last executing test programs: 19.373689756s ago: executing program 0 (id=4272): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80000) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000080)={0x4, 0x4, {0x7, @struct={0xfffffffc}, 0x0, 0xf212, 0x40, 0x1000, 0xc153, 0x9, 0x440, @struct={0x80000001, 0xa0aa}, 0x5, 0x5, [0x0, 0x8, 0x2, 0xef6, 0x4, 0x6]}, {0x7, @struct={0x1, 0xcb}, 0x0, 0x4, 0x5, 0x0, 0x0, 0x4, 0x49d, @usage=0x8, 0x359, 0x401, [0x7, 0x6, 0x4f, 0x5, 0x2400000000000000, 0x6]}, {0x7cea, @struct={0x4, 0x1}, 0x0, 0x2, 0xe, 0x800, 0x7, 0xb1d7, 0x400, @struct={0x5, 0x8}, 0x400, 0x7, [0xfffffffffffffffb, 0xafd, 0x7fff, 0x7af, 0x100000000]}, {0xabf, 0x6, 0x299746e}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000480)={{r0}, {@val={r1}, @max}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r2, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x29}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x218}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40015}, 0x60000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10080000}, 0x4000000) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0x3}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000840)={r5, 0xcb, "c691ee8d487084fc1f9ee0b33b53b8b06b28bc4863c1c5c95beb35276e5dccc975dff73c7ca98d7ce23a1639128066110e4ed2206378d42919b57c62e747579d83b09b4f1dc8d3368810c54015d3020259ee6955438ecab87e0ffe18aec2bcbbdf5d6d276e39a075d6e5b08fdb69e6a5660be9c5bb17d9148b2b204fbad6c01be1ce7564efe54955cb948680db46336897571f44881bbe3cc507d677f974f8bea9570ef823944ad20bd04b27d788e2fbff26b4926110cb35c27dc31e294cbaad2a1c19b69e0bc1c60b888a"}, &(0x7f0000000940)=0xd3) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000980)={0x1, 'veth1_to_team\x00', {}, 0x9}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000009c0)={r6, 0x8}, &(0x7f0000000a00)=0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pK \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c00)={r7, &(0x7f0000000b00)="a051856b41f003e9effa56b64464e5ad1bc8c3b1b55554356618ba42a44fb35eacd79526771ba3d270cdc8b06582de20c8f3039766b6321e5bb2a109d2eda29a97629edd14b2b5811da77f870d62ff6b9e9bac", &(0x7f0000000b80)=""/103}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) (async) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0xa000, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000ec0)={r0, &(0x7f0000000dc0)='IPVS\x00', 0x400a00, &(0x7f0000000e00)={@_ha_fsid={[0x6, 0x8000]}, {0x6, 0x55, 0x822e, 0xdd}}, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0xffff0000}) connect$can_bcm(r10, &(0x7f0000000f00), 0x10) (async) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000f80)=0x0, &(0x7f0000000fc0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xb8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x60}, 0x9) (async) ioctl$XFS_IOC_FSGROWFSRT(r9, 0x40105870, &(0x7f0000001140)={0x8000, 0xfa}) pselect6(0x40, &(0x7f0000001180)={0x4, 0x2, 0x7f, 0x5, 0x2, 0x800, 0x3, 0xc171}, &(0x7f00000011c0)={0xff, 0x4, 0x0, 0x3, 0x8, 0x7fffffffffffffff, 0x2, 0x7fffffff}, &(0x7f0000001200)={0x35d, 0xd, 0xfffffffffffffffc, 0xff00000000000000, 0x401, 0xf7, 0x1, 0x8}, &(0x7f0000001240), &(0x7f00000012c0)={&(0x7f0000001280)={[0x9]}, 0x8}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, &(0x7f0000001500)={{r8, &(0x7f0000001300)=',,\x00', 0x0, &(0x7f0000001340)={@_ha_fsid={[0x1969, 0x8]}, {0x100, 0x4, 0x8001, 0x5}}, 0xfffffeff, &(0x7f0000001380)={@_ha_fsid}, &(0x7f00000013c0)=0xffffffff}, {[0x5bf4, 0x7, 0x2, 0x3]}, 0x2ef7a58a, 0xc7, &(0x7f0000001400)=""/199}) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000001600)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r12, &(0x7f00000018c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10008101}, 0xc, &(0x7f0000001880)={&(0x7f0000001640)={0x20c, r13, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) r15 = accept4$vsock_stream(r10, &(0x7f0000001900)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000001940)={'wlan1\x00'}) ioctl$EXT4_IOC_CHECKPOINT(r15, 0x4004662b, &(0x7f0000001980)=0x2) 19.242451422s ago: executing program 1 (id=4274): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000180001002cbd7000fcdbdf250a800000ff00ff000004000008000400", @ANYRES32=r6, @ANYBLOB="0600150003000000100016800c"], 0x3c}}, 0x0) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0x2, 0x0, 0x3c, r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700302c0000000000000000000000ff48ac1414bbff020000000000000000000000000001290300"], 0x0) 19.165078211s ago: executing program 0 (id=4276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x50, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19.053780812s ago: executing program 4 (id=4277): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000740)={{r2, &(0x7f0000000000)='$\x00', 0x0, &(0x7f0000000100)={@_ha_fsid={[0xfffffff9, 0x7]}, {0x1, 0x7f, 0x5, 0x7a}}, 0xe, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}, 0x5, &(0x7f0000000680)=[{0x1, 0x0, &(0x7f00000001c0)='\'%!-[\x00', &(0x7f0000000200)="cfa948cc5253d91d2df4707b9dd4266ef7eaa0a98dca6820e7e169215f1476", 0x1f, 0x8}, {0x2, 0x3, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="d7451f6b5da88079497deb147f01774eca0a69e12b28a926b77eff7e8bdd83752cfb7a06e8cf9e1e1855bf978ac265f401bdc65aa517ddb80423a89bce23481f7f74cb7049ec83332a440b036a46e8e0d058591e806228fff9877047cc132850b13ee6b7c0b4df912df4ab3ed9c82fd0851b36908675c1", 0x77, 0x18}, {0x2, 0xffff, &(0x7f0000000440)='\x00', &(0x7f0000000480)="761eb1ec54efcad8f4b08d4416768b674098548e54744a2a51166a7d9ab98915cd53dd3576ce2c256b1e7a652da2565992c619654bc509afbfd66fd20a18ae2f436776e298f71718af545dd9ac99e181ec3db71c3c8cbba6ec0594085e75ed14", 0x60, 0x8}, {0x3, 0x1, &(0x7f0000000500)='\x00', &(0x7f0000000540)="dc57d1f22ada54d404a6651a8de49f08320762da1a2ca011767ecd4f11e341", 0x1f, 0x2}, {0x2, 0x45, &(0x7f0000000580)='\x83\x00', &(0x7f00000005c0)="bae8e6b6e950b0355c5d0414ed5e9a1c45141d539e5015e8426c51fb301dd2258060d877d549df478345d55fb176a4ba3cc3c92b602fdb47e9caeca60437109c4e8fc388ca8592949d22af59e03f9821d7ff12cdcb37d8fa9217905cf993f3adde5285ba2832665eb2f23884b547d134a4a9b4ce563a63dc0e65782ae68ab700ef90ddc472ff915651c007743e2981476844c9515b6662a4132e21b4327573c7f21cbf", 0xa3, 0x10}]}) sendmsg$nl_crypto(r3, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@alg={0xe0, 0x10, 0x200, 0x70bd28, 0x25dfdbfe, {{'streebog512\x00'}, '\x00', '\x00', 0x400, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0xc004081}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r4, &(0x7f0000000980)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000600bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xd4}}, 0x0) close(r2) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r0, 0x1) (async) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000740)={{r2, &(0x7f0000000000)='$\x00', 0x0, &(0x7f0000000100)={@_ha_fsid={[0xfffffff9, 0x7]}, {0x1, 0x7f, 0x5, 0x7a}}, 0xe, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}, 0x5, &(0x7f0000000680)=[{0x1, 0x0, &(0x7f00000001c0)='\'%!-[\x00', &(0x7f0000000200)="cfa948cc5253d91d2df4707b9dd4266ef7eaa0a98dca6820e7e169215f1476", 0x1f, 0x8}, {0x2, 0x3, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="d7451f6b5da88079497deb147f01774eca0a69e12b28a926b77eff7e8bdd83752cfb7a06e8cf9e1e1855bf978ac265f401bdc65aa517ddb80423a89bce23481f7f74cb7049ec83332a440b036a46e8e0d058591e806228fff9877047cc132850b13ee6b7c0b4df912df4ab3ed9c82fd0851b36908675c1", 0x77, 0x18}, {0x2, 0xffff, &(0x7f0000000440)='\x00', &(0x7f0000000480)="761eb1ec54efcad8f4b08d4416768b674098548e54744a2a51166a7d9ab98915cd53dd3576ce2c256b1e7a652da2565992c619654bc509afbfd66fd20a18ae2f436776e298f71718af545dd9ac99e181ec3db71c3c8cbba6ec0594085e75ed14", 0x60, 0x8}, {0x3, 0x1, &(0x7f0000000500)='\x00', &(0x7f0000000540)="dc57d1f22ada54d404a6651a8de49f08320762da1a2ca011767ecd4f11e341", 0x1f, 0x2}, {0x2, 0x45, &(0x7f0000000580)='\x83\x00', &(0x7f00000005c0)="bae8e6b6e950b0355c5d0414ed5e9a1c45141d539e5015e8426c51fb301dd2258060d877d549df478345d55fb176a4ba3cc3c92b602fdb47e9caeca60437109c4e8fc388ca8592949d22af59e03f9821d7ff12cdcb37d8fa9217905cf993f3adde5285ba2832665eb2f23884b547d134a4a9b4ce563a63dc0e65782ae68ab700ef90ddc472ff915651c007743e2981476844c9515b6662a4132e21b4327573c7f21cbf", 0xa3, 0x10}]}) (async) sendmsg$nl_crypto(r3, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)=@alg={0xe0, 0x10, 0x200, 0x70bd28, 0x25dfdbfe, {{'streebog512\x00'}, '\x00', '\x00', 0x400, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0xc004081}, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) accept4$vsock_stream(r4, &(0x7f0000000980)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000600bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xd4}}, 0x0) (async) close(r2) (async) 19.012592222s ago: executing program 0 (id=4279): r0 = socket$netlink(0x10, 0x3, 0x17) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newnexthop={0x30, 0x68, 0x100, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x5}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x40c0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000140)=0x2, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0xbaae43e1a1306fb) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r0, 0x4) close(r0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000380)={'veth1_to_bridge\x00', {0x2, 0x0, @empty}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x50}}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000680)=0x4) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000006c0)) r8 = socket$netlink(0x10, 0x3, 0x5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4bf9816b53a6213}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x48}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r3) sendmsg$NL802154_CMD_SET_PAN_ID(r9, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r10, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f00000009c0)=0xffffffff, 0x4) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) ppoll(&(0x7f0000000a00)=[{r8, 0x40}, {r7, 0x2001}, {r7, 0x800f}], 0x3, &(0x7f0000000a80)={r11, r12+60000000}, &(0x7f0000000ac0)={[0x9]}, 0x8) setsockopt(0xffffffffffffffff, 0x7, 0xac, &(0x7f0000000b00)="0362a6461cdb752696fcf458bd5921d268ea80acc9662b5d20eb1f02327888b88fa87c896db88728092cfbb144331929cb28768f994157d9481bfed5f41129d6be3df21970bd788af5d2376d9175d5d6374b5587f10f3d56bb9957dd0b36aaa5e7dd6a0a2ace2dc717eaad572b78fa42a34bb1287b3e5c187a4070175c99247d2cb88d697bde25074112eda4e70c8ae500a905b602382c848d65224983f864a78bb38b670fd23746a71d", 0xaa) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) 18.869604207s ago: executing program 1 (id=4280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x60}}, 0x40000010) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c) ppoll(&(0x7f0000000040)=[{r1, 0x1380}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0), 0x400000000000181, 0x20004050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r2 = accept4(r0, &(0x7f0000000000)=@nfc, &(0x7f00000000c0)=0x80, 0x80800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x84, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2a9}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x491}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x12c}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 18.793038673s ago: executing program 4 (id=4281): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x9, 0x1, [0x2d9f]}, &(0x7f00000000c0)=0xa) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00", @ANYRESHEX], 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x60000}}, 0x800, 0x9}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r1) 18.610553858s ago: executing program 4 (id=4283): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, 0x0, 0x20000000) 18.480629924s ago: executing program 2 (id=4285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYRES8=r4, @ANYRES32=r1, @ANYBLOB="00ebf25e5379f3593efcf161afc9354217e453e453f40e7a6997b6759b2fbbfa4276f370b707e09266f1cb6725f15b30db8090a6cc22bf337b9a826987aaea58f7d68ba4a59dc0339ef99e234b117e498cb3d637de3573eb3bfd493fbc9e5b926f0fe0d7d9f042b5fe8a15f7abe8c06baed010e17347d7d5a5a4fdba20a52241b6806ef94f31c51a7545d320e5aba2757594ce54e7e7185be20f2b36a505d6fc0013043b90fcd2", @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, 0x4100, 0x10200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}}, 0x24000014) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x2d, &(0x7f00000006c0)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdb6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf72}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000840)='GPL\x00', 0x0, 0x73, &(0x7f0000000880)=""/115, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x6, 0xa, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000980)=[{0x1, 0x2, 0x4, 0x5}, {0x1, 0x4, 0x2}], 0x10, 0x6}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)={@fallback=r11, r11, 0x2f, 0x0, 0x0, @void, @value=r11}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r11, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r12, r12, 0x2f, 0x0, 0x4, @void, @value, @void, @void, r13}, 0x20) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r14, 0x5421, &(0x7f0000000100)=0x9) r15 = socket$unix(0x1, 0x1, 0x0) bind$unix(r15, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r15, 0x0) connect$unix(r14, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r14, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x1, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="0c0756974d5c0714", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r16, @ANYBLOB, @ANYRES64=r13], 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00'}) 18.342958547s ago: executing program 4 (id=4287): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)=0x801) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040)) close(r9) setsockopt$inet6_tcp_int(r5, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) recvmsg$can_j1939(r5, &(0x7f0000000680)={&(0x7f0000000340)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000540)=""/168, 0xa8}], 0x3, &(0x7f0000000640)=""/9, 0x9}, 0x0) ioctl(r3, 0x101, &(0x7f0000000e40)="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") ioctl(r4, 0x8914, &(0x7f0000000000)='lapb0\x00'/40) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000011801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffb702000008000000b7030200000000000000000006a700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000031000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) 18.29787626s ago: executing program 2 (id=4288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)=@getae={0x36c, 0x1f, 0x10, 0x70bd27, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x2, 0x6c}, @in=@multicast2, 0x2}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x25}, @iptfs_max_qsize={0x8, 0x28, 0xbfe8}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4e24, 0x78, 0x4e23, 0x0, 0x2, 0x60, 0x120, 0x1d, r1, r2}, {@in6=@mcast1, 0x4d4, 0xff}, @in6=@remote, {0x5, 0x2, 0x23c, 0x100000000, 0x4586, 0x3, 0x80000001, 0x7ff}, {0xb, 0x5, 0x1, 0x40}, {0x7933, 0xa83, 0x2}, 0x70bd26, 0x3504, 0x2, 0x4, 0x0, 0x4}}, @iptfs_drop_time={0x8, 0x24, 0x20b1}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@broadcast, 0x4e21, 0x9, 0x4e21, 0x7fff, 0xa, 0x20, 0x0, 0x2c, r1, r2}, {@in6=@loopback, 0x4d4, 0x2b}, @in=@remote, {0x8, 0x8, 0xfff, 0xb68, 0xe, 0xc72, 0x2, 0x101}, {0x4, 0x6, 0x17, 0x9}, {0xffff, 0xfffffff7, 0xffffffff}, 0x70bd29, 0x3504, 0x2, 0x2, 0x6}}, @algo_auth_trunc={0x148, 0x14, {{'blake2b-256-generic\x00'}, 0x7e0, 0x60, "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"}}, @migrate={0x4}]}, 0x36c}}, 0x4004040) 18.206665463s ago: executing program 2 (id=4289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x50, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18.030642447s ago: executing program 0 (id=4290): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30]}}, 0x0, 0x29, 0x0, 0x1, 0x3}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r3, 0x4) write(r1, &(0x7f0000000100)="060000000300010000", 0x9) write(r1, &(0x7f0000000300)="060000000300000000", 0x9) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x60}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 17.987526981s ago: executing program 2 (id=4291): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r2}, &(0x7f0000000800), &(0x7f0000000840)='%+9llu \x00'}, 0x20) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2000}, 0x4) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2000}, 0x4) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000006c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "c6a0ec268478c36a27bf50f5cff9f0e9975acc7e587c81ca10a4d66d334d0253", "5a3db0e0120c3465a54c45c7b6a29bba5afe19827df50ff595630e63ad1e3c8864589d2a5d102dc580159ab7349e1a05", "280ba9712cedf9c011d0a1e702b0b8e0362c3aabde6d01c991f0d39b", {"ebb4c2eb5dad74b2060d065fef64110b", "1df93caaf4df83231670f8b2380c0d32"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200003, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200003, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x1a76c3d2, 0x7, 0x91e0, 0x40080, 0xffffffffffffffff, 0x14, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x7}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010100}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 17.869999381s ago: executing program 1 (id=4292): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000003c0)={&(0x7f0000000300)=[{0x9, 0x1, 0x0, {0x5, 0x5}}], 0x1, 0x20, 0x9, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x30, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0) bind$can_raw(r3, &(0x7f00000005c0), 0x10) r6 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) read(r3, &(0x7f00000027c0)=""/4073, 0xfe9) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$bt_hci(r8, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x7d, &(0x7f00000004c0)={0x0, @in={{0x2, 0x1, @local}}, 0x5, 0x400}, 0x90) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x40800) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r11, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a00f00"}, 0x10}}, 0x4000040) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r12, &(0x7f0000000000)="4c000000110006000011000200000a0002000000200000", 0x17) 17.829466857s ago: executing program 0 (id=4293): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0xffffffffffffff4d, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @private}, &(0x7f00000001c0)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)={@fallback=r2, r2, 0x2f, 0x0, 0x0, @void, @value=r2}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r3, r3, 0x2f, 0x0, 0x4, @void, @value, @void, @void, r4}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r5], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r1, 0x25, 0x19, @val=@netkit={@void, @value=r5, @void, @void, r4}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x48, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x48}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002980)={&(0x7f0000003880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x1d1c, 0xc, 0xa, 0x501, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1d00, 0x3, 0x0, 0x1, [{0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x248, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd, 0x1, "3472947da3f9a50e18"}, @NFTA_DATA_VALUE={0xb0, 0x1, "33a4e2ee99f4116aa716fc2f8f0ba5a00208581b63ad61227cba8bd229cf0e2e8f5cccb778389c33a051c745a398284635803aee153cf18929f7b308ace0d84a84fb6865f7061b1f49ea85446a7431db807a971083e3819cc2a1d3ccae890984fd354714217b36d3f5ac256897c414107ccdcb91ebfa3da44357ab388d40d98b56379e9a49f38b4ad23d07519d5bdb6649ca9f1c3425ff168f63d1764d0a0b62103433ca29510e8334599df9"}, @NFTA_DATA_VALUE={0xe3, 0x1, "faf7516028d78d3f40747d7fac63dda56dfc3c6cb28304f71159bfd74f4adbbd47d06d2dd9a7e98e3234fc40a4d2c8fc4231f9ff05c4f0a45132007b71a411f057c86451e0aadd2939a9031f0baf582b0730236cf5db720ee166d8c2cc8b55018b3b858957cdc37e1e640b61d47e466f406fe71b6f057de514fbb56ed30d165c953d6dc4fe216687e75dcc72e292c101297c9e576c31137464f5f78f4b3fe2a60de8e0ccb499762b34a912e88e8c50550d7befd6efbaf392587cd1a1ad99dfdca8272b2c5d92332fe604cf620b36d029ed52d6252e441a4053a4536feb5441"}, @NFTA_DATA_VALUE={0x55, 0x1, "e34821abb1350f454553286fe912a650db02f1fe0571b9253565b65e2f8950025c7a9d5007874db9ff9c00cb4571ab3f32c52be5376570c04c34df4e83ba8d17dcf432c200c3fcb1cf9f117777c25f8352"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x46c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x194, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x74, 0x1, "702950f96b757e64824ce0cf3df6ab93215fc760fee4fb75899df7a941b60b18028fc7ae583ccd4800852bb97050aa361df11f3d9acecd65162566eac6bfea38f2cd9443127dd6beac8f7b3e226aadcb7fabc024f7099f06e7cc9c5e35cc6892b73fae4f8389716473783efc1784d279"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "7612b5cf4d03301d1fa46e4a64bdb1c736a13f0bf70d2cc47624194483934a2d8789e8f2d62d5769829710feb8dd5bc5880a104558d2c831f58af89837f542c362ad3071089c0d69c932797d96a9de5954d99c57e6e83337ad20f5125b36a9ec118fbe8871cde2dcf47717ce65b91315736f892b64f3ff983791806f001b2f34bffbdaced766258936cf00d419588c9856765189791af11feee6998be901e55ee9c785cb5842fc7f8a6b42e087b75afcf9c2cda0c33f8fd06a9c165d9217eaa6b9b4"}]}, @NFTA_SET_ELEM_KEY={0x2cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "6ac3dc15b7e264933ee8abbe7eb5c9291f0cc6acb96fa1e4b72209284053ed9e7904b3d5bebd5552845acc7aee0db323b03f8f137f5ae5c31324e58af53f8a5f4cb5ce2a3b9e17b6b6765e82726a73a17c3dd2461bcf7901949c7010f954c5156084e6971b59a1a2dfcb0cde4e5c4c3fc2d72d835a6eb570f7ac37fc60e6a495c4f26e602deb9b478533b7bd78bf1a2da66e9c1c469eaed289f80884ead6f4d6fed07a9b9c5d8f057234b0b36de875905c2a39413f220123a8786be3f56997f3388f4e8e29871a6a509fd887a64f577743bfe7dd8feccb4f4f61ac046f082202692721c72b30884586e48c3d8f79c228c4b509"}, @NFTA_DATA_VALUE={0xf, 0x1, "c9923434bd0d0737539c79"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4f, 0x1, "25ae32ab2c4f4577e01cb91b8f7bb69ccaa48f0de9bd1941a27a9b2f3b89f0f6f9b8415ebc78c132a1ba33739ad4ca1cadbccad8ca30d1eac7387845102a30ca8f1692ee7fcecf3aaf1ee5"}, @NFTA_DATA_VALUE={0x4a, 0x1, "8d6d2d7db6c89cb7966e335883ec94183d48253decc66fe5789338cb222ffdc7ae39a1076fd916a80626c17ff0cb5a92c63c4e2db411227576d02218bad4a18ce27b27b2c100"}, @NFTA_DATA_VALUE={0x85, 0x1, "1f05929bbcc2c7016f24dadd27245cd0be62c834a4c71edc38ff88ecb56658455bfde5c928cf38794d2e2349be60041497b2941992a6d48c03acdf75c0575e5c69c22e1646294d93cffb4b6d6b4d39eb417b36b35557a62afa63eadc87129583700884c4b223cda5f1a253afa24f1876d0061cf82e018ad21cf31bc1b9efe87a49"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x902e}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x1dc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x174, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x168, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0x15c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x43, 0x1, "d657c1cd4cc18f1a64cc997a10ae98fd86dbe782ae4a41c4cd1c5ae108043bd9053539de6f9535e8b4d27923f105814f0300c632dca36db3c1dbf2c237aff7"}, @NFTA_DATA_VALUE={0xdf, 0x1, "5ff79afcaa428cf29ff3e0069a7593a0df69caa394482fc628cacd0aee67927485c26a4eb07174b50b90ca9addd677fb8d837fd6fe88ae99ad001740ea9b3d2343d49c72d214fc9f57dfe51c658ecaf6d8ce2de890b930bd565e3049ce85cdf595e78a76057103ff1bfdc1f55ff5f5e2bed9c47540a585b2cdf5ba99db2755fc0c71e30cc4c5cf84d60afbd8c98235c86d7ca10c3c3ac95850a1310a8de7df75d504e5166dfac35122078a79d939a063f703dbe322acc703c68c253f35bedc31568ab25c958c5bfc607a8f07f534f9ccd4ae4480bd11f578f577c1"}]}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "b8f9abc7793f60430ccf8680eab8e53096d5dc2da16a8dfc93af442a7c6c6f03e0ca2526ceaeaf4240d6e7f9a8119aea5c8c12"}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x7f}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}]}, {0x133c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x808000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xf8, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2f}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x74}]}}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x1128, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xb3, 0x1, "44c470319203b27a151e7eb2e5cc6bf03c44190ae94fdd72f64c80b46ac87df5bbcd28eb15de945c4960ea78f1d92c258de349ee4f7e54a54ce6936dbc88169bc1832329591264fbd7a987b27758e05564d5bf0a9b463103d9f6fcf254756f3d9acfaa2bef63b7fee38e831b4fad1cddcc60fa30b9f92a74191e582e45b6ba23c897ddc702c3b7701c40580efd3298e19a72974b5a95f2cfc11173e06f09527d1d8b77d0ad1a706680b5f2f1c713c5"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "cf40583a0da196020fe64f862760c7051e120843fc9d1f1938506cc850f86aa0a2601764df6b2e24c77ee1f36b332a023151442da8a261b20802"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x148, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x103, 0x6, "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"}]}, @NFT_MSG_DELRULE={0x150, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x4c}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2038}, 0x1, 0x0, 0x0, 0x80}, 0x4884) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.641641921s ago: executing program 4 (id=4294): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000000000344fc8f9e7ecefdfcabc14fab600"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x1001, 0xffd, &(0x7f0000000880)=""/4093}, 0x94) 17.041588483s ago: executing program 1 (id=4296): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000101401002cbd7000fedbdf25080001000100000008001580"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r4, 0x50) (async) listen(r4, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x40000012}, 0x48) syz_emit_ethernet(0x16d, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x16d, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x20, 0x8, 0x6, 0x7a500000, {{0xf, 0x4, 0x0, 0x10, 0x3c, 0x64, 0x0, 0x8, 0x2b, 0x0, @broadcast, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @multicast2, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0", 0x2e}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r7, 0x4ab3}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000400)={r7, 0x244f3460}, &(0x7f0000000440)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000400)={r7, 0x244f3460}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xa1, &(0x7f00000000c0)=""/161, 0x40f00, 0x40}, 0xbe) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xa1, &(0x7f00000000c0)=""/161, 0x40f00, 0x40}, 0xbe) shutdown(r6, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1000, 0x5}, 0x8) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r8, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xca) (async) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000600)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xca) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@loopback, 0x4e22, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x20, 0x6, r5, r9}, {0xffffffff, 0x1000, 0x3ff, 0x2, 0x3, 0xb2, 0x6, 0x9}, {0x4, 0x7, 0x10000, 0x7fff}, 0x4, 0x6e6bb7, 0x1, 0x0, 0x2, 0x1}, {{@in=@local, 0x4d5, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3500, 0x4, 0x2, 0x6d, 0x1ff}}, 0xe8) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="ff06d500", @ANYRES16=r3, @ANYBLOB="010200000000000000000300260014000600736974300000000000000000000000001400070000000000000000000000ffff7f000001"], 0x3c}, 0x8, 0x3000000000002}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48d9}, 0x8814) 16.850336346s ago: executing program 4 (id=4298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, &(0x7f0000000200)='nfc\x00', 0x204002, &(0x7f0000000240)={@_ha_fsid={[0x1ff, 0x6]}, {0x4, 0x5, 0xffffff3e, 0x5}}, 0x10000, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x8}, {[0xbf, 0x0, 0x2, 0x80000001]}, 0xf, 0x2a, &(0x7f0000000300)=""/42}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r4) (async) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r4) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4008004) pwrite64(r4, &(0x7f0000000580)="cc9e439126fa8f846acc2085edab21efcd6be7da3c4196a973d839ac8f61aa94dae7e66ce7a2d5b8f76bdd6146c83fd065c1ce4fe5b9879a2cb47b47b01619626f54341fdfa887992f5a58e00de1c69f58752b7d0db165025027d271e3b8ffdbcc25e220007ca511a952640687c78d6f6c68efe875605181d69046b2936ce2b13e21a1f672721ad6f0f17b66fa76c133523c1e7b8fae2423a320c6143913ec9f6ba5b9ea2db4509d852bd657121106b5d07e8b75c0a5850e3e9016922ec4549e47f6", 0xc2, 0x7) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) ioctl$TUNSETGROUP(r4, 0x400454ce, r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, r7, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x3}, {0x7, 0x6}], "498d082a47106e5d"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1}, {0x1, 0x7}, {0x12, 0x4}, {0x7}, {0x9, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0xb, 0x6}, {0x7, 0x3}, {0x9}, {0x7, 0x3}, {0x7, 0x4}, {0x2b}, {0x1, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0xd8, 0x6}, {0x4, 0x6}], "d1925d581cec2129"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x0, 0x2}], "3f14ad09a3f1f61d"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r1, 0x402, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r1, 0x402, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r0) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4100800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x39fe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40000d4) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4100800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x39fe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40000d4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r4}, &(0x7f0000000b80), &(0x7f0000000bc0)=r4}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000c40)='lp', 0x2) r12 = socket$inet(0x2, 0x2, 0x9) bind$inet(r12, &(0x7f0000000c80)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000cc0), 0x4) (async) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000cc0), 0x4) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) ioctl(r12, 0x1, &(0x7f0000000d00)="c436433acdf430e285ce36944147824cfe02185177936a0ec97d1a3065b0e81b6ba579dbb230a499e58c24746ca233a156a455649adfbaec597f9508dec6f34d8b288fb9ba09c49f566bf03773fd0e926d344937755d31016985959bdc7fb6b03a76c097bd59f20952efeeaedda014c538346d78a00b5557c78bb55caf9cca055911ff04edfea64ae83b4e49ca767d8afa4d9674d3d93ee74a4a944316e254cf78d47425fea6f03de7f5c28d83f48f6ee4613147da46cc") getsockname$packet(r4, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e00)=0x14) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r13, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r13, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 16.823094192s ago: executing program 0 (id=4299): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040080) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$team(&(0x7f0000000180), r1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0xa7c, 0x8}, 0xc) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f00000002c0)=r3}, 0x20) (async) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local}}}}, &(0x7f0000000380)={0x0, 0x4, [0x4a2, 0x54, 0x7b3, 0x2e6]}) (async) r4 = socket$inet(0x2, 0x2, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0xc, 0x6, 0x6, 0x2, @loopback, @private0={0xfc, 0x0, '\x00', 0x6}, 0x40, 0x81, 0x0, 0x80000001}}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, r5}, 0xc) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x40000) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf0, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb38a}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe55}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@getnexthop={0x40, 0x6a, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, r5}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x40}}, 0x20008040) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)={0x8, {{0xa, 0x4e22, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, 0x0, 0x4, [{{0xa, 0x4e22, 0x40, @private1, 0x4}}, {{0xa, 0x4e24, 0x10001, @loopback, 0x4}}, {{0xa, 0x4e22, 0x0, @empty, 0x1920}}, {{0xa, 0x4e23, 0x2, @private0, 0x1}}]}, 0x290) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f0000000b80)={0x2}) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r1) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r11, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x401c}, 0x4040010) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r10) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r13, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x22}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x80c0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000011c0)="c325d38c33618d56aa7839364166871e164150598d9f9a1a728f78a1036d1014942ef6f079148d59944b4c9e5b0b86977e0e5199c8bfe1b0a5a64e152f8a6f62ab08ba27c091435ee5165be332cc9afa4f05e06951ac0d211f2eb544f679c7b6d3cc9a3c198aac26f63476e9c4ee6b095f1eb2af2c31816aecef7ad15d979ac7b8e0df9a7803cf48a0d8fd59997c7085d48758d6c6328b21509311d010eb0d1e", 0xa0, 0x0, 0x0, 0x0) 16.642734578s ago: executing program 2 (id=4301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x50, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16.642113576s ago: executing program 1 (id=4302): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) (async) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, &(0x7f0000000080)={0xdb6, 0x9}) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, 0x10001, 0x3, 0x308f, 0x100, 0x4, 0x81000223, r1}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x1, 0xb}, {0x0, 0x9}, {0x3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) 16.471417185s ago: executing program 2 (id=4304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268", 0x5}, {&(0x7f0000000040)="8f000babe454684c79df38d5a587f9968f3e5960029a57295ff98551e55db8849ba0d049f7fb", 0x26}, {&(0x7f0000000080)="8e80147a89db9f4c965274b55d07ed2de85a87f7b92a2e6bde8d8ef32f1c315fed6671004372a1f5c4b8f6c07241c882415b4ae414bf777f88842ec133ab281c790d5568470995bd2f524d30be597a6546a12f8834a44e8300dad43cd9ca6238c8ca0f91e2cf2d7afbe9ecea43556c2cffa35bf847bc09872c19ba184d7cc638cfa0990302aeb6a64f3e69a6ad8f84e68d1e04bfae08f8a07d58b68cbccfb48be8bb62db07a76cc2adf6de43fe8a1f594d842b0376ec76356fc230e1f2984d52ce38413539df", 0xc6}, {&(0x7f0000000180)="5e9886b14d730e815fdacb8e5e94991157ac5471a621432a51d9ee95067e37f324acee7474079894eb239a7c367c29e9c60402d7f5c8d213b686aacaa2d2bf43f78e4fd78745a8862c7cf48f23874279f10f47651021414d7f9f33a7ebc98f4e1b35302988114d537cbbb55c0e365874aa62184d2ee1cbabd9b5ddd8d87b79d254e7792997b3555bc58ff5d7a3e314134bfdbc85135cedae05de56d2626219663cebdd4b918176840fcc4a233ded5a65b2508f2efe1a5919fac5dd8ab810dad18340f82773294b4f", 0xc8}, {&(0x7f0000000280)="7af3a630c18f11b70a601b0ec0bcb239ec2c064ff62d90d30bb4b2eecb3270a2276234170c42f8e7f0d907d85df8f3d8844f153cbf3ac3194cf8b130812baca6fbd8f44f13a2b1feedd6966ba59c8dd5bafb7980878b69936ff43051508f388343e12b9e535ec258c316e8c393491976b6bac6c716f92011d27c17e0393cf00cb97d304800342fc0cd3768695d4c1ca1e20d3551d62717eb170f8e9a06e3604d17ce7bca9bf9ff8a987602f186282143aef29e75b1d5adfd6f778eda51fdbf13965c731b491b4ce31b", 0xc9}], 0x6}, 0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050327bd7000000000000700000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24044080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0xd4, r6, 0x408, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5b}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b965ec168e5f7a149250102a1a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bff14f7e129ab1c842380de29d"}]}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e108927a8a"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8001}, 0x20000080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 16.27345194s ago: executing program 1 (id=4306): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000600), &(0x7f0000001380)=@udp=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001840)={{r0, &(0x7f0000000000)='&\x00', 0x181, &(0x7f0000000040)={@align=0xf, {0x5, 0xa, 0x74, 0xfffffffffffffff9}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x10}, 0x5, &(0x7f0000001780)=[{0x1, 0x278, &(0x7f0000000140)=',)\x00', &(0x7f0000000380)="3285da7b31df812e0de18e2c5972e2d778884b3adc21a2db64d59906a298692cbc4bd80d44178ff49b265f0cdc7ca2f619587009715b2c701fa1fa8c4076b583abc48a591866bf9c50432a81aac7a5c2e9cf4cbe52d1122fcd1865abef3e7a873937444c7d12c090844b3098d73a5f9b6f2bbd216673da41bb2b92a3be2e6da24216858825bde0b09f02d4b9", 0x8c, 0x10}, {0x1, 0x1, &(0x7f0000000440)='%@[),(-\x00', &(0x7f0000000480)="a48cef0ecd311295f2fd18a3bd3e7a752e17a02001f96961b8be184f109b9b810f3adbed663dbdd907dc9c03eef532af8f6f169e7402f8b765535e2dc909f31d81e2b6c6cd7cbf5a35928146318069c4a908fdb0d906601ee8ce4fd5eca85effeb1e5342fa84283e7212696d15ad9aeaa40146f35ddb9bcdd380574c559ec5b0bc27a8d6c66ea39276ea429803d35339814f61c20c00af412d399720de4ab4480a08b9eed76de36989a406c8350f52cb7b1e0d0a9da36e972473cd8aaaa7004d9384dd9217e1275dc2556cc0205cda76eebdb0cf2e56444aef00e89cc7df6e25590a80d519cfd65d5dc35e805f472062c2b0f338461708", 0xf7, 0x2}, {0x1, 0xc000000, &(0x7f0000000580)='%-\x00', &(0x7f00000005c0)="94c95ab1e5676eaafecc69b9e0f0a969bd0360e61cca205577ac8907985d92b0b6f1b42b6e1748827b0518ff6f4008f533d0de8c9ecec9da0c14b0ace4bbaab286cf84fea30ae7311a1d7d04279d0b8d0fcfaef0547cb45aa596d9849529cf5e65c0ba771e3762a6621b33560852e3484f7366057d1a577458d2ef10b5ee1c3fb85c9a4c689833341ba86a77a20c5895d737612bd0aee56cb4c481276a1074276581c0a574c95fba6f32b7e4199f4326ada0615a340dfb80cdcbc6c7ec907c7b717bfd2684b10109d549184f5c6430b24fdab5487adcb9a6a91b1630928e1539c86e9f31b3ce50408e806bec5d1e423efe3d0190a202efbd5a", 0xf9}, {0x1, 0xa4a, &(0x7f00000006c0)='-*\x00', &(0x7f0000000700)="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", 0x1000, 0x20}, {0x3, 0x400, &(0x7f0000001700)=',\\#]:]]\x00', &(0x7f0000001740)="b9409b96349586d7038a3defd2207b8b09688665e0deafe2c545cab2595c8e93a4", 0x21, 0x2}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000018c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10001}}, [0x2, 0xffffffffffffffff, 0x8, 0x2, 0x7, 0x6, 0x71, 0x5c, 0x3, 0x2, 0x7, 0x7, 0x7fffffffffffffff, 0x704, 0x3]}, &(0x7f00000019c0)=0x100) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x118, 0x20, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x79}]}]}, 0x118}], 0x1}, 0x0) 15.444387463s ago: executing program 3 (id=4313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0xf5ff, &(0x7f0000000200)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.385724598s ago: executing program 3 (id=4314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x54, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.330467513s ago: executing program 3 (id=4315): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000008000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200b3f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0xc, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 15.234709804s ago: executing program 3 (id=4316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newnexthop={0x94, 0x68, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x80}]}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}}}}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP={0x44, 0x2, [{0x2}, {0x0, 0x20}, {0x1, 0xb}, {0x2, 0xd6}, {0x2}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x1}]}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8}, @NHA_GROUP_TYPE={0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x400c5}, 0x48880) 15.228089354s ago: executing program 3 (id=4317): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socket$inet6(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f11, '\x00', 0x0, 0x2}, 0x94) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0xd}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) bind$x25(r3, &(0x7f0000000080), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xac, 0x100000000}) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3d, '\x00', 0x0, @fallback=0x2a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r11, &(0x7f0000002340), 0x3fffff7, 0x4000000000000) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$phonet(0x23, 0x2, 0x1) 15.085082649s ago: executing program 3 (id=4318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r5, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e11100050000", 0x6, 0x20000850, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x5, 0xa) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000170a010400000000000000000a0000030900b4bbf9047dd7fb670000"], 0x20}, 0x1, 0x0, 0x0, 0x48084}, 0x2600c0c4) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24004004}, 0x10) 1.198273263s ago: executing program 32 (id=4299): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040080) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$team(&(0x7f0000000180), r1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0xa7c, 0x8}, 0xc) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f00000002c0)=r3}, 0x20) (async) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local}}}}, &(0x7f0000000380)={0x0, 0x4, [0x4a2, 0x54, 0x7b3, 0x2e6]}) (async) r4 = socket$inet(0x2, 0x2, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0xc, 0x6, 0x6, 0x2, @loopback, @private0={0xfc, 0x0, '\x00', 0x6}, 0x40, 0x81, 0x0, 0x80000001}}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, r5}, 0xc) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x40000) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf0, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb38a}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe55}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@getnexthop={0x40, 0x6a, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, r5}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x40}}, 0x20008040) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)={0x8, {{0xa, 0x4e22, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, 0x0, 0x4, [{{0xa, 0x4e22, 0x40, @private1, 0x4}}, {{0xa, 0x4e24, 0x10001, @loopback, 0x4}}, {{0xa, 0x4e22, 0x0, @empty, 0x1920}}, {{0xa, 0x4e23, 0x2, @private0, 0x1}}]}, 0x290) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r8, 0x89e1, &(0x7f0000000b80)={0x2}) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r1) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r11, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x401c}, 0x4040010) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r10) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r13, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x22}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x12}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x80c0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000011c0)="c325d38c33618d56aa7839364166871e164150598d9f9a1a728f78a1036d1014942ef6f079148d59944b4c9e5b0b86977e0e5199c8bfe1b0a5a64e152f8a6f62ab08ba27c091435ee5165be332cc9afa4f05e06951ac0d211f2eb544f679c7b6d3cc9a3c198aac26f63476e9c4ee6b095f1eb2af2c31816aecef7ad15d979ac7b8e0df9a7803cf48a0d8fd59997c7085d48758d6c6328b21509311d010eb0d1e", 0xa0, 0x0, 0x0, 0x0) 1.153875991s ago: executing program 33 (id=4306): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000600), &(0x7f0000001380)=@udp=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001840)={{r0, &(0x7f0000000000)='&\x00', 0x181, &(0x7f0000000040)={@align=0xf, {0x5, 0xa, 0x74, 0xfffffffffffffff9}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x10}, 0x5, &(0x7f0000001780)=[{0x1, 0x278, &(0x7f0000000140)=',)\x00', &(0x7f0000000380)="3285da7b31df812e0de18e2c5972e2d778884b3adc21a2db64d59906a298692cbc4bd80d44178ff49b265f0cdc7ca2f619587009715b2c701fa1fa8c4076b583abc48a591866bf9c50432a81aac7a5c2e9cf4cbe52d1122fcd1865abef3e7a873937444c7d12c090844b3098d73a5f9b6f2bbd216673da41bb2b92a3be2e6da24216858825bde0b09f02d4b9", 0x8c, 0x10}, {0x1, 0x1, &(0x7f0000000440)='%@[),(-\x00', &(0x7f0000000480)="a48cef0ecd311295f2fd18a3bd3e7a752e17a02001f96961b8be184f109b9b810f3adbed663dbdd907dc9c03eef532af8f6f169e7402f8b765535e2dc909f31d81e2b6c6cd7cbf5a35928146318069c4a908fdb0d906601ee8ce4fd5eca85effeb1e5342fa84283e7212696d15ad9aeaa40146f35ddb9bcdd380574c559ec5b0bc27a8d6c66ea39276ea429803d35339814f61c20c00af412d399720de4ab4480a08b9eed76de36989a406c8350f52cb7b1e0d0a9da36e972473cd8aaaa7004d9384dd9217e1275dc2556cc0205cda76eebdb0cf2e56444aef00e89cc7df6e25590a80d519cfd65d5dc35e805f472062c2b0f338461708", 0xf7, 0x2}, {0x1, 0xc000000, &(0x7f0000000580)='%-\x00', &(0x7f00000005c0)="94c95ab1e5676eaafecc69b9e0f0a969bd0360e61cca205577ac8907985d92b0b6f1b42b6e1748827b0518ff6f4008f533d0de8c9ecec9da0c14b0ace4bbaab286cf84fea30ae7311a1d7d04279d0b8d0fcfaef0547cb45aa596d9849529cf5e65c0ba771e3762a6621b33560852e3484f7366057d1a577458d2ef10b5ee1c3fb85c9a4c689833341ba86a77a20c5895d737612bd0aee56cb4c481276a1074276581c0a574c95fba6f32b7e4199f4326ada0615a340dfb80cdcbc6c7ec907c7b717bfd2684b10109d549184f5c6430b24fdab5487adcb9a6a91b1630928e1539c86e9f31b3ce50408e806bec5d1e423efe3d0190a202efbd5a", 0xf9}, {0x1, 0xa4a, &(0x7f00000006c0)='-*\x00', &(0x7f0000000700)="4e83242893c206c778cd0dcc9e43181213e746fb05cee8b29266f6a1f9e0b17407677f097029a34121260857da37ac8223dfabbdb064bbd724b76eeb5e31d8c927f085f80c6c9ff0326d8e9fc21f1bc7ebbd152e1156bb364299c87ac8d85ecd7c5f2e7a17efc8fac149fc60fb70652a053934813d748c06d91821901fb3c648b60d7353c8b71c026a7e561f010c43b42a795baff8ec587e1d3296d505fb1928ab741e800f97323bc67f0c83de4fff4d557628c8d89f716a1064ca9b40c9fdcbd33e0a2633f22f426c69f79910ac3aba08c88cb55e45434aafe44b40e45a9057d5783cd5226575b35c0a16935d6bd5c2dccf1872c95fb112c6aa7794662fadb49a8e3c22d4430ca27f84b2b872dd247d4e239df4fef020ca26f82c55ed0106c8064c2d5d034f02d68c2ef3b494c785dbca4acefe9a0df19406d39d0a223252fc1f45368648c2c380f347bf995b58c6a223d8d5ec66b76b6c59ec4d7e492cdd1e27d2d9e04e67ce68bf4932260d798e5082a7ce46c29a6acd12c1b83c68f1a3360992d8024a1781a1b786fddd3bd23996ccb4b17e3af9d239806ea5f42a8e1c13631bcdd8645391ee57a2c8bfa46461dae3239356e2b6fa4e6e1d875f67279f73b45af4421f4cf8435a201ab8b780815a651fa6a35a670dd7ade30c03f1a684721b34993a9bcafa08cbd74f5cb50bbf12187bed0634dcd5a76b4024b5d6831976243604266d4a2d7dd98e960710e2a029b1c012ee24dd1955bbcee116e9242cfe32979e79aea49a3ce0568abb6a26ca756737fffbad44de8241788b11f7d2c6c2dc5aecd0ed5868daec3e6055c9181c110becd42fa4e95aab6acd4c7664cd261425480168af6d7ee33967b9ecc2613ff1056ecddeaf371a60cfb6eb2c06beee95b701b03f7066db8cf31a1893741574c716b44f886706efa55925715c0e149c608651adbdebd9e904a60e0e6813455607d07849de2f2089d3881f1d91980331de39129eaa45abb1bb986a7d83cfcc52a4ade8dc31b7ac53d15c7bb1396b7ec83768d9726f5a766a785604020d10355aafeb77e39127f348183b61ad5458cf346b8636fcfd9e67189c2677c40305d6d16eec4cfedcc6deb53de1a429d7d10ead7467bbe745e0532085bfb268f2c324de35c7be4cfcbff1ee4a202c976f15fb7da0eea40c216122f83a8d580ce87dcd95a392f5ccb6309f6a2f8463d2c78476ccb79f480fa973b08bd9301d86be53884a7537c33cff59cf38a4dc66bca6eec92a453d32cbd12eb10da68ec26b7ff48c99b8df86004b4c61fae16090253ac5c711930c4c3b974b2b86e3ed19bfccb4d4b6c0395b3e1374564643f1f48d5894f0647edaaa599846fd88491dba462a0b2653b48508596045b078c37c51a7e67573035b3785eb2749384e0a575958ec0ca41494ec1958ad692dafeae7fbf82d9c2c48bdcab85048e5b8e2a0bb032152b8b9a9188e198cdfb398b686baaed62b2aa44985c9e18f1e29be220f5efb5ce157536813940e5e41adee2bcd69ccb65a984896fa6960f9e8c7b9fab9226f884d7bd40d951bdbab41fe36ca637ab20de36c9643b9d9971c39005e1c44bd1b6be3aa259f7e77b23633868c0647a811346fe280877d0cd63ceaa3f30b18fb662127ccb83e917d3c2e79160c344f1f1ad46251ba4e7612cc56eea3b53ce61fc0e6ee53e2d81d7fe17bdf81a5d6f1b0398f2499dbe9dc083ac3ed81f33a80aaaae14fbad4e169eca78908cf605d570008e64ce9f9bc0bb53647c9c7203c6bde95e41bfbe93a1910860e522d38dea830c9b66601a8059ae699d64387533256f9f6640c73f334193613977f686e8c6abfd895b955ea97e32a2cc4d28a65544ef13731a6f87c49f76da51246cb7c907f8a1035c85f208bd0ec067db9b7176681d26cd9c68ff3f782724df221db0fd1351bcfc3e01cb04094cc18d849a916d2f1db3fb513b93d053005d873e218b59bfee8e7f33cf1579a07395ff71787a612c6f91104f794c1b64e3c59d3fbdc923e2b4592d636224a582d36895d8f9c0e46c2a72b03522fe65de16cdf83878d0ee4c14af2886b651f9978658f8aee900d7f070f36f8e3ade450209f45391dbcb99716e66651cf19e4191e9cb879b7b9dd07ec1a6b87dad883b19c91b681942bc2029cfc03cfa9e20c7c47654b1e597db41cccc1f0956b3bb7683ef624ad4b9acd96234b874ef9fcd7710ec38facde7cf1b8a9240503a0e0a99e1deb848d09820228d09f981da619fbd7807c59cd5c7f1a87e7d9e2fd416c73b477e944b4e7e767024d7dca9a76f3d8b1c13ac296d7d9beaf8d383c217c9ac6c8cfae59f78ce1609c8d9fb26ae0b703c3ce1194f79da13bc5faf945c84a90596b2e1598a0a506b2747c92b06b9d402abc20af35419ab5d64c609acddf510b30e07408e1cb5bc56672c174b50e6fe9739f3778881983e5aa52a2dcb6d53391059e112a9cc2117a9754281943a6db6434615df7dc2fdd10c8d2927d078d1e875876965bca318fc4ed2c2707efced99427f9c469e8a4244967a8225de2f2228cbb2afc29e02a9ffe54a6cc0651142f4624947178ba122f3ed54d41ce2cd708cdde415eb64d987b3eda49b8b20b52ec999db45453324d542abe6e066684b4198f5315e8078aabfa945ec2b8b08f49feea710e9a11c0883b3a19befc43e1d70d6a27f1e8d5d242fe4666286f65cdf6776732aaf3fb732b81f136af8ec4d158635d00fa317424dbc31a31ba4f0a2f0d276b1b2a5735935258bc6c3446e86c76fa9037ad2e6ea2561daa870b672f5eaefc014bc4ad8ce12a757298574e002ac8c8adefa3a510ec6b323981a83b89cff3c78b2b0cd77022b349b78c5d4d391d3b3a9c1b839db6cad80b6f4ef31725543eb068e085ac20b95acd9d0ab0d4520a42febff20865a4ec6f32322e28f314e64e584225348f8bb3cebbad7e5bb503fe35c114974534b6b1d7cee8d6ec34a71ffcf0ede6fdde172f05515946c6642439e52b6f4b3a450ad4c778162c5b6b0a352e97250c9b7a3326e429afb12a84a846fa85b653af04bfbf0c2208d13c098392dbd4e5dc36b47881b1beeffe104d75686ed72006509677897dae841a074f26e278715f3581768a42805bdea11893320871799b1f93149ce97a39bfbfbab21182e36ad242f8e7f1047a30dc5a1444a451db49c3c91a7306836e0cd50f25f7006b0b7fcb71beb43a08890c6dff7ca280521a8321f659227011c7b9fc2c08f0fda4ba7b65593c32d3f8648de1bcae8ee505a549e149558d8dec151f3410cc2489617a2c715f2a80eebd7055dc85d005a9ea19df5ee0375e2b4ec5495201a675f8a9d99af675f43c10e68fe797bb696a3c353d8448637d58a949bec93f856dce54f3127a526910a32daef910e0bf4eb84efd58ba535009c45b5ec6e27d557d31d5bd7640aa4ac428bed1ee4bf856120b365a9aa8b2263aed0210fdef9938b7c258c8550774d55aa3c9c4dea76cf2216dd3dbfb08c5741d8801363c14b9a059c9227c065ceba9baa4d52424b4527dbcfe94e8904d91c32bceba3303c09704c97a119bc8427b6dbd16e632056042859deac958ce6880c5a332d816cba33d284e87d28d79859e4b4d8eb5c36984263072f15d749f4bb21287aad52a160f15ed24deed9402a795a5f6e16fb86187b88c5ecc4f5229271b15053b6c59f0aad785c05ad59cb1a40a6ab8a881df987dd6b04edf9233e476b57913ab07e9f1ff368ad38ebe7be6a664cd0f9e1103175cd4ef5ac0d896f1d26d5bcfb4909de12b3e09b3639e9c559be087e0957829197360d90b80300b7f8ad8ef7e7bd995a0d722e48bba2b334b888fb005521c07625636609ddcfb3ef4c453af1a6578903df5d4c85d2ca20173211560ee50afe55fecc5e42502101d01bdaf9bad7a64e2472d868f873f916fbc7529c878a34f6bf2f2bfa7523fe27f72e849cb0334a063e0897a49d4c4cd41ca2d9e013c2d745871a94556bc818f430715a53160e97830fc2844e1e3847440de718eaafa79af4f5bf2692931c82fc9ddc571af18fd65ddc53796de845e385bd1f599d9c94043f6655da9532740acf01fd29a648d29b9489994a9dfa04c834dae49cff2ace7a46b76d3bbe519b89463c4c7f0b95b9d8b26234b6da014e32253c2633297dcbd7100f3bdb10f0f5c4db87bb37c17e60be43d736c74074e032a09a57500cc2c8f61697d38938b4ec7f069b793eb0c09ae9bdbd0a1dca42ef1cf0eb8472d6352481471a01eb52380ac29fbbbc6721e2549af75c8dc424315fabf865eab0774c36c4c532d4083999bbe9a2c176f9c64b57ab34d5b8b2b7769ab083787e7bea36fccf97e0a4d7c9cb6a89fc9498fa2bb8a3e64b16d2b4a9f1fdffd96a0f3be60d6350e9ce54fa600e0776c048d7035b978b5acb20ff2f733a34264f70b59322ec6ff2f6b3e07bd33c94db707c452bb3c0ca2560f9aa386f7daf9ce2676be1ee8f342ec22ccbfc51cd0fdc12299605c579c8111ba7a8bc0dfc3074d960b5a6de79bca56edaedcd8cb6d64364c7ade7837d2491761aaca437169e4f9ff5c861e34bf67eb7cba491cc3e6e1360e805bee137833785368b3c266190c42d6101c61fbab1bb1b238a49136640787c1e126a2fc17e2e6f59ddf2768861f487f969c4e52b49e73c8e829b64dc445053e10369b86ef9d02ed2a4f240e53c6f1e5b4a61fa1b6d28215a492ebc85365e9fcfcda96d808e75c3674df15dac859a912eb5ef0900c3924c39e330f6fa230fcff534f8f6cda3a1756c96bdf2e4071e6297ab738ae5cc8219fa5cf994a7286c2d6e055253562666210f5b85191f7968e81356254f86a81fbc8b8dff94279693dd53b1cef7ed16b72e94b10a1a8a0443e9f94270b56d04cd06cade4b5f1a8f3d02a5b7c0a86e500a81b2444ba5c2aa6bf084114b74277163f7dbf541e6ab215d519d1f7ebac5d79af84116428bc106a2fe5584f4d9afb1c9fef262399dc1fae70079e00d6bc993642d5fea545a61a865a4a2413bd7eba89e3dab34eee36c5d3d8c43312b3345e99dbe7345c300450ef4fabb41002c71651067f25bedb73d6432fa9789fb3295052ad52b780361ab92373a243293ee9211c59fd542a029686f15565d95d7d16dabcafeda0e077256a61b65aaa5ac452d9268d45964d047aedda9dfd99161bee2910167c2bd14602f57bbe4abe9ef895025ce56d5d7155083a9760d811d71edf37ce3369f3037f18217600ddc9fa7cc5b3e0075738f211811f0d49cc10cae0840c7dffdf5fa41758340cebdc848daad085146ce623e27883a9e2ad835afd50c3e5ce25d920464bf864803c4bd7efdfdeee4a9b7c44d780f9bad18dc846b5a7e91c0cd71a7be7035de36c447b620be87187ef23f0b1d670b30a50d2d5289c4a90c7d1eb8ea4f6c0571bbfd3344a5147739b49169630512016e687fecf06a2247bfa8ea46e33e824f580191a3fc5da9b5f440204e5f748b79a2141e455c8e62655cc0812f6dc7c9388b6cf71ec0127af32b44e859716562d3b6b70a0c79045e1b3f0db13b895bb5c5741dfc051a4b9b8d2c0ab25ba0f16999a67df77ba255477017c5f925a4c724c1d62e4aa4b3602682b195b91d19d027321491e75532d586657ffcb36d1c3172151f30637c38348793c4d2d1ca4aff8ee89dff7e3cb31a9c30d37e724619f7574701a3863e2e6aef5ba44e096deb91988c562a1567768c66eb1496133e78de580213ef87122ef510c7736ec7984fe30d9ab50b496a0f76c91cd72300b48356b329b59ca5814e9dfdfc2a707", 0x1000, 0x20}, {0x3, 0x400, &(0x7f0000001700)=',\\#]:]]\x00', &(0x7f0000001740)="b9409b96349586d7038a3defd2207b8b09688665e0deafe2c545cab2595c8e93a4", 0x21, 0x2}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000018c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10001}}, [0x2, 0xffffffffffffffff, 0x8, 0x2, 0x7, 0x6, 0x71, 0x5c, 0x3, 0x2, 0x7, 0x7, 0x7fffffffffffffff, 0x704, 0x3]}, &(0x7f00000019c0)=0x100) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x118, 0x20, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x79}]}]}, 0x118}], 0x1}, 0x0) 1.119042961s ago: executing program 34 (id=4304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268", 0x5}, {&(0x7f0000000040)="8f000babe454684c79df38d5a587f9968f3e5960029a57295ff98551e55db8849ba0d049f7fb", 0x26}, {&(0x7f0000000080)="8e80147a89db9f4c965274b55d07ed2de85a87f7b92a2e6bde8d8ef32f1c315fed6671004372a1f5c4b8f6c07241c882415b4ae414bf777f88842ec133ab281c790d5568470995bd2f524d30be597a6546a12f8834a44e8300dad43cd9ca6238c8ca0f91e2cf2d7afbe9ecea43556c2cffa35bf847bc09872c19ba184d7cc638cfa0990302aeb6a64f3e69a6ad8f84e68d1e04bfae08f8a07d58b68cbccfb48be8bb62db07a76cc2adf6de43fe8a1f594d842b0376ec76356fc230e1f2984d52ce38413539df", 0xc6}, {&(0x7f0000000180)="5e9886b14d730e815fdacb8e5e94991157ac5471a621432a51d9ee95067e37f324acee7474079894eb239a7c367c29e9c60402d7f5c8d213b686aacaa2d2bf43f78e4fd78745a8862c7cf48f23874279f10f47651021414d7f9f33a7ebc98f4e1b35302988114d537cbbb55c0e365874aa62184d2ee1cbabd9b5ddd8d87b79d254e7792997b3555bc58ff5d7a3e314134bfdbc85135cedae05de56d2626219663cebdd4b918176840fcc4a233ded5a65b2508f2efe1a5919fac5dd8ab810dad18340f82773294b4f", 0xc8}, {&(0x7f0000000280)="7af3a630c18f11b70a601b0ec0bcb239ec2c064ff62d90d30bb4b2eecb3270a2276234170c42f8e7f0d907d85df8f3d8844f153cbf3ac3194cf8b130812baca6fbd8f44f13a2b1feedd6966ba59c8dd5bafb7980878b69936ff43051508f388343e12b9e535ec258c316e8c393491976b6bac6c716f92011d27c17e0393cf00cb97d304800342fc0cd3768695d4c1ca1e20d3551d62717eb170f8e9a06e3604d17ce7bca9bf9ff8a987602f186282143aef29e75b1d5adfd6f778eda51fdbf13965c731b491b4ce31b", 0xc9}], 0x6}, 0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050327bd7000000000000700000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24044080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0xd4, r6, 0x408, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5b}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b965ec168e5f7a149250102a1a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bff14f7e129ab1c842380de29d"}]}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e108927a8a"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8001}, 0x20000080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 1.062797038s ago: executing program 35 (id=4298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, &(0x7f0000000200)='nfc\x00', 0x204002, &(0x7f0000000240)={@_ha_fsid={[0x1ff, 0x6]}, {0x4, 0x5, 0xffffff3e, 0x5}}, 0x10000, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x8}, {[0xbf, 0x0, 0x2, 0x80000001]}, 0xf, 0x2a, &(0x7f0000000300)=""/42}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r4) (async) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r4) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4008004) pwrite64(r4, &(0x7f0000000580)="cc9e439126fa8f846acc2085edab21efcd6be7da3c4196a973d839ac8f61aa94dae7e66ce7a2d5b8f76bdd6146c83fd065c1ce4fe5b9879a2cb47b47b01619626f54341fdfa887992f5a58e00de1c69f58752b7d0db165025027d271e3b8ffdbcc25e220007ca511a952640687c78d6f6c68efe875605181d69046b2936ce2b13e21a1f672721ad6f0f17b66fa76c133523c1e7b8fae2423a320c6143913ec9f6ba5b9ea2db4509d852bd657121106b5d07e8b75c0a5850e3e9016922ec4549e47f6", 0xc2, 0x7) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) ioctl$TUNSETGROUP(r4, 0x400454ce, r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, r7, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x3}, {0x7, 0x6}], "498d082a47106e5d"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1}, {0x1, 0x7}, {0x12, 0x4}, {0x7}, {0x9, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0xb, 0x6}, {0x7, 0x3}, {0x9}, {0x7, 0x3}, {0x7, 0x4}, {0x2b}, {0x1, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0xd8, 0x6}, {0x4, 0x6}], "d1925d581cec2129"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x0, 0x2}], "3f14ad09a3f1f61d"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r1, 0x402, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r1, 0x402, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r0) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4100800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x39fe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40000d4) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4100800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x39fe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40000d4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r4}, &(0x7f0000000b80), &(0x7f0000000bc0)=r4}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000c40)='lp', 0x2) r12 = socket$inet(0x2, 0x2, 0x9) bind$inet(r12, &(0x7f0000000c80)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000cc0), 0x4) (async) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000cc0), 0x4) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) ioctl(r12, 0x1, &(0x7f0000000d00)="c436433acdf430e285ce36944147824cfe02185177936a0ec97d1a3065b0e81b6ba579dbb230a499e58c24746ca233a156a455649adfbaec597f9508dec6f34d8b288fb9ba09c49f566bf03773fd0e926d344937755d31016985959bdc7fb6b03a76c097bd59f20952efeeaedda014c538346d78a00b5557c78bb55caf9cca055911ff04edfea64ae83b4e49ca767d8afa4d9674d3d93ee74a4a944316e254cf78d47425fea6f03de7f5c28d83f48f6ee4613147da46cc") getsockname$packet(r4, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e00)=0x14) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r13, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r13, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 0s ago: executing program 36 (id=4318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r5, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e11100050000", 0x6, 0x20000850, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x5, 0xa) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000170a010400000000000000000a0000030900b4bbf9047dd7fb670000"], 0x20}, 0x1, 0x0, 0x0, 0x48084}, 0x2600c0c4) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24004004}, 0x10) kernel console output (not intermixed with test programs): 553.737362][T20734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.763228][T17661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.768842][ T8561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.003708][T20745] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 554.059654][T20797] bridge0: entered allmulticast mode [ 554.118430][T20195] veth0_macvtap: entered promiscuous mode [ 554.137954][T20195] veth1_macvtap: entered promiscuous mode [ 554.265424][T20195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.281602][T17661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.281643][T17661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.314342][T20195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.328838][T20800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3321'. [ 554.328865][T20800] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 554.350773][T17662] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.351171][T17662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.351204][T17662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.351234][T17662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.547796][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3324'. [ 554.547827][T20812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3324'. [ 554.593450][T17662] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 554.595579][ T8575] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 554.595865][ T8575] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 554.595896][ T8575] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 554.668337][T20819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3326'. [ 555.855405][T20739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.015258][T17659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.015277][T17659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.114466][T20832] netlink: 'syz.4.3330': attribute type 1 has an invalid length. [ 556.167031][T20825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.207975][T20825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.296217][T20842] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 556.302353][ T8561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.302383][ T8561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.476662][T20852] netlink: 'syz.4.3333': attribute type 1 has an invalid length. [ 556.476683][T20852] netlink: 'syz.4.3333': attribute type 2 has an invalid length. [ 556.476694][T20852] netlink: 'syz.4.3333': attribute type 3 has an invalid length. [ 556.826923][T20875] openvswitch: netlink: Missing valid actions attribute. [ 556.827741][T20875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.853624][T20875] __nla_validate_parse: 12 callbacks suppressed [ 556.853641][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 556.969260][ T4934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.988593][ T4934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.998422][ T4934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.001502][ T4934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.002076][ T4934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.205064][T20879] syzkaller0: entered promiscuous mode [ 557.205085][T20879] syzkaller0: entered allmulticast mode [ 557.238124][T20883] team_slave_0: entered allmulticast mode [ 557.365851][T20893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3344'. [ 557.458399][T20895] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3344'. [ 557.495268][T20895] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.495918][T20895] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.536358][T20895] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 557.632211][T20894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3343'. [ 557.787750][T20909] netlink: 'syz.4.3347': attribute type 6 has an invalid length. [ 557.853933][T20911] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3348'. [ 557.935000][ T8575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.935033][ T8575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.093800][T20907] C: renamed from veth1_to_team (while UP) [ 558.112271][T20907] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 558.112290][T20907] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3346'. [ 558.112627][T20907] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 558.252243][T20915] bond2: entered promiscuous mode [ 558.252650][T20915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 558.354196][ T8575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.354807][ T8575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.501306][T20927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3352'. [ 558.616400][ T8575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.616434][ T8575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.995586][T20945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3355'. [ 559.057484][T19182] Bluetooth: hci1: command tx timeout [ 559.089430][ T8575] smc: removing net device with user defined pnetid SYZ2 [ 559.089600][ T8575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.089626][ T8575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.125630][T20948] tc_dump_action: action bad kind [ 559.926843][T17660] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.131915][ T8575] pimreg9: left allmulticast mode [ 560.167249][T20987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3361'. [ 560.694271][T21025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3365'. [ 561.130770][T19182] Bluetooth: hci1: command tx timeout [ 561.362568][ T8575] bond5 (unregistering): (slave geneve3): Releasing active interface [ 561.446407][ T8575] bond0 (unregistering): Released all slaves [ 561.458878][ T8575] bond1 (unregistering): Released all slaves [ 561.472271][ T8575] bond2 (unregistering): Released all slaves [ 561.479345][ T8575] bond3 (unregistering): Released all slaves [ 561.497013][ T8575] bond4 (unregistering): Released all slaves [ 561.519821][ T8575] bond5 (unregistering): Released all slaves [ 561.529961][ T8575] bond6 (unregistering): Released all slaves [ 561.546138][ T8575] bond7 (unregistering): Released all slaves [ 561.776883][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 561.864061][ T8575] tipc: Disabling bearer [ 561.898601][ T8575] tipc: Disabling bearer [ 561.936978][ T8575] tipc: Left network mode [ 561.942706][T17668] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.942830][T17668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.942949][T17668] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.336843][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 562.419193][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 562.816220][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.945084][T20876] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.945192][T20876] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.945318][T20876] bridge_slave_0: entered allmulticast mode [ 562.980332][T20876] bridge_slave_0: entered promiscuous mode [ 562.994915][T20876] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.995064][T20876] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.995189][T20876] bridge_slave_1: entered allmulticast mode [ 562.997218][T20876] bridge_slave_1: entered promiscuous mode [ 563.210300][T19182] Bluetooth: hci1: command tx timeout [ 563.257309][T20876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.283007][T20876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.286553][T21108] IPVS: length: 15 != 8 [ 563.328705][T21108] netlink: 'syz.2.3378': attribute type 8 has an invalid length. [ 563.377001][ T8575] hsr_slave_0: left promiscuous mode [ 563.418167][ T8575] veth1_vlan: left promiscuous mode [ 563.418236][ T8575] veth0_vlan: left promiscuous mode [ 563.422924][T21098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3374'. [ 563.423465][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3374'. [ 563.423483][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3374'. [ 563.435562][T21109] netlink: 'syz.3.3377': attribute type 4 has an invalid length. [ 563.567068][T21115] netlink: 'syz.2.3380': attribute type 2 has an invalid length. [ 563.667575][T17661] IPVS: starting estimator thread 0... [ 563.729735][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 563.729776][T21122] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3381'. [ 563.741818][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 563.741853][T21122] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3381'. [ 563.765467][T21122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3381'. [ 563.770187][T21120] IPVS: using max 29 ests per chain, 69600 per kthread [ 563.966847][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 563.967067][T21101] netlink: 'syz.4.3376': attribute type 4 has an invalid length. [ 564.024757][T20876] team0: Port device team_slave_0 added [ 564.034978][T20876] team0: Port device team_slave_1 added [ 564.204122][T20876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.204138][T20876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.204159][T20876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.207657][T20876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.207670][T20876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.207690][T20876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.323156][T20876] hsr_slave_0: entered promiscuous mode [ 564.324153][T20876] hsr_slave_1: entered promiscuous mode [ 564.324731][T20876] debugfs: 'hsr0' already exists in 'hsr' [ 564.324747][T20876] Cannot create hsr debugfs directory [ 564.472821][T21128] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 564.472848][T21128] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 564.600786][ T8575] IPVS: stop unused estimator thread 0... [ 564.654364][T21131] tipc: Enabling of bearer rejected, failed to enable media [ 564.906869][T20876] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.185163][T20876] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.291118][T19182] Bluetooth: hci1: command tx timeout [ 565.467243][T20876] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.578524][T21178] syzkaller0: entered promiscuous mode [ 565.578547][T21178] syzkaller0: entered allmulticast mode [ 565.688052][T20876] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.807172][T21192] netlink: 'syz.4.3395': attribute type 4 has an invalid length. [ 565.862711][T21202] netlink: 'syz.4.3395': attribute type 4 has an invalid length. [ 567.696697][T21196] 8021q: VLANs not supported on ip_vti0 [ 567.868454][T21211] __nla_validate_parse: 4 callbacks suppressed [ 567.868482][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 567.886728][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3398'. [ 568.168807][T17668] IPVS: starting estimator thread 0... [ 568.190378][T21224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3401'. [ 568.250432][T21226] IPVS: using max 33 ests per chain, 79200 per kthread [ 568.498599][T20876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 568.526945][T20876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 568.529969][T20876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 568.572645][T20876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.578253][T20876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 568.608089][T20876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 568.615657][T20876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 568.663805][T20876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.924068][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3410'. [ 568.924093][T21265] openvswitch: netlink: Flow actions attr not present in new flow. [ 568.985747][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3410'. [ 569.055344][T20876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.103744][T20876] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.140812][T17661] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.140914][T17661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.165222][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.165321][ T8564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.338759][T21275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3414'. [ 569.791800][T21270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3412'. [ 569.873622][T21292] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000 [ 570.158015][T21275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.583874][T17661] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.584874][T17661] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.584933][T17661] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.584967][T17661] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.867654][T21328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3420'. [ 570.869147][T21330] Bluetooth: MGMT ver 1.23 [ 570.937668][T21328] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3420'. [ 570.937686][T21328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3420'. [ 571.196413][T21348] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106 [ 571.363746][T21366] netlink: 'syz.3.3425': attribute type 4 has an invalid length. [ 571.414305][T21360] netlink: 'syz.3.3425': attribute type 4 has an invalid length. [ 571.536185][T20876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.623866][T20876] veth0_vlan: entered promiscuous mode [ 571.667992][T20876] veth1_vlan: entered promiscuous mode [ 571.744609][T20876] veth0_macvtap: entered promiscuous mode [ 571.783611][T20876] veth1_macvtap: entered promiscuous mode [ 571.892488][T20876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.960983][T20876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.041281][T17660] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.042682][ T8564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.042742][ T8564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.042774][ T8564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.306632][T21404] batman_adv: batadv0: Adding interface: veth0 [ 572.306647][T21404] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.306670][T21404] batman_adv: batadv0: Interface activated: veth0 [ 572.309667][ T8575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.309684][ T8575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.431041][T21404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.431063][T21404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.432766][T21404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.432784][T21404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.435219][T21404] batman_adv: batadv0: Interface deactivated: veth0 [ 572.435235][T21404] batman_adv: batadv0: Removing interface: veth0 [ 572.506724][T17668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.506742][T17668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.722587][T21416] xt_recent: Unsupported userspace flags (000000c5) [ 573.148789][T21439] __nla_validate_parse: 2 callbacks suppressed [ 573.148807][T21439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3446'. [ 573.348668][T21453] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.349366][T21453] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.516614][T21457] netlink: 'syz.1.3452': attribute type 1 has an invalid length. [ 573.516638][T21457] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3452'. [ 573.808421][T21469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3454'. [ 573.995211][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3457'. [ 573.998427][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3457'. [ 574.071520][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'. [ 574.076299][T21491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.375256][T21492] geneve2: left promiscuous mode [ 574.378733][T21492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.379389][T21492] bond2: left promiscuous mode [ 574.512414][T21499] syzkaller0: entered promiscuous mode [ 574.512434][T21499] syzkaller0: entered allmulticast mode [ 574.519749][T21499] tipc: Started in network mode [ 574.519765][T21499] tipc: Node identity f6fbc7d3f5c8, cluster identity 4711 [ 574.519886][T21499] tipc: Enabled bearer , priority 0 [ 574.559876][T21498] tipc: Resetting bearer [ 574.608212][T21498] tipc: Disabling bearer [ 574.825705][T21522] netlink: 'syz.3.3466': attribute type 1 has an invalid length. [ 574.825725][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3466'. [ 574.843487][T21522] netlink: 5396 bytes leftover after parsing attributes in process `syz.3.3466'. [ 574.843507][T21522] openvswitch: netlink: Flow key attr not present in new flow. [ 574.922043][T21528] netlink: 23072 bytes leftover after parsing attributes in process `syz.3.3466'. [ 574.922065][T21528] openvswitch: netlink: Flow key attr not present in new flow. [ 575.128327][T21539] netlink: 'syz.3.3469': attribute type 21 has an invalid length. [ 575.128347][T21539] netlink: 'syz.3.3469': attribute type 22 has an invalid length. [ 575.128357][T21539] netlink: 'syz.3.3469': attribute type 23 has an invalid length. [ 575.128368][T21539] netlink: 'syz.3.3469': attribute type 25 has an invalid length. [ 575.128378][T21539] netlink: 'syz.3.3469': attribute type 26 has an invalid length. [ 575.128389][T21539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3469'. [ 575.333671][T21544] bridge_slave_0: left allmulticast mode [ 575.333695][T21544] bridge_slave_0: left promiscuous mode [ 575.333906][T21544] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.393682][T21544] bridge_slave_1: left allmulticast mode [ 575.393704][T21544] bridge_slave_1: left promiscuous mode [ 575.393920][T21544] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.657346][T21544] bond0: (slave bond_slave_0): Releasing backup interface [ 575.711090][T21544] bond0: (slave bond_slave_1): Releasing backup interface [ 575.823856][T21544] team0: Port device team_slave_0 removed [ 575.889668][T21544] team0: Port device team_slave_1 removed [ 575.899920][T21544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.899941][T21544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.941741][T21544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.941789][T21544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.967848][T21544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.026322][T21547] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 576.029380][T21547] bond1 (unregistering): Released all slaves [ 576.117121][T21549] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 576.118837][T21549] bond1 (unregistering): Released all slaves [ 576.981478][T21600] bridge_slave_0: left allmulticast mode [ 576.981504][T21600] bridge_slave_0: left promiscuous mode [ 576.981705][T21600] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.987943][T21600] bridge_slave_1: left allmulticast mode [ 576.987964][T21600] bridge_slave_1: left promiscuous mode [ 576.988164][T21600] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.046600][T21600] bond0: (slave bond_slave_0): Releasing backup interface [ 577.069892][T21600] bond0: (slave bond_slave_1): Releasing backup interface [ 577.100302][T21600] team0: Port device team_slave_0 removed [ 577.115978][T21600] team0: Port device team_slave_1 removed [ 577.131118][T21600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 577.155808][T17659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.155824][T17659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.165536][T21608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.504457][T21622] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 578.163032][T21625] bond1: (slave veth3): Enslaving as an active interface with a down link [ 578.183542][T21639] __nla_validate_parse: 2 callbacks suppressed [ 578.183554][T21639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3497'. [ 578.266151][T21626] bond1: (slave veth5): Enslaving as an active interface with a down link [ 578.267487][T21631] bridge0: left allmulticast mode [ 578.509724][T21658] syzkaller0: entered promiscuous mode [ 578.509744][T21658] syzkaller0: entered allmulticast mode [ 578.691624][T21679] gre0: entered promiscuous mode [ 578.691646][T21679] gre0: entered allmulticast mode [ 578.719587][T21679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3504'. [ 578.814215][T21679] vlan1: Caught tx_queue_len zero misconfig [ 578.818449][T21684] syzkaller0: entered promiscuous mode [ 578.818466][T21684] syzkaller0: entered allmulticast mode [ 578.911907][T21692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3509'. [ 578.993964][T21698] syzkaller0: entered promiscuous mode [ 578.993984][T21698] syzkaller0: entered allmulticast mode [ 579.012112][ T8564] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.012248][T17660] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.012282][T17660] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.012315][T17660] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.158264][T21703] dvmrp8: entered allmulticast mode [ 579.318783][T21718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3516'. [ 579.346263][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3516'. [ 579.357327][T21718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3516'. [ 579.380649][T21718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3516'. [ 579.452326][T21723] openvswitch: netlink: IPv6 tunnel dst address is zero [ 579.673178][T21733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 579.831897][T21745] batadv_slave_0: Caught tx_queue_len zero misconfig [ 579.864326][T21744] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3524'. [ 579.983406][T21751] batman_adv: batadv0: Adding interface: ipvlan2 [ 579.983423][T21751] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.983448][T21751] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 580.018020][T21763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3530'. [ 580.236753][T21773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.249176][T21773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.359312][T21773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.379356][T21773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.379378][T21773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.418348][T21773] veth1_vlan: left promiscuous mode [ 580.426000][T21773] veth0_vlan: left promiscuous mode [ 580.429779][T21773] veth0_vlan: entered promiscuous mode [ 580.436537][T21773] veth1_vlan: entered promiscuous mode [ 580.445584][T21773] veth1_macvtap: left promiscuous mode [ 580.446699][T21773] veth0_macvtap: left promiscuous mode [ 580.447857][T21773] veth0_macvtap: entered promiscuous mode [ 580.448983][T21773] veth1_macvtap: entered promiscuous mode [ 580.478012][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.479063][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.498557][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.507928][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.509982][T21773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.529193][T21773] batman_adv: batadv0: Interface activated: ipvlan2 [ 580.533637][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.567091][T21786] macsec1: entered promiscuous mode [ 580.567110][T21786] macsec1: entered allmulticast mode [ 580.640274][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.640316][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.640350][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.266636][T21841] sctp: [Deprecated]: syz.1.3545 (pid 21841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 581.266636][T21841] Use struct sctp_sack_info instead [ 581.354577][T21840] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 581.356679][T21840] batman_adv: batadv0: Adding interface: gretap1 [ 581.356692][T21840] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.356718][T21840] batman_adv: batadv0: Interface activated: gretap1 [ 581.571597][T21852] netlink: 'syz.3.3547': attribute type 9 has an invalid length. [ 581.664169][T21862] syz_tun: entered allmulticast mode [ 581.789189][T21866] openvswitch: netlink: Missing valid actions attribute. [ 581.789231][T21866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.916996][T21867] dvmrp8: entered allmulticast mode [ 582.358081][T21861] syz_tun: left allmulticast mode [ 582.546772][T21906] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 582.862248][T21878] netlink: 'syz.2.3553': attribute type 10 has an invalid length. [ 582.898177][T21878] bridge0: entered promiscuous mode [ 582.998736][T21922] syzkaller0: entered promiscuous mode [ 582.998759][T21922] syzkaller0: entered allmulticast mode [ 585.222559][T21930] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 585.634804][T21964] syzkaller0: entered promiscuous mode [ 585.634827][T21964] syzkaller0: entered allmulticast mode [ 588.032470][T21998] __nla_validate_parse: 12 callbacks suppressed [ 588.032490][T21998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3578'. [ 588.035908][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3581'. [ 588.465657][T22023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3585'. [ 588.465681][T22023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3585'. [ 588.608734][T22027] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 588.614482][T22030] Bluetooth: MGMT ver 1.23 [ 588.628067][T22027] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3587'. [ 588.901939][T22052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'. [ 588.910179][T22050] sock: sock_timestamping_bind_phc: sock not bind to device [ 588.953423][T22047] netlink: 'syz.2.3591': attribute type 16 has an invalid length. [ 588.953441][T22047] netlink: 'syz.2.3591': attribute type 17 has an invalid length. [ 589.029489][T22047] gre0: left promiscuous mode [ 589.029508][T22047] gre0: left allmulticast mode [ 589.127377][T22047] mac80211_hwsim hwsim45 wlan0: left promiscuous mode [ 589.127537][T22047] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 589.158389][T22047] macvlan3: left allmulticast mode [ 589.159015][T22047] gretap0: left allmulticast mode [ 589.187262][T22047] syzkaller0: left promiscuous mode [ 589.187279][T22047] syzkaller0: left allmulticast mode [ 589.286950][T17668] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 589.338042][T22060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3595'. [ 589.418146][T22063] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3597'. [ 589.713829][T22084] netlink: 'syz.2.3599': attribute type 9 has an invalid length. [ 589.713926][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3599'. [ 590.425197][T22111] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.502797][T22115] netlink: 'syz.1.3606': attribute type 4 has an invalid length. [ 590.535089][T22117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3609'. [ 590.998374][T22142] netlink: 'syz.3.3612': attribute type 2 has an invalid length. [ 592.304321][T22187] netlink: 'syz.2.3622': attribute type 21 has an invalid length. [ 592.304399][T22187] netlink: 'syz.2.3622': attribute type 4 has an invalid length. [ 592.328486][T22188] netlink: 'syz.2.3622': attribute type 21 has an invalid length. [ 592.328535][T22188] netlink: 'syz.2.3622': attribute type 4 has an invalid length. [ 592.504445][T22201] xt_hashlimit: size too large, truncated to 1048576 [ 593.047821][T22217] __nla_validate_parse: 13 callbacks suppressed [ 593.047840][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3630'. [ 593.487046][T22235] netlink: 2140 bytes leftover after parsing attributes in process `syz.3.3634'. [ 593.699596][T22244] 0: reclassify loop, rule prio 0, protocol 800 [ 593.923937][T22255] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3638'. [ 594.364507][T22272] netlink: 'syz.3.3643': attribute type 11 has an invalid length. [ 594.416162][T22280] netlink: 'syz.3.3643': attribute type 11 has an invalid length. [ 594.704569][T22293] x_tables: duplicate underflow at hook 1 [ 595.273009][T22299] nbd1: detected capacity change from 0 to 63 [ 595.658699][T22298] veth0_to_bond: Caught tx_queue_len zero misconfig [ 595.970363][T19182] block nbd1: Receive control failed (result -104) [ 595.977820][T22304] netlink: 'syz.0.3651': attribute type 1 has an invalid length. [ 596.165257][T22307] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 596.241328][T22307] bond3 (unregistering): Released all slaves [ 596.540969][T22304] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 596.919480][T22304] bond3 (unregistering): Released all slaves [ 597.417704][T22310] bridge2: entered promiscuous mode [ 597.432200][T22310] bond2: (slave bridge2): making interface the new active one [ 597.432652][T22310] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 597.864247][ T31] audit: type=1804 audit(1790510310.227:12): pid=22335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3658" name="/newroot/65/cgroup.controllers" dev="tmpfs" ino=350 res=1 errno=0 [ 597.867701][ T31] audit: type=1800 audit(1790510310.227:13): pid=22335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3658" name="cgroup.controllers" dev="tmpfs" ino=350 res=0 errno=0 [ 597.915987][ T31] audit: type=1804 audit(1790510310.227:14): pid=22333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3658" name="/newroot/65/cgroup.controllers" dev="tmpfs" ino=350 res=1 errno=0 [ 598.255661][T22351] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3663'. [ 598.269363][T22349] netlink: 'syz.2.3662': attribute type 1 has an invalid length. [ 598.423119][T22353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3664'. [ 598.570871][T22363] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 598.738442][T22362] netlink: 'syz.2.3667': attribute type 3 has an invalid length. [ 598.742943][T22362] netlink: 'syz.2.3667': attribute type 3 has an invalid length. [ 599.532175][T22381] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 599.555268][T22394] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3671'. [ 599.559180][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3671'. [ 599.559191][T22394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3671'. [ 599.987756][T22412] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 599.988361][T22412] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 601.452738][T22355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.499583][T22414] netlink: 'syz.4.3673': attribute type 1 has an invalid length. [ 601.499603][T22414] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3673'. [ 601.499618][T22414] netlink: 'syz.4.3673': attribute type 1 has an invalid length. [ 601.587333][T22417] lo: entered allmulticast mode [ 601.864367][ T1993] block nbd1: Connection timed out, retrying (0/1 alive) [ 601.864997][ T1993] block nbd1: Connection timed out, retrying (0/1 alive) [ 601.865046][ T1993] block nbd1: Connection timed out, retrying (0/1 alive) [ 601.865086][ T1993] block nbd1: Connection timed out, retrying (0/1 alive) [ 601.904063][ T1993] block nbd1: Dead connection, failed to find a fallback [ 601.904084][ T1993] block nbd1: shutting down sockets [ 601.904179][ T1993] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.904263][ T1993] Buffer I/O error on dev nbd1, logical block 3, async page read [ 601.904500][ T1993] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.904525][ T1993] Buffer I/O error on dev nbd1, logical block 2, async page read [ 601.904545][ T1993] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.904565][ T1993] Buffer I/O error on dev nbd1, logical block 1, async page read [ 601.904585][ T1993] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.904604][ T1993] Buffer I/O error on dev nbd1, logical block 0, async page read [ 601.905840][ T1993] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.905865][ T1993] Buffer I/O error on dev nbd1, logical block 0, async page read [ 601.906176][ T1993] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.906201][ T1993] Buffer I/O error on dev nbd1, logical block 1, async page read [ 601.906291][ T1993] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.906311][ T1993] Buffer I/O error on dev nbd1, logical block 2, async page read [ 601.906405][ T1993] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.906426][ T1993] Buffer I/O error on dev nbd1, logical block 3, async page read [ 601.908228][ T1993] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 601.908254][ T1993] Buffer I/O error on dev nbd1, logical block 0, async page read [ 601.908269][ T1993] Buffer I/O error on dev nbd1, logical block 1, async page read [ 601.909214][ T1993] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 601.920786][T14429] ldm_validate_partition_table(): Disk read failed. [ 601.926237][T14429] Dev nbd1: unable to read RDB block 0 [ 601.933804][T14429] nbd1: unable to read partition table [ 602.008811][T14429] ldm_validate_partition_table(): Disk read failed. [ 602.009341][T14429] Dev nbd1: unable to read RDB block 0 [ 602.019771][T14429] nbd1: unable to read partition table [ 602.164244][T22445] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3680'. [ 602.757549][T22469] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3684'. [ 602.757600][T22469] netlink: 'syz.1.3684': attribute type 9 has an invalid length. [ 602.757613][T22469] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3684'. [ 602.757625][T22469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3684'. [ 602.914892][T22488] sctp: [Deprecated]: syz.0.3688 (pid 22488) Use of int in max_burst socket option. [ 602.914892][T22488] Use struct sctp_assoc_value instead [ 603.007038][T22491] netlink: 'syz.0.3691': attribute type 21 has an invalid length. [ 603.082201][ T8564] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.083410][T17660] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.083448][T17660] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.083479][T17660] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.203152][T22497] gretap0: entered promiscuous mode [ 603.209879][T22497] gretap0: left promiscuous mode [ 603.372933][T22510] __nla_validate_parse: 39 callbacks suppressed [ 603.372964][T22510] netlink: 68748 bytes leftover after parsing attributes in process `syz.0.3695'. [ 603.469542][T22514] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3697'. [ 603.511290][T22519] bridge0: port 1(syzkaller0) entered blocking state [ 603.511409][T22519] bridge0: port 1(syzkaller0) entered disabled state [ 603.511567][T22519] syzkaller0: entered allmulticast mode [ 603.516824][T22519] syzkaller0: entered promiscuous mode [ 603.517308][T22519] bridge0: port 1(syzkaller0) entered blocking state [ 603.517425][T22519] bridge0: port 1(syzkaller0) entered listening state [ 603.567461][T22526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3699'. [ 603.599201][T22526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3699'. [ 603.808438][T22549] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3703'. [ 603.808461][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3703'. [ 603.944546][T22559] netlink: 'syz.1.3704': attribute type 1 has an invalid length. [ 604.036584][T22561] bond1: (slave geneve3): making interface the new active one [ 604.037226][T22561] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 604.040599][T17663] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.041475][T17663] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.082820][T17663] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.082861][T17663] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.495992][T22568] netlink: 'syz.4.3707': attribute type 10 has an invalid length. [ 604.497568][T22569] netlink: 'syz.4.3707': attribute type 10 has an invalid length. [ 604.979232][T22585] syzkaller0: entered promiscuous mode [ 604.979253][T22585] syzkaller0: entered allmulticast mode [ 605.852697][T22600] netlink: 'syz.2.3712': attribute type 1 has an invalid length. [ 606.688121][T22536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.219138][T22600] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 609.356755][T22626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3717'. [ 609.812886][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 610.120402][T22677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3730'. [ 610.223748][T22682] bridge0: port 1(bond0) entered blocking state [ 610.223963][T22682] bridge0: port 1(bond0) entered disabled state [ 610.224105][T22682] bond0: entered allmulticast mode [ 610.228022][T22682] bond0: entered promiscuous mode [ 610.282187][T22682] netlink: 3212 bytes leftover after parsing attributes in process `syz.0.3732'. [ 610.369174][T22682] hsr_slave_1 (unregistering): left promiscuous mode [ 610.483872][T22687] netlink: 'syz.1.3734': attribute type 1 has an invalid length. [ 610.483892][T22687] netlink: 'syz.1.3734': attribute type 4 has an invalid length. [ 610.483904][T22687] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3734'. [ 610.499798][T22690] netlink: 'syz.2.3735': attribute type 6 has an invalid length. [ 610.501873][T22690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3735'. [ 610.707161][T22695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3736'. [ 610.884213][T22719] netlink: 'syz.1.3743': attribute type 3 has an invalid length. [ 610.884233][T22719] netlink: 'syz.1.3743': attribute type 2 has an invalid length. [ 610.897128][T22719] netlink: 964 bytes leftover after parsing attributes in process `syz.1.3743'. [ 610.897147][T22719] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 610.947017][T22721] macsec0: entered promiscuous mode [ 610.947544][T22722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3744'. [ 610.966777][T22722] veth1_macvtap: left promiscuous mode [ 610.982762][T22722] macsec0 (unregistering): left promiscuous mode [ 611.032740][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3744'. [ 611.345670][T22746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 611.533788][T22755] netlink: 'syz.4.3754': attribute type 5 has an invalid length. [ 612.384728][T22792] netlink: 'syz.4.3762': attribute type 4 has an invalid length. [ 612.385323][T22793] netlink: 'syz.4.3762': attribute type 4 has an invalid length. [ 612.457667][T22792] netlink: 'syz.4.3762': attribute type 4 has an invalid length. [ 612.601457][T22803] syz_tun: entered allmulticast mode [ 612.808060][T22801] bond2: ARP target 9.0.0.0 is already present [ 612.808084][T22801] bond2: option arp_ip_target: invalid value (9) [ 615.875474][T22801] bond2 (unregistering): Released all slaves [ 616.118679][T22836] __nla_validate_parse: 7 callbacks suppressed [ 616.118698][T22836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3771'. [ 616.239975][T22842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3772'. [ 616.252204][T22842] veth1_macvtap: left promiscuous mode [ 616.315824][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3773'. [ 616.315863][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3773'. [ 616.555940][T22853] syzkaller1: entered promiscuous mode [ 616.555960][T22853] syzkaller1: entered allmulticast mode [ 616.708783][T22871] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 616.745315][T22873] x_tables: duplicate entry at hook 1 [ 616.787709][T22870] ip6tnl1: entered allmulticast mode [ 616.799362][T22870] netlink: 'syz.3.3780': attribute type 61 has an invalid length. [ 616.799384][T22870] netlink: 'syz.3.3780': attribute type 105 has an invalid length. [ 616.838695][T17663] IPVS: starting estimator thread 0... [ 616.855274][T22880] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20003 [ 616.923597][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3781'. [ 616.933367][T22881] IPVS: using max 29 ests per chain, 69600 per kthread [ 616.996794][T22889] netlink: 'syz.2.3781': attribute type 1 has an invalid length. [ 617.196634][T22898] dvmrp0: entered allmulticast mode [ 617.209646][T22897] dvmrp0: left allmulticast mode [ 617.209745][T22897] dvmrp8: left allmulticast mode [ 617.243587][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3788'. [ 617.411553][T22905] bond3: option broadcast_neighbor: invalid value (3) [ 617.416294][T22905] bond3 (unregistering): Released all slaves [ 617.468562][T22909] tipc: Started in network mode [ 617.468594][T22909] tipc: Node identity bedb02fa137c, cluster identity 4711 [ 617.502950][T22909] tipc: Enabled bearer , priority 0 [ 617.785442][T17668] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 617.785666][T17668] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 617.810419][T20090] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 617.821863][T22924] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3792'. [ 618.032932][T22932] netlink: 'syz.3.3793': attribute type 61 has an invalid length. [ 618.032954][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 618.079814][T22935] xt_ecn: cannot match TCP bits for non-tcp packets [ 618.093620][T22933] xt_hashlimit: size too large, truncated to 1048576 [ 618.104757][T22932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3793'. [ 618.127277][T22928] syzkaller0: entered allmulticast mode [ 618.138750][T22928] ip_tables: iptables: counters copy to user failed while replacing table [ 618.173025][T20090] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 618.352474][T22943] netlink: 67728 bytes leftover after parsing attributes in process `syz.0.3795'. [ 618.409818][T22947] openvswitch: netlink: Message has 8 unknown bytes. [ 618.409848][T22947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.417082][T22945] ip6tnl1: entered allmulticast mode [ 618.580228][ T5805] tipc: Node number set to 2913403642 [ 618.651196][T20090] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 618.931201][ T8561] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 618.931434][ T8561] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 618.960716][T21286] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 619.319949][T21286] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 619.690744][ T5805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 620.113634][T23046] Bluetooth: hci0: unsupported parameter 5134 [ 620.113655][T23046] Bluetooth: hci0: unsupported parameter 8192 [ 620.113747][T23046] Bluetooth: hci0: unsupported parameter 5134 [ 620.113759][T23046] Bluetooth: hci0: unsupported parameter 8192 [ 621.068080][T23105] batman_adv: batadv0: Adding interface: macvlan2 [ 621.068093][T23105] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.068109][T23105] batman_adv: batadv0: Interface activated: macvlan2 [ 621.068708][T23106] gre0: Master is either lo or non-ether device [ 621.348408][T23112] __nla_validate_parse: 3 callbacks suppressed [ 621.348428][T23112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3829'. [ 621.412658][T19182] block nbd2: Receive control failed (result -32) [ 621.429670][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 621.429691][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 622.726539][T23137] veth1_macvtap: entered promiscuous mode [ 622.726638][T23137] macsec0: entered promiscuous mode [ 622.809558][T23151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3835'. [ 622.846269][T20090] dummy0: entered promiscuous mode [ 622.848117][T23151] macvtap1: entered allmulticast mode [ 622.848136][T23151] dummy0: entered allmulticast mode [ 622.868854][T23155] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3835'. [ 622.868873][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3835'. [ 622.894472][T23151] dummy0: left allmulticast mode [ 622.926661][T23161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3839'. [ 622.939422][T20090] dummy0: left promiscuous mode [ 623.003457][T20091] dummy0: entered promiscuous mode [ 623.004344][T23155] macvtap1: entered allmulticast mode [ 623.004357][T23155] dummy0: entered allmulticast mode [ 623.055610][T23155] dummy0: left allmulticast mode [ 623.275625][T23161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.278143][T20091] dummy0: left promiscuous mode [ 623.707357][ T59] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 623.707390][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.707426][ T59] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 623.707448][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.707481][ T59] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 623.707503][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.707536][ T59] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 623.707559][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.708369][T23185] syzkaller0: entered promiscuous mode [ 623.708391][T23185] syzkaller0: entered allmulticast mode [ 623.917646][T23211] netlink: 'syz.3.3848': attribute type 1 has an invalid length. [ 624.199593][T23211] bond2: entered promiscuous mode [ 624.200631][T23211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.228224][T23214] bond2: (slave bridge3): making interface the new active one [ 624.228244][T23214] bridge3: entered promiscuous mode [ 624.264633][T23214] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 624.385904][T23226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3851'. [ 624.388548][T23229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3851'. [ 624.504019][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3854'. [ 624.580847][T23236] netlink: 'syz.0.3853': attribute type 14 has an invalid length. [ 624.586012][T23236] netlink: 'syz.0.3853': attribute type 16 has an invalid length. [ 624.586029][T23236] netlink: 'syz.0.3853': attribute type 3 has an invalid length. [ 624.806292][T23253] tipc: Can't bind to reserved service type 0 [ 626.478572][T23348] __nla_validate_parse: 7 callbacks suppressed [ 626.478591][T23348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3884'. [ 626.718631][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 626.815896][T23362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3886'. [ 626.861711][T23366] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3890'. [ 626.875662][T23369] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3890'. [ 626.883430][T23361] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 626.883975][T23361] team0: Device ipvlan2 is already an upper device of the team interface [ 626.920663][T23370] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3890'. [ 626.937945][T23366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3890'. [ 626.937972][T23366] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 626.960789][T23371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3891'. [ 626.990645][T23365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3890'. [ 626.990659][T23365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3890'. [ 627.779752][T23410] netlink: 'syz.1.3905': attribute type 2 has an invalid length. [ 628.476168][T23451] xt_cgroup: path and classid specified [ 628.571752][T19182] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 628.619305][T23457] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 630.010242][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 630.010261][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 630.291479][T23489] x_tables: duplicate underflow at hook 2 [ 630.291564][T23489] x_tables: duplicate underflow at hook 2 [ 630.291635][T23489] x_tables: duplicate underflow at hook 2 [ 630.291719][T23489] x_tables: duplicate underflow at hook 2 [ 630.291789][T23489] x_tables: duplicate underflow at hook 2 [ 630.291861][T23489] x_tables: duplicate underflow at hook 2 [ 630.291931][T23489] x_tables: duplicate underflow at hook 2 [ 630.292001][T23489] x_tables: duplicate underflow at hook 2 [ 630.595904][T23498] sit0: entered promiscuous mode [ 630.628711][T23498] netlink: 'syz.2.3931': attribute type 1 has an invalid length. [ 630.788682][T23512] xt_hashlimit: size too large, truncated to 1048576 [ 630.788701][T23512] xt_hashlimit: max too large, truncated to 1048576 [ 631.076460][T23538] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 631.162187][T23541] ip_tables: iptables: counters copy to user failed while replacing table [ 632.029949][T23546] netlink: 'syz.2.3945': attribute type 10 has an invalid length. [ 632.087111][T23546] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 632.121335][T23558] __nla_validate_parse: 18 callbacks suppressed [ 632.121352][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 632.123961][T23558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3948'. [ 632.138711][T23553] netlink: 'syz.1.3946': attribute type 16 has an invalid length. [ 632.138735][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3946'. [ 632.145397][T23558] tc_dump_action: action bad kind [ 632.217357][T23563] xt_hashlimit: size too large, truncated to 1048576 [ 632.303579][T23568] netdevsim0: mtu less than device minimum [ 632.612179][T23583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3956'. [ 632.813119][T23604] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3959'. [ 633.068782][T23615] bridge0: port 2(wlan1) entered blocking state [ 633.068998][T23615] bridge0: port 2(wlan1) entered disabled state [ 633.069164][T23615] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 633.093563][T23615] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode [ 633.134118][T23615] mac80211_hwsim hwsim51 wlan1 (unregistering): left allmulticast mode [ 633.134146][T23615] mac80211_hwsim hwsim51 wlan1 (unregistering): left promiscuous mode [ 633.134542][T23615] bridge0: port 2(wlan1) entered disabled state [ 633.289902][T23623] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 633.289923][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 633.309770][T23624] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 633.309788][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 633.317188][T23623] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 633.317204][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 633.318852][T23624] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 633.318867][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 633.319467][T23623] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 633.319482][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 633.321110][T23624] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 633.325302][T23623] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 633.428548][T23634] wg2: entered allmulticast mode [ 633.482880][T23636] tipc: Enabling of bearer rejected, already enabled [ 633.715972][T23649] vlan2: entered allmulticast mode [ 633.715992][T23649] bridge1: entered allmulticast mode [ 633.832011][T23653] block nbd3: server does not support multiple connections per device. [ 633.832393][T23653] block nbd3: shutting down sockets [ 633.852861][ C0] bridge0: port 1(syzkaller0) entered learning state [ 634.405691][T23688] syzkaller0: entered promiscuous mode [ 634.405711][T23688] syzkaller0: entered allmulticast mode [ 634.704465][T23665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 634.706610][T23665] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 635.154632][T23665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 635.154653][T23665] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 635.275460][T23709] vlan2: entered promiscuous mode [ 635.275480][T23709] bridge0: entered promiscuous mode [ 635.366136][T23665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.366157][T23665] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 635.476113][T23725] tc_dump_action: action bad kind [ 635.719551][T23741] Bluetooth: MGMT ver 1.23 [ 636.070211][T23751] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 636.070246][T23751] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 636.070280][T23751] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 636.143980][T23751] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 636.653014][T23790] syzkaller1: entered allmulticast mode [ 636.826084][T23796] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 636.833555][ T5805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 637.086242][ T5805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 637.148684][T23818] __nla_validate_parse: 24 callbacks suppressed [ 637.148702][T23818] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4020'. [ 637.199477][T23821] validate_nla: 13 callbacks suppressed [ 637.199493][T23821] netlink: 'syz.0.4021': attribute type 1 has an invalid length. [ 637.199505][T23821] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4021'. [ 637.199518][T23821] NCSI netlink: No device for ifindex 0 [ 637.286300][T23826] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4024'. [ 637.391029][T23832] netlink: 67580 bytes leftover after parsing attributes in process `syz.1.4025'. [ 637.571802][T23845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4030'. [ 637.646502][T23847] gre0: entered promiscuous mode [ 637.646524][T23847] gre0: entered allmulticast mode [ 637.661294][T23847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4032'. [ 637.891182][T23850] tc_dump_action: action bad kind [ 637.992081][T23866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 637.992101][T23866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4038'. [ 637.992239][T23866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 637.992252][T23866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4038'. [ 638.098586][T23865] xt_CT: No such helper "syz0" [ 638.664302][T23889] team0 (unregistering): Port device team_slave_0 removed [ 638.707485][T23889] team0 (unregistering): Port device team_slave_1 removed [ 639.070849][T23933] gretap1: entered promiscuous mode [ 639.386181][T23951] ipvlan3: entered allmulticast mode [ 639.386203][T23951] macvlan1: entered allmulticast mode [ 639.386215][T23951] veth1_vlan: entered allmulticast mode [ 639.416827][T23951] batman_adv: batadv0: Adding interface: ipvlan3 [ 639.416842][T23951] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.416867][T23951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 639.416882][T23951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.416894][T23951] batman_adv: batadv0: Interface activated: ipvlan3 [ 640.152089][T23993] gre0: left promiscuous mode [ 640.174269][T23993] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 640.197297][T23993] openvswitch: netlink: Message has 8 unknown bytes. [ 640.207433][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880258fb800: rx timeout, send abort [ 640.262806][T23995] syzkaller0: entered promiscuous mode [ 640.262819][T23995] syzkaller0: entered allmulticast mode [ 640.655000][T24008] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 640.658657][T24008] netlink: 'syz.3.4066': attribute type 2 has an invalid length. [ 640.707564][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880258fb800: abort rx timeout. Force session deactivation [ 640.720606][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880258fbc00: rx timeout, send abort [ 640.894421][T24012] gre0: entered promiscuous mode [ 640.894444][T24012] gre0: entered allmulticast mode [ 640.897520][T24010] netlink: 'syz.1.4068': attribute type 1 has an invalid length. [ 641.006330][T24021] syz_tun: left allmulticast mode [ 641.220651][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880258fbc00: abort rx timeout. Force session deactivation [ 642.328882][T24072] __nla_validate_parse: 166 callbacks suppressed [ 642.328901][T24072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4083'. [ 642.353268][T24072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4083'. [ 642.669252][T24081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'. [ 642.789284][T24082] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 642.838299][T24082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4085'. [ 643.064347][T24104] netlink: 'syz.1.4088': attribute type 4 has an invalid length. [ 643.064367][T24104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4088'. [ 643.068218][T24105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4088'. [ 643.272187][T24115] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4089'. [ 643.512676][T24131] netlink: 'syz.4.4095': attribute type 1 has an invalid length. [ 643.512695][T24131] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4095'. [ 643.568606][T24131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4095'. [ 643.636501][T24141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4095'. [ 643.656240][T24143] tipc: Enabling of bearer rejected, failed to enable media [ 644.132965][T24168] netlink: 'syz.1.4101': attribute type 1 has an invalid length. [ 644.221136][T24171] ip_tables: iptables: counters copy to user failed while replacing table [ 644.518564][T24189] IPVS: set_ctl: invalid protocol: 24 100.1.1.1:21 [ 644.528781][T24188] IPVS: set_ctl: invalid protocol: 24 100.1.1.1:21 [ 645.104939][T24210] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.105504][T24210] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.223915][T24214] netlink: 'syz.1.4110': attribute type 1 has an invalid length. [ 645.628393][T24236] syzkaller0: entered promiscuous mode [ 645.628416][T24236] syzkaller0: entered allmulticast mode [ 645.809684][T24256] netlink: 'syz.1.4118': attribute type 21 has an invalid length. [ 646.010339][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 646.108800][T24271] bond0: Unable to set up delay as MII monitoring is disabled [ 646.537485][T24277] veth1_to_bridge: entered promiscuous mode [ 646.538972][T24277] macvlan3: entered promiscuous mode [ 646.558463][T24277] veth1_to_bridge: left promiscuous mode [ 646.655020][T24292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 646.779471][T24293] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 646.779617][T24292] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 646.781693][T24292] syzkaller0: entered promiscuous mode [ 646.781709][T24292] syzkaller0: entered allmulticast mode [ 647.361490][T24323] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 647.544143][T24313] __nla_validate_parse: 11 callbacks suppressed [ 647.544162][T24313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4130'. [ 647.546581][T24313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4130'. [ 647.799255][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804971f400: rx timeout, send abort [ 647.822954][T24350] batman_adv: batadv0: Adding interface: gretap1 [ 647.822968][T24350] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.823311][T24350] batman_adv: batadv0: Interface activated: gretap1 [ 647.946701][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4138'. [ 647.948933][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4138'. [ 647.949461][T24363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4138'. [ 648.145961][T24374] FAULT_INJECTION: forcing a failure. [ 648.145961][T24374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.145991][T24374] CPU: 1 UID: 0 PID: 24374 Comm: syz.1.4140 Not tainted syzkaller #0 PREEMPT(full) [ 648.146011][T24374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.146023][T24374] Call Trace: [ 648.146029][T24374] [ 648.146036][T24374] dump_stack_lvl+0xe8/0x150 [ 648.146072][T24374] should_fail_ex+0x410/0x560 [ 648.146102][T24374] _copy_from_user+0x2d/0xb0 [ 648.146129][T24374] ___sys_sendmsg+0x1c6/0x360 [ 648.146157][T24374] ? __lock_acquire+0x747/0x2de0 [ 648.146187][T24374] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.146247][T24374] ? __fget_files+0x2a/0x420 [ 648.146274][T24374] ? __fget_files+0x3a2/0x420 [ 648.146310][T24374] __x64_sys_sendmsg+0x1b1/0x290 [ 648.146339][T24374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.146382][T24374] do_syscall_64+0x166/0x520 [ 648.146409][T24374] ? trace_irq_disable+0x3b/0x140 [ 648.146428][T24374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.146447][T24374] ? clear_bhb_loop+0x70/0xc0 [ 648.146478][T24374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.146498][T24374] RIP: 0033:0x7f1001d9e159 [ 648.146516][T24374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.146532][T24374] RSP: 002b:00007f1002b83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.146552][T24374] RAX: ffffffffffffffda RBX: 00007f1002025fa0 RCX: 00007f1001d9e159 [ 648.146567][T24374] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 648.146579][T24374] RBP: 00007f1002b83090 R08: 0000000000000000 R09: 0000000000000000 [ 648.146592][T24374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.146603][T24374] R13: 00007f1002026038 R14: 00007f1002025fa0 R15: 00007ffd1c6f7f88 [ 648.146635][T24374] [ 648.304521][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804971f400: abort rx timeout. Force session deactivation [ 648.308712][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804971d400: rx timeout, send abort [ 648.383965][T24377] netlink: 'syz.4.4142': attribute type 16 has an invalid length. [ 648.383983][T24377] netlink: 'syz.4.4142': attribute type 17 has an invalid length. [ 648.488148][T24377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.499314][T24377] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.517772][T24377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.571731][T24377] team_slave_0: left allmulticast mode [ 648.587168][T24377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 648.587185][T24377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.612115][T24377] veth1_vlan: left promiscuous mode [ 648.613306][T24377] veth0_vlan: left promiscuous mode [ 648.615091][T24377] veth0_vlan: entered promiscuous mode [ 648.617464][T24377] veth1_vlan: entered promiscuous mode [ 648.658686][T24377] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 648.659025][T24377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.683114][T24377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.688042][T24377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.689382][T24377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.690877][T24377] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 648.710443][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.711448][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.711495][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.711527][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.713305][T24394] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4143'. [ 648.779498][T24398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4145'. [ 648.808762][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804971d400: abort rx timeout. Force session deactivation [ 648.976067][T24404] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20003 [ 649.051815][T24412] netlink: 'syz.2.4149': attribute type 1 has an invalid length. [ 649.051850][T24412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.068803][T24398] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4145'. [ 649.148395][T24413] syzkaller0: entered promiscuous mode [ 649.148415][T24413] syzkaller0: entered allmulticast mode [ 649.225587][T24417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4153'. [ 649.285682][T24419] block nbd3: server does not support multiple connections per device. [ 649.285987][T24419] block nbd3: shutting down sockets [ 649.339103][T24422] ip_tables: iptables: counters copy to user failed while replacing table [ 649.696071][T24442] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4159'. [ 649.829999][T24444] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 649.893917][T24448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.894870][T24449] bridge_slave_1: Caught tx_queue_len zero misconfig [ 649.972193][T24444] hsr_slave_1 (unregistering): left promiscuous mode [ 650.075898][T24454] netlink: 'syz.0.4163': attribute type 21 has an invalid length. [ 650.075917][T24454] netlink: 'syz.0.4163': attribute type 20 has an invalid length. [ 650.201420][T17668] tipc: Subscription rejected, illegal request [ 650.247791][T24462] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 650.263808][T24463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.275307][T24462] tipc: Resetting bearer [ 650.281214][T24462] bridge0: port 1(syzkaller0) entered disabled state [ 650.328972][T24462] bridge0: port 1(syzkaller0) entered disabled state [ 650.361387][T24462] tipc: Disabling bearer [ 651.578060][T24551] xt_cgroup: invalid path, errno=-2 [ 652.073109][T24513] workqueue: Failed to create a rescuer kthread for wq "nfc26_nci_rx_wq": -EINTR [ 652.586636][T24633] __nla_validate_parse: 6 callbacks suppressed [ 652.586656][T24633] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4187'. [ 652.614611][T24633] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4187'. [ 652.755015][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4187'. [ 652.848462][T24638] tipc: Enabling of bearer rejected, failed to enable media [ 652.925281][T24641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4190'. [ 653.147300][T24652] syzkaller0: entered promiscuous mode [ 653.147322][T24652] syzkaller0: entered allmulticast mode [ 653.155493][T24652] tipc: Enabling of bearer rejected, media not registered [ 653.739681][T24661] syzkaller1: entered promiscuous mode [ 653.739702][T24661] syzkaller1: entered allmulticast mode [ 653.922875][T24689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4200'. [ 654.362421][T24702] FAULT_INJECTION: forcing a failure. [ 654.362421][T24702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.362452][T24702] CPU: 1 UID: 0 PID: 24702 Comm: syz.1.4204 Not tainted syzkaller #0 PREEMPT(full) [ 654.362471][T24702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.362482][T24702] Call Trace: [ 654.362489][T24702] [ 654.362497][T24702] dump_stack_lvl+0xe8/0x150 [ 654.362532][T24702] should_fail_ex+0x410/0x560 [ 654.362561][T24702] _copy_from_iter+0x1d3/0x1660 [ 654.362584][T24702] ? __alloc_skb+0x27a/0x7a0 [ 654.362701][T24702] ? __alloc_skb+0x27a/0x7a0 [ 654.362725][T24702] ? __alloc_skb+0x27a/0x7a0 [ 654.362746][T24702] ? __pfx__copy_from_iter+0x10/0x10 [ 654.362765][T24702] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 654.362793][T24702] ? __alloc_skb+0x27a/0x7a0 [ 654.362812][T24702] ? __alloc_skb+0x27a/0x7a0 [ 654.362839][T24702] ? netlink_sendmsg+0x650/0xb40 [ 654.362914][T24702] ? skb_put+0x112/0x210 [ 654.362940][T24702] netlink_sendmsg+0x6c0/0xb40 [ 654.362968][T24702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.362994][T24702] ? apparmor_socket_sendmsg+0x98/0x360 [ 654.363026][T24702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.363043][T24702] sock_sendmsg_nosec+0x13a/0x180 [ 654.363066][T24702] ____sys_sendmsg+0x54e/0x850 [ 654.363095][T24702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.363125][T24702] ? import_iovec+0x73/0xa0 [ 654.363149][T24702] ___sys_sendmsg+0x2a5/0x360 [ 654.363170][T24702] ? __lock_acquire+0x747/0x2de0 [ 654.363191][T24702] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.363248][T24702] ? __fget_files+0x2a/0x420 [ 654.363272][T24702] ? __fget_files+0x3a2/0x420 [ 654.363304][T24702] __x64_sys_sendmsg+0x1b1/0x290 [ 654.363332][T24702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.363375][T24702] do_syscall_64+0x166/0x520 [ 654.363401][T24702] ? trace_irq_disable+0x3b/0x140 [ 654.363420][T24702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.363439][T24702] ? clear_bhb_loop+0x70/0xc0 [ 654.363461][T24702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.363479][T24702] RIP: 0033:0x7f1001d9e159 [ 654.363497][T24702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.363511][T24702] RSP: 002b:00007f1002b83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.363531][T24702] RAX: ffffffffffffffda RBX: 00007f1002025fa0 RCX: 00007f1001d9e159 [ 654.363545][T24702] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 654.363556][T24702] RBP: 00007f1002b83090 R08: 0000000000000000 R09: 0000000000000000 [ 654.363567][T24702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.363579][T24702] R13: 00007f1002026038 R14: 00007f1002025fa0 R15: 00007ffd1c6f7f88 [ 654.363610][T24702] [ 655.097823][T24725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4208'. [ 655.277413][T24726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 655.298735][T24737] syzkaller1: entered promiscuous mode [ 655.298754][T24737] syzkaller1: entered allmulticast mode [ 655.536278][T24751] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4212'. [ 655.536803][T24751] pim6reg1: entered allmulticast mode [ 656.492239][T24792] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4226'. [ 656.650243][T24793] netlink: 'syz.3.4224': attribute type 1 has an invalid length. [ 656.680845][T24766] netlink: 'syz.0.4218': attribute type 10 has an invalid length. [ 656.788225][T24793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 656.803327][T24808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4227'. [ 656.819617][T24766] team0: Port device bond_slave_0 added [ 657.184561][T24810] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 657.282252][T24824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4231'. [ 657.609387][T24831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 657.830415][T24853] syzkaller0: entered promiscuous mode [ 657.830437][T24853] syzkaller0: entered allmulticast mode [ 657.882609][T24858] __nla_validate_parse: 4 callbacks suppressed [ 657.882628][T24858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4244'. [ 657.959383][T24862] netlink: 68716 bytes leftover after parsing attributes in process `syz.1.4245'. [ 658.277073][T24887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4251'. [ 658.356510][T24887] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 658.357324][T24887] netlink: 'syz.2.4251': attribute type 3 has an invalid length. [ 658.357470][T24887] netlink: 'syz.2.4251': attribute type 3 has an invalid length. [ 658.399977][T24887] netlink: 'syz.2.4251': attribute type 3 has an invalid length. [ 658.405430][T24888] netlink: 'syz.2.4251': attribute type 3 has an invalid length. [ 658.406747][T24887] openvswitch: netlink: Multiple metadata blocks provided [ 658.413703][T24888] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4251'. [ 658.578614][T24902] netlink: 'syz.4.4254': attribute type 1 has an invalid length. [ 658.617472][T24902] nbd4: detected capacity change from 0 to 63 [ 658.635695][T19182] block nbd4: Receive control failed (result -104) [ 658.768246][T24911] netlink: 'syz.0.4257': attribute type 1 has an invalid length. [ 658.877748][T24914] tipc: Cannot configure node identity twice [ 658.886161][T24914] tipc: Enabled bearer , priority 0 [ 659.125828][T24932] netlink: 68732 bytes leftover after parsing attributes in process `syz.0.4261'. [ 659.534064][T24955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4267'. [ 659.534252][T24955] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 659.534764][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'. [ 659.557837][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'. [ 659.567366][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'. [ 659.567668][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'. [ 659.616941][T24962] ip6gretap0: entered promiscuous mode [ 659.618625][T24962] macsec1: entered allmulticast mode [ 659.618642][T24962] ip6gretap0: entered allmulticast mode [ 659.672046][T24962] netlink: 'syz.2.4268': attribute type 39 has an invalid length. [ 660.000235][T11998] tipc: Node number set to 4278255617 [ 660.106092][T24999] lo: Caught tx_queue_len zero misconfig [ 661.490733][T25070] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 661.966305][T25066] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 662.842949][T25160] netlink: 'syz.2.4304': attribute type 10 has an invalid length. [ 663.037249][T25175] netlink: 'syz.3.4308': attribute type 1 has an invalid length. [ 663.403633][T25199] netlink: 'syz.3.4311': attribute type 70 has an invalid length. [ 663.490751][T25196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.532161][T25196] veth1_vlan: left allmulticast mode [ 663.582740][T25196] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 663.604534][T25196] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 663.613934][T17665] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.613998][T17665] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.614029][T17665] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.614058][T17665] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.147985][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 678.163222][ T4934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 678.167519][ T4934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.169928][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.192728][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 678.269289][T19182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 678.271030][T19182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 678.271351][T19182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.273365][T19182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.275515][T19182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 678.359148][T19182] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 678.375144][T19182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 678.378862][T19182] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 678.396253][T19182] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 678.412604][T19583] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 678.417897][T19583] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 678.421991][T19583] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 678.449268][ T4934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 678.451365][T19583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 678.451941][T19583] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 678.560211][T19182] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 678.565395][T19182] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 678.566250][T19182] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 678.567139][T19182] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 678.567703][T19182] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 679.405727][T19583] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 679.413825][T19583] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 679.418175][T19583] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 679.421363][T19583] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 679.421899][T19583] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 680.065105][T25257] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.065266][T25257] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.065395][T25257] bridge_slave_0: entered allmulticast mode [ 680.067518][T25257] bridge_slave_0: entered promiscuous mode [ 680.108914][T25257] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.109000][T25257] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.109107][T25257] bridge_slave_1: entered allmulticast mode [ 680.111203][T25257] bridge_slave_1: entered promiscuous mode [ 680.229933][T25257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.249493][T25270] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.249589][T25270] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.249671][T25270] bridge_slave_0: entered allmulticast mode [ 680.251318][T25270] bridge_slave_0: entered promiscuous mode [ 680.278819][T25257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.285457][T25270] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.285563][T25270] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.285930][T25270] bridge_slave_1: entered allmulticast mode [ 680.287687][T25270] bridge_slave_1: entered promiscuous mode [ 680.304784][T25265] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.305080][T25265] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.305475][T25265] bridge_slave_0: entered allmulticast mode [ 680.307161][T25265] bridge_slave_0: entered promiscuous mode [ 680.330501][T19182] Bluetooth: hci3: command tx timeout [ 680.358517][T25265] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.358677][T25265] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.358800][T25265] bridge_slave_1: entered allmulticast mode [ 680.370821][T25265] bridge_slave_1: entered promiscuous mode [ 680.397614][T25263] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.397774][T25263] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.398165][T25263] bridge_slave_0: entered allmulticast mode [ 680.399707][T25263] bridge_slave_0: entered promiscuous mode [ 680.429188][T25270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.438198][T25257] team0: Port device team_slave_0 added [ 680.439268][T25263] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.439362][T25263] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.439484][T25263] bridge_slave_1: entered allmulticast mode [ 680.442576][T25263] bridge_slave_1: entered promiscuous mode [ 680.474111][T25270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.475666][T25257] team0: Port device team_slave_1 added [ 680.490735][T25265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.491365][T19182] Bluetooth: hci6: command tx timeout [ 680.554244][T25265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.571845][T19182] Bluetooth: hci7: command tx timeout [ 680.590835][T25263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.604068][T25270] team0: Port device team_slave_0 added [ 680.604792][T25257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.604804][T25257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.604825][T25257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.609309][T25263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.645634][T25270] team0: Port device team_slave_1 added [ 680.660550][T19182] Bluetooth: hci8: command tx timeout [ 680.665256][T25257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.665269][T25257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.665291][T25257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.696461][T25265] team0: Port device team_slave_0 added [ 680.732599][T25270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.732611][T25270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.732631][T25270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.735513][T25263] team0: Port device team_slave_0 added [ 680.737365][T25265] team0: Port device team_slave_1 added [ 680.769871][T25270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.769885][T25270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.769907][T25270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.783445][T25263] team0: Port device team_slave_1 added [ 680.859389][T25257] hsr_slave_0: entered promiscuous mode [ 680.859978][T25257] hsr_slave_1: entered promiscuous mode [ 680.861344][T25257] debugfs: 'hsr0' already exists in 'hsr' [ 680.861363][T25257] Cannot create hsr debugfs directory [ 680.887785][T25265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.887797][T25265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.887814][T25265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.892638][T25265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.892650][T25265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.892672][T25265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.947959][T25263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.947973][T25263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.947995][T25263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.952101][T25263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.952114][T25263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.952134][T25263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.065645][T25270] hsr_slave_0: entered promiscuous mode [ 681.069746][T25270] hsr_slave_1: entered promiscuous mode [ 681.074174][T25270] debugfs: 'hsr0' already exists in 'hsr' [ 681.074194][T25270] Cannot create hsr debugfs directory [ 681.160039][T25265] hsr_slave_0: entered promiscuous mode [ 681.161577][T25265] hsr_slave_1: entered promiscuous mode [ 681.162291][T25265] debugfs: 'hsr0' already exists in 'hsr' [ 681.162309][T25265] Cannot create hsr debugfs directory [ 681.197360][T25263] hsr_slave_0: entered promiscuous mode [ 681.197951][T25263] hsr_slave_1: entered promiscuous mode [ 681.198350][T25263] debugfs: 'hsr0' already exists in 'hsr' [ 681.198367][T25263] Cannot create hsr debugfs directory [ 681.450238][T19182] Bluetooth: hci9: command tx timeout [ 681.466713][T25302] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.469977][T25302] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.470234][T25302] bridge_slave_0: entered allmulticast mode [ 681.472337][T25302] bridge_slave_0: entered promiscuous mode [ 681.511513][T25302] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.511599][T25302] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.511709][T25302] bridge_slave_1: entered allmulticast mode [ 681.512788][T25302] bridge_slave_1: entered promiscuous mode [ 681.583248][T25302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.619579][T25302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.692563][T25302] team0: Port device team_slave_0 added [ 681.711619][T25302] team0: Port device team_slave_1 added [ 681.762338][T25302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.762352][T25302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.762370][T25302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.766070][T25302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.766082][T25302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.766102][T25302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.827141][T25302] hsr_slave_0: entered promiscuous mode [ 681.828455][T25302] hsr_slave_1: entered promiscuous mode [ 681.829162][T25302] debugfs: 'hsr0' already exists in 'hsr' [ 681.829179][T25302] Cannot create hsr debugfs directory [ 682.410161][T19182] Bluetooth: hci3: command tx timeout [ 682.570329][T19182] Bluetooth: hci6: command tx timeout [ 682.660217][T19182] Bluetooth: hci7: command tx timeout [ 682.731785][T19182] Bluetooth: hci8: command tx timeout [ 683.540185][T19182] Bluetooth: hci9: command tx timeout [ 684.490323][T19182] Bluetooth: hci3: command tx timeout [ 684.650557][T19182] Bluetooth: hci6: command tx timeout [ 684.730235][T19182] Bluetooth: hci7: command tx timeout [ 684.810288][T19182] Bluetooth: hci8: command tx timeout [ 685.610196][T19182] Bluetooth: hci9: command tx timeout [ 686.580238][T19182] Bluetooth: hci3: command tx timeout [ 686.730607][T19182] Bluetooth: hci6: command tx timeout [ 686.810202][T19182] Bluetooth: hci7: command tx timeout [ 686.890209][T19182] Bluetooth: hci8: command tx timeout [ 687.690298][T19182] Bluetooth: hci9: command tx timeout [ 688.891235][ T1993] block nbd4: Possible stuck request ffff8880271e7000: control (read@0,1024B). Runtime 30 seconds [ 688.892376][ T1993] block nbd4: Possible stuck request ffff8880271e71c0: control (read@1024,1024B). Runtime 30 seconds [ 688.892396][ T1993] block nbd4: Possible stuck request ffff8880271e7380: control (read@2048,1024B). Runtime 30 seconds [ 688.892411][ T1993] block nbd4: Possible stuck request ffff8880271e7540: control (read@3072,1024B). Runtime 30 seconds [ 718.974123][ T1993] block nbd4: Possible stuck request ffff8880271e7000: control (read@0,1024B). Runtime 60 seconds [ 718.974177][ T1993] block nbd4: Possible stuck request ffff8880271e71c0: control (read@1024,1024B). Runtime 60 seconds [ 718.974199][ T1993] block nbd4: Possible stuck request ffff8880271e7380: control (read@2048,1024B). Runtime 60 seconds [ 718.974222][ T1993] block nbd4: Possible stuck request ffff8880271e7540: control (read@3072,1024B). Runtime 60 seconds [ 721.218844][ T4985] udevd[4985]: worker [22840] /devices/virtual/block/nbd4 is taking a long time [ 738.763934][T19583] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 738.780688][T19583] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 738.784185][T19583] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 738.786367][T19583] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 738.787046][T19583] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 738.817501][T19583] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 738.823809][T19583] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 738.832254][T19583] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 738.857012][ T4934] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 738.857614][ T4934] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 738.918747][ T4934] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 738.928057][ T4934] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 738.936991][ T4934] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 738.938937][ T4934] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 738.958400][ T4934] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 739.017062][ T4934] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 739.028042][ T4934] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 739.028909][ T4934] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 739.032268][ T4934] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 739.043109][ T4934] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 739.871359][T19182] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 739.891219][T19182] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 739.897049][T19182] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 739.899308][T19182] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 739.900864][T19182] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 740.540328][T25357] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.540626][T25357] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.541064][T25357] bridge_slave_0: entered allmulticast mode [ 740.542838][T25357] bridge_slave_0: entered promiscuous mode [ 740.589127][T25357] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.589229][T25357] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.589354][T25357] bridge_slave_1: entered allmulticast mode [ 740.611734][T25357] bridge_slave_1: entered promiscuous mode [ 740.735266][T25357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.752082][T25361] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.752201][T25361] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.752279][T25361] bridge_slave_0: entered allmulticast mode [ 740.753240][T25361] bridge_slave_0: entered promiscuous mode [ 740.755765][T25365] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.755908][T25365] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.756263][T25365] bridge_slave_0: entered allmulticast mode [ 740.757996][T25365] bridge_slave_0: entered promiscuous mode [ 740.761583][T25365] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.761686][T25365] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.761808][T25365] bridge_slave_1: entered allmulticast mode [ 740.763609][T25365] bridge_slave_1: entered promiscuous mode [ 740.846104][T25357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.867798][T25361] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.867920][T25361] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.867995][T25361] bridge_slave_1: entered allmulticast mode [ 740.869085][T25361] bridge_slave_1: entered promiscuous mode [ 740.890277][T19182] Bluetooth: hci10: command tx timeout [ 740.962748][T25358] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.962849][T25358] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.962971][T25358] bridge_slave_0: entered allmulticast mode [ 740.964416][T25358] bridge_slave_0: entered promiscuous mode [ 740.972531][T19182] Bluetooth: hci12: command tx timeout [ 740.972937][T19182] Bluetooth: hci11: command tx timeout [ 741.003673][T25365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.006629][T25357] team0: Port device team_slave_0 added [ 741.009742][T25357] team0: Port device team_slave_1 added [ 741.009912][T25358] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.010007][T25358] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.010561][T25358] bridge_slave_1: entered allmulticast mode [ 741.013031][T25358] bridge_slave_1: entered promiscuous mode [ 741.022248][T25361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.026114][T25365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.066066][T25361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.130812][ T4934] Bluetooth: hci13: command tx timeout [ 741.138410][T25365] team0: Port device team_slave_0 added [ 741.139094][T25357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.139106][T25357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.139127][T25357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.143255][T25365] team0: Port device team_slave_1 added [ 741.155313][T25358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.174197][T25357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.174210][T25357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.174232][T25357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.205292][T25358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.207601][T25361] team0: Port device team_slave_0 added [ 741.250512][T25365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.250525][T25365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.250545][T25365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.294818][T25361] team0: Port device team_slave_1 added [ 741.297109][T25365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.297121][T25365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.297143][T25365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.375350][T25358] team0: Port device team_slave_0 added [ 741.396599][T25361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.396610][T25361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.396628][T25361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.445057][T25358] team0: Port device team_slave_1 added [ 741.445658][T25361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.445670][T25361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.445691][T25361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.464944][T25357] hsr_slave_0: entered promiscuous mode [ 741.465878][T25357] hsr_slave_1: entered promiscuous mode [ 741.466526][T25357] debugfs: 'hsr0' already exists in 'hsr' [ 741.466543][T25357] Cannot create hsr debugfs directory [ 741.531178][T25399] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.531278][T25399] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.531402][T25399] bridge_slave_0: entered allmulticast mode [ 741.533001][T25399] bridge_slave_0: entered promiscuous mode [ 741.550649][T25358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.550662][T25358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.550684][T25358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.552728][T25358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.552740][T25358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.552762][T25358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.584962][T25365] hsr_slave_0: entered promiscuous mode [ 741.585984][T25365] hsr_slave_1: entered promiscuous mode [ 741.586653][T25365] debugfs: 'hsr0' already exists in 'hsr' [ 741.586670][T25365] Cannot create hsr debugfs directory [ 741.588035][T25399] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.588540][T25399] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.588933][T25399] bridge_slave_1: entered allmulticast mode [ 741.590937][T25399] bridge_slave_1: entered promiscuous mode [ 741.652354][T25361] hsr_slave_0: entered promiscuous mode [ 741.653395][T25361] hsr_slave_1: entered promiscuous mode [ 741.654142][T25361] debugfs: 'hsr0' already exists in 'hsr' [ 741.654158][T25361] Cannot create hsr debugfs directory [ 741.727918][T25399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.768209][T25399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.774885][T25358] hsr_slave_0: entered promiscuous mode [ 741.775823][T25358] hsr_slave_1: entered promiscuous mode [ 741.776480][T25358] debugfs: 'hsr0' already exists in 'hsr' [ 741.776497][T25358] Cannot create hsr debugfs directory [ 741.857663][T25399] team0: Port device team_slave_0 added [ 741.892158][T25399] team0: Port device team_slave_1 added [ 741.992666][T25399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.992678][T25399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.992697][T25399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.037828][T25399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.037841][T25399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.037863][T25399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.041434][ T4934] Bluetooth: hci14: command tx timeout [ 742.220442][T25399] hsr_slave_0: entered promiscuous mode [ 742.221041][T25399] hsr_slave_1: entered promiscuous mode [ 742.221454][T25399] debugfs: 'hsr0' already exists in 'hsr' [ 742.221470][T25399] Cannot create hsr debugfs directory [ 742.970167][ T4934] Bluetooth: hci10: command tx timeout [ 743.050540][ T4934] Bluetooth: hci11: command tx timeout [ 743.050554][T19182] Bluetooth: hci12: command tx timeout [ 743.210276][T19182] Bluetooth: hci13: command tx timeout [ 744.090289][T19182] Bluetooth: hci14: command tx timeout [ 745.050654][T19182] Bluetooth: hci10: command tx timeout [ 745.130439][T19182] Bluetooth: hci11: command tx timeout [ 745.130452][ T4934] Bluetooth: hci12: command tx timeout [ 745.290361][ T4934] Bluetooth: hci13: command tx timeout [ 746.170312][ T4934] Bluetooth: hci14: command tx timeout [ 747.131562][ T4934] Bluetooth: hci10: command tx timeout [ 747.210219][ T4934] Bluetooth: hci11: command tx timeout [ 747.210403][ T4934] Bluetooth: hci12: command tx timeout [ 747.370352][ T4934] Bluetooth: hci13: command tx timeout [ 748.250211][ T4934] Bluetooth: hci14: command tx timeout [ 749.051995][ T1993] block nbd4: Possible stuck request ffff8880271e7000: control (read@0,1024B). Runtime 90 seconds [ 749.052040][ T1993] block nbd4: Possible stuck request ffff8880271e71c0: control (read@1024,1024B). Runtime 90 seconds [ 749.052064][ T1993] block nbd4: Possible stuck request ffff8880271e7380: control (read@2048,1024B). Runtime 90 seconds [ 749.052087][ T1993] block nbd4: Possible stuck request ffff8880271e7540: control (read@3072,1024B). Runtime 90 seconds [ 779.132034][ T1993] block nbd4: Possible stuck request ffff8880271e7000: control (read@0,1024B). Runtime 120 seconds [ 779.132075][ T1993] block nbd4: Possible stuck request ffff8880271e71c0: control (read@1024,1024B). Runtime 120 seconds [ 779.132098][ T1993] block nbd4: Possible stuck request ffff8880271e7380: control (read@2048,1024B). Runtime 120 seconds [ 779.132122][ T1993] block nbd4: Possible stuck request ffff8880271e7540: control (read@3072,1024B). Runtime 120 seconds [ 799.296440][T19583] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 799.307450][T19583] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 799.318277][T19583] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 799.319130][T19583] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 799.335289][T19583] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 799.414334][T19583] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 799.419996][T19583] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 799.444900][T19583] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 799.446318][T19583] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 799.446881][T19583] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 799.495080][T19182] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 799.500581][T19182] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 799.508199][T19182] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 799.524724][T19182] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 799.525348][T19182] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 799.685932][T19583] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 799.704271][T19583] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 799.705073][T19583] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 799.707760][T19583] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 799.708392][T19583] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 800.411185][T19583] Bluetooth: hci3: command 0x0406 tx timeout [ 800.448485][T19583] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 800.454558][T19583] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 800.460742][T19583] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 800.470865][T19583] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 800.471442][T19583] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 801.029055][T25453] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.029206][T25453] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.029449][T25453] bridge_slave_0: entered allmulticast mode [ 801.030904][T25453] bridge_slave_0: entered promiscuous mode [ 801.095033][T25453] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.095189][T25453] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.095268][T25453] bridge_slave_1: entered allmulticast mode [ 801.096215][T25453] bridge_slave_1: entered promiscuous mode [ 801.194540][T25453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.197371][T25453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.212475][T25458] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.212635][T25458] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.212753][T25458] bridge_slave_0: entered allmulticast mode [ 801.214488][T25458] bridge_slave_0: entered promiscuous mode [ 801.259575][T25458] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.259675][T25458] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.259803][T25458] bridge_slave_1: entered allmulticast mode [ 801.262433][T25458] bridge_slave_1: entered promiscuous mode [ 801.306522][T25453] team0: Port device team_slave_0 added [ 801.336758][T25453] team0: Port device team_slave_1 added [ 801.370467][ T4934] Bluetooth: hci15: command tx timeout [ 801.376841][T25458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.404266][T25456] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.404408][T25456] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.404491][T25456] bridge_slave_0: entered allmulticast mode [ 801.405476][T25456] bridge_slave_0: entered promiscuous mode [ 801.428812][T25458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.446410][T25453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.446421][T25453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.446440][T25453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.450689][ T4934] Bluetooth: hci16: command tx timeout [ 801.492222][T25456] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.492319][T25456] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.492745][T25456] bridge_slave_1: entered allmulticast mode [ 801.494712][T25456] bridge_slave_1: entered promiscuous mode [ 801.522954][T25458] team0: Port device team_slave_0 added [ 801.524506][T25453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.524518][T25453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.524539][T25453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.559972][T25458] team0: Port device team_slave_1 added [ 801.611969][ T4934] Bluetooth: hci17: command tx timeout [ 801.628930][T25456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.646508][T25458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.646520][T25458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.646541][T25458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.659429][T25456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.687196][T25466] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.687346][T25466] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.687475][T25466] bridge_slave_0: entered allmulticast mode [ 801.689411][T25466] bridge_slave_0: entered promiscuous mode [ 801.705980][T25458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.705992][T25458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.706014][T25458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.732285][T25466] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.732382][T25466] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.732504][T25466] bridge_slave_1: entered allmulticast mode [ 801.735492][T25466] bridge_slave_1: entered promiscuous mode [ 801.771269][ T4934] Bluetooth: hci18: command tx timeout [ 801.772075][T25456] team0: Port device team_slave_0 added [ 801.793917][T25453] hsr_slave_0: entered promiscuous mode [ 801.794935][T25453] hsr_slave_1: entered promiscuous mode [ 801.795657][T25453] debugfs: 'hsr0' already exists in 'hsr' [ 801.795672][T25453] Cannot create hsr debugfs directory [ 801.818698][T25456] team0: Port device team_slave_1 added [ 801.867917][T25466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.910989][T25466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.946311][T25458] hsr_slave_0: entered promiscuous mode [ 801.947022][T25458] hsr_slave_1: entered promiscuous mode [ 801.947424][T25458] debugfs: 'hsr0' already exists in 'hsr' [ 801.947440][T25458] Cannot create hsr debugfs directory [ 801.948174][T25456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.948184][T25456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.948202][T25456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.997969][T25466] team0: Port device team_slave_0 added [ 802.028511][T25456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.028524][T25456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.028546][T25456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.059990][T25466] team0: Port device team_slave_1 added [ 802.177662][T25466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.177674][T25466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.177692][T25466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.217888][T25466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.217901][T25466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.217923][T25466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.248443][T25456] hsr_slave_0: entered promiscuous mode [ 802.249776][T25456] hsr_slave_1: entered promiscuous mode [ 802.254382][T25456] debugfs: 'hsr0' already exists in 'hsr' [ 802.254399][T25456] Cannot create hsr debugfs directory [ 802.326762][T25496] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.326894][T25496] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.327116][T25496] bridge_slave_0: entered allmulticast mode [ 802.328095][T25496] bridge_slave_0: entered promiscuous mode [ 802.381042][T25496] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.381161][T25496] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.381280][T25496] bridge_slave_1: entered allmulticast mode [ 802.384305][T25496] bridge_slave_1: entered promiscuous mode [ 802.456974][T25496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.487167][T25496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.490413][ T4934] Bluetooth: hci19: command tx timeout [ 802.528453][T25466] hsr_slave_0: entered promiscuous mode [ 802.529049][T25466] hsr_slave_1: entered promiscuous mode [ 802.529471][T25466] debugfs: 'hsr0' already exists in 'hsr' [ 802.529488][T25466] Cannot create hsr debugfs directory [ 802.613924][T25496] team0: Port device team_slave_0 added [ 802.642275][T25496] team0: Port device team_slave_1 added [ 802.705583][T25496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.705595][T25496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.705613][T25496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.759941][T25496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.759954][T25496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.759976][T25496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.874044][T25496] hsr_slave_0: entered promiscuous mode [ 802.874660][T25496] hsr_slave_1: entered promiscuous mode [ 802.875067][T25496] debugfs: 'hsr0' already exists in 'hsr' [ 802.875083][T25496] Cannot create hsr debugfs directory [ 803.453618][ T4934] Bluetooth: hci15: command tx timeout [ 803.530237][ T5618] Bluetooth: hci16: command tx timeout [ 803.700236][ T5618] Bluetooth: hci17: command tx timeout [ 803.861900][ T5618] Bluetooth: hci18: command tx timeout [ 804.580397][ T5618] Bluetooth: hci19: command tx timeout [ 805.551342][ T5618] Bluetooth: hci8: command 0x0406 tx timeout [ 805.551377][ T5618] Bluetooth: hci7: command 0x0406 tx timeout [ 805.551426][ T5618] Bluetooth: hci6: command 0x0406 tx timeout [ 805.551449][ T5618] Bluetooth: hci9: command 0x0406 tx timeout [ 805.551470][ T5618] Bluetooth: hci15: command tx timeout [ 805.621186][ T4934] Bluetooth: hci16: command tx timeout [ 805.770615][T19583] Bluetooth: hci17: command tx timeout [ 805.931725][T19583] Bluetooth: hci18: command tx timeout [ 806.650436][T19583] Bluetooth: hci19: command tx timeout [ 807.610235][T19583] Bluetooth: hci15: command tx timeout [ 807.690274][T19583] Bluetooth: hci16: command tx timeout [ 807.850319][T19583] Bluetooth: hci17: command tx timeout [ 808.010331][T19583] Bluetooth: hci18: command tx timeout [ 808.730379][T19583] Bluetooth: hci19: command tx timeout [ 809.212037][ T1993] block nbd4: Possible stuck request ffff8880271e7000: control (read@0,1024B). Runtime 150 seconds [ 809.212062][ T1993] block nbd4: Possible stuck request ffff8880271e71c0: control (read@1024,1024B). Runtime 150 seconds [ 809.212076][ T1993] block nbd4: Possible stuck request ffff8880271e7380: control (read@2048,1024B). Runtime 150 seconds [ 809.212089][ T1993] block nbd4: Possible stuck request ffff8880271e7540: control (read@3072,1024B). Runtime 150 seconds [ 822.651015][ T32] INFO: task syz.4.4298:25121 blocked for more than 143 seconds. [ 822.651043][ T32] Not tainted syzkaller #0 [ 822.651053][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.651061][ T32] task:syz.4.4298 state:D stack:25352 pid:25121 tgid:25119 ppid:18631 task_flags:0x480140 flags:0x00080002 [ 822.651112][ T32] Call Trace: [ 822.651120][ T32] [ 822.651133][ T32] __schedule+0x17db/0x58f0 [ 822.651249][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.651299][ T32] ? __pfx___schedule+0x10/0x10 [ 822.651318][ T32] ? lock_acquire+0x115/0x3 ** replaying previous printk message ** [ 822.651318][ T32] ? lock_acquire+0x115/0x350 [ 822.651348][ T32] ? schedule+0x90/0x2b0 [ 822.651375][ T32] schedule+0x164/0x2b0 [ 822.651399][ T32] blk_mq_freeze_queue_wait+0x101/0x180 [ 822.651498][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 822.651526][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 822.651567][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 822.651595][ T32] nbd_set_size+0x4c5/0x7d0 [ 822.651670][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 822.651713][ T32] ? nla_memcpy+0x5b/0xc0 [ 822.651746][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 822.651779][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 822.651804][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 822.651826][ T32] ? __nla_parse+0x40/0x60 [ 822.651848][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 822.651913][ T32] genl_family_rcv_msg_doit+0x233/0x340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 822.651937][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 822.651962][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.651984][ T32] genl_rcv_msg+0x614/0x7a0 [ 822.652006][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.652022][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 822.652048][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.652075][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.652093][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.652118][ T32] ? down_read+0x2be/0x330 [ 822.652183][ T32] genl_rcv+0x28/0x40 [ 822.652199][ T32] netlink_unicast+0x7bd/0x940 [ 822.653763][ T32] netlink_sendmsg+0x813/0xb40 [ 822.653798][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.653823][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.653843][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.653857][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.653885][ T32] ____sys_sendmsg+0x54e/0x850 [ 822.653913][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.653945][ T32] ? import_iovec+0x73/0xa0 [ 822.653972][ T32] ___sys_sendmsg+0x2a5/0x360 [ 822.653995][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.654019][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.654049][ T32] ? futex_wait+0x2a2/0x390 [ 822.654116][ T32] ? __fget_files+0x2a/0x420 [ 822.654139][ T32] ? __fget_files+0x3a2/0x420 [ 822.654172][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 822.654200][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.654245][ T32] do_syscall_64+0x166/0x520 [ 822.655686][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.655714][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.655748][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.655773][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.655793][ T32] RIP: 0033:0x7f911f39e159 [ 822.655810][ T32] RSP: 002b:00007f91201c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.655831][ T32] RAX: ffffffffffffffda RBX: 00007f911f625fa0 RCX: 00007f911f39e159 [ 822.655846][ T32] RDX: 00000000040000d4 RSI: 0000200000000b40 RDI: 0000000000000004 [ 822.655858][ T32] RBP: 00007f911f43506b R08: 0000000000000000 R09: 0000000000000000 [ 822.655870][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.655886][ T32] R13: 00007f911f626038 R14: 00007f911f625fa0 R15: 00007ffce0a898e8 [ 822.655917][ T32] [ 822.655926][ T32] INFO: task syz.4.4298:25123 blocked for more than 143 seconds. [ 822.655939][ T32] Not tainted syzkaller #0 [ 822.655948][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.655956][ T32] task:syz.4.4298 state:D stack:26624 pid:25123 tgid:25119 ppid:18631 task_flags:0x400140 flags:0x00080002 [ 822.656005][ T32] Call Trace: [ 822.656012][ T32] [ 822.656024][ T32] __schedule+0x17db/0x58f0 [ 822.656079][ T32] ? __pfx___schedule+0x10/0x10 [ 822.656111][ T32] ? schedule+0x90/0x2b0 [ 822.656138][ T32] schedule+0x164/0x2b0 [ 822.656163][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.656186][ T32] __mutex_lock+0x7c1/0x1550 [ 822.656217][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.656246][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.656271][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.656298][ T32] ? stack_trace_save+0xa9/0x100 [ 822.656321][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.656346][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.656421][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.656451][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.656494][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.656515][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.656541][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.656578][ T32] ? down_read+0x2be/0x330 [ 822.656610][ T32] genl_rcv+0x28/0x40 [ 822.656632][ T32] netlink_unicast+0x7bd/0x940 [ 822.656672][ T32] netlink_sendmsg+0x813/0xb40 [ 822.656703][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.656732][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.656757][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.656776][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.656800][ T32] ____sys_sendmsg+0x54e/0x850 [ 822.656834][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.656871][ T32] ? import_iovec+0x73/0xa0 [ 822.656905][ T32] ___sys_sendmsg+0x2a5/0x360 [ 822.656931][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.656956][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.656987][ T32] ? futex_wait+0x2a2/0x390 [ 822.657046][ T32] ? __fget_files+0x2a/0x420 [ 822.657072][ T32] ? __fget_files+0x3a2/0x420 [ 822.658592][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 822.658624][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.658675][ T32] do_syscall_64+0x166/0x520 [ 822.658699][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.658719][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.658739][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.658764][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.658783][ T32] RIP: 0033:0x7f911f39e159 [ 822.658800][ T32] RSP: 002b:00007f91201a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.658820][ T32] RAX: ffffffffffffffda RBX: 00007f911f626090 RCX: 00007f911f39e159 [ 822.658834][ T32] RDX: 00000000040000d4 RSI: 0000200000000b40 RDI: 0000000000000004 [ 822.658847][ T32] RBP: 00007f911f43506b R08: 0000000000000000 R09: 0000000000000000 [ 822.658860][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.658872][ T32] R13: 00007f911f626128 R14: 00007f911f626090 R15: 00007ffce0a898e8 [ 822.658911][ T32] [ 822.658919][ T32] INFO: task syz.4.4298:25133 blocked for more than 143 seconds. [ 822.658933][ T32] Not tainted syzkaller #0 [ 822.658943][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.658952][ T32] task:syz.4.4298 state:D stack:27904 pid:25133 tgid:25119 ppid:18631 task_flags:0x400040 flags:0x00080002 [ 822.659002][ T32] Call Trace: [ 822.659009][ T32] [ 822.659022][ T32] __schedule+0x17db/0x58f0 [ 822.659076][ T32] ? __pfx___schedule+0x10/0x10 [ 822.659110][ T32] ? schedule+0x90/0x2b0 [ 822.659137][ T32] schedule+0x164/0x2b0 [ 822.659164][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.659187][ T32] __mutex_lock+0x7c1/0x1550 [ 822.659218][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.659246][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.659269][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.659289][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 822.659365][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.659382][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.659399][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.659421][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.659432][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.659446][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.659465][ T32] ? down_read+0x2be/0x330 [ 822.659482][ T32] genl_rcv+0x28/0x40 [ 822.659493][ T32] netlink_unicast+0x7bd/0x940 [ 822.659514][ T32] netlink_sendmsg+0x813/0xb40 [ 822.659530][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.659546][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.659559][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.659569][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.659582][ T32] __sys_sendto+0x408/0x5a0 [ 822.659599][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 822.659610][ T32] ? errseq_sample+0x40/0x70 [ 822.659638][ T32] ? fd_install+0x94/0x3d0 [ 822.659650][ T32] ? fd_install+0x309/0x3d0 [ 822.659668][ T32] __x64_sys_sendto+0xde/0x100 [ 822.659684][ T32] do_syscall_64+0x166/0x520 [ 822.659697][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.659707][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.659718][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.659733][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.659744][ T32] RIP: 0033:0x7f911f35e98e [ 822.659753][ T32] RSP: 002b:00007f911d5f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.659764][ T32] RAX: ffffffffffffffda RBX: 00007f911d5f66c0 RCX: 00007f911f35e98e [ 822.659772][ T32] RDX: 0000000000000028 RSI: 00007f911d5f5000 RDI: 0000000000000008 [ 822.659779][ T32] RBP: 0000000000000000 R08: 00007f911d5f4f04 R09: 000000000000000c [ 822.659785][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 822.659792][ T32] R13: 00007f911d5f4f58 R14: 00007f911d5f5000 R15: 0000000000000000 [ 822.659808][ T32] [ 822.659814][ T32] INFO: task syz.0.4299:25126 blocked for more than 143 seconds. [ 822.659822][ T32] Not tainted syzkaller #0 [ 822.659827][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.659832][ T32] task:syz.0.4299 state:D stack:26624 pid:25126 tgid:25124 ppid:20195 task_flags:0x400040 flags:0x00080002 [ 822.659861][ T32] Call Trace: [ 822.659864][ T32] [ 822.659871][ T32] __schedule+0x17db/0x58f0 [ 822.659897][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 822.659918][ T32] ? __pfx___schedule+0x10/0x10 [ 822.659935][ T32] ? schedule+0x90/0x2b0 [ 822.659949][ T32] schedule+0x164/0x2b0 [ 822.659963][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.659975][ T32] __mutex_lock+0x7c1/0x1550 [ 822.659992][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.660008][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.676348][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.676399][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 822.676431][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.676457][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.676488][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.676528][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.676548][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.676573][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.676608][ T32] ? down_read+0x2be/0x330 [ 822.676639][ T32] genl_rcv+0x28/0x40 [ 822.676659][ T32] netlink_unicast+0x7bd/0x940 [ 822.676697][ T32] netlink_sendmsg+0x813/0xb40 [ 822.676726][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.676754][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.676778][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.676795][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.676819][ T32] __sys_sendto+0x408/0x5a0 [ 822.676849][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 822.676899][ T32] ? rcu_is_watching+0x16/0xb0 [ 822.676928][ T32] __x64_sys_sendto+0xde/0x100 [ 822.676956][ T32] do_syscall_64+0x166/0x520 [ 822.676980][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.676997][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.677016][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.677040][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.677059][ T32] RIP: 0033:0x7ff44915e98e [ 822.677088][ T32] RSP: 002b:00007ff449fb6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.677107][ T32] RAX: ffffffffffffffda RBX: 00007ff449fb86c0 RCX: 00007ff44915e98e [ 822.677121][ T32] RDX: 0000000000000020 RSI: 00007ff449fb7000 RDI: 0000000000000003 [ 822.677134][ T32] RBP: 0000000000000000 R08: 00007ff449fb6f04 R09: 000000000000000c [ 822.677146][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 822.677158][ T32] R13: 00007ff449fb6f58 R14: 00007ff449fb7000 R15: 0000000000000000 [ 822.677188][ T32] [ 822.677197][ T32] INFO: task syz.0.4299:25129 blocked for more than 143 seconds. [ 822.677211][ T32] Not tainted syzkaller #0 [ 822.677220][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.677229][ T32] task:syz.0.4299 state:D stack:27232 pid:25129 tgid:25124 ppid:20195 task_flags:0x400140 flags:0x00080002 [ 822.677278][ T32] Call Trace: [ 822.677285][ T32] [ 822.677296][ T32] __schedule+0x17db/0x58f0 [ 822.677349][ T32] ? __pfx___schedule+0x10/0x10 [ 822.677387][ T32] ? schedule+0x90/0x2b0 [ 822.677413][ T32] schedule+0x164/0x2b0 [ 822.677438][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.677460][ T32] __mutex_lock+0x7c1/0x1550 [ 822.677490][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.677518][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.677543][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.677569][ T32] ? stack_trace_save+0xa9/0x100 [ 822.677610][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.677635][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.677661][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.677690][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.677730][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.677750][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.677775][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.677809][ T32] ? down_read+0x2be/0x330 [ 822.677840][ T32] genl_rcv+0x28/0x40 [ 822.677861][ T32] netlink_unicast+0x7bd/0x940 [ 822.677898][ T32] netlink_sendmsg+0x813/0xb40 [ 822.677927][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.677955][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.677979][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.677997][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.678019][ T32] __sys_sendto+0x408/0x5a0 [ 822.678049][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 822.678102][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 822.678154][ T32] __x64_sys_sendto+0xde/0x100 [ 822.678181][ T32] do_syscall_64+0x166/0x520 [ 822.678204][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.678222][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.678242][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.678265][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.678284][ T32] RIP: 0033:0x7ff44915e98e [ 822.678299][ T32] RSP: 002b:00007ff449f95e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.678317][ T32] RAX: ffffffffffffffda RBX: 00007ff449f976c0 RCX: 00007ff44915e98e [ 822.678331][ T32] RDX: 000000000000001c RSI: 00007ff449f96000 RDI: 0000000000000048 [ 822.678343][ T32] RBP: 0000000000000000 R08: 00007ff449f95f04 R09: 000000000000000c [ 822.678355][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000048 [ 822.678366][ T32] R13: 00007ff449f95f58 R14: 00007ff449f96000 R15: 0000000000000000 [ 822.678402][ T32] [ 822.678410][ T32] INFO: task syz.0.4299:25139 blocked for more than 143 seconds. [ 822.678424][ T32] Not tainted syzkaller #0 [ 822.678433][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.678442][ T32] task:syz.0.4299 state:D stack:27904 pid:25139 tgid:25124 ppid:20195 task_flags:0x400040 flags:0x00080002 [ 822.678490][ T32] Call Trace: [ 822.678496][ T32] [ 822.678507][ T32] __schedule+0x17db/0x58f0 [ 822.678559][ T32] ? __pfx___schedule+0x10/0x10 [ 822.678590][ T32] ? schedule+0x90/0x2b0 [ 822.678616][ T32] schedule+0x164/0x2b0 [ 822.678641][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.678664][ T32] __mutex_lock+0x7c1/0x1550 [ 822.678693][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.678722][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.678746][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.678782][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 822.678810][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.678835][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.678865][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.678904][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.678924][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.678949][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.678984][ T32] ? down_read+0x2be/0x330 [ 822.679013][ T32] genl_rcv+0x28/0x40 [ 822.679034][ T32] netlink_unicast+0x7bd/0x940 [ 822.679072][ T32] netlink_sendmsg+0x813/0xb40 [ 822.679100][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.679128][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.679151][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.679169][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.679192][ T32] __sys_sendto+0x408/0x5a0 [ 822.679221][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 822.679241][ T32] ? errseq_sample+0x40/0x70 [ 822.679290][ T32] ? fd_install+0x94/0x3d0 [ 822.679313][ T32] ? fd_install+0x309/0x3d0 [ 822.679348][ T32] __x64_sys_sendto+0xde/0x100 [ 822.679386][ T32] do_syscall_64+0x166/0x520 [ 822.679409][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.679427][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.679446][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.679469][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.679488][ T32] RIP: 0033:0x7ff44915e98e [ 822.679504][ T32] RSP: 002b:00007ff4473d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.679521][ T32] RAX: ffffffffffffffda RBX: 00007ff4473d56c0 RCX: 00007ff44915e98e [ 822.679534][ T32] RDX: 0000000000000028 RSI: 00007ff4473d4000 RDI: 0000000000000047 [ 822.679547][ T32] RBP: 0000000000000000 R08: 00007ff4473d3f04 R09: 000000000000000c [ 822.679559][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000047 [ 822.679570][ T32] R13: 00007ff4473d3f58 R14: 00007ff4473d4000 R15: 0000000000000000 [ 822.679602][ T32] [ 822.679609][ T32] INFO: task syz.0.4299:25147 blocked for more than 143 seconds. [ 822.679622][ T32] Not tainted syzkaller #0 [ 822.679631][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.679639][ T32] task:syz.0.4299 state:D stack:27904 pid:25147 tgid:25124 ppid:20195 task_flags:0x400040 flags:0x00080002 [ 822.679687][ T32] Call Trace: [ 822.679694][ T32] [ 822.679706][ T32] __schedule+0x17db/0x58f0 [ 822.679756][ T32] ? __pfx___schedule+0x10/0x10 [ 822.679789][ T32] ? schedule+0x90/0x2b0 [ 822.679814][ T32] schedule+0x164/0x2b0 [ 822.679839][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.679861][ T32] __mutex_lock+0x7c1/0x1550 [ 822.679890][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.679918][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.679943][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.679981][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.679999][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.680024][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.680829][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.680872][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.680892][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.680917][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.680951][ T32] ? down_read+0x2be/0x330 [ 822.680982][ T32] genl_rcv+0x28/0x40 [ 822.681003][ T32] netlink_unicast+0x7bd/0x940 [ 822.681041][ T32] netlink_sendmsg+0x813/0xb40 [ 822.681070][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.681098][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.681121][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.681139][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.681162][ T32] __sys_sendto+0x408/0x5a0 [ 822.681191][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 822.681245][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 822.681269][ T32] __x64_sys_sendto+0xde/0x100 [ 822.681297][ T32] do_syscall_64+0x166/0x520 [ 822.681319][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.681337][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.681356][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.681391][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.681410][ T32] RIP: 0033:0x7ff44915e98e [ 822.681426][ T32] RSP: 002b:00007ff4473b2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.681444][ T32] RAX: ffffffffffffffda RBX: 00007ff4473b46c0 RCX: 00007ff44915e98e [ 822.681458][ T32] RDX: 0000000000000020 RSI: 00007ff4473b3000 RDI: 0000000000000003 [ 822.681470][ T32] RBP: 0000000000000000 R08: 00007ff4473b2f04 R09: 000000000000000c [ 822.681482][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 822.681493][ T32] R13: 00007ff4473b2f58 R14: 00007ff4473b3000 R15: 0000000000000000 [ 822.681536][ T32] [ 822.681544][ T32] INFO: task syz.0.4299:25157 blocked for more than 143 seconds. [ 822.681558][ T32] Not tainted syzkaller #0 [ 822.681567][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.681575][ T32] task:syz.0.4299 state:D stack:27904 pid:25157 tgid:25124 ppid:20195 task_flags:0x400040 flags:0x00080002 [ 822.681624][ T32] Call Trace: [ 822.681630][ T32] [ 822.681642][ T32] __schedule+0x17db/0x58f0 [ 822.681694][ T32] ? __pfx___schedule+0x10/0x10 [ 822.681726][ T32] ? schedule+0x90/0x2b0 [ 822.681751][ T32] schedule+0x164/0x2b0 [ 822.681776][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.681798][ T32] __mutex_lock+0x7c1/0x1550 [ 822.681828][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.681855][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.681880][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.681915][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 822.681943][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.681968][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.681998][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.682038][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.682057][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.682082][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.682117][ T32] ? down_read+0x2be/0x330 [ 822.682146][ T32] genl_rcv+0x28/0x40 [ 822.682168][ T32] netlink_unicast+0x7bd/0x940 [ 822.683917][ T32] netlink_sendmsg+0x813/0xb40 [ 822.683951][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.683979][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.684003][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.684021][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.684045][ T32] __sys_sendto+0x408/0x5a0 [ 822.684074][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 822.684128][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 822.684152][ T32] __x64_sys_sendto+0xde/0x100 [ 822.684178][ T32] do_syscall_64+0x166/0x520 [ 822.684202][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.684220][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.684240][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.684262][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.684281][ T32] RIP: 0033:0x7ff44915e98e [ 822.684298][ T32] RSP: 002b:00007ff447391e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.684316][ T32] RAX: ffffffffffffffda RBX: 00007ff4473936c0 RCX: 00007ff44915e98e [ 822.684330][ T32] RDX: 0000000000000020 RSI: 00007ff447392000 RDI: 0000000000000003 [ 822.684342][ T32] RBP: 0000000000000000 R08: 00007ff447391f04 R09: 000000000000000c [ 822.684354][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 822.684366][ T32] R13: 00007ff447391f58 R14: 00007ff447392000 R15: 0000000000000000 [ 822.684403][ T32] [ 822.684412][ T32] INFO: task syz.2.4304:25160 blocked for more than 143 seconds. [ 822.684425][ T32] Not tainted syzkaller #0 [ 822.684435][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.684443][ T32] task:syz.2.4304 state:D stack:22344 pid:25160 tgid:25159 ppid:19181 task_flags:0x400140 flags:0x00080002 [ 822.684487][ T32] Call Trace: [ 822.684493][ T32] [ 822.684505][ T32] __schedule+0x17db/0x58f0 [ 822.684569][ T32] ? __pfx___schedule+0x10/0x10 [ 822.684602][ T32] ? schedule+0x90/0x2b0 [ 822.684628][ T32] schedule+0x164/0x2b0 [ 822.684653][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.684675][ T32] __mutex_lock+0x7c1/0x1550 [ 822.684705][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.684733][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.684758][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.684792][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 822.684822][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.684848][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.684876][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.684916][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.684936][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.684961][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.684995][ T32] ? down_read+0x2be/0x330 [ 822.685025][ T32] genl_rcv+0x28/0x40 [ 822.685046][ T32] netlink_unicast+0x7bd/0x940 [ 822.685083][ T32] netlink_sendmsg+0x813/0xb40 [ 822.685112][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.685140][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.685164][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.685181][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.685204][ T32] __sys_sendto+0x408/0x5a0 [ 822.685233][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 822.685286][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 822.685310][ T32] __x64_sys_sendto+0xde/0x100 [ 822.688107][ T32] do_syscall_64+0x166/0x520 [ 822.688134][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.688152][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.688925][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.688952][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.688972][ T32] RIP: 0033:0x7f7aa375e98e [ 822.688989][ T32] RSP: 002b:00007f7aa465be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.689008][ T32] RAX: ffffffffffffffda RBX: 00007f7aa465d6c0 RCX: 00007f7aa375e98e [ 822.689022][ T32] RDX: 0000000000000020 RSI: 00007f7aa465c000 RDI: 0000000000000009 [ 822.689034][ T32] RBP: 0000000000000000 R08: 00007f7aa465bf04 R09: 000000000000000c [ 822.689046][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 822.689057][ T32] R13: 00007f7aa465bf58 R14: 00007f7aa465c000 R15: 0000000000000000 [ 822.689088][ T32] [ 822.689096][ T32] INFO: task syz.2.4304:25168 blocked for more than 143 seconds. [ 822.689110][ T32] Not tainted syzkaller #0 [ 822.689119][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.689127][ T32] task:syz.2.4304 state:D stack:26784 pid:25168 tgid:25159 ppid:19181 task_flags:0x400040 flags:0x00080002 [ 822.689175][ T32] Call Trace: [ 822.689182][ T32] [ 822.689194][ T32] __schedule+0x17db/0x58f0 [ 822.689246][ T32] ? __pfx___schedule+0x10/0x10 [ 822.689278][ T32] ? schedule+0x90/0x2b0 [ 822.689304][ T32] schedule+0x164/0x2b0 [ 822.689329][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.689351][ T32] __mutex_lock+0x7c1/0x1550 [ 822.689387][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.689416][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.689440][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.689478][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.689496][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.689524][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.692006][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.692052][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.692073][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.692097][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.692133][ T32] ? down_read+0x2be/0x330 [ 822.692163][ T32] genl_rcv+0x28/0x40 [ 822.692184][ T32] netlink_unicast+0x7bd/0x940 [ 822.692222][ T32] netlink_sendmsg+0x813/0xb40 [ 822.692263][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.692291][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.692315][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.692333][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.692356][ T32] __sys_sendto+0x408/0x5a0 [ 822.692391][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 822.692412][ T32] ? errseq_sample+0x40/0x70 [ 822.692460][ T32] ? fd_install+0x94/0x3d0 [ 822.692483][ T32] ? fd_install+0x309/0x3d0 [ 822.692513][ T32] __x64_sys_sendto+0xde/0x100 [ 822.692541][ T32] do_syscall_64+0x166/0x520 [ 822.692564][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.692583][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.692601][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.692624][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.692644][ T32] RIP: 0033:0x7f7aa375e98e [ 822.692660][ T32] RSP: 002b:00007f7aa463ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.692679][ T32] RAX: ffffffffffffffda RBX: 00007f7aa463c6c0 RCX: 00007f7aa375e98e [ 822.692693][ T32] RDX: 0000000000000020 RSI: 00007f7aa463b000 RDI: 000000000000000b [ 822.692705][ T32] RBP: 0000000000000000 R08: 00007f7aa463af04 R09: 000000000000000c [ 822.692717][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 822.692728][ T32] R13: 00007f7aa463af58 R14: 00007f7aa463b000 R15: 0000000000000000 [ 822.692759][ T32] [ 822.692767][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 822.692776][ T32] INFO: task syz.1.4306:25167 blocked for more than 143 seconds. [ 822.692789][ T32] Not tainted syzkaller #0 [ 822.692798][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.692807][ T32] task:syz.1.4306 state:D stack:28344 pid:25167 tgid:25166 ppid:20876 task_flags:0x400140 flags:0x00080002 [ 822.692857][ T32] Call Trace: [ 822.692863][ T32] [ 822.692875][ T32] __schedule+0x17db/0x58f0 [ 822.692926][ T32] ? __pfx___schedule+0x10/0x10 [ 822.692959][ T32] ? schedule+0x90/0x2b0 [ 822.692985][ T32] schedule+0x164/0x2b0 [ 822.693009][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.693032][ T32] __mutex_lock+0x7c1/0x1550 [ 822.693061][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.693090][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.693114][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.693141][ T32] ? stack_trace_save+0xa9/0x100 [ 822.693162][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.693186][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.693211][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.693240][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.693281][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.693300][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.693325][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.693359][ T32] ? down_read+0x2be/0x330 [ 822.693395][ T32] genl_rcv+0x28/0x40 [ 822.693416][ T32] netlink_unicast+0x7bd/0x940 [ 822.694996][ T32] netlink_sendmsg+0x813/0xb40 [ 822.695029][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.695058][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.695082][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.695100][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.695122][ T32] ____sys_sendmsg+0x54e/0x850 [ 822.695155][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.695190][ T32] ? import_iovec+0x73/0xa0 [ 822.695217][ T32] ___sys_sendmsg+0x2a5/0x360 [ 822.695241][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.695265][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.695307][ T32] ? futex_wait+0x2a2/0x390 [ 822.695365][ T32] ? __fget_files+0x2a/0x420 [ 822.695396][ T32] ? __fget_files+0x3a2/0x420 [ 822.695431][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 822.695460][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.695508][ T32] do_syscall_64+0x166/0x520 [ 822.695531][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.695549][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.695569][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.695592][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.695611][ T32] RIP: 0033:0x7f1001d9e159 [ 822.695627][ T32] RSP: 002b:00007f1002b83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.695645][ T32] RAX: ffffffffffffffda RBX: 00007f1002025fa0 RCX: 00007f1001d9e159 [ 822.695659][ T32] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 822.695672][ T32] RBP: 00007f1001e3506b R08: 0000000000000000 R09: 0000000000000000 [ 822.695684][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.695695][ T32] R13: 00007f1002026038 R14: 00007f1002025fa0 R15: 00007ffd1c6f7f88 [ 822.695726][ T32] [ 822.695733][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 822.695743][ T32] INFO: task syz.3.4318:25243 blocked for more than 143 seconds. [ 822.695757][ T32] Not tainted syzkaller #0 [ 822.695766][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.695775][ T32] task:syz.3.4318 state:D stack:28808 pid:25243 tgid:25237 ppid:19479 task_flags:0x400040 flags:0x00080002 [ 822.695823][ T32] Call Trace: [ 822.695830][ T32] [ 822.695842][ T32] __schedule+0x17db/0x58f0 [ 822.695893][ T32] ? __pfx___schedule+0x10/0x10 [ 822.695925][ T32] ? schedule+0x90/0x2b0 [ 822.695951][ T32] schedule+0x164/0x2b0 [ 822.695976][ T32] schedule_preempt_disabled+0x13/0x30 [ 822.695998][ T32] __mutex_lock+0x7c1/0x1550 [ 822.696027][ T32] ? __mutex_lock+0x5d4/0x1550 [ 822.696056][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 822.696081][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 822.696107][ T32] ? stack_trace_save+0xa9/0x100 [ 822.696128][ T32] ? __lock_acquire+0x747/0x2de0 [ 822.696151][ T32] ? radix_tree_lookup+0x240/0x290 [ 822.696177][ T32] genl_rcv_msg+0x10b/0x7a0 [ 822.696206][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.696245][ T32] netlink_rcv_skb+0x226/0x4a0 [ 822.696265][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.696290][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.696325][ T32] ? down_read+0x2be/0x330 [ 822.696355][ T32] genl_rcv+0x28/0x40 [ 822.696383][ T32] netlink_unicast+0x7bd/0x940 [ 822.705055][ T32] netlink_sendmsg+0x813/0xb40 [ 822.705090][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.705118][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 822.705143][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.705161][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 822.705183][ T32] __sys_sendto+0x408/0x5a0 [ 822.705225][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 822.705279][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 822.705303][ T32] __x64_sys_sendto+0xde/0x100 [ 822.705330][ T32] do_syscall_64+0x166/0x520 [ 822.705354][ T32] ? trace_irq_disable+0x3b/0x140 [ 822.705372][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.705398][ T32] ? clear_bhb_loop+0x70/0xc0 [ 822.705421][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.705440][ T32] RIP: 0033:0x7f0f88d5e98e [ 822.705456][ T32] RSP: 002b:00007f0f89cbde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.705475][ T32] RAX: ffffffffffffffda RBX: 00007f0f89cbf6c0 RCX: 00007f0f88d5e98e [ 822.705489][ T32] RDX: 0000000000000020 RSI: 00007f0f89cbe000 RDI: 0000000000000005 [ 822.705502][ T32] RBP: 0000000000000000 R08: 00007f0f89cbdf04 R09: 000000000000000c [ 822.705514][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 822.705525][ T32] R13: 00007f0f89cbdf58 R14: 00007f0f89cbe000 R15: 0000000000000000 [ 822.705557][ T32] [ 822.705565][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 822.705626][ T32] [ 822.705626][ T32] Showing all locks held in the system: [ 822.705635][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 822.705736][ T32] #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 822.705887][ T32] #1: ffffffff9ad452d8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 822.705993][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 822.706006][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 822.706077][ T32] locks held by getty/5374: 2, on CPU#1: [ 822.706090][ T32] #0: ffff8880361c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 822.706188][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 822.706249][ T32] locks held by kworker/0:44/20090: 2, last CPU#0: [ 822.706262][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.706322][ T32] #1: ffffc9000d967c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 822.706381][ T32] locks held by udevd/22840: 1, on CPU#1: [ 822.706394][ T32] #0: ffff888027171350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 822.707875][ T32] locks held by syz.4.4298/25121: 6, on CPU#0: [ 822.707890][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.707938][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.707984][ T32] #2: ffff88802708f260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 822.708028][ T32] #3: ffff88802706a288 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 822.708071][ T32] #4: ffff888027069c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 822.708135][ T32] #5: ffff888027069c88 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 822.708184][ T32] locks held by syz.4.4298/25123: 2, on CPU#1: [ 822.708197][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.708241][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.708286][ T32] locks held by syz.4.4298/25133: 2, on CPU#0: [ 822.708299][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.708355][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.708407][ T32] locks held by syz.0.4299/25126: 2, on CPU#0: [ 822.708420][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.708463][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.708508][ T32] locks held by syz.0.4299/25129: 2, on CPU#1: [ 822.708521][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.708564][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.708616][ T32] locks held by syz.0.4299/25139: 2, on CPU#0: [ 822.708629][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.708672][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.708718][ T32] locks held by syz.0.4299/25147: 2, on CPU#1: [ 822.708731][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.708774][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.708820][ T32] locks held by syz.0.4299/25157: 2, on CPU#1: [ 822.708833][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.708876][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.708921][ T32] locks held by syz.2.4304/25160: 2, on CPU#1: [ 822.708934][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.708977][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.709023][ T32] locks held by syz.2.4304/25168: 2, on CPU#1: [ 822.709035][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.709079][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.709124][ T32] locks held by syz.1.4306/25167: 2, on CPU#0: [ 822.709137][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.709181][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.709227][ T32] locks held by syz.3.4318/25243: 2, on CPU#0: [ 822.709240][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.709283][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.712207][ T32] locks held by syz-executor/25257: 2, on CPU#1: [ 822.712221][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.712266][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.712313][ T32] locks held by syz-executor/25263: 2, on CPU#0: [ 822.712326][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.712370][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.712428][ T32] locks held by syz-executor/25265: 2, on CPU#0: [ 822.712441][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.712485][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.712530][ T32] locks held by syz-executor/25270: 2, on CPU#1: [ 822.712543][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.712588][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.712633][ T32] locks held by syz-executor/25302: 2, on CPU#1: [ 822.712646][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.712691][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.712739][ T32] locks held by syz-executor/25357: 2, on CPU#0: [ 822.712752][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.712796][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.712854][ T32] locks held by syz-executor/25358: 2, on CPU#1: [ 822.712867][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.712910][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.712955][ T32] locks held by syz-executor/25361: 2, on CPU#0: [ 822.712968][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.713012][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.713058][ T32] locks held by syz-executor/25365: 2, on CPU#1: [ 822.713070][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.713114][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.713160][ T32] locks held by syz-executor/25399: 2, on CPU#0: [ 822.713173][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.713217][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.713265][ T32] locks held by syz-executor/25453: 2, on CPU#1: [ 822.713278][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.713322][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.713368][ T32] locks held by syz-executor/25456: 2, on CPU#0: [ 822.713385][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.713430][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.713475][ T32] locks held by syz-executor/25458: 2, on CPU#0: [ 822.713488][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.713531][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.713576][ T32] locks held by syz-executor/25466: 2, on CPU#1: [ 822.716270][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.716319][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.716367][ T32] locks held by syz-executor/25496: 2, on CPU#0: [ 822.716388][ T32] #0: ffffffff902c6228 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 822.716431][ T32] #1: ffffffff902c6060 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 822.716482][ T32] [ 822.716487][ T32] ============================================= [ 822.716487][ T32] [ 822.716503][ T32] NMI backtrace for cpu 1 [ 822.716516][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 822.716535][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 822.716545][ T32] Call Trace: [ 822.716553][ T32] [ 822.716561][ T32] dump_stack_lvl+0xe8/0x150 [ 822.716590][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 822.716611][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 822.716641][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 822.716665][ T32] sys_info+0x135/0x170 [ 822.716683][ T32] watchdog+0xfd7/0x1030 [ 822.716709][ T32] ? watchdog+0x1c7/0x1030 [ 822.716733][ T32] kthread+0x38b/0x480 [ 822.716753][ T32] ? __pfx_watchdog+0x10/0x10 [ 822.716769][ T32] ? __pfx_kthread+0x10/0x10 [ 822.716789][ T32] ret_from_fork+0x514/0xb70 [ 822.716820][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 822.716837][ T32] ? __switch_to+0xc89/0x1420 [ 822.716875][ T32] ? __pfx_kthread+0x10/0x10 [ 822.716893][ T32] ret_from_fork_asm+0x1a/0x30 [ 822.716935][ T32] [ 822.716952][ T32] Sending NMI from CPU 1 to CPUs 0: [ 822.716981][ C0] NMI backtrace for cpu 0 [ 822.716994][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 822.717015][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 822.717026][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 822.717088][ C0] Code: e8 be 9a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 9e c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 822.717105][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 822.717121][ C0] RAX: 1ffffffff35a8a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 822.717136][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 822.717147][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 822.717160][ C0] R10: dffffc0000000000 R11: ffffffff857340f0 R12: dffffc0000000000 [ 822.717175][ C0] R13: 0000000000000000 R14: ffffffff9ad45300 R15: 0000000000000000 [ 822.717188][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 822.717204][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.717218][ C0] CR2: 00007f7cdb24b2f1 CR3: 0000000034b92000 CR4: 00000000003526f0 [ 822.717235][ C0] Call Trace: [ 822.717242][ C0] [ 822.717251][ C0] wait_for_lsr+0x184/0x2f0 [ 822.717276][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 822.717309][ C0] serial8250_console_write+0xaa1/0x1200 [ 822.717330][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 822.717361][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 822.717381][ C0] ? __schedule+0x17f1/0x58f0 [ 822.717413][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 822.717444][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 822.717469][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 822.717499][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 822.717524][ C0] nbcon_kthread_func+0x679/0x880 [ 822.717548][ C0] ? nbcon_kthread_func+0x163/0x880 [ 822.717568][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 822.717592][ C0] ? __kthread_parkme+0x71/0x1f0 [ 822.717620][ C0] ? __kthread_parkme+0x199/0x1f0 [ 822.717654][ C0] kthread+0x38b/0x480 [ 822.717672][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 822.717691][ C0] ? __pfx_kthread+0x10/0x10 [ 822.717710][ C0] ret_from_fork+0x514/0xb70 [ 822.717730][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 822.717747][ C0] ? __switch_to+0xc89/0x1420 [ 822.717774][ C0] ? __pfx_kthread+0x10/0x10 [ 822.717793][ C0] ret_from_fork_asm+0x1a/0x30 [ 822.717831][ C0] [ 822.720480][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 827.133293][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 827.142383][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 827.152421][ T32] Call Trace: [ 827.155684][ T32] [ 827.158597][ T32] vpanic+0x56d/0xa60 [ 827.162574][ T32] ? __pfx___schedule+0x10/0x10 [ 827.167412][ T32] ? __pfx_vpanic+0x10/0x10 [ 827.171914][ T32] panic+0xc5/0xd0 [ 827.175624][ T32] ? __pfx_panic+0x10/0x10 [ 827.180025][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 827.185486][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 827.190843][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 827.196986][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 827.203124][ T32] watchdog+0x1030/0x1030 [ 827.207446][ T32] ? watchdog+0x1c7/0x1030 [ 827.211852][ T32] kthread+0x38b/0x480 [ 827.215904][ T32] ? __pfx_watchdog+0x10/0x10 [ 827.220559][ T32] ? __pfx_kthread+0x10/0x10 [ 827.225132][ T32] ret_from_fork+0x514/0xb70 [ 827.229708][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 827.234802][ T32] ? __switch_to+0xc89/0x1420 [ 827.239468][ T32] ? __pfx_kthread+0x10/0x10 [ 827.244040][ T32] ret_from_fork_asm+0x1a/0x30 [ 827.248815][ T32] [ 827.252066][ T32] Kernel Offset: disabled [ 827.256375][ T32] Rebooting in 86400 seconds..