185][T15887] netlink: 'syz.0.2662': attribute type 2 has an invalid length. [ 372.655908][T15887] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2662'. [ 374.798915][T15842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.169530][T15927] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20002 [ 376.108784][T15975] __nla_validate_parse: 1 callbacks suppressed [ 376.108809][T15975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2687'. [ 376.208667][T15969] netlink: 'syz.1.2686': attribute type 1 has an invalid length. [ 376.436626][T15989] syzkaller1: entered promiscuous mode [ 376.465415][T15989] syzkaller1: entered allmulticast mode [ 376.554288][T15996] rdma_rxe: rxe_newlink: failed to add tunl0 [ 376.565706][T16000] rdma_rxe: rxe_newlink: failed to add tunl0 [ 376.677504][T16003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.726204][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2694'. [ 376.835869][T16014] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2697'. [ 377.025092][T16023] netlink: 'syz.4.2699': attribute type 10 has an invalid length. [ 377.512296][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2706'. [ 377.789209][T16058] syzkaller0: entered allmulticast mode [ 378.121203][T16067] netlink: 'syz.2.2713': attribute type 1 has an invalid length. [ 378.144648][T16067] netlink: 'syz.2.2713': attribute type 3 has an invalid length. [ 378.169114][T16067] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2713'. [ 378.202864][T16067] NCSI netlink: No device for ifindex 813332851 [ 378.836974][ T9620] IPVS: starting estimator thread 0... [ 378.847181][T16105] gtp2: entered promiscuous mode [ 378.858154][T16105] gtp2: entered allmulticast mode [ 378.941509][T16106] IPVS: using max 23 ests per chain, 55200 per kthread [ 379.007334][T16109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2725'. [ 379.058168][T16112] 8021q: VLANs not supported on ip6tnl0 [ 379.186527][T16112] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 379.481048][T16130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2734'. [ 379.587463][T16133] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 379.605925][T16133] bond8 (unregistering): Released all slaves [ 379.876688][T16143] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2739'. [ 380.142666][T16161] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 380.196295][T16164] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2744'. [ 380.325275][T16161] 8021q: adding VLAN 0 to HW filter on device bond10 [ 380.354246][T16161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2741'. [ 380.448418][T16155] vlan0: entered promiscuous mode [ 380.457578][T16164] netlink: 'syz.2.2744': attribute type 11 has an invalid length. [ 380.470993][T16155] bond10: entered promiscuous mode [ 380.481383][T16155] vlan0: entered allmulticast mode [ 380.492215][T16155] bond10: entered allmulticast mode [ 380.547640][T16161] bond10: (slave bridge10): making interface the new active one [ 380.555697][T16161] bridge10: entered promiscuous mode [ 380.562193][T16161] bridge10: entered allmulticast mode [ 380.569507][T16161] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 380.579420][T16171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.603993][T16171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.624310][T16171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.637347][T16171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.920249][T16192] xt_l2tp: missing protocol rule (udp|l2tpip) [ 381.216770][T16212] openvswitch: netlink: Flow key attr not present in new flow. [ 381.446102][T16225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2758'. [ 381.458408][T16228] netlink: 'syz.3.2761': attribute type 1 has an invalid length. [ 381.583410][T16228] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.659810][T16228] bond8: (slave batadv2): Opening slave failed [ 381.666708][T16242] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2763'. [ 381.748683][T16230] bond8: (slave veth1): Enslaving as an active interface with a down link [ 381.775166][T16239] lo speed is unknown, defaulting to 1000 [ 381.959780][T16251] netlink: 'syz.0.2765': attribute type 1 has an invalid length. [ 382.064768][T16261] bond11: (slave bridge11): making interface the new active one [ 382.073515][T16261] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 382.256101][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'. [ 382.437020][T16279] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2774'. [ 382.666267][T16291] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2775'. [ 382.712379][T16279] bond9 (unregistering): Released all slaves [ 382.726505][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2775'. [ 382.873063][T16293] vlan0: entered promiscuous mode [ 382.899098][T16293] 0·: entered promiscuous mode [ 382.908308][T16293] vlan0: entered allmulticast mode [ 383.294394][T16313] netlink: 'syz.4.2783': attribute type 2 has an invalid length. [ 383.296915][T16316] netlink: 'syz.0.2785': attribute type 10 has an invalid length. [ 383.314321][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2784'. [ 383.326223][T16316] netlink: 'syz.0.2785': attribute type 10 has an invalid length. [ 383.332210][T16318] netlink: 'syz.2.2784': attribute type 1 has an invalid length. [ 383.379328][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 383.714212][T16341] ip6t_srh: unknown srh match flags 5F28 [ 383.839719][T16347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2795'. [ 384.159363][T16367] xt_l2tp: v2 sid > 0xffff: 1114112 [ 384.779072][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2812'. [ 385.302157][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 385.312130][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.325690][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.530176][ T30] audit: type=1804 audit(1778373693.861:18): pid=16439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2821" name="/newroot/581/cgroup.controllers" dev="tmpfs" ino=2985 res=1 errno=0 [ 385.574651][ T30] audit: type=1800 audit(1778373693.861:19): pid=16439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2821" name="cgroup.controllers" dev="tmpfs" ino=2985 res=0 errno=0 [ 385.646559][T16442] xt_check_match_common: 23 callbacks suppressed [ 385.646588][T16442] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 385.749032][T16448] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 394.263925][ T5069] block nbd0: Possible stuck request ffff88802708e000: control (read@0,1024B). Runtime 30 seconds [ 394.276997][ T5069] block nbd0: Possible stuck request ffff88802708e1c0: control (read@1024,1024B). Runtime 30 seconds [ 394.288097][ T5069] block nbd0: Possible stuck request ffff88802708e380: control (read@2048,1024B). Runtime 30 seconds [ 394.299359][ T5069] block nbd0: Possible stuck request ffff88802708e540: control (read@3072,1024B). Runtime 30 seconds [ 406.071828][T16458] __nla_validate_parse: 8 callbacks suppressed [ 406.071852][T16458] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2825'. [ 406.191160][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2826'. [ 406.319488][T16468] lo speed is unknown, defaulting to 1000 [ 406.358633][T16468] hsr0 speed is unknown, defaulting to 1000 [ 406.722513][T16495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2836'. [ 406.966231][T16506] netlink: 'syz.2.2838': attribute type 3 has an invalid length. [ 406.991790][T16508] netlink: 'syz.1.2840': attribute type 11 has an invalid length. [ 407.123157][T16513] netlink: 'syz.0.2843': attribute type 11 has an invalid length. [ 407.168158][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 407.208020][T16513] netlink: 'syz.0.2843': attribute type 11 has an invalid length. [ 407.248078][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 407.429631][T16526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.436988][T16526] IPv6: NLM_F_CREATE should be set when creating new route [ 407.483338][T16526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2845'. [ 407.732386][T16536] tipc: Enabled bearer , priority 0 [ 407.749676][T16543] syzkaller0: entered promiscuous mode [ 407.757523][T16543] syzkaller0: entered allmulticast mode [ 407.957301][T16535] tipc: Resetting bearer [ 408.024091][T16535] tipc: Disabling bearer [ 408.265440][T16573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2856'. [ 408.324266][T16575] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2855'. [ 408.658822][T16575] syzkaller0: entered promiscuous mode [ 408.664761][T16575] syzkaller0: entered allmulticast mode [ 408.956988][T16605] netlink: 'syz.0.2863': attribute type 3 has an invalid length. [ 408.966099][T16605] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 408.975195][T16605] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2863'. [ 411.515396][T16598] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 411.523858][T16617] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 411.534264][T16617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.559949][T16598] bond9 (unregistering): Released all slaves [ 411.570989][T16617] netlink: 'syz.2.2866': attribute type 15 has an invalid length. [ 411.609405][T16609] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 411.748898][T16625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2867'. [ 411.825002][T16625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2867'. [ 412.093329][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 412.152623][T16643] wg1: Caught tx_queue_len zero misconfig [ 412.316357][T16652] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 412.415667][T16643] syzkaller0: entered promiscuous mode [ 412.441311][T16643] syzkaller0: entered allmulticast mode [ 412.499363][T16656] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2874'. [ 416.055654][T16733] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2881'. [ 416.291172][T16744] SET target dimension over the limit! [ 416.849231][T16764] pimreg3: entered allmulticast mode [ 417.644262][T16796] netlink: 'syz.0.2899': attribute type 1 has an invalid length. [ 417.724663][T16799] openvswitch: netlink: Missing key (keys=40, expected=80) [ 417.750797][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.764684][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.773228][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.788899][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.796944][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.094537][T16813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.183946][T16815] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 418.211070][T16823] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2903'. [ 418.235422][T16815] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 418.261618][T16823] 8021q: VLANs not supported on ip6gre0 [ 418.424107][T16832] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2908'. [ 418.451330][T16831] dvmrp0: entered allmulticast mode [ 418.514133][T16832] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2908'. [ 418.546492][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2909'. [ 418.735404][T16846] vet: renamed from gre0 (while UP) [ 418.948512][T16856] syzkaller1: entered promiscuous mode [ 418.975520][T16856] syzkaller1: entered allmulticast mode [ 419.029591][T16862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2914'. [ 419.315441][T16805] lo speed is unknown, defaulting to 1000 [ 419.323621][T16805] hsr0 speed is unknown, defaulting to 1000 [ 419.704391][T16895] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2920'. [ 419.747184][T16895] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2920'. [ 419.791761][T16903] netlink: 'syz.3.2923': attribute type 7 has an invalid length. [ 419.843280][T16903] veth1_macvtap: left promiscuous mode [ 419.864656][ T5643] Bluetooth: hci5: command tx timeout [ 419.894911][T16903] netlink: 'syz.3.2923': attribute type 10 has an invalid length. [ 420.129754][T16914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2926'. [ 420.343552][T16923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2928'. [ 420.383940][T16929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2928'. [ 420.691708][T16805] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.701402][T16805] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.721426][T16805] bridge_slave_0: entered allmulticast mode [ 420.754885][T16805] bridge_slave_0: entered promiscuous mode [ 420.826767][T16805] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.840684][T16805] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.868563][T16805] bridge_slave_1: entered allmulticast mode [ 420.888809][T16805] bridge_slave_1: entered promiscuous mode [ 421.037980][T16805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.086494][T16805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.297245][T16805] team0: Port device team_slave_0 added [ 421.408077][T16805] team0: Port device team_slave_1 added [ 421.534469][T16805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.546794][T16805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.576781][T16805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.613324][T16805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.625643][T16805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.652631][T16805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.941048][ T5643] Bluetooth: hci5: command tx timeout [ 422.012015][T16805] hsr_slave_0: entered promiscuous mode [ 422.028875][T16805] hsr_slave_1: entered promiscuous mode [ 422.354010][T17023] netlink: 'syz.0.2947': attribute type 3 has an invalid length. [ 422.663485][T17044] IPVS: set_ctl: invalid protocol: 137 172.20.20.30:20001 [ 423.068596][T17064] netlink: 'syz.2.2958': attribute type 1 has an invalid length. [ 423.088784][T16805] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.102452][T16805] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.132172][T17051] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 423.147354][T17051] bond0: (slave lo): Error: Device can not be enslaved while up [ 423.234700][T17067] bond8: (slave bridge8): Enslaving as a backup interface with an up link [ 423.236907][T17074] __nla_validate_parse: 2 callbacks suppressed [ 423.236945][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 423.256507][T17072] macvlan1: entered promiscuous mode [ 423.265039][T17072] macvlan1: entered allmulticast mode [ 423.273952][T17072] bond8: entered promiscuous mode [ 423.279172][T17072] bridge8: entered promiscuous mode [ 423.286421][T17072] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 423.297841][T17072] bond8: left promiscuous mode [ 423.310475][T17072] bridge8: left promiscuous mode [ 423.395853][T16805] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.429897][T16805] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.507021][T17075] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 423.518502][T17075] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 423.561429][T17074] macvlan0: entered promiscuous mode [ 423.571530][T17074] macvlan0: entered allmulticast mode [ 423.593985][T17074] bond9: (slave macvlan0): Error -98 calling set_mac_address [ 423.676526][T16805] .`: (slave netdevsim1): Releasing backup interface [ 423.689714][T16805] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.701110][T16805] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.988257][T16805] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.018985][T16805] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.030705][ T5643] Bluetooth: hci5: command tx timeout [ 424.305809][T17122] syz_tun: entered allmulticast mode [ 424.307553][T17124] netlink: 'syz.3.2971': attribute type 4 has an invalid length. [ 424.311813][T17123] netlink: 'syz.1.2972': attribute type 1 has an invalid length. [ 424.321000][T17124] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2971'. [ 424.343956][ T5069] block nbd0: Possible stuck request ffff88802708e000: control (read@0,1024B). Runtime 60 seconds [ 424.352430][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'. [ 424.355813][ T5069] block nbd0: Possible stuck request ffff88802708e1c0: control (read@1024,1024B). Runtime 60 seconds [ 424.375340][ T5069] block nbd0: Possible stuck request ffff88802708e380: control (read@2048,1024B). Runtime 60 seconds [ 424.388015][ T5069] block nbd0: Possible stuck request ffff88802708e540: control (read@3072,1024B). Runtime 60 seconds [ 424.487917][T17126] bond7: (slave bridge11): Enslaving as a backup interface with an up link [ 424.571679][T17123] macvlan2: entered promiscuous mode [ 424.577179][T17123] macvlan2: entered allmulticast mode [ 424.584433][T17123] bond7: entered promiscuous mode [ 424.590907][T17123] bridge11: entered promiscuous mode [ 424.598568][T17123] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 424.609430][T17123] bond7: left promiscuous mode [ 424.615192][T17123] bridge11: left promiscuous mode [ 424.888956][T16805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.947584][T17152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.976460][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.010036][T16805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.035490][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.058262][T16805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.103107][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.126782][T16805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.148505][T17157] xt_hashlimit: size too large, truncated to 1048576 [ 425.159418][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.588012][T16805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.687822][T16805] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.724983][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.732282][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.791554][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.798847][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.831714][T17203] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2992'. [ 425.841243][T17204] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2992'. [ 425.977157][T17207] netlink: 'syz.0.2993': attribute type 1 has an invalid length. [ 425.995972][T17207] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2993'. [ 426.100720][ T5643] Bluetooth: hci5: command tx timeout [ 426.130975][T17207] tipc: Enabled bearer , priority 0 [ 426.309571][T17206] tipc: Disabling bearer [ 426.492538][T17229] No such timeout policy "syz1" [ 426.778523][T17244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3002'. [ 426.956527][T17262] netlink: 'syz.2.3006': attribute type 11 has an invalid length. [ 426.977171][T17252] bond8 (unregistering): Released all slaves [ 427.104738][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3006'. [ 427.128255][T17244] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 427.358027][T17276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3008'. [ 427.523817][T17290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3012'. [ 427.567304][T17290] nbd: must specify a device to reconfigure [ 427.786220][T16805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.128825][T17322] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 428.161694][T17322] nbd: error processing sock list [ 428.341243][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 428.453705][T17338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.526582][T17343] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.646308][T16805] veth0_vlan: entered promiscuous mode [ 428.699279][T16805] veth1_vlan: entered promiscuous mode [ 428.866235][T16805] veth0_macvtap: entered promiscuous mode [ 428.898495][T16805] veth1_macvtap: entered promiscuous mode [ 428.946044][T16805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.978095][T16805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.006454][T17371] netlink: 'syz.1.3029': attribute type 3 has an invalid length. [ 429.017822][ T7969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.037493][ T7969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.041881][T17372] netlink: 'syz.1.3029': attribute type 3 has an invalid length. [ 429.052419][T17371] __nla_validate_parse: 2 callbacks suppressed [ 429.052439][T17371] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3029'. [ 429.079746][T17375] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 429.087239][T17372] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3029'. [ 429.106327][ T7969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.118470][ T7969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.348421][T17383] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3032'. [ 429.416581][T17387] veth9: entered allmulticast mode [ 429.424913][ T6444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.440577][ T6444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.507748][T17390] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3035'. [ 429.539798][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.556507][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.611358][T17397] netlink: 'syz.0.3036': attribute type 1 has an invalid length. [ 429.703137][T17397] 8021q: adding VLAN 0 to HW filter on device bond12 [ 429.784177][T17404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3039'. [ 430.085423][T17408] macvtap1: entered allmulticast mode [ 430.102029][T17408] veth0_macvtap: entered allmulticast mode [ 430.296874][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.313741][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.325564][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.335401][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.347975][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.745712][ T5622] syz_tun (unregistering): left allmulticast mode [ 430.790913][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3048'. [ 430.878948][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3048'. [ 430.890688][T17438] bond1 (unregistering): Released all slaves [ 431.003862][T17446] vlan4: entered allmulticast mode [ 431.072507][T17438] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 431.102974][T17438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.474913][T17418] lo speed is unknown, defaulting to 1000 [ 431.504767][T17418] hsr0 speed is unknown, defaulting to 1000 [ 431.551578][T17467] lo speed is unknown, defaulting to 1000 [ 431.584589][T17467] hsr0 speed is unknown, defaulting to 1000 [ 431.709090][T17474] netlink: 'syz.4.3055': attribute type 1 has an invalid length. [ 431.725584][T17470] lo speed is unknown, defaulting to 1000 [ 431.955214][T17470] hsr0 speed is unknown, defaulting to 1000 [ 432.242558][T17493] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 432.256755][T17493] bond9 (unregistering): Released all slaves [ 432.432924][ T5632] Bluetooth: hci1: command tx timeout [ 432.983688][T17418] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.002179][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.010901][T17418] bridge_slave_0: entered allmulticast mode [ 433.019853][T17418] bridge_slave_0: entered promiscuous mode [ 433.035165][T17418] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.043894][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.051410][T17418] bridge_slave_1: entered allmulticast mode [ 433.066008][T17418] bridge_slave_1: entered promiscuous mode [ 433.159025][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'. [ 433.171527][T17418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.190015][T17418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.252365][T17418] team0: Port device team_slave_0 added [ 433.272824][T17418] team0: Port device team_slave_1 added [ 433.379174][T17418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.389030][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.415868][T17418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.428971][T17537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.458945][T17418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.493057][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.523749][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'. [ 433.558387][T17418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.592148][T17548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3068'. [ 433.677016][T17554] netlink: 'syz.3.3069': attribute type 10 has an invalid length. [ 433.729294][T17556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.741840][T17418] hsr_slave_0: entered promiscuous mode [ 433.771979][T17418] hsr_slave_1: entered promiscuous mode [ 433.785823][T17418] debugfs: 'hsr0' already exists in 'hsr' [ 433.796778][T17557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.801617][T17418] Cannot create hsr debugfs directory [ 434.087073][T17553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.099076][T17553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.112624][T17553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 434.319086][T17582] dvmrp0: entered allmulticast mode [ 434.326581][T17587] __nla_validate_parse: 1 callbacks suppressed [ 434.326602][T17587] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3078'. [ 434.401505][T17553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.436892][T17553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.451613][T17553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 434.501637][ T5632] Bluetooth: hci1: command tx timeout [ 434.665797][T17553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.676501][T17553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.688032][T17553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 434.709970][T17598] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3081'. [ 434.768216][T17594] syz_tun: left allmulticast mode [ 434.827827][T17553] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.849266][T17553] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.879211][T17553] netdevsim netdevsim1  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 434.934208][T17606] IPVS: length: 158 != 24 [ 435.129555][T17617] netlink: 'syz.4.3086': attribute type 1 has an invalid length. [ 435.146013][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'. [ 435.158738][T17618] netlink: 'syz.4.3086': attribute type 1 has an invalid length. [ 435.246199][T17418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.257839][T17418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.268521][T17418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 435.303344][T17619] bridge_slave_1: left allmulticast mode [ 435.309241][T17619] bridge_slave_1: left promiscuous mode [ 435.317300][T17619] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.329964][T17619] bridge_slave_0: left allmulticast mode [ 435.340649][T17619] bridge_slave_0: left promiscuous mode [ 435.347411][T17619] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.487808][T17623] vlan2: entered allmulticast mode [ 435.492460][T17632] netlink: 'syz.3.3090': attribute type 1 has an invalid length. [ 435.493550][T17623] veth0_to_bond: entered allmulticast mode [ 435.502271][T17632] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3090'. [ 435.517239][T17632] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3090'. [ 435.528041][T17632] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3090'. [ 435.612299][T17418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.634196][T17418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.644998][T17418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 435.954546][T17418] bond0: (slave netdevsim1): Releasing backup interface [ 436.001951][T17418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.014945][T17418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.028198][T17418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.084445][T17658] TCP: tcp_parse_options: Illegal window scaling value 98 > 14 received [ 436.176035][ T7975] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.200926][ T7975] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.221281][ T7975] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 436.255725][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3100'. [ 436.279960][T17661] netlink: 'syz.4.3100': attribute type 7 has an invalid length. [ 436.301057][T17661] netlink: 'syz.4.3100': attribute type 8 has an invalid length. [ 436.321247][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3100'. [ 436.447624][T17418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.459263][T17418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.469931][T17418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 436.557852][T17661] gretap0: entered promiscuous mode [ 436.565916][T17661] gretap0: left promiscuous mode [ 436.581011][ T5632] Bluetooth: hci1: command tx timeout [ 436.595743][ T48] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.622029][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.638271][ T48] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 436.704484][ T7965] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.718183][ T7965] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.727776][ T7965] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 436.809388][ T7975] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.857449][T17685] xt_TCPMSS: Only works on TCP SYN packets [ 436.863312][ T7975] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 436.863351][ T7975] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 436.912412][T17688] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3105'. [ 437.178378][T17418] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 437.213970][T17418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.223976][T17418] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 437.251709][T17418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.292467][T17418] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 437.338144][T17418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.409815][T17418] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 437.489121][T17418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.865299][T17418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.928344][T17418] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.975782][T13050] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.983062][T13050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.061103][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.068376][ T7975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.375032][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 438.519949][T17760] SET target dimension over the limit! [ 438.661701][ T5632] Bluetooth: hci1: command tx timeout [ 438.715647][T17762] lo speed is unknown, defaulting to 1000 [ 438.758256][T17762] hsr0 speed is unknown, defaulting to 1000 [ 439.505572][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3131'. [ 440.028508][T17819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3135'. [ 440.164878][T17823] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 440.207238][T17418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.219160][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 440.237089][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3137'. [ 440.258615][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 440.413749][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'. [ 440.487396][T17418] veth0_vlan: entered promiscuous mode [ 440.495151][T17839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3140'. [ 440.589235][T17418] veth1_vlan: entered promiscuous mode [ 440.728630][T17418] veth0_macvtap: entered promiscuous mode [ 440.797005][T17418] veth1_macvtap: entered promiscuous mode [ 440.868193][T17418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.918151][T17418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.999524][T17864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.045353][T17864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.092037][T17869] x_tables: duplicate underflow at hook 2 [ 441.098239][T17864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.149700][T17864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.253144][T17871] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3145'. [ 441.295178][T17871] ip6tnl0: Caught tx_queue_len zero misconfig [ 441.649101][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.692481][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.775355][T17900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3151'. [ 441.804252][T17896] veth1_macvtap: left promiscuous mode [ 441.811375][T17896] macsec0: entered promiscuous mode [ 441.822014][T17905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3154'. [ 441.834917][T17896] macsec0: entered allmulticast mode [ 441.879917][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.887108][T17904] veth1_macvtap: entered promiscuous mode [ 441.912519][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.919561][T17904] veth1_macvtap: entered allmulticast mode [ 441.954283][T17904] macsec0: left promiscuous mode [ 441.971452][T17904] macsec0: left allmulticast mode [ 441.982803][T17904] veth1_macvtap: left allmulticast mode [ 442.029756][T17899] bond0: entered promiscuous mode [ 442.056309][T17899] gretap0: entered promiscuous mode [ 442.083116][T17899] bond0: entered allmulticast mode [ 442.103199][T17899] gretap0: entered allmulticast mode [ 442.127384][T17899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.127848][T17914] netlink: 'syz.3.3155': attribute type 12 has an invalid length. [ 442.215918][T17899] syzkaller0: entered promiscuous mode [ 442.231221][T17899] syzkaller0: entered allmulticast mode [ 442.442926][T17928] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 442.807193][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.828832][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.837592][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.849537][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.860260][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 443.089208][T17953] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.097060][T17953] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.272450][T17956] bond9: entered promiscuous mode [ 443.308228][T17960] macvlan1: entered promiscuous mode [ 443.326668][T17960] macvlan1: entered allmulticast mode [ 443.353530][T17960] bond9: (slave macvlan1): Opening slave failed [ 443.718593][T17982] vlan1: entered allmulticast mode [ 443.948717][T18000] openvswitch: netlink: Actions may not be safe on all matching packets [ 443.960129][T18000] openvswitch: netlink: Actions may not be safe on all matching packets [ 444.042131][T17941] lo speed is unknown, defaulting to 1000 [ 444.050155][T17941] hsr0 speed is unknown, defaulting to 1000 [ 444.429298][T17941] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.436935][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.444699][T17941] bridge_slave_0: entered allmulticast mode [ 444.452662][T17941] bridge_slave_0: entered promiscuous mode [ 444.462895][T17941] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.470147][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.478186][T17941] bridge_slave_1: entered allmulticast mode [ 444.487239][T17941] bridge_slave_1: entered promiscuous mode [ 444.520693][T17941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.534121][T17941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.567431][T17941] team0: Port device team_slave_0 added [ 444.576789][T17941] team0: Port device team_slave_1 added [ 444.627756][T17941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.650664][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.683034][T17941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.700285][T17941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.708916][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.737120][T17941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.794098][T17941] hsr_slave_0: entered promiscuous mode [ 444.802909][T17941] hsr_slave_1: entered promiscuous mode [ 444.810263][T17941] debugfs: 'hsr0' already exists in 'hsr' [ 444.816338][T17941] Cannot create hsr debugfs directory [ 444.900904][ T5632] Bluetooth: hci0: command tx timeout [ 444.989682][T17941] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.002233][T17941] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.107322][T17941] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.119249][T17941] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.206675][T17941] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.217530][T17941] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.319325][T17941] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.329894][T17941] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.742007][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.748500][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.990765][ T5632] Bluetooth: hci0: command tx timeout [ 448.491118][ T4990] udevd[4990]: worker [15227] /devices/virtual/block/nbd0 is taking a long time [ 449.060952][ T5632] Bluetooth: hci0: command tx timeout [ 451.140706][ T5632] Bluetooth: hci0: command tx timeout [ 454.442443][ T5069] block nbd0: Possible stuck request ffff88802708e000: control (read@0,1024B). Runtime 90 seconds [ 454.453408][ T5069] block nbd0: Possible stuck request ffff88802708e1c0: control (read@1024,1024B). Runtime 90 seconds [ 454.464618][ T5069] block nbd0: Possible stuck request ffff88802708e380: control (read@2048,1024B). Runtime 90 seconds [ 454.475605][ T5069] block nbd0: Possible stuck request ffff88802708e540: control (read@3072,1024B). Runtime 90 seconds [ 459.990252][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.009141][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.019030][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.033435][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.041442][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.093884][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 460.110206][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 460.121459][ T5632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 460.130929][T18059] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 460.154702][ T5632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 460.164758][ T5632] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 460.178309][T18059] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 460.178399][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 460.199339][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 460.210612][ T5632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 460.298593][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 460.313073][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 460.323186][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 460.333730][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 460.345998][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 461.006397][T18053] lo speed is unknown, defaulting to 1000 [ 461.033081][T18053] hsr0 speed is unknown, defaulting to 1000 [ 461.034041][T18056] lo speed is unknown, defaulting to 1000 [ 461.087079][T18056] hsr0 speed is unknown, defaulting to 1000 [ 461.163456][T18055] lo speed is unknown, defaulting to 1000 [ 461.191140][T18055] hsr0 speed is unknown, defaulting to 1000 [ 461.231693][T18062] lo speed is unknown, defaulting to 1000 [ 461.250050][T18062] hsr0 speed is unknown, defaulting to 1000 [ 461.778883][T18053] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.786413][T18053] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.794815][T18053] bridge_slave_0: entered allmulticast mode [ 461.803236][T18053] bridge_slave_0: entered promiscuous mode [ 461.831806][T18053] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.839989][T18053] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.850172][T18053] bridge_slave_1: entered allmulticast mode [ 461.859942][T18053] bridge_slave_1: entered promiscuous mode [ 461.959880][T18056] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.967191][T18056] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.974951][T18056] bridge_slave_0: entered allmulticast mode [ 461.982411][T18056] bridge_slave_0: entered promiscuous mode [ 462.004019][T18053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.033471][T18056] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.041614][T18056] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.049017][T18056] bridge_slave_1: entered allmulticast mode [ 462.057529][T18056] bridge_slave_1: entered promiscuous mode [ 462.072592][T18053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.100779][ T5632] Bluetooth: hci2: command tx timeout [ 462.186021][T18056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.220524][T18053] team0: Port device team_slave_0 added [ 462.248036][T18056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.260639][ T5632] Bluetooth: hci7: command tx timeout [ 462.260695][ T5627] Bluetooth: hci6: command tx timeout [ 462.296997][T18053] team0: Port device team_slave_1 added [ 462.374416][T18062] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.382105][T18062] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.389489][T18062] bridge_slave_0: entered allmulticast mode [ 462.398496][T18062] bridge_slave_0: entered promiscuous mode [ 462.420581][ T5627] Bluetooth: hci8: command tx timeout [ 462.435850][T18055] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.445001][T18055] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.452802][T18055] bridge_slave_0: entered allmulticast mode [ 462.460988][T18055] bridge_slave_0: entered promiscuous mode [ 462.488462][T18062] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.497819][T18062] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.505758][T18062] bridge_slave_1: entered allmulticast mode [ 462.514450][T18062] bridge_slave_1: entered promiscuous mode [ 462.524113][T18056] team0: Port device team_slave_0 added [ 462.530005][T18055] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.537410][T18055] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.544916][T18055] bridge_slave_1: entered allmulticast mode [ 462.552556][T18055] bridge_slave_1: entered promiscuous mode [ 462.560722][T18053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.567720][T18053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.594689][T18053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.619882][T18056] team0: Port device team_slave_1 added [ 462.649215][T18053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.656494][T18053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.682906][T18053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.738942][T18062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.751078][T18056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.758166][T18056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.784363][T18056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.798902][T18055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.812240][T18055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.824623][T18062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.848366][T18056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.855455][T18056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.881935][T18056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.957847][T18062] team0: Port device team_slave_0 added [ 462.967122][T18062] team0: Port device team_slave_1 added [ 462.978539][T18053] hsr_slave_0: entered promiscuous mode [ 462.985238][T18053] hsr_slave_1: entered promiscuous mode [ 462.991998][T18053] debugfs: 'hsr0' already exists in 'hsr' [ 462.997770][T18053] Cannot create hsr debugfs directory [ 463.006784][T18055] team0: Port device team_slave_0 added [ 463.050108][T18055] team0: Port device team_slave_1 added [ 463.069580][T18062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.076760][T18062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.103131][T18062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.143378][T18056] hsr_slave_0: entered promiscuous mode [ 463.149811][T18056] hsr_slave_1: entered promiscuous mode [ 463.157255][T18056] debugfs: 'hsr0' already exists in 'hsr' [ 463.163469][T18056] Cannot create hsr debugfs directory [ 463.169841][T18062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.177458][T18062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.204445][T18062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.255296][T18055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.263239][T18055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.289493][T18055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.306817][T18055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.313859][T18055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.340923][T18055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.491234][T18062] hsr_slave_0: entered promiscuous mode [ 463.497770][T18062] hsr_slave_1: entered promiscuous mode [ 463.504561][T18062] debugfs: 'hsr0' already exists in 'hsr' [ 463.510372][T18062] Cannot create hsr debugfs directory [ 463.564289][T18055] hsr_slave_0: entered promiscuous mode [ 463.571314][T18055] hsr_slave_1: entered promiscuous mode [ 463.577521][T18055] debugfs: 'hsr0' already exists in 'hsr' [ 463.583903][T18055] Cannot create hsr debugfs directory [ 464.180600][ T5627] Bluetooth: hci2: command tx timeout [ 464.340617][ T5627] Bluetooth: hci6: command tx timeout [ 464.340742][ T5632] Bluetooth: hci7: command tx timeout [ 464.510656][ T5632] Bluetooth: hci8: command tx timeout [ 466.260851][ T5632] Bluetooth: hci2: command tx timeout [ 466.420646][ T5632] Bluetooth: hci7: command tx timeout [ 466.420717][ T5627] Bluetooth: hci6: command tx timeout [ 466.581389][ T5627] Bluetooth: hci8: command tx timeout [ 468.340771][ T5627] Bluetooth: hci2: command tx timeout [ 468.501049][ T5627] Bluetooth: hci6: command tx timeout [ 468.503110][ T5632] Bluetooth: hci7: command tx timeout [ 468.661902][ T5632] Bluetooth: hci8: command tx timeout [ 484.502104][ T5069] block nbd0: Possible stuck request ffff88802708e000: control (read@0,1024B). Runtime 120 seconds [ 484.513001][ T5069] block nbd0: Possible stuck request ffff88802708e1c0: control (read@1024,1024B). Runtime 120 seconds [ 484.524510][ T5069] block nbd0: Possible stuck request ffff88802708e380: control (read@2048,1024B). Runtime 120 seconds [ 484.535847][ T5069] block nbd0: Possible stuck request ffff88802708e540: control (read@3072,1024B). Runtime 120 seconds [ 503.170193][ T5627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 503.179245][ T5627] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 503.188373][ T5627] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 503.197128][ T5627] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 503.205279][ T5627] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 503.447299][T18125] lo speed is unknown, defaulting to 1000 [ 503.456430][T18125] hsr0 speed is unknown, defaulting to 1000 [ 503.665259][T18125] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.673344][T18125] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.681580][T18125] bridge_slave_0: entered allmulticast mode [ 503.688978][T18125] bridge_slave_0: entered promiscuous mode [ 503.698391][T18125] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.707057][T18125] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.714986][T18125] bridge_slave_1: entered allmulticast mode [ 503.722761][T18125] bridge_slave_1: entered promiscuous mode [ 503.751551][T18125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.763671][T18125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.796439][T18125] team0: Port device team_slave_0 added [ 503.805840][T18125] team0: Port device team_slave_1 added [ 503.831692][T18125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.838697][T18125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.865014][T18125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.877410][T18125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.885009][T18125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.913171][T18125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.959916][T18125] hsr_slave_0: entered promiscuous mode [ 503.966822][T18125] hsr_slave_1: entered promiscuous mode [ 503.973668][T18125] debugfs: 'hsr0' already exists in 'hsr' [ 503.979418][T18125] Cannot create hsr debugfs directory [ 505.301707][ T5632] Bluetooth: hci9: command tx timeout [ 507.381669][ T5632] Bluetooth: hci9: command tx timeout [ 508.182613][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 508.192070][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.198429][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.462357][ T5632] Bluetooth: hci9: command tx timeout [ 511.551205][ T5632] Bluetooth: hci9: command tx timeout [ 514.581159][ T5069] block nbd0: Possible stuck request ffff88802708e000: control (read@0,1024B). Runtime 150 seconds [ 514.593382][ T5069] block nbd0: Possible stuck request ffff88802708e1c0: control (read@1024,1024B). Runtime 150 seconds [ 514.604941][ T5069] block nbd0: Possible stuck request ffff88802708e380: control (read@2048,1024B). Runtime 150 seconds [ 514.616129][ T5069] block nbd0: Possible stuck request ffff88802708e540: control (read@3072,1024B). Runtime 150 seconds [ 520.356381][ T5627] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 520.386186][T18059] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 520.397359][ T5627] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 520.414339][T18059] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 520.425906][ T5627] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 520.436676][ T5627] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 520.436758][T18059] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 520.452383][T18059] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 520.479610][ T5632] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 520.487816][ T5632] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 520.591440][ T5632] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 520.604920][ T5632] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 520.616724][ T5632] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 520.626157][ T5632] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 520.634147][ T5632] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 520.700269][ T5643] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 520.727029][ T5643] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 520.737451][ T5643] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 520.747735][ T5643] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 520.755858][ T5643] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 521.402321][T18149] lo speed is unknown, defaulting to 1000 [ 521.431389][T18149] hsr0 speed is unknown, defaulting to 1000 [ 521.506636][T18158] lo speed is unknown, defaulting to 1000 [ 521.518533][T18148] lo speed is unknown, defaulting to 1000 [ 521.524924][T18158] hsr0 speed is unknown, defaulting to 1000 [ 521.539943][T18148] hsr0 speed is unknown, defaulting to 1000 [ 521.579065][T18155] lo speed is unknown, defaulting to 1000 [ 521.624630][T18155] hsr0 speed is unknown, defaulting to 1000 [ 522.284349][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.292158][T18149] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.302256][T18149] bridge_slave_0: entered allmulticast mode [ 522.309460][T18149] bridge_slave_0: entered promiscuous mode [ 522.340474][T18149] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.347936][T18149] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.355510][T18149] bridge_slave_1: entered allmulticast mode [ 522.362987][T18149] bridge_slave_1: entered promiscuous mode [ 522.474158][T18158] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.481994][T18158] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.489266][T18158] bridge_slave_0: entered allmulticast mode [ 522.497682][T18158] bridge_slave_0: entered promiscuous mode [ 522.501360][ T5643] Bluetooth: hci11: command tx timeout [ 522.511062][T18149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.538558][T18158] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.545853][T18158] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.553543][T18158] bridge_slave_1: entered allmulticast mode [ 522.561574][T18158] bridge_slave_1: entered promiscuous mode [ 522.571598][T18149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.580570][ T5643] Bluetooth: hci10: command tx timeout [ 522.595284][T18148] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.602883][T18148] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.610127][T18148] bridge_slave_0: entered allmulticast mode [ 522.618589][T18148] bridge_slave_0: entered promiscuous mode [ 522.656278][T18148] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.663932][T18148] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.671989][T18148] bridge_slave_1: entered allmulticast mode [ 522.679387][T18148] bridge_slave_1: entered promiscuous mode [ 522.711035][T18149] team0: Port device team_slave_0 added [ 522.728529][T18155] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.735918][T18155] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.743417][ T5643] Bluetooth: hci12: command tx timeout [ 522.749368][T18155] bridge_slave_0: entered allmulticast mode [ 522.757042][T18155] bridge_slave_0: entered promiscuous mode [ 522.767591][T18158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.779657][T18149] team0: Port device team_slave_1 added [ 522.795600][T18155] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.803116][T18155] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.810434][T18155] bridge_slave_1: entered allmulticast mode [ 522.817709][T18155] bridge_slave_1: entered promiscuous mode [ 522.820504][ T5643] Bluetooth: hci13: command tx timeout [ 522.843339][T18158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.865901][T18148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.918615][T18148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.943374][T18155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.956287][T18155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.976467][T18149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.983570][T18149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.010461][T18149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.046696][T18158] team0: Port device team_slave_0 added [ 523.055202][T18149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.063076][T18149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.089131][T18149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.102555][T18148] team0: Port device team_slave_0 added [ 523.121793][T18158] team0: Port device team_slave_1 added [ 523.137617][T18148] team0: Port device team_slave_1 added [ 523.158708][T18155] team0: Port device team_slave_0 added [ 523.199843][T18155] team0: Port device team_slave_1 added [ 523.222450][T18158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.229495][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.256987][T18158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.269869][T18148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.277279][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.304680][T18148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.339195][T18158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.346522][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.373075][T18158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.385478][T18148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.392816][T18148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.419697][T18148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.443620][T18155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.450913][T18155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.477474][T18155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.509569][T18149] hsr_slave_0: entered promiscuous mode [ 523.517370][T18149] hsr_slave_1: entered promiscuous mode [ 523.524754][T18149] debugfs: 'hsr0' already exists in 'hsr' [ 523.530632][T18149] Cannot create hsr debugfs directory [ 523.537201][T18155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.547855][T18155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.576371][T18155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.771092][T18148] hsr_slave_0: entered promiscuous mode [ 523.778124][T18148] hsr_slave_1: entered promiscuous mode [ 523.786167][T18148] debugfs: 'hsr0' already exists in 'hsr' [ 523.792332][T18148] Cannot create hsr debugfs directory [ 523.818184][T18155] hsr_slave_0: entered promiscuous mode [ 523.825803][T18155] hsr_slave_1: entered promiscuous mode [ 523.832995][T18155] debugfs: 'hsr0' already exists in 'hsr' [ 523.838807][T18155] Cannot create hsr debugfs directory [ 523.860043][T18158] hsr_slave_0: entered promiscuous mode [ 523.870240][T18158] hsr_slave_1: entered promiscuous mode [ 523.877745][T18158] debugfs: 'hsr0' already exists in 'hsr' [ 523.884879][T18158] Cannot create hsr debugfs directory [ 524.580664][ T5643] Bluetooth: hci11: command tx timeout [ 524.660547][ T5643] Bluetooth: hci10: command tx timeout [ 524.821033][ T5643] Bluetooth: hci12: command tx timeout [ 524.900632][ T5643] Bluetooth: hci13: command tx timeout [ 526.660742][ T5643] Bluetooth: hci11: command tx timeout [ 526.740492][ T5643] Bluetooth: hci10: command tx timeout [ 526.900754][ T5643] Bluetooth: hci12: command tx timeout [ 526.980625][ T5643] Bluetooth: hci13: command tx timeout [ 528.740752][ T5643] Bluetooth: hci11: command tx timeout [ 528.821853][ T5643] Bluetooth: hci10: command tx timeout [ 528.980813][ T5643] Bluetooth: hci12: command tx timeout [ 529.060967][ T5643] Bluetooth: hci13: command tx timeout [ 540.980908][ T5643] Bluetooth: hci5: command 0x0406 tx timeout [ 544.660888][ T5069] block nbd0: Possible stuck request ffff88802708e000: control (read@0,1024B). Runtime 180 seconds [ 544.672039][ T5069] block nbd0: Possible stuck request ffff88802708e1c0: control (read@1024,1024B). Runtime 180 seconds [ 544.684759][ T5069] block nbd0: Possible stuck request ffff88802708e380: control (read@2048,1024B). Runtime 180 seconds [ 544.696340][ T5069] block nbd0: Possible stuck request ffff88802708e540: control (read@3072,1024B). Runtime 180 seconds [ 546.998028][ T4990] udevd[4990]: worker [15227] /devices/virtual/block/nbd0 timeout; kill it [ 547.007012][ T4990] udevd[4990]: seq 19016 '/devices/virtual/block/nbd0' killed [ 556.341109][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 563.728199][ T5632] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 563.736656][ T5632] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 563.745609][ T5632] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 563.756102][ T5632] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 563.764390][ T5632] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 564.021492][T18219] lo speed is unknown, defaulting to 1000 [ 564.028414][T18219] hsr0 speed is unknown, defaulting to 1000 [ 564.242246][T18219] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.249442][T18219] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.257672][T18219] bridge_slave_0: entered allmulticast mode [ 564.266840][T18219] bridge_slave_0: entered promiscuous mode [ 564.275636][T18219] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.283367][T18219] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.290830][T18219] bridge_slave_1: entered allmulticast mode [ 564.298380][T18219] bridge_slave_1: entered promiscuous mode [ 564.327090][T18219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.339714][T18219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.370481][T18219] team0: Port device team_slave_0 added [ 564.378383][T18219] team0: Port device team_slave_1 added [ 564.405456][T18219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.412490][T18219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.438822][T18219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.451728][T18219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.458680][T18219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.485298][T18219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.541249][T18219] hsr_slave_0: entered promiscuous mode [ 564.547726][T18219] hsr_slave_1: entered promiscuous mode [ 564.555195][T18219] debugfs: 'hsr0' already exists in 'hsr' [ 564.561164][T18219] Cannot create hsr debugfs directory [ 565.860682][ T5643] Bluetooth: hci14: command tx timeout [ 566.580958][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 567.940683][ T5632] Bluetooth: hci14: command tx timeout [ 569.627699][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.637225][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.654298][ T6444] bond4: left allmulticast mode [ 569.663309][ T6444] bond4: left promiscuous mode [ 569.672478][ T6444] bridge0: port 1(bond4) entered disabled state [ 569.710788][ T6444] dvmrp0: left allmulticast mode [ 569.716310][ T6444] batadv_slave_1: left allmulticast mode [ 569.726095][ T6444] batman_adv: batadv0: Interface deactivated: gretap1 [ 569.963696][ T6444] batman_adv: batadv0: Removing interface: gretap1 [ 569.986418][ T6444] bond2 (unregistering): (slave gretap2): Releasing active interface [ 570.014057][ T6444] bond3 (unregistering): (slave geneve2): Releasing active interface [ 570.020871][ T5632] Bluetooth: hci14: command tx timeout [ 570.415632][ T6444] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 570.424117][ T6444] bridge8 (unregistering): left promiscuous mode [ 570.594676][ T6444] .` (unregistering): Released all slaves [ 570.606334][ T6444] bond1 (unregistering): (slave lo): Releasing backup interface [ 570.616569][ T6444] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 570.629385][ T6444] bond1 (unregistering): Released all slaves [ 570.648889][ T6444] bond2 (unregistering): Released all slaves [ 570.664213][ T6444] bond3 (unregistering): Released all slaves [ 570.678892][ T6444] bond4 (unregistering): Released all slaves [ 570.700849][ T6444] bond5 (unregistering): Released all slaves [ 570.715296][ T6444] bond0 (unregistering): Released all slaves [ 570.731615][ T6444] bond6 (unregistering): Released all slaves [ 570.754591][ T6444] bond7 (unregistering): Released all slaves [ 570.958834][ T6444] tipc: Left network mode [ 571.727297][ T6444] hsr_slave_0: left promiscuous mode [ 571.734350][ T6444] hsr_slave_1: left promiscuous mode [ 571.758510][ T6444] batadv0: left promiscuous mode [ 571.837065][ T6444] pim6reg (unregistering): left allmulticast mode [ 572.111112][ T5632] Bluetooth: hci14: command tx timeout [ 572.331336][ T6444] IPVS: stop unused estimator thread 0... [ 574.743166][ T5069] block nbd0: Possible stuck request ffff88802708e000: control (read@0,1024B). Runtime 210 seconds [ 574.754090][ T5069] block nbd0: Possible stuck request ffff88802708e1c0: control (read@1024,1024B). Runtime 210 seconds [ 574.765766][ T5069] block nbd0: Possible stuck request ffff88802708e380: control (read@2048,1024B). Runtime 210 seconds [ 574.776880][ T5069] block nbd0: Possible stuck request ffff88802708e540: control (read@3072,1024B). Runtime 210 seconds [ 580.915332][ T5643] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 580.931264][ T5643] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 580.941722][ T5643] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 580.950001][ T5643] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 580.959504][ T5643] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 581.006648][ T5643] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 581.022110][ T5643] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 581.030947][ T5643] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 581.043165][ T5643] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 581.056016][ T5643] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 581.070783][ T5627] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 581.093126][ T5627] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 581.103366][ T5627] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 581.138416][ T5632] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 581.149136][ T5632] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 581.399599][T18059] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 581.412753][T18059] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 581.422484][T18059] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 581.435271][T18059] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 581.445718][T18059] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 581.857689][T18241] lo speed is unknown, defaulting to 1000 [ 581.884816][T18241] hsr0 speed is unknown, defaulting to 1000 [ 581.929227][T18244] lo speed is unknown, defaulting to 1000 [ 581.957323][T18244] hsr0 speed is unknown, defaulting to 1000 [ 582.078953][T18247] lo speed is unknown, defaulting to 1000 [ 582.124647][T18247] hsr0 speed is unknown, defaulting to 1000 [ 582.215607][T18258] lo speed is unknown, defaulting to 1000 [ 582.243377][T18258] hsr0 speed is unknown, defaulting to 1000 [ 582.686803][T18241] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.694474][T18241] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.702879][T18241] bridge_slave_0: entered allmulticast mode [ 582.710175][T18241] bridge_slave_0: entered promiscuous mode [ 582.742995][T18241] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.750513][T18241] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.757851][T18241] bridge_slave_1: entered allmulticast mode [ 582.765565][T18241] bridge_slave_1: entered promiscuous mode [ 582.827417][T18244] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.835102][T18244] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.843433][T18244] bridge_slave_0: entered allmulticast mode [ 582.851026][T18244] bridge_slave_0: entered promiscuous mode [ 582.905103][T18244] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.913063][T18244] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.921051][T18244] bridge_slave_1: entered allmulticast mode [ 582.928308][T18244] bridge_slave_1: entered promiscuous mode [ 582.940564][T18241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.975331][T18241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.059800][T18244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.069705][ T5632] Bluetooth: hci15: command tx timeout [ 583.093242][T18247] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.100849][T18247] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.108120][T18247] bridge_slave_0: entered allmulticast mode [ 583.116787][T18247] bridge_slave_0: entered promiscuous mode [ 583.127671][T18244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.140512][ T5632] Bluetooth: hci16: command tx timeout [ 583.153343][T18241] team0: Port device team_slave_0 added [ 583.159222][T18247] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.166909][T18247] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.174527][T18247] bridge_slave_1: entered allmulticast mode [ 583.182079][T18247] bridge_slave_1: entered promiscuous mode [ 583.210542][T18241] team0: Port device team_slave_1 added [ 583.221175][ T5632] Bluetooth: hci17: command tx timeout [ 583.275920][T18244] team0: Port device team_slave_0 added [ 583.302331][T18247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.314532][T18244] team0: Port device team_slave_1 added [ 583.327036][T18241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.334278][T18241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.361413][T18241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.378583][T18247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.419075][T18241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.426222][T18241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.454588][T18241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.508313][T18247] team0: Port device team_slave_0 added [ 583.515041][T18244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.522362][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.549041][ T5632] Bluetooth: hci18: command tx timeout [ 583.555441][T18244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.567394][T18258] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.574875][T18258] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.582527][T18258] bridge_slave_0: entered allmulticast mode [ 583.589827][T18258] bridge_slave_0: entered promiscuous mode [ 583.598537][T18258] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.606100][T18258] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.614077][T18258] bridge_slave_1: entered allmulticast mode [ 583.622394][T18258] bridge_slave_1: entered promiscuous mode [ 583.632019][T18247] team0: Port device team_slave_1 added [ 583.638398][T18244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.645568][T18244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.673152][T18244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.750856][T18247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.757858][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.785477][T18247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.812895][T18258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.823292][T18247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.831007][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.858286][T18247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.876959][T18241] hsr_slave_0: entered promiscuous mode [ 583.884266][T18241] hsr_slave_1: entered promiscuous mode [ 583.892677][T18241] debugfs: 'hsr0' already exists in 'hsr' [ 583.898917][T18241] Cannot create hsr debugfs directory [ 583.907349][T18258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.978177][T18258] team0: Port device team_slave_0 added [ 583.989611][T18244] hsr_slave_0: entered promiscuous mode [ 583.996492][T18244] hsr_slave_1: entered promiscuous mode [ 584.004074][T18244] debugfs: 'hsr0' already exists in 'hsr' [ 584.009837][T18244] Cannot create hsr debugfs directory [ 584.042528][T18258] team0: Port device team_slave_1 added [ 584.102941][T18258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.109933][T18258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.136570][T18258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.173862][T18247] hsr_slave_0: entered promiscuous mode [ 584.180891][T18247] hsr_slave_1: entered promiscuous mode [ 584.187197][T18247] debugfs: 'hsr0' already exists in 'hsr' [ 584.193417][T18247] Cannot create hsr debugfs directory [ 584.199969][T18258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.207219][T18258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.233349][T18258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.442389][T18258] hsr_slave_0: entered promiscuous mode [ 584.448972][T18258] hsr_slave_1: entered promiscuous mode [ 584.455485][T18258] debugfs: 'hsr0' already exists in 'hsr' [ 584.461609][T18258] Cannot create hsr debugfs directory [ 585.148185][ T50] Bluetooth: hci15: command tx timeout [ 585.220539][ T50] Bluetooth: hci16: command tx timeout [ 585.301505][ T50] Bluetooth: hci17: command tx timeout [ 585.631352][ T50] Bluetooth: hci18: command tx timeout [ 587.067650][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 587.090844][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 587.099359][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 587.106146][T18313] Bluetooth: hci7: command 0x0406 tx timeout [ 587.220801][ T5632] Bluetooth: hci15: command tx timeout [ 587.300604][ T5632] Bluetooth: hci16: command tx timeout [ 587.380979][ T5632] Bluetooth: hci17: command tx timeout [ 587.700679][ T5632] Bluetooth: hci18: command tx timeout [ 589.301119][ T5632] Bluetooth: hci15: command tx timeout [ 589.381297][ T5632] Bluetooth: hci16: command tx timeout [ 589.460899][ T5632] Bluetooth: hci17: command tx timeout [ 589.780787][ T5632] Bluetooth: hci18: command tx timeout [ 603.540894][ T31] INFO: task syz-executor:17941 blocked for more than 143 seconds. [ 603.548924][ T31] Not tainted syzkaller #0 [ 603.553992][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.562801][ T31] task:syz-executor state:D stack:22408 pid:17941 tgid:17941 ppid:1 task_flags:0x400140 flags:0x00080002 [ 603.575026][ T31] Call Trace: [ 603.578355][ T31] [ 603.581616][ T31] __schedule+0x17b4/0x5680 [ 603.586135][ T31] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 603.591297][ T31] ? __pfx___schedule+0x10/0x10 [ 603.596232][ T31] ? schedule+0x90/0x360 [ 603.600676][ T31] schedule+0x164/0x360 [ 603.604946][ T31] schedule_preempt_disabled+0x13/0x30 [ 603.610972][ T31] __mutex_lock+0x7f7/0x1550 [ 603.615916][ T31] ? kernel_text_address+0xa5/0xe0 [ 603.621513][ T31] ? __mutex_lock+0x608/0x1550 [ 603.663330][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 603.680459][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 603.685713][ T31] ? stack_trace_save+0xa9/0x100 [ 603.702906][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 603.708539][ T31] ? radix_tree_lookup+0x240/0x290 [ 603.713936][ T31] genl_rcv_msg+0x10b/0x7a0 [ 603.719218][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.724442][ T31] netlink_rcv_skb+0x232/0x4b0 [ 603.729264][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.734687][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.740007][ T31] ? down_read+0x270/0x2e0 [ 603.744587][ T31] ? genl_rcv+0xd/0x40 [ 603.748693][ T31] genl_rcv+0x28/0x40 [ 603.752788][ T31] netlink_unicast+0x75c/0x8e0 [ 603.757609][ T31] netlink_sendmsg+0x813/0xb40 [ 603.762784][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.768127][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.773299][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.778674][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.784212][ T31] __sys_sendto+0x672/0x710 [ 603.788751][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 603.794304][ T31] ? fd_install+0x94/0x3d0 [ 603.798831][ T31] ? fd_install+0x306/0x3d0 [ 603.803481][ T31] __x64_sys_sendto+0xde/0x100 [ 603.808286][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.814486][ T31] do_syscall_64+0x15f/0xf80 [ 603.819125][ T31] ? trace_irq_disable+0x3b/0x140 [ 603.824683][ T31] ? clear_bhb_loop+0x40/0x90 [ 603.829507][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.835476][ T31] RIP: 0033:0x7fcf3cb5d60e [ 603.839913][ T31] RSP: 002b:00007ffc9d443f68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 603.848442][ T31] RAX: ffffffffffffffda RBX: 0000555566cae500 RCX: 00007fcf3cb5d60e [ 603.856647][ T31] RDX: 0000000000000020 RSI: 00007fcf3d944670 RDI: 0000000000000005 [ 603.864997][ T31] RBP: 0000000000000001 R08: 00007ffc9d443fe4 R09: 000000000000000c [ 603.873121][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 603.881590][ T31] R13: 00007ffc9d444038 R14: 00007fcf3d944670 R15: 0000000000000000 [ 603.889617][ T31] [ 603.892774][ T31] INFO: task syz.2.3176:18003 blocked for more than 143 seconds. [ 603.900690][ T31] Not tainted syzkaller #0 [ 603.905671][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.914738][ T31] task:syz.2.3176 state:D stack:26008 pid:18003 tgid:17998 ppid:5625 task_flags:0x480140 flags:0x00080002 [ 603.927031][ T31] Call Trace: [ 603.930482][ T31] [ 603.933447][ T31] __schedule+0x17b4/0x5680 [ 603.938006][ T31] ? __pfx___schedule+0x10/0x10 [ 603.943592][ T31] ? schedule+0x90/0x360 [ 603.947900][ T31] schedule+0x164/0x360 [ 603.952491][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 603.958054][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 603.964209][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 603.970808][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 603.976892][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 603.983147][ T31] nbd_set_size+0x454/0x680 [ 603.987677][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 603.992930][ T31] ? nla_memcpy+0x5b/0xc0 [ 603.997356][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 604.002997][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 604.008762][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.013761][ T31] ? trace_kmalloc+0x2a/0xf0 [ 604.018420][ T31] ? __nla_parse+0x40/0x60 [ 604.023567][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 604.030188][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 604.036967][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 604.042688][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 604.048803][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 604.053872][ T31] genl_rcv_msg+0x61c/0x7a0 [ 604.058424][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.063790][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 604.069543][ T31] netlink_rcv_skb+0x232/0x4b0 [ 604.074519][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.079572][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.084954][ T31] ? down_read+0x270/0x2e0 [ 604.089424][ T31] ? genl_rcv+0xd/0x40 [ 604.093780][ T31] genl_rcv+0x28/0x40 [ 604.097768][ T31] netlink_unicast+0x75c/0x8e0 [ 604.102829][ T31] netlink_sendmsg+0x813/0xb40 [ 604.107653][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.113046][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.118017][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.123717][ T31] ____sys_sendmsg+0x972/0x9f0 [ 604.128735][ T31] ? __might_fault+0xaf/0x130 [ 604.133555][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.138922][ T31] ? import_iovec+0x73/0xa0 [ 604.143541][ T31] ___sys_sendmsg+0x2a5/0x360 [ 604.148272][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 604.153522][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.158770][ T31] ? futex_wake+0x4ac/0x580 [ 604.163398][ T31] ? __fget_files+0x2a/0x420 [ 604.168011][ T31] ? __fget_files+0x3a0/0x420 [ 604.172793][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 604.177782][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.184002][ T31] ? rcu_is_watching+0x15/0xb0 [ 604.188822][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.195022][ T31] do_syscall_64+0x15f/0xf80 [ 604.199657][ T31] ? trace_irq_disable+0x3b/0x140 [ 604.204787][ T31] ? clear_bhb_loop+0x40/0x90 [ 604.209490][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.215766][ T31] RIP: 0033:0x7f650179cdd9 [ 604.220232][ T31] RSP: 002b:00007f6502603028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.228818][ T31] RAX: ffffffffffffffda RBX: 00007f6501a15fa0 RCX: 00007f650179cdd9 [ 604.237313][ T31] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 000000000000000b [ 604.245664][ T31] RBP: 00007f6501832d69 R08: 0000000000000000 R09: 0000000000000000 [ 604.253783][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.262027][ T31] R13: 00007f6501a16038 R14: 00007f6501a15fa0 R15: 00007ffce07380a8 [ 604.270047][ T31] [ 604.273426][ T31] INFO: task syz.1.3177:18005 blocked for more than 144 seconds. [ 604.281264][ T31] Not tainted syzkaller #0 [ 604.286227][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.294998][ T31] task:syz.1.3177 state:D stack:27904 pid:18005 tgid:18004 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 604.307158][ T31] Call Trace: [ 604.310542][ T31] [ 604.313505][ T31] __schedule+0x17b4/0x5680 [ 604.318052][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 604.323291][ T31] ? __pfx___schedule+0x10/0x10 [ 604.328222][ T31] ? schedule+0x90/0x360 [ 604.333093][ T31] schedule+0x164/0x360 [ 604.337291][ T31] schedule_preempt_disabled+0x13/0x30 [ 604.343646][ T31] __mutex_lock+0x7f7/0x1550 [ 604.348301][ T31] ? __mutex_lock+0x608/0x1550 [ 604.353156][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 604.357862][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 604.363195][ T31] ? radix_tree_lookup+0x240/0x290 [ 604.368315][ T31] genl_rcv_msg+0x10b/0x7a0 [ 604.372946][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.377995][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 604.383485][ T31] netlink_rcv_skb+0x232/0x4b0 [ 604.388280][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.393629][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.398951][ T31] ? down_read+0x270/0x2e0 [ 604.403471][ T31] ? genl_rcv+0xd/0x40 [ 604.407564][ T31] genl_rcv+0x28/0x40 [ 604.411619][ T31] netlink_unicast+0x75c/0x8e0 [ 604.416446][ T31] netlink_sendmsg+0x813/0xb40 [ 604.422703][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.428126][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.433309][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.438963][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.444414][ T31] __sys_sendto+0x672/0x710 [ 604.448966][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 604.454515][ T31] ? exc_page_fault+0x6a/0xc0 [ 604.459271][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 604.464730][ T31] __x64_sys_sendto+0xde/0x100 [ 604.469525][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.475665][ T31] do_syscall_64+0x15f/0xf80 [ 604.480595][ T31] ? trace_irq_disable+0x3b/0x140 [ 604.485630][ T31] ? clear_bhb_loop+0x40/0x90 [ 604.490402][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.496315][ T31] RIP: 0033:0x7f2a0cd5d60e [ 604.502091][ T31] RSP: 002b:00007f2a0afece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 604.512372][ T31] RAX: ffffffffffffffda RBX: 00007f2a0afee6c0 RCX: 00007f2a0cd5d60e [ 604.520647][ T31] RDX: 0000000000000020 RSI: 00007f2a0afed000 RDI: 0000000000000005 [ 604.528675][ T31] RBP: 0000000000000000 R08: 00007f2a0afecf04 R09: 000000000000000c [ 604.537460][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 604.545624][ T31] R13: 00007f2a0afecf58 R14: 00007f2a0afed000 R15: 0000000000000000 [ 604.553853][ T31] [ 604.556944][ T31] INFO: task syz.0.3178:18007 blocked for more than 144 seconds. [ 604.565237][ T31] Not tainted syzkaller #0 [ 604.570198][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.578988][ T31] task:syz.0.3178 state:D stack:27904 pid:18007 tgid:18006 ppid:17418 task_flags:0x400140 flags:0x00080002 [ 604.592722][ T31] Call Trace: [ 604.596072][ T31] [ 604.599039][ T31] __schedule+0x17b4/0x5680 [ 604.603727][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 604.608749][ T31] ? __pfx___schedule+0x10/0x10 [ 604.613854][ T31] ? schedule+0x90/0x360 [ 604.618152][ T31] schedule+0x164/0x360 [ 604.622764][ T31] schedule_preempt_disabled+0x13/0x30 [ 604.628289][ T31] __mutex_lock+0x7f7/0x1550 [ 604.633257][ T31] ? __mutex_lock+0x608/0x1550 [ 604.638061][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 604.643104][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 604.648202][ T31] ? radix_tree_lookup+0x240/0x290 [ 604.653512][ T31] genl_rcv_msg+0x10b/0x7a0 [ 604.658080][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.663396][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 604.668829][ T31] netlink_rcv_skb+0x232/0x4b0 [ 604.673786][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.678859][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.684350][ T31] ? down_read+0x270/0x2e0 [ 604.688806][ T31] ? genl_rcv+0xd/0x40 [ 604.693023][ T31] genl_rcv+0x28/0x40 [ 604.697028][ T31] netlink_unicast+0x75c/0x8e0 [ 604.701939][ T31] netlink_sendmsg+0x813/0xb40 [ 604.706762][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.712258][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.717265][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.722707][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.728036][ T31] __sys_sendto+0x672/0x710 [ 604.732753][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 604.737865][ T31] ? exc_page_fault+0x6a/0xc0 [ 604.743124][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 604.748480][ T31] __x64_sys_sendto+0xde/0x100 [ 604.753638][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.759751][ T31] do_syscall_64+0x15f/0xf80 [ 604.764647][ T31] ? trace_irq_disable+0x3b/0x140 [ 604.769729][ T31] ? clear_bhb_loop+0x40/0x90 [ 604.774486][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.781286][ T31] RIP: 0033:0x7f9ee295d60e [ 604.785787][ T31] RSP: 002b:00007f9ee37b2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 604.794346][ T31] RAX: ffffffffffffffda RBX: 00007f9ee37b46c0 RCX: 00007f9ee295d60e [ 604.802456][ T31] RDX: 0000000000000020 RSI: 00007f9ee37b3000 RDI: 0000000000000007 [ 604.810712][ T31] RBP: 0000000000000000 R08: 00007f9ee37b2f04 R09: 000000000000000c [ 604.818702][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 604.828859][ T5069] block nbd0: Possible stuck request ffff88802708e000: control (read@0,1024B). Runtime 240 seconds [ 604.838969][ T31] R13: 00007f9ee37b2f58 R14: 00007f9ee37b3000 R15: 0000000000000000 [ 604.847643][ T5069] block nbd0: Possible stuck request ffff88802708e1c0: control (read@1024,1024B). Runtime 240 seconds [ 604.847685][ T5069] block nbd0: Possible stuck request ffff88802708e380: control (read@2048,1024B). Runtime 240 seconds [ 604.847716][ T5069] block nbd0: Possible stuck request ffff88802708e540: control (read@3072,1024B). Runtime 240 seconds [ 604.882507][ T31] [ 604.885598][ T31] INFO: task syz.4.3179:18025 blocked for more than 144 seconds. [ 604.893565][ T31] Not tainted syzkaller #0 [ 604.898527][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.907503][ T31] task:syz.4.3179 state:D stack:27264 pid:18025 tgid:18024 ppid:16805 task_flags:0x400140 flags:0x00080002 [ 604.919631][ T31] Call Trace: [ 604.923120][ T31] [ 604.926090][ T31] __schedule+0x17b4/0x5680 [ 604.930683][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 604.935666][ T31] ? __pfx___schedule+0x10/0x10 [ 604.940617][ T31] ? schedule+0x90/0x360 [ 604.944915][ T31] schedule+0x164/0x360 [ 604.949663][ T31] schedule_preempt_disabled+0x13/0x30 [ 604.955290][ T31] __mutex_lock+0x7f7/0x1550 [ 604.959971][ T31] ? __mutex_lock+0x608/0x1550 [ 604.965047][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 604.969787][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 604.975077][ T31] ? radix_tree_lookup+0x240/0x290 [ 604.980222][ T31] genl_rcv_msg+0x10b/0x7a0 [ 604.984917][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.990037][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 604.995832][ T31] netlink_rcv_skb+0x232/0x4b0 [ 605.000819][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.005905][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.011308][ T31] ? down_read+0x270/0x2e0 [ 605.015749][ T31] ? genl_rcv+0xd/0x40 [ 605.019817][ T31] genl_rcv+0x28/0x40 [ 605.023847][ T31] netlink_unicast+0x75c/0x8e0 [ 605.028646][ T31] netlink_sendmsg+0x813/0xb40 [ 605.033513][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.038832][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 605.043930][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 605.049914][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.055319][ T31] __sys_sendto+0x672/0x710 [ 605.059859][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 605.065428][ T31] ? exc_page_fault+0x6a/0xc0 [ 605.070170][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 605.075583][ T31] __x64_sys_sendto+0xde/0x100 [ 605.080550][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.086673][ T31] do_syscall_64+0x15f/0xf80 [ 605.091367][ T31] ? trace_irq_disable+0x3b/0x140 [ 605.096435][ T31] ? clear_bhb_loop+0x40/0x90 [ 605.101420][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.107351][ T31] RIP: 0033:0x7fd69e95d60e [ 605.111863][ T31] RSP: 002b:00007fd69f8e5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 605.120459][ T31] RAX: ffffffffffffffda RBX: 00007fd69f8e76c0 RCX: 00007fd69e95d60e [ 605.128489][ T31] RDX: 0000000000000020 RSI: 00007fd69f8e6000 RDI: 0000000000000009 [ 605.136528][ T31] RBP: 0000000000000000 R08: 00007fd69f8e5f04 R09: 000000000000000c [ 605.144679][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 605.153414][ T31] R13: 00007fd69f8e5f58 R14: 00007fd69f8e6000 R15: 0000000000000000 [ 605.161578][ T31] [ 605.164687][ T31] [ 605.164687][ T31] Showing all locks held in the system: [ 605.172907][ T31] 1 lock held by khungtaskd/31: [ 605.177777][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 605.187704][ T31] 2 locks held by getty/5379: [ 605.192440][ T31] #0: ffff8880322c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 605.202343][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 605.212767][ T31] 2 locks held by kworker/u8:11/6444: [ 605.218170][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 605.231171][ T31] #1: ffffc9000eff7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 605.244329][ T31] 1 lock held by udevd/15227: [ 605.249122][ T31] #0: ffff888026f6d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 605.258802][ T31] 2 locks held by syz-executor/17941: [ 605.264501][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.272858][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.282270][ T31] 6 locks held by syz.2.3176/18003: [ 605.287489][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.296009][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.305119][ T31] #2: ffff888026fa1260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 605.315813][ T31] #3: ffff888026fc47c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 605.325501][ T31] #4: ffff888026fc4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 605.337645][ T31] #5: ffff888026fc41c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 605.351023][ T31] 2 locks held by syz.1.3177/18005: [ 605.356636][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.365019][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.374130][ T31] 2 locks held by syz.0.3178/18007: [ 605.379354][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.388911][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.398090][ T31] 2 locks held by syz.4.3179/18025: [ 605.403375][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.411980][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.421178][ T31] 2 locks held by syz-executor/18053: [ 605.426582][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.434918][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.444137][ T31] 2 locks held by syz-executor/18055: [ 605.449505][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.457801][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.468081][ T31] 2 locks held by syz-executor/18056: [ 605.473945][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.482381][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.491511][ T31] 2 locks held by syz-executor/18062: [ 605.496903][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.505556][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.514744][ T31] 2 locks held by syz-executor/18125: [ 605.520150][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.528436][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.537742][ T31] 2 locks held by syz-executor/18148: [ 605.543410][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.551764][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.561429][ T31] 2 locks held by syz-executor/18149: [ 605.566939][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.575431][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.584511][ T31] 2 locks held by syz-executor/18155: [ 605.589968][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.598421][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.607485][ T31] 2 locks held by syz-executor/18158: [ 605.613027][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.621837][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.630988][ T31] 2 locks held by syz-executor/18219: [ 605.636389][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.644803][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.654021][ T31] 2 locks held by syz-executor/18241: [ 605.659388][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.667951][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.677050][ T31] 2 locks held by syz-executor/18244: [ 605.682844][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.691315][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.700764][ T31] 2 locks held by syz-executor/18247: [ 605.706184][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.714775][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.723966][ T31] 2 locks held by syz-executor/18258: [ 605.729372][ T31] #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 605.737692][ T31] #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 605.746949][ T31] [ 605.749295][ T31] ============================================= [ 605.749295][ T31] [ 605.758021][ T31] NMI backtrace for cpu 0 [ 605.758041][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 605.758065][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 605.758077][ T31] Call Trace: [ 605.758086][ T31] [ 605.758095][ T31] dump_stack_lvl+0xe8/0x150 [ 605.758125][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 605.758151][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 605.758174][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 605.758198][ T31] sys_info+0x135/0x170 [ 605.758215][ T31] watchdog+0xfd3/0x1030 [ 605.758250][ T31] ? watchdog+0x1c9/0x1030 [ 605.758284][ T31] kthread+0x388/0x470 [ 605.758310][ T31] ? __pfx_watchdog+0x10/0x10 [ 605.758346][ T31] ? __pfx_kthread+0x10/0x10 [ 605.758374][ T31] ret_from_fork+0x514/0xb70 [ 605.758398][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 605.758421][ T31] ? __switch_to+0xc79/0x1410 [ 605.758453][ T31] ? __pfx_kthread+0x10/0x10 [ 605.758482][ T31] ret_from_fork_asm+0x1a/0x30 [ 605.758523][ T31] [ 605.758531][ T31] Sending NMI from CPU 0 to CPUs 1: [ 605.869755][ C1] NMI backtrace for cpu 1 [ 605.869774][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 605.869793][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 605.869804][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 605.869831][ C1] Code: bb 7d 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c1 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 605.869846][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 605.869862][ C1] RAX: 00000000002a7319 RBX: ffffffff819a91ea RCX: 0000000080000001 [ 605.869875][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa6800 RDI: ffffffff8c28ade0 [ 605.869887][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 605.869899][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 605.869911][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 605.869922][ C1] FS: 0000000000000000(0000) GS:ffff88812538f000(0000) knlGS:0000000000000000 [ 605.869936][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.869948][ C1] CR2: 0000558f565ddee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 605.869966][ C1] Call Trace: [ 605.869972][ C1] [ 605.869979][ C1] default_idle+0x9/0x20 [ 605.869995][ C1] default_idle_call+0x72/0xb0 [ 605.870013][ C1] do_idle+0x36a/0x5f0 [ 605.870034][ C1] ? __pfx_do_idle+0x10/0x10 [ 605.870058][ C1] cpu_startup_entry+0x43/0x60 [ 605.870076][ C1] start_secondary+0x101/0x110 [ 605.870092][ C1] common_startup_64+0x13e/0x147 [ 605.870122][ C1] [ 605.870838][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 605.870855][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 605.870878][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 605.870890][ T31] Call Trace: [ 605.870899][ T31] [ 605.870908][ T31] vpanic+0x56c/0xa60 [ 605.870936][ T31] ? __pfx___schedule+0x10/0x10 [ 605.870962][ T31] ? __pfx_vpanic+0x10/0x10 [ 605.870993][ T31] panic+0xc5/0xd0 [ 605.871015][ T31] ? __pfx_panic+0x10/0x10 [ 605.871038][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 605.871071][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 605.871098][ T31] watchdog+0x102c/0x1030 [ 605.871134][ T31] ? watchdog+0x1c9/0x1030 [ 605.871166][ T31] kthread+0x388/0x470 [ 605.871193][ T31] ? __pfx_watchdog+0x10/0x10 [ 605.871219][ T31] ? __pfx_kthread+0x10/0x10 [ 605.871246][ T31] ret_from_fork+0x514/0xb70 [ 605.871270][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 605.871292][ T31] ? __switch_to+0xc79/0x1410 [ 605.871322][ T31] ? __pfx_kthread+0x10/0x10 [ 605.871356][ T31] ret_from_fork_asm+0x1a/0x30 [ 605.871395][ T31] [ 606.143718][ T31] Kernel Offset: disabled [ 606.148049][ T31] Rebooting in 86400 seconds..