last executing test programs: 19.126526395s ago: executing program 0 (id=2040): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x700, 0x2, 0x6}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a001d0a010400000000000000000aecff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a3173797a310000000014000380100000800c00018006000100d103000014000000110001efff00000000a550d05f3d0000000000e28bd1bf3d20c41d5d6913063fdc7113ca7ace243fa09474317e266334e2acf10b7171d7f27789579aba3c9b89f9d7929ed5d6ca2c90541d34d91289b13af5083f96849846df4a060fde5695"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000206f10aa91662e7ffd2851e81f47907ab0102000034e40000000000000000050001000700000005000400000000000900020073797a3200000000050005000200000014000780080006000000000008001340000000001569702c706f72746262739c6c1af96424e549739ce2082c9a0b362b4e8ba45a5bde4329ffeff757a423137c1afea3332af635ea078877d213362bfc852d66a9feadcb33f87432b6125f6920bf83f3cf4b9dac703e04bf3f2a7f76a696274ab5f176723dba49bad1e1d57b7721d55b9634b1fe2896f558358a645e9f615b9256c91d989c9f66685bb3d7a68552e2e5c0de9f8f24d80fe2406d355cc79e30165489a7e54e09f816a177b809f600e5adfb9e6b6e99df4cb25381b365d78d9523b190bb4a52c7d8e3f1fd7633b54855413e778fddf52e871a30e68157234a1a494535252c9e35b3f002872dd34ad71de9c673"], 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae0000002000000ee5b000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000010000100000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2, 0x4}, {0xfffffffe}, 0x70bd27, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1}, 0x14}}, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r8) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r11, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r11, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x45) sendmmsg$sock(r9, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4a, 0x0, &(0x7f0000000280)) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x1f, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000e7970000000000000101000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000098301000fcffffff78a0020004000000c549f8fffcffffff183200000500000000000000000000009500000000000000851000000000000018150000", @ANYRES32=0x1, @ANYBLOB="000000000000000018630000010000000000000009000000850000009700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086005874e3d0b4c9a9cd06a200000000b70200000100060085000000f898c2809b0000000000000095000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xfe, &(0x7f0000000700)=""/254, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000800)=[r4], &(0x7f0000000840)=[{0x2, 0x2, 0x6, 0x6}, {0x1, 0x1, 0xf}, {0x0, 0x1, 0x1, 0xc}, {0x3, 0x1, 0x3, 0x8}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r12}, 0x94) 18.956327161s ago: executing program 0 (id=2042): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) (async) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000001a40), 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f00000000c0)=""/8, 0x8, 0xdbf, 0x87}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x9, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf8a544}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/64, 0x40}], 0x1}}], 0x1, 0x40012040, 0x0) recvmmsg(r5, &(0x7f0000000100)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/73, 0x49}], 0x5}, 0x10}], 0x1, 0x80000000, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000004c0)=0x3) 18.837013206s ago: executing program 0 (id=2045): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @local}, &(0x7f0000000180)=0xc) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x1) splice(r5, 0x0, r4, 0x0, 0x82, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, '\x00', r2, r4, 0x5, 0x1, 0x5}, 0x50) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5a}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10000800}, 0x20048884) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r7 = socket(0x10, 0x803, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000c40)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/186, 0xba, 0x1, &(0x7f0000000c00)=""/33, 0x21}, &(0x7f0000000c80)=0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000300)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp_prespec={0x44, 0x4, 0x2e, 0x3, 0x1}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x42) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x34, r11, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xb2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x40040c0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000400028008100a00d8686c262c519435fb5ef7af7059ecbdbaf6a2f0adb7cc2b5e795751faa11830a88569ba73b87b3557119f48dee86d03dbce2fb62756bd45d735a547ced73e51670b080a6750c8b3a5c2", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r13, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0xdd}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131}], 0x0, &(0x7f00000004c0)=""/205}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20}, {&(0x7f0000000640)=""/194}, {&(0x7f0000000440)=""/50}, {&(0x7f0000000740)=""/206}, {&(0x7f0000000840)=""/55}, {&(0x7f0000000880)=""/111}]}, 0x2}], 0x2, 0x0, 0x0) 17.840112775s ago: executing program 0 (id=2059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0xb4, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x42d62fcc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000004000000020000000400001304"], 0x0, 0x6c, 0x0, 0x1}, 0x28) r2 = socket(0x1e, 0x803, 0x0) sendmsg(r2, &(0x7f0000000b80)={&(0x7f0000000840)=@ax25={{0x3, @bcast, 0x3}, [@bcast, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000008c0)="9b42701d07d2a770de3aef1fec9f1854571b43c2db06c0c670bc28fa9cc5d70c15c0684f839a28917f0302d7c8bc791a5a067937f5535338b52ae01a7e7c2a9396c46592910c1647b0b3b7bd23706196d4038177ed9a373bd0644c2246394cf60ff1e303e06126577ce76232379925d64c0712ba9cdde81ab88c63ef81ef3e1f6f989bdb717ecd44504aa3a8f8450c5a98279307a95d5ee1d324", 0x9a}], 0x1, &(0x7f0000000ac0)=[{0x18, 0x114, 0x10000000, "d77faedfc92d9d2a"}, {0x78, 0x88, 0x7, "909431e536d272188d195b49e2907ac3c2b8b0acbd5b236a448e6066258dcd0668af534ca806e2546454ce07e554d485e900600010f7b74aa936fa0ea9ef2c0853468160ba0515341574697d617c9af23d96bdac9a00f0f2ad00a9451c1e21eadfaea215"}], 0x90}, 0x40004) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/170, 0xaa}], 0x1}, 0x8}], 0x1, 0x40000082, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 17.737671011s ago: executing program 3 (id=2062): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x1405, 0x200, 0x70bd2b, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x400c894) 17.616291041s ago: executing program 0 (id=2063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @sack_perm, @mss], 0x3) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="40010000", @ANYRES16, @ANYBLOB="010028bd7000ffdbdf2503000000500001801200010069623a766972745f7769666930000000380004001400010002004e210a0101000000000000000000200002000a00000600000002ff010000000000000000000000000001b8f3ffff1c00038008000300010400000800010059010000080003007f000000c000058008000100657468001c000280080002000500000008000400140b000008000200050000000800010065746800080001006574680014000280080002000000000008000300100000000c00028008000100010000003c00028008000400060000000800020000000000080002000000000008000300070000000800020002"], 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25cfdbfe}, 0x10}}, 0x40408c0) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd70fa724e2d2f00000000000f880000000000000000000000000001ac14142500000000000000000000000000000000000000000a0000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000300000000000a0010000100000000000000"], 0xc4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}, 0x1c) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fea0f0251029ebed080031003f9d0000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc010000000000000000000060f04f566404f25f599fd946c3ec00"], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000020000000000000002005f0000000000000000000000000000000000020000000000"], &(0x7f0000000540)=""/228, 0x36, 0xe4, 0x1}, 0x20) setsockopt$inet_int(r9, 0x0, 0x1, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) getsockopt$inet_tcp_int(r10, 0x6, 0x7, 0x0, &(0x7f0000000180)) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 17.591311854s ago: executing program 3 (id=2064): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r3, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) 17.416328269s ago: executing program 2 (id=2066): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x7, 0x100, 0x9b, 0xfffa, 0xe, 0x401]}}]}]}]}, 0x38}}, 0x2400c090) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000580)=@ethtool_stats}) (rerun: 32) 17.409983545s ago: executing program 4 (id=2068): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001ac0), 0x6) (async) bind$bt_hci(r1, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcfffffffcdbdf350f"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) 17.361484419s ago: executing program 3 (id=2069): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x20000080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x9b564000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) (async) bind$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 17.284091086s ago: executing program 2 (id=2071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000680)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x2, 0x6c, 0x0, 0x0, 0x0, 0x88, 0x0, @multicast1, @local, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xf0, [@empty]}, @generic={0x86, 0x4, "6396"}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "82c3f83a46c9c6ba332d2653c9c0bedc4a0881c6fbd562ae", "7d1112c73c4ee09f4f73e292848fe31fbc56aa1865b7a9e5cb910ad7b02af593"}}}}}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="2e000300010000", 0x7) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f000009", 0xf9) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r7, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x60) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}}}}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a0000000100000000000000", @ANYRES32, @ANYBLOB="7efeb81d65e428f59d0439de8fa20a724df77e853080790fb321906d321a5d552beb58d7cdb6d5007a70a33b7e", @ANYRES64=0x0], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendto$inet(r8, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 17.228729849s ago: executing program 4 (id=2072): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x8, [@float={0x6, 0x0, 0x0, 0x10, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @ptr={0xf, 0x0, 0x0, 0x2, 0x3}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @fwd={0xe}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}, @struct={0xa, 0x8, 0x0, 0x4, 0x1, 0x5, [{0x8, 0x2}, {0x1, 0x3, 0x9}, {0x8, 0x4, 0xd}, {0x8, 0x3, 0xf}, {0x5, 0x4, 0x4000000}, {0x3, 0x2, 0x8}, {0xd, 0x3, 0x1b84}, {0x5, 0x0, 0x3ff}]}]}, {0x0, [0x0, 0x30, 0x5f, 0x61, 0x5f, 0x51]}}, &(0x7f0000000380)=""/250, 0x100, 0xfa, 0x0, 0x81, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x8d, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0xbf, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000940)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pK \x00'}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0x7}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x2, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffe}], &(0x7f0000000200)='syzkaller\x00', 0x1000, 0x1b, &(0x7f0000000240)=""/27, 0x41100, 0x50, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000004c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xb, 0x4, 0x6}, 0x10, r3, 0x0, 0x4, &(0x7f0000000b00)=[r4, r5, r6, r7, r8, r9], &(0x7f0000000b40)=[{0x5, 0x2, 0xb, 0x1}, {0x0, 0x1, 0xa, 0x9}, {0x2, 0x1, 0x10, 0x1}, {0xffff0442, 0x1, 0x3, 0x6}], 0x10, 0x3}, 0x94) 17.224948129s ago: executing program 3 (id=2073): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4002, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000009500000071d200"/34], &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x10229, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x7d, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, 0x0, &(0x7f0000000280)=r3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000005c0)=[{0x1, 0x2, {0x1, 0x1, 0x4}, {0x2, 0xf0, 0x4}}, {0x10000002, 0x3, {0x2, 0xfe, 0x2}, {0x0, 0xf0, 0x1}, 0xfe, 0x1}, {0x0, 0xfffffffffffffffd, {0x1, 0xf0, 0x2}, {0x0, 0xf0, 0x2}, 0xfe, 0xff}], 0x60) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 17.117255339s ago: executing program 1 (id=2074): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000080)) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$inet6(0xa, 0x1, 0x100) sendmmsg$inet(r0, &(0x7f0000006300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="8e91adbedbcb323f6482876427ad79987b984f714ffd5d38f06a5a4911eb4d3fc1a3db9165ebff4a064fea7b7da11903caee188a77453eee2e27f210e3394c499f479c404425ca2e4eef80ab323dd0d4e33e0c6dd8b7a787f0d8eea8ef966ebe2692a6ba2826410c408e0fd1b0962c6fc4866a788f28bb3d01e5167ad71aa5cab422e6ec58c3d9f21cc733f84925179647a8292509ff53b9845b0a4800e0319142a6eb71f1c40b9d15a2c9b8dbc2cd685fd9c6a872d4579cbc", 0xb9}, {&(0x7f0000002140)="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", 0x4cc}], 0x2}}], 0x1, 0x4) 17.092845072s ago: executing program 4 (id=2075): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 17.040714898s ago: executing program 2 (id=2076): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x68}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x68}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0xfffffffc, @remote}, 0x1c) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) r5 = socket(0x2a, 0x2, 0x9) bind$bt_hci(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r10, r9, 0x25, 0x0, @void}, 0x41) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="00000001", @ANYRES16=r11, @ANYBLOB="010000000000000000000c0000000c000180080003000100000004000380"], 0x24}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="00000001", @ANYRES16=r11, @ANYBLOB="010000000000000000000c0000000c000180080003000100000004000380"], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0x38, 0x32, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket(0x10, 0x803, 0x0) (async) r13 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 17.010530126s ago: executing program 1 (id=2077): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 16.963203855s ago: executing program 2 (id=2078): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={r3}, &(0x7f0000000380)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={r3, @in6={{0xa, 0x4e22, 0x80000001, @private1, 0x74c}}, 0x4, 0x8, 0x956, 0x8001, 0xef}, &(0x7f0000000280)=0x98) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000240), 0x3) (async) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x7, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @local={0xac, 0x14, 0x3}}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00020002", @ANYRES16=r11, @ANYBLOB="0100000000010000000001000000040001801c0002800c00018008000100070000000c0001800800010006000000", @ANYRES32=r4], 0x34}}, 0x0) 16.892275189s ago: executing program 4 (id=2079): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004700)=ANY=[@ANYBLOB="a04400005200010000000000000000001c0000008b4409"], 0x44a0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x17, 0x13}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) getsockname$l2tp6(r0, &(0x7f0000001780)={0xa, 0x0, 0x0, @remote}, &(0x7f00000017c0)=0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2e}, 0x20) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001740)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000001540)={0x1ec, r5, 0x600, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff7d57}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4f274a2b}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x177}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ec788c5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x497c, @private1, 0x4}}}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x28, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008850}, 0x48090) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) 16.873856534s ago: executing program 1 (id=2080): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r0, &(0x7f0000003040)={&(0x7f0000001a00)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084) (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x2, 0x0, &(0x7f0000000000)="259a", 0x0, 0xf11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) r7 = socket$inet(0x2, 0x80001, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={r8, 0xa11c}, 0x8) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) (async) sendto$packet(r2, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x20000005, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 16.829759002s ago: executing program 2 (id=2081): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_opts(r5, 0x0, 0x1, 0x0, &(0x7f00000010c0)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400001f4c30b3b90ad47bbc062600090001000800800058c3f875ae90456f"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x4, 0x4, 0x0, 0x4}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010101}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x88c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x2, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYRESDEC=r6], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r11, 0xad45f000) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0xd1a}, 0x8) 16.743477173s ago: executing program 1 (id=2082): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x24, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0xa, 0x11, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) socket$kcm(0x2, 0x3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4c8d1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000001a0001000034726efaaf77227a1b9c3b68c22afa53fc2d9594000001000080fcabe1", @ANYRES64=r1, @ANYRESOCT=r8], 0x38}}, 0x20000080) 16.742470606s ago: executing program 4 (id=2083): r0 = socket$kcm(0x10, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) (rerun: 32) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000000c0)=""/25, &(0x7f0000000100)=0x19) 16.631952322s ago: executing program 0 (id=2084): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r2, 0x221, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#\''}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x20000000) socket(0x14, 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000e00"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd6, 0xa8, @random="a987748f926969a73b1bcce4a2de2b775be933854ebad69327ed253c7f8dabb7a0a5eea8c384a3a4524f6ffb8fdae6990ccbc45b3d669dbe5f059f169834cae6c31e0fa7d2cd446eea1bfdda990999d1e2dc38e48f2ae8aa4e5e6d86440451d94755ca4f5a1ac0c3f9febf95a213dc15d1cfc41a23b34753cd20e093e8f0f804021155c0154e21a30ea6babad1f9acbfeaaea74bcd1d03750b7f88d6337987d501e58e047f8f733537e8ca747a478c7567985989dfec85be81ab8e57a44c9f4064fbce2898c861bbfd5d404cb85b43a34701"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x16, 0xa8, @random="1577072af5a65467e572f1e69762053e4cef"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20008084}, 0x804) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) 16.63170072s ago: executing program 1 (id=2085): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x13, 0xffffffffffffffff, 0x265ee000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 16.54423897s ago: executing program 4 (id=2086): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80b2b6fbbb7d22c6340eb6ddb16d6f5397e53ab58bcf0dc94ccbd590f944de8447c6ac6831da8be09b61cf4767c83193230ffdf09cddeeb1ebf28541b", @ANYRES16=r5, @ANYBLOB="01000000000000000000070000000c001600010000000000000014000800"/46], 0x34}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e6174"], 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x20040080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r10 = socket(0x8, 0x800, 0x0) ioctl$IMGETCOUNT(r10, 0x400261f2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="000082ee", @ANYRESDEC], 0xd) 16.456061929s ago: executing program 1 (id=2087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 32) close(0xffffffffffffffff) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000003a40)=""/4107, 0x100b}, {&(0x7f0000000540)=""/69, 0x45}, {0x0}, {&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f0000000700)=""/87, 0x57}], 0x7}, 0x12062) (async) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) (async) listen(r4, 0x401) (async) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x10, 0x700, 0x4, 0x0, {{0x28, 0x4, 0x1, 0x10, 0xa0, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @loopback, {[@rr={0x7, 0xf, 0x8b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x3d, 0x3, 0xb, [{@rand_addr=0x64010101, 0x2023}, {@remote, 0x9}, {@multicast2, 0x400}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic={0x88, 0xa, "8e94526ec126ee66"}, @timestamp_addr={0x44, 0x1c, 0x96, 0x1, 0x3, [{@empty, 0xffffff80}, {@broadcast, 0x6}, {@remote, 0xfff}]}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x24, 0x29, 0x1, 0x1, [{@local, 0xd4}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@private=0xa010100, 0x2}, {@rand_addr=0x64010102, 0x6}]}]}}}}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000780)={{{@in=@private=0xa010102, @in6=@private0, 0x4e22, 0x1, 0x4e24, 0x9, 0x2, 0x80, 0xc0, 0x32, r5, 0xffffffffffffffff}, {0x7, 0x7, 0x10000, 0x5, 0x800, 0x0, 0xdb, 0xb}, {0xffffffff, 0x5, 0x7e, 0x16}, 0x0, 0x6e6bb1, 0x2, 0x0, 0x3, 0x1}, {{@in6=@private2, 0x4d3, 0x33}, 0x2, @in6=@local, 0x3502, 0x1, 0x1, 0x53, 0x9, 0x8, 0xf}}, 0xe8) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.455534008s ago: executing program 2 (id=2088): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="cbfa0177ebfd", 'team_slave_0\x00'}}, 0x1e) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000000)=0x20000, 0x4) 16.288231244s ago: executing program 3 (id=2089): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="93cb876e17665298557dec0279c60b3309b8bb0f84e18c60d6c832", 0x1b}, {&(0x7f00000000c0)="19428019d6b02f549b38137d7f4044f0f104d4d7e6d94a7b30837de035aa713200b8d4b45222c40062b99e9d518184af9ed813c1012da93e0dac20e13d3942abee4a205aaa51d5d24ffc5bdb511090fea060a952b0a6e0866c17ca047fed3484417888000cfa20b469409bfb33372b46e729850407f1029e23dbfadb88028673bd78bc40169fada3ca53d8463c79efd82738045b7a978a906b9220ff1ac2c8bfbb24cac7cee52d4a7b62e9e9b200b975cda200a181e9379081e88e87eed66924551a9e60e3c98b734b8ce79f2bfb2d854a643c9764b826578476", 0xda}], 0x2}, 0x4020) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r5}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r5}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) 16.142979556s ago: executing program 3 (id=2090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x36) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001780)={0x121c, 0x16, 0x4, 0x70bd2d, 0x25dfdbfe, {0x16}, [@nested={0x1022, 0x26, 0x0, 0x1, [@nested={0x4, 0xd7}, @generic="03aebf9e48f6225f4d050002fb43dd010f40", @typed={0x1004, 0xbe, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x11}]}, @nested={0x1e3, 0x8f, 0x0, 0x1, [@typed={0x8, 0xbd, 0x0, 0x0, @pid=r1}, @generic="b647b24373eb0551f31f3322c1f8f0bab488239cc038429bea6510962d20e73cef326f822ddf425495d596bd8d1896e357892fcb8ce58e610d80a6f5d0c6d571321c3d2c99ffad53a71389bfcdc36405d8a039678c43182663bbfceb2cf1d082777862c9c4c484a4bd9f13330c3d15ad7406e2d677045dabef5ca9bc57a68e211bd42f17814f47235730adf24f8449d2636c5296356841f50e14a4959e5c11f8b380214a70", @generic="98ccd7e44b1429263d540008b2f4763b972b28a7df503e324557a4976de3ddfd7ac018634f9c17007b77d9f99ec981982dafbfe3e7a1e4f7b2e8693e31283fdfa6c66cdd2055437a57fd4f30fcff5ec5b4058abf82868899c04fa6bbba6b565dc37522f5d21a5dae30d5e7c62739a918bd7ac656526f5358566f1634e239ece2536f8897933917f2aa40", @typed={0x4, 0xcb}, @nested={0x4, 0x158}, @nested={0x4, 0xc8}, @typed={0x97, 0x149, 0x0, 0x0, @binary="63d5b06f1bcbdc7185d237fc33b4167f4bdedd4aab23abdde0e7fa355d4746cc6012d5a94d9fd7d7fa5b552416ad60cf26a9de74eb2a6430a4bf41b9632f0c69843fb84b903884312995ee3f1456bcd8ad0b32b1a240ac98011fb2e10bc8fd674d287f30405110591a39dff0daee9d94f0821bcd2030a89e317d9e45d2f7bbc718b90f4ce6502021b134b9680ebe47c81a6209"}, @nested={0x4, 0xbe}]}]}, 0x121c}, 0x1, 0x0, 0x0, 0x4040}, 0x881) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="810f0000000000000000010000000803010000000001080004000000760534109c71a1cfff788cd4062b88eccabdd02d8d2530a79b8c059cc776bf03478b540c144fd2f7237b5d9728bedb65711d4eae7739408f8e2bc9b4034a6b0b51a3ca7896f6947fa49c9eae224be15642941df8e9700f79403a2a6e1e4b91868e99512128a632b08dc52bdb285759ed72b39a6036c16eb7311a499b4696d40d6aabe2bdc26282cf23b3f8615fceea633f5d0f", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd37}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x41}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000002c0)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/218}, 0x20) 1.186893635s ago: executing program 32 (id=2084): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r2, 0x221, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#\''}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x20000000) socket(0x14, 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000e00"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd6, 0xa8, @random="a987748f926969a73b1bcce4a2de2b775be933854ebad69327ed253c7f8dabb7a0a5eea8c384a3a4524f6ffb8fdae6990ccbc45b3d669dbe5f059f169834cae6c31e0fa7d2cd446eea1bfdda990999d1e2dc38e48f2ae8aa4e5e6d86440451d94755ca4f5a1ac0c3f9febf95a213dc15d1cfc41a23b34753cd20e093e8f0f804021155c0154e21a30ea6babad1f9acbfeaaea74bcd1d03750b7f88d6337987d501e58e047f8f733537e8ca747a478c7567985989dfec85be81ab8e57a44c9f4064fbce2898c861bbfd5d404cb85b43a34701"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x16, 0xa8, @random="1577072af5a65467e572f1e69762053e4cef"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20008084}, 0x804) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) 1.143634347s ago: executing program 33 (id=2087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 32) close(0xffffffffffffffff) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000003a40)=""/4107, 0x100b}, {&(0x7f0000000540)=""/69, 0x45}, {0x0}, {&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f0000000700)=""/87, 0x57}], 0x7}, 0x12062) (async) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000)={0x40}, 0x4) (async) listen(r4, 0x401) (async) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x10, 0x700, 0x4, 0x0, {{0x28, 0x4, 0x1, 0x10, 0xa0, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @loopback, {[@rr={0x7, 0xf, 0x8b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x3d, 0x3, 0xb, [{@rand_addr=0x64010101, 0x2023}, {@remote, 0x9}, {@multicast2, 0x400}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic={0x88, 0xa, "8e94526ec126ee66"}, @timestamp_addr={0x44, 0x1c, 0x96, 0x1, 0x3, [{@empty, 0xffffff80}, {@broadcast, 0x6}, {@remote, 0xfff}]}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x24, 0x29, 0x1, 0x1, [{@local, 0xd4}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@private=0xa010100, 0x2}, {@rand_addr=0x64010102, 0x6}]}]}}}}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000780)={{{@in=@private=0xa010102, @in6=@private0, 0x4e22, 0x1, 0x4e24, 0x9, 0x2, 0x80, 0xc0, 0x32, r5, 0xffffffffffffffff}, {0x7, 0x7, 0x10000, 0x5, 0x800, 0x0, 0xdb, 0xb}, {0xffffffff, 0x5, 0x7e, 0x16}, 0x0, 0x6e6bb1, 0x2, 0x0, 0x3, 0x1}, {{@in6=@private2, 0x4d3, 0x33}, 0x2, @in6=@local, 0x3502, 0x1, 0x1, 0x53, 0x9, 0x8, 0xf}}, 0xe8) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.089784955s ago: executing program 34 (id=2088): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="cbfa0177ebfd", 'team_slave_0\x00'}}, 0x1e) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000000)=0x20000, 0x4) 1.05233427s ago: executing program 35 (id=2086): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80b2b6fbbb7d22c6340eb6ddb16d6f5397e53ab58bcf0dc94ccbd590f944de8447c6ac6831da8be09b61cf4767c83193230ffdf09cddeeb1ebf28541b", @ANYRES16=r5, @ANYBLOB="01000000000000000000070000000c001600010000000000000014000800"/46], 0x34}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r8 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e6174"], 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x20040080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r10 = socket(0x8, 0x800, 0x0) ioctl$IMGETCOUNT(r10, 0x400261f2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="000082ee", @ANYRESDEC], 0xd) 0s ago: executing program 36 (id=2090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x36) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001780)={0x121c, 0x16, 0x4, 0x70bd2d, 0x25dfdbfe, {0x16}, [@nested={0x1022, 0x26, 0x0, 0x1, [@nested={0x4, 0xd7}, @generic="03aebf9e48f6225f4d050002fb43dd010f40", @typed={0x1004, 0xbe, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x11}]}, @nested={0x1e3, 0x8f, 0x0, 0x1, [@typed={0x8, 0xbd, 0x0, 0x0, @pid=r1}, @generic="b647b24373eb0551f31f3322c1f8f0bab488239cc038429bea6510962d20e73cef326f822ddf425495d596bd8d1896e357892fcb8ce58e610d80a6f5d0c6d571321c3d2c99ffad53a71389bfcdc36405d8a039678c43182663bbfceb2cf1d082777862c9c4c484a4bd9f13330c3d15ad7406e2d677045dabef5ca9bc57a68e211bd42f17814f47235730adf24f8449d2636c5296356841f50e14a4959e5c11f8b380214a70", @generic="98ccd7e44b1429263d540008b2f4763b972b28a7df503e324557a4976de3ddfd7ac018634f9c17007b77d9f99ec981982dafbfe3e7a1e4f7b2e8693e31283fdfa6c66cdd2055437a57fd4f30fcff5ec5b4058abf82868899c04fa6bbba6b565dc37522f5d21a5dae30d5e7c62739a918bd7ac656526f5358566f1634e239ece2536f8897933917f2aa40", @typed={0x4, 0xcb}, @nested={0x4, 0x158}, @nested={0x4, 0xc8}, @typed={0x97, 0x149, 0x0, 0x0, @binary="63d5b06f1bcbdc7185d237fc33b4167f4bdedd4aab23abdde0e7fa355d4746cc6012d5a94d9fd7d7fa5b552416ad60cf26a9de74eb2a6430a4bf41b9632f0c69843fb84b903884312995ee3f1456bcd8ad0b32b1a240ac98011fb2e10bc8fd674d287f30405110591a39dff0daee9d94f0821bcd2030a89e317d9e45d2f7bbc718b90f4ce6502021b134b9680ebe47c81a6209"}, @nested={0x4, 0xbe}]}]}, 0x121c}, 0x1, 0x0, 0x0, 0x4040}, 0x881) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="810f0000000000000000010000000803010000000001080004000000760534109c71a1cfff788cd4062b88eccabdd02d8d2530a79b8c059cc776bf03478b540c144fd2f7237b5d9728bedb65711d4eae7739408f8e2bc9b4034a6b0b51a3ca7896f6947fa49c9eae224be15642941df8e9700f79403a2a6e1e4b91868e99512128a632b08dc52bdb285759ed72b39a6036c16eb7311a499b4696d40d6aabe2bdc26282cf23b3f8615fceea633f5d0f", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd37}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x41}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000002c0)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/218}, 0x20) kernel console output (not intermixed with test programs): ): Enslaving as a backup interface with a down link [ 151.948676][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 152.090711][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.735'. [ 152.172822][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 152.186967][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 152.206407][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 152.724885][ T8734] Cannot find add_set index 65532 as target [ 152.742661][ T8733] netlink: 'syz.0.742': attribute type 10 has an invalid length. [ 152.764150][ T8738] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 152.779466][ T8739] netlink: 'syz.3.743': attribute type 21 has an invalid length. [ 152.793427][ T8733] team0: Device ipvlan1 failed to register rx_handler [ 152.812021][ T8739] netlink: 152 bytes leftover after parsing attributes in process `syz.3.743'. [ 152.828175][ T8738] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 153.006294][ T8753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.745'. [ 153.346072][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.749'. [ 153.542622][ T8771] bond2 (unregistering): Released all slaves [ 153.588613][ T8781] netlink: 'syz.0.754': attribute type 5 has an invalid length. [ 153.774411][ T8787] sctp: [Deprecated]: syz.2.755 (pid 8787) Use of int in max_burst socket option deprecated. [ 153.774411][ T8787] Use struct sctp_assoc_value instead [ 153.824286][ T8791] netlink: 'syz.1.756': attribute type 9 has an invalid length. [ 153.849491][ T8791] netlink: 'syz.1.756': attribute type 11 has an invalid length. [ 153.888841][ T8791] netlink: 'syz.1.756': attribute type 12 has an invalid length. [ 153.910190][ T8798] sctp: [Deprecated]: syz.1.756 (pid 8798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.910190][ T8798] Use struct sctp_sack_info instead [ 154.259402][ T8815] C: renamed from lo (while UP) [ 154.299120][ T8815] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 154.385445][ T8824] syzkaller0: entered promiscuous mode [ 154.411721][ T8824] syzkaller0: entered allmulticast mode [ 154.679653][ T8846] Illegal XDP return value 2949730841 on prog (id 114) dev N/A, expect packet loss! [ 154.937102][ T8860] syzkaller0: entered promiscuous mode [ 154.942851][ T8860] syzkaller0: entered allmulticast mode [ 157.833511][ T8866] __nla_validate_parse: 2 callbacks suppressed [ 157.833539][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 157.993194][ T8876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.781'. [ 158.131864][ T8876] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.781'. [ 158.389503][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 158.986585][ T8940] netlink: 'syz.1.796': attribute type 8 has an invalid length. [ 159.210151][ T8956] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.800'. [ 159.515663][ T8978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.533996][ T5973] lo speed is unknown, defaulting to 1000 [ 159.620268][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 159.641431][ T8986] SET target dimension over the limit! [ 159.857904][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 160.060088][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.070493][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.080753][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.097666][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.341829][ T9019] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 160.484958][ T9029] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 160.494526][ T9029] netlink: 244 bytes leftover after parsing attributes in process `syz.3.816'. [ 160.523072][ T9019] gretap1: entered promiscuous mode [ 160.578393][ T9019] bond4: (slave gretap1): making interface the new active one [ 160.605384][ T9019] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 160.637771][ T9027] macvlan2: entered promiscuous mode [ 160.643261][ T9027] macvlan2: entered allmulticast mode [ 160.652623][ T9027] bond4: entered promiscuous mode [ 160.659850][ T9027] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.668390][ T9027] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 160.688515][ T9027] bond4: left promiscuous mode [ 160.706727][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 161.118572][ T9059] netlink: 'syz.0.824': attribute type 7 has an invalid length. [ 161.132765][ T9059] netlink: 140 bytes leftover after parsing attributes in process `syz.0.824'. [ 161.337515][ T9070] netlink: 'syz.3.828': attribute type 4 has an invalid length. [ 161.592998][ T9081] vcan1: entered promiscuous mode [ 161.599474][ T9081] vcan1: entered allmulticast mode [ 161.848519][ T9096] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 162.032321][ T9110] netlink: 'syz.1.836': attribute type 30 has an invalid length. [ 162.216312][ T9124] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 162.275602][ T9127] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 162.324541][ T9124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.361212][ T9128] bond2: (slave veth0_to_bond): making interface the new active one [ 162.372792][ T9132] openvswitch: netlink: IPv4 tunnel dst address is zero [ 162.405826][ T9132] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 162.411278][ T9128] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 162.451066][ T9124] bond2: entered promiscuous mode [ 162.456430][ T9124] veth0_to_bond: entered promiscuous mode [ 162.462568][ T9124] bond2: entered allmulticast mode [ 162.467995][ T9124] veth0_to_bond: entered allmulticast mode [ 162.507773][ T9134] tipc: Enabled bearer , priority 10 [ 162.546341][ T9136] hsr_slave_0 (unregistering): left promiscuous mode [ 162.951028][ T9156] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 163.102196][ T9166] vcan0: tx drop: invalid sa for name 0x0000080000000000 [ 163.167583][ T9167] bond3: (slave ip6gretap1): making interface the new active one [ 163.176712][ T9167] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.185193][ T9167] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.193433][ T9167] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 163.473875][ T9183] __nla_validate_parse: 10 callbacks suppressed [ 163.473897][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.858'. [ 163.575713][ T9187] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.861'. [ 163.659481][ T9189] bond4: (slave bridge5): making interface the new active one [ 163.667933][ T9189] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 163.836558][ T9196] netlink: 132 bytes leftover after parsing attributes in process `syz.4.865'. [ 163.930929][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 163.958412][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 164.170254][ T9211] syz_tun: entered promiscuous mode [ 164.182842][ T9211] macvtap1: entered promiscuous mode [ 164.225363][ T9211] syz_tun: left promiscuous mode [ 164.355483][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 164.390998][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.873'. [ 164.414606][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 164.451082][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.873'. [ 164.548758][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'. [ 164.722980][ T9235] bond5: option mode: invalid value (71) [ 164.738340][ T9235] bond5 (unregistering): Released all slaves [ 165.092824][ T9264] validate_nla: 3 callbacks suppressed [ 165.092852][ T9264] netlink: 'syz.3.888': attribute type 1 has an invalid length. [ 165.118723][ T9260] bond5: entered promiscuous mode [ 166.032153][ T9322] ªªªªª9oïß+Œü4€: renamed from lo [ 166.059018][ T9317] syzkaller0: entered promiscuous mode [ 166.084519][ T9317] syzkaller0: entered allmulticast mode [ 166.279856][ T9328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.281795][ T9328] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 166.316051][ T9328] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 166.705307][ T9354] team0: Device ip6gre1 is of different type [ 167.018207][ T9371] netlink: 'syz.4.916': attribute type 4 has an invalid length. [ 167.046744][ T9375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.069573][ T6254] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.079691][ T6254] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.110997][ T6248] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.131844][ T9375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.158759][ T6248] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.327844][ T9383] vcan0: tx drop: invalid sa for name 0x0000000100000000 [ 167.359213][ T9386] batadv0: entered allmulticast mode [ 167.414380][ T9389] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 167.628654][ T9404] netlink: 'syz.4.928': attribute type 9 has an invalid length. [ 167.641180][ T9405] netlink: 'syz.4.928': attribute type 9 has an invalid length. [ 167.651091][ T9405] netlink: 'syz.4.928': attribute type 11 has an invalid length. [ 167.659480][ T9404] netlink: 'syz.4.928': attribute type 11 has an invalid length. [ 167.664330][ T9405] netlink: 'syz.4.928': attribute type 12 has an invalid length. [ 167.669548][ T9404] netlink: 'syz.4.928': attribute type 12 has an invalid length. [ 167.683494][ T9402] netlink: 'syz.0.927': attribute type 13 has an invalid length. [ 167.943057][ T9423] tipc: Enabled bearer , priority 2 [ 168.095567][ T9429] batman_adv: batadv0: Adding interface: netdevsim0 [ 168.111228][ T9429] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.146259][ T9429] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 168.177700][ T9431] tipc: Enabled bearer , priority 0 [ 168.188900][ T9431] syzkaller0: entered promiscuous mode [ 168.194530][ T9431] syzkaller0: entered allmulticast mode [ 168.205557][ T9431] tipc: Resetting bearer [ 168.266670][ T9430] tipc: Resetting bearer [ 168.309811][ T9430] tipc: Disabling bearer [ 168.745781][ T9462] tipc: Started in network mode [ 168.750801][ T9462] tipc: Node identity , cluster identity 4711 [ 168.832168][ T9462] tipc: Failed to set node id, please configure manually [ 168.850694][ T9462] tipc: Enabling of bearer rejected, failed to enable media [ 168.895801][ T9465] A link change request failed with some changes committed already. Interface ªªªªª9oïß+Œü4€ may have been left with an inconsistent configuration, please check. [ 169.264129][ T9495] netlink: 'syz.2.958': attribute type 11 has an invalid length. [ 169.311699][ T9496] syzkaller1: entered promiscuous mode [ 169.323319][ T9496] syzkaller1: entered allmulticast mode [ 169.323751][ T9499] __nla_validate_parse: 15 callbacks suppressed [ 169.323785][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 169.384221][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 169.430435][ T9499] netlink: 148 bytes leftover after parsing attributes in process `syz.4.959'. [ 169.451939][ T9501] netlink: 148 bytes leftover after parsing attributes in process `syz.4.959'. [ 169.525124][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.958'. [ 169.814685][ T9521] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.856074][ T9521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.038608][ T9537] syzkaller0: entered promiscuous mode [ 170.076673][ T9537] syzkaller0: entered allmulticast mode [ 170.497477][ T9556] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 170.524837][ T9556] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 171.004738][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 171.081198][ T9588] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.135613][ T9586] xt_CT: No such helper "snmp_trap" [ 171.344103][ T30] audit: type=1800 audit(1772496429.542:3): pid=9601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.984" name="memory.events" dev="tmpfs" ino=952 res=0 errno=0 [ 171.465803][ T9608] bond3: invalid ARP target 0.0.0.0 specified for addition [ 171.473719][ T9608] bond3: option arp_ip_target: invalid value (0) [ 171.692349][ T9608] bond3 (unregistering): Released all slaves [ 171.971597][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 172.080974][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.991'. [ 172.379897][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 172.400088][ T9657] validate_nla: 4 callbacks suppressed [ 172.400107][ T9657] netlink: 'syz.0.996': attribute type 3 has an invalid length. [ 172.459550][ T9661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.999'. [ 172.702421][ T9674] vlan2: entered promiscuous mode [ 172.717803][ T9674] vlan2: entered allmulticast mode [ 172.722984][ T9674] hsr_slave_1: entered allmulticast mode [ 172.779820][ T9683] netlink: 'syz.4.1005': attribute type 11 has an invalid length. [ 172.800672][ T9680] lo: entered allmulticast mode [ 172.815731][ T9680] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 172.840539][ T9680] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 173.461912][ T9717] netlink: 'syz.0.1013': attribute type 28 has an invalid length. [ 173.477892][ T9721] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 173.496247][ T9717] netlink: 'syz.0.1013': attribute type 3 has an invalid length. [ 173.511454][ T9721] netlink: 'syz.4.1014': attribute type 2 has an invalid length. [ 173.545989][ T9721] netlink: 'syz.4.1014': attribute type 2 has an invalid length. [ 173.571017][ T9721] netlink: 'syz.4.1014': attribute type 2 has an invalid length. [ 173.820327][ T9737] xt_hashlimit: size too large, truncated to 1048576 [ 173.973116][ T9735] syzkaller0: entered promiscuous mode [ 174.021656][ T9735] syzkaller0: entered allmulticast mode [ 175.569178][ T9774] netlink: 'syz.3.1027': attribute type 11 has an invalid length. [ 175.590392][ T9775] __nla_validate_parse: 6 callbacks suppressed [ 175.590413][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1029'. [ 175.606149][ T9774] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1027'. [ 175.641895][ T9775] bond7: entered promiscuous mode [ 175.648251][ T9775] bond7: entered allmulticast mode [ 175.653924][ T9775] 8021q: adding VLAN 0 to HW filter on device bond7 [ 175.678138][ T9778] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1030'. [ 175.801282][ T9785] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1031'. [ 175.865636][ T9785] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1031'. [ 175.897950][ T9785] netlink: 'syz.1.1031': attribute type 6 has an invalid length. [ 175.935334][ T9785] netlink: 'syz.1.1031': attribute type 5 has an invalid length. [ 175.945820][ T9785] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1031'. [ 175.993582][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 176.119767][ T9817] bond5: entered promiscuous mode [ 176.125336][ T9817] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.170576][ T9817] bond5: (slave bridge9): making interface the new active one [ 176.188441][ T9817] bridge9: entered promiscuous mode [ 176.230940][ T9817] bridge9: left promiscuous mode [ 176.263960][ T9825] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1038'. [ 176.280756][ T9825] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1038'. [ 176.662310][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1044'. [ 176.853795][ T9799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.952003][ T9861] tap0: tun_chr_ioctl cmd 2148553947 [ 176.969118][ T9861] Cannot find add_set index 0 as target [ 177.255752][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.280535][ T9871] syzkaller0: entered promiscuous mode [ 177.286241][ T9871] syzkaller0: entered allmulticast mode [ 177.740765][ T1746] block nbd0: Possible stuck request ffff8880269c8000: control (read@0,1024B). Runtime 60 seconds [ 177.751914][ T1746] block nbd0: Possible stuck request ffff8880269c8200: control (read@1024,1024B). Runtime 60 seconds [ 177.763737][ T1746] block nbd0: Possible stuck request ffff8880269c8400: control (read@2048,1024B). Runtime 60 seconds [ 177.775318][ T1746] block nbd0: Possible stuck request ffff8880269c8600: control (read@3072,1024B). Runtime 60 seconds [ 179.038217][ T9814] bond0: (slave bond_slave_0): interface is now down [ 179.065257][ T9814] bond0: (slave bond_slave_1): interface is now down [ 179.085597][ T9814] bond0: now running without any active interface! [ 179.184484][ T9929] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 179.302157][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 179.311875][ T9929] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 179.321444][ T9929] team0: Failed to send options change via netlink (err -105) [ 179.329731][ T9929] team0: Port device batadv1 added [ 179.475065][ T9900] infiniband : set down [ 179.482188][ T9900] infiniband : added ipvlan0 [ 179.490472][ T9900] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 179.495103][ T9900] infiniband : Couldn't open port 1 [ 179.616274][ T9957] validate_nla: 2 callbacks suppressed [ 179.616293][ T9957] netlink: 'syz.0.1081': attribute type 18 has an invalid length. [ 179.638757][ T9900] RDS/IB: : added [ 179.642599][ T9900] smc: adding ib device  with port count 1 [ 179.681469][ T9959] bond2: entered promiscuous mode [ 179.682626][ T9900] smc: ib device  port 1 has no pnetid [ 179.691905][ T9959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.734135][ T9967] netlink: 'syz.0.1081': attribute type 18 has an invalid length. [ 179.751981][ T9960] bridge4: entered promiscuous mode [ 179.758601][ T9960] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 179.785698][ T9963] tipc: Enabled bearer , priority 11 [ 180.392496][T10011] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 180.409062][T10011] NCSI netlink: No device for ifindex 0 [ 180.793091][T10016] vcan0: tx address claim with dest, not broadcast [ 181.321806][T10030] __nla_validate_parse: 12 callbacks suppressed [ 181.321827][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 181.356054][T10030] netlink: 'syz.0.1099': attribute type 30 has an invalid length. [ 181.372967][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 181.396201][T10033] netlink: 'syz.0.1099': attribute type 30 has an invalid length. [ 181.481102][T10036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.490881][T10037] netlink: 'syz.4.1098': attribute type 11 has an invalid length. [ 181.594239][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 181.609281][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1101'. [ 181.640232][ T9808] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.650777][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 181.666314][ T9808] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.675090][ T9808] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.696649][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1101'. [ 181.746083][ T9808] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.946870][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 181.967023][T10057] netlink: 'syz.4.1107': attribute type 30 has an invalid length. [ 182.008613][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 182.026049][T10060] netlink: 'syz.4.1107': attribute type 30 has an invalid length. [ 182.684388][T10086] netlink: 'syz.4.1116': attribute type 83 has an invalid length. [ 182.705193][T10090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.717026][T10088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 182.727063][T10088] nbd: must specify at least one socket [ 182.733300][T10085] nbd: must specify an index to disconnect [ 182.740611][T10085] tipc: Enabled bearer , priority 0 [ 182.806142][T10085] syzkaller0: entered promiscuous mode [ 182.811921][T10085] syzkaller0: entered allmulticast mode [ 182.818232][T10085] tipc: Resetting bearer [ 182.887003][T10084] tipc: Resetting bearer [ 182.964147][T10098] netlink: 'syz.0.1120': attribute type 30 has an invalid length. [ 183.072576][T10107] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1120'. [ 184.130283][T10084] tipc: Disabling bearer [ 184.140637][T10098] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 184.294074][T10115] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 184.972871][T10155] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 185.433343][T10165] ip6gre1: entered allmulticast mode [ 185.560270][T10174] netlink: 'syz.1.1146': attribute type 11 has an invalid length. [ 185.580462][T10171] syzkaller1: entered promiscuous mode [ 185.586726][T10171] syzkaller1: entered allmulticast mode [ 185.597418][T10171] syzkaller0: entered promiscuous mode [ 185.602942][T10171] syzkaller0: entered allmulticast mode [ 186.147907][T10203] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 186.215656][T10203] xt_SECMARK: invalid mode: 9 [ 186.379852][T10217] __nla_validate_parse: 9 callbacks suppressed [ 186.379873][T10217] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1156'. [ 186.532225][T10224] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 186.558820][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 186.923383][T10239] lo speed is unknown, defaulting to 1000 [ 187.925149][T10294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1181'. [ 187.937406][T10296] netlink: 'syz.3.1180': attribute type 1 has an invalid length. [ 187.945335][T10296] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1180'. [ 187.972646][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1180'. [ 188.002260][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 188.024392][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'. [ 188.223279][T10311] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 188.498721][T10327] openvswitch: netlink: EtherType 53b is less than min 600 [ 188.616202][T10324] syzkaller1: entered promiscuous mode [ 188.622223][T10324] syzkaller1: entered allmulticast mode [ 188.745244][T10338] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 188.925616][T10346] geneve3: entered promiscuous mode [ 188.939836][ T6252] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 50965 - 0 [ 188.971731][ T6252] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 50965 - 0 [ 189.062346][ T6252] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 50965 - 0 [ 189.094645][ T6252] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 50965 - 0 [ 189.195826][T10352] tipc: Enabled bearer , priority 0 [ 189.217044][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1197'. [ 189.385239][T10355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1195'. [ 189.412987][T10356] syzkaller0: entered promiscuous mode [ 189.461827][T10356] syzkaller0: entered allmulticast mode [ 189.520875][T10352] tipc: Resetting bearer [ 189.557421][T10351] tipc: Resetting bearer [ 189.587309][T10351] tipc: Disabling bearer [ 189.830264][T10378] tipc: Enabling of bearer rejected, already enabled [ 190.096733][T10394] xt_hashlimit: size too large, truncated to 1048576 [ 190.305336][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.313116][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.463385][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 190.611634][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.632739][T10400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.656829][T10400] tipc: Resetting bearer [ 190.774719][T10400] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 190.814643][T10437] netlink: 'syz.4.1221': attribute type 3 has an invalid length. [ 190.825468][T10400] vlan0: left allmulticast mode [ 190.830647][T10400] veth0_vlan: left allmulticast mode [ 190.837672][T10400] vlan0: left promiscuous mode [ 190.847171][T10400] macvtap1: left promiscuous mode [ 190.852451][T10400] macvtap1: left allmulticast mode [ 190.860326][T10400] bond2: left promiscuous mode [ 190.865228][T10400] veth0_to_bond: left promiscuous mode [ 190.889913][T10400] bond2: left allmulticast mode [ 190.896254][T10400] veth0_to_bond: left allmulticast mode [ 190.932136][ T49] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.942099][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.978597][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.991438][ T49] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.002074][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.011597][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.175079][ T49] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.186749][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.197192][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.219964][ T49] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.232809][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.272747][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.502564][T10477] __nla_validate_parse: 2 callbacks suppressed [ 191.502586][T10477] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1230'. [ 191.547750][T10477] openvswitch: netlink: Missing key (keys=40, expected=100) [ 191.813595][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 191.878891][T10500] netlink: 'syz.1.1240': attribute type 11 has an invalid length. [ 191.902645][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'. [ 191.914197][T10500] netlink: 'syz.1.1240': attribute type 11 has an invalid length. [ 191.933046][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'. [ 192.225429][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'. [ 192.306043][T10530] syz.4.1249: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 192.350196][T10530] CPU: 0 UID: 0 PID: 10530 Comm: syz.4.1249 Not tainted syzkaller #0 PREEMPT(full) [ 192.350228][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.350250][T10530] Call Trace: [ 192.350258][T10530] [ 192.350269][T10530] dump_stack_lvl+0xe8/0x150 [ 192.350313][T10530] warn_alloc+0x249/0x340 [ 192.350342][T10530] ? stack_trace_save+0xa9/0x100 [ 192.350369][T10530] ? __pfx_warn_alloc+0x10/0x10 [ 192.350401][T10530] ? kasan_save_track+0x4f/0x80 [ 192.350422][T10530] ? kasan_save_track+0x3e/0x80 [ 192.350442][T10530] ? __kasan_kmalloc+0x93/0xb0 [ 192.350465][T10530] ? __kmalloc_cache_noprof+0x31c/0x660 [ 192.350487][T10530] ? xskq_create+0x56/0x170 [ 192.350517][T10530] ? xsk_setsockopt+0x54c/0x990 [ 192.350544][T10530] ? do_sock_setsockopt+0x17c/0x1b0 [ 192.350574][T10530] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 192.350603][T10530] ? do_syscall_64+0x14d/0xf80 [ 192.350628][T10530] __vmalloc_node_range_noprof+0x132/0x1730 [ 192.350686][T10530] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.350717][T10530] ? __kasan_kmalloc+0x93/0xb0 [ 192.350747][T10530] vmalloc_user_noprof+0xad/0xe0 [ 192.350770][T10530] ? xskq_create+0xbf/0x170 [ 192.350803][T10530] xskq_create+0xbf/0x170 [ 192.350838][T10530] xsk_init_queue+0x8a/0xe0 [ 192.350871][T10530] xsk_setsockopt+0x54c/0x990 [ 192.350904][T10530] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.350933][T10530] ? __pfx_aa_sk_perm+0x10/0x10 [ 192.350961][T10530] ? aa_sock_opt_perm+0xff/0x1a0 [ 192.350996][T10530] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 192.351022][T10530] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.351054][T10530] do_sock_setsockopt+0x17c/0x1b0 [ 192.351099][T10530] __x64_sys_setsockopt+0x13d/0x1b0 [ 192.351138][T10530] do_syscall_64+0x14d/0xf80 [ 192.351158][T10530] ? trace_irq_disable+0x3b/0x150 [ 192.351190][T10530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.351213][T10530] ? clear_bhb_loop+0x40/0x90 [ 192.351241][T10530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.351263][T10530] RIP: 0033:0x7f972019c799 [ 192.351297][T10530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.351316][T10530] RSP: 002b:00007f971e3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.351339][T10530] RAX: ffffffffffffffda RBX: 00007f9720415fa0 RCX: 00007f972019c799 [ 192.351355][T10530] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 192.351368][T10530] RBP: 00007f9720232bd9 R08: 0000000000000004 R09: 0000000000000000 [ 192.351380][T10530] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.351393][T10530] R13: 00007f9720416038 R14: 00007f9720415fa0 R15: 00007ffdfec1c098 [ 192.351429][T10530] [ 192.351443][T10530] Mem-Info: [ 192.645981][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 192.657443][T10530] active_anon:5580 inactive_anon:0 isolated_anon:0 [ 192.657443][T10530] active_file:2629 inactive_file:39972 isolated_file:0 [ 192.657443][T10530] unevictable:768 dirty:48 writeback:0 [ 192.657443][T10530] slab_reclaimable:11216 slab_unreclaimable:103870 [ 192.657443][T10530] mapped:29717 shmem:1357 pagetables:1276 [ 192.657443][T10530] sec_pagetables:0 bounce:0 [ 192.657443][T10530] kernel_misc_reclaimable:0 [ 192.657443][T10530] free:1324719 free_pcp:9759 free_cma:0 [ 192.707241][T10542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1251'. [ 192.719214][T10530] Node 0 active_anon:22320kB inactive_anon:0kB active_file:10516kB inactive_file:159684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120768kB dirty:192kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14160kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.756726][T10530] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.805968][T10530] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.880129][T10530] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 192.886150][T10530] Node 0 DMA32 free:1346532kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22320kB inactive_anon:0kB active_file:10516kB inactive_file:159684kB unevictable:1536kB writepending:192kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:40332kB local_pcp:19560kB free_cma:0kB [ 192.920299][T10530] lowmem_reserve[]: 0 0 0 0 0 [ 192.937754][T10530] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 192.968416][T10548] netlink: 'syz.1.1253': attribute type 30 has an invalid length. [ 192.996178][T10530] lowmem_reserve[]: 0 0 0 0 0 [ 193.004352][T10548] bond6: option arp_missed_max: invalid value (0) [ 193.011128][T10530] Node 1 Normal free:3936800kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.043282][T10548] bond6: option arp_missed_max: allowed values 1 - 255 [ 193.046533][T10530] lowmem_reserve[]: 0 0 0 0 0 [ 193.061147][T10530] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.076987][T10548] bond6 (unregistering): Released all slaves [ 193.123734][T10530] Node 0 DMA32: 3107*4kB (UM) 1444*8kB (UM) 832*16kB (UME) 637*32kB (UM) 46*64kB (UM) 30*128kB (UME) 51*256kB (UM) 92*512kB (UM) 81*1024kB (UME) 36*2048kB (UME) 260*4096kB (UM) = 1346252kB [ 193.161075][T10530] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 193.173900][T10530] Node 1 Normal: 2*4kB (UE) 9*8kB (UM) 19*16kB (UME) 13*32kB (UME) 16*64kB (UME) 4*128kB (UM) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 958*4096kB (M) = 3936800kB [ 193.192642][T10530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.202854][T10530] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.212966][T10530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.247623][T10530] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.276410][T10530] 45179 total pagecache pages [ 193.286321][T10530] 0 pages in swap cache [ 193.290540][T10530] Free swap = 124996kB [ 193.312084][T10530] Total swap = 124996kB [ 193.322156][T10530] 2097051 pages RAM [ 193.326914][T10530] 0 pages HighMem/MovableOnly [ 193.331652][T10530] 427010 pages reserved [ 193.335837][T10530] 0 pages cma reserved [ 193.437272][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057a98000: rx timeout, send abort [ 193.535557][T10567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'. [ 193.677983][T10563] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1258'. [ 193.688726][T10572] netlink: 'syz.2.1260': attribute type 9 has an invalid length. [ 193.723971][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1260'. [ 193.785217][ T6260] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 193.785545][T10572] netlink: 'syz.2.1260': attribute type 9 has an invalid length. [ 193.820092][ T6260] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 193.840875][ T6260] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 193.876066][ T6260] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 193.946639][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057a98000: abort rx timeout. Force session deactivation [ 194.371175][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.214394][T10637] A link change request failed with some changes committed already. Interface ªªªªª9oïß+Œü4€ may have been left with an inconsistent configuration, please check. [ 195.254186][T10637] netlink: 'syz.4.1279': attribute type 1 has an invalid length. [ 195.750229][T10663] netlink: 'syz.4.1287': attribute type 29 has an invalid length. [ 196.158287][T10693] C: renamed from lo [ 196.268929][T10693] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 196.639808][T10723] netlink: 'syz.0.1304': attribute type 3 has an invalid length. [ 196.840594][T10743] __nla_validate_parse: 14 callbacks suppressed [ 196.840615][T10743] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1309'. [ 196.971603][T10753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1311'. [ 197.000780][T10756] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 197.037178][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 197.060104][T10756] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1312'. [ 197.100561][T10758] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 197.150580][T10762] syz.3.1315 uses old SIOCAX25GETINFO [ 197.167611][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1315'. [ 197.187405][T10762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1315'. [ 197.214066][T10762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1315'. [ 197.274231][T10770] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 197.336203][T10771] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 197.588501][T10789] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1324'. [ 197.735742][T10796] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 198.070303][T10820] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1332'. [ 198.129074][T10822] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 198.162616][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 198.523030][T10845] netlink: 'syz.1.1339': attribute type 1 has an invalid length. [ 198.600086][T10845] bond6: entered promiscuous mode [ 198.605652][T10845] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.712236][T10853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.885261][T10861] syzkaller0: entered promiscuous mode [ 198.906239][T10861] syzkaller0: entered allmulticast mode [ 199.707745][T10913] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 199.734425][ T5193] udevd[5193]: worker [5877] /devices/virtual/block/nbd0 is taking a long time [ 199.853195][T10921] netlink: 'syz.2.1364': attribute type 11 has an invalid length. [ 199.972995][T10931] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 200.215200][T10950] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 200.242308][T10950] bond7: entered promiscuous mode [ 200.247995][T10950] 8021q: adding VLAN 0 to HW filter on device bond7 [ 200.279679][T10950] 8021q: adding VLAN 0 to HW filter on device bond7 [ 200.297524][T10950] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 200.346785][T10950] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 200.359658][T10950] bond7: (slave vti0): making interface the new active one [ 200.368185][T10950] vti0: entered promiscuous mode [ 200.374966][T10950] bond7: (slave vti0): Enslaving as an active interface with an up link [ 200.549640][T10962] IPVS: length: 144 != 8 [ 200.595994][T10965] netlink: 'syz.4.1377': attribute type 22 has an invalid length. [ 200.660633][T10965] netlink: 'syz.4.1377': attribute type 22 has an invalid length. [ 200.810592][T10971] vlan4: entered promiscuous mode [ 200.819998][T10971] vlan4: entered allmulticast mode [ 200.825176][T10971] hsr_slave_1: entered allmulticast mode [ 200.834750][T10971] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 200.881093][T10976] syzkaller0: entered promiscuous mode [ 200.892356][T10976] syzkaller0: entered allmulticast mode [ 200.940316][ T9006] IPVS: starting estimator thread 0... [ 201.036317][T10981] IPVS: using max 27 ests per chain, 64800 per kthread [ 201.087358][T10987] netlink: 'syz.4.1386': attribute type 11 has an invalid length. [ 201.128436][T10990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.255729][T11002] netlink: 'syz.4.1391': attribute type 16 has an invalid length. [ 201.268510][T11002] netlink: 'syz.4.1391': attribute type 17 has an invalid length. [ 201.400794][T11013] wireguard0: entered promiscuous mode [ 201.424272][T11013] wireguard0: entered allmulticast mode [ 201.777897][T11035] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 201.864992][T10984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.890301][T11042] __nla_validate_parse: 16 callbacks suppressed [ 201.890324][T11042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1403'. [ 201.905733][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1403'. [ 201.970367][T11045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1405'. [ 202.128946][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1407'. [ 202.189027][T11056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1409'. [ 202.400904][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 202.412992][T11072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1413'. [ 202.439620][T11072] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 202.511645][T11072] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 202.542537][T11072] bond3 (unregistering): Released all slaves [ 202.752687][T11088] netlink: 'syz.2.1416': attribute type 13 has an invalid length. [ 202.785664][T11088] netlink: 'syz.2.1416': attribute type 58 has an invalid length. [ 202.804473][T11088] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1416'. [ 202.853790][T11096] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 202.881604][T11096] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.947618][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 202.957750][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 203.389577][T11121] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.404721][T11123] xt_hashlimit: size too large, truncated to 1048576 [ 203.500315][T11131] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 203.648362][T11142] netlink: 'syz.2.1431': attribute type 1 has an invalid length. [ 203.758436][T11142] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.155080][T11169] ±ÿ: renamed from team_slave_1 [ 204.271576][T11188] sctp: [Deprecated]: syz.2.1443 (pid 11188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.271576][T11188] Use struct sctp_sack_info instead [ 204.374346][T11194] netlink: 'syz.0.1444': attribute type 3 has an invalid length. [ 204.389743][T11194] netlink: 'syz.0.1444': attribute type 3 has an invalid length. [ 204.818933][T11221] syzkaller0: entered promiscuous mode [ 204.842717][T11221] syzkaller0: entered allmulticast mode [ 204.956504][T11221] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.104275][T11229] smc: net device wlan0 applied user defined pnetid SYZ2 [ 205.287961][T11242] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 205.371917][T11251] netlink: 'syz.1.1460': attribute type 7 has an invalid length. [ 205.673120][T11271] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 205.679731][T11271] syzkaller1: linktype set to 823 [ 205.922902][T11289] netlink: 'syz.3.1471': attribute type 5 has an invalid length. [ 205.931367][T11291] raw_sendmsg: syz.0.1472 forgot to set AF_INET. Fix it! [ 206.021952][T11295] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.040233][T11294] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.148867][T11302] dvmrp0: entered allmulticast mode [ 206.154393][T11303] 8021q: VLANs not supported on ipvlan0 [ 206.199862][T11304] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 206.377011][T11320] bridge_slave_1: left allmulticast mode [ 206.382721][T11320] bridge_slave_1: left promiscuous mode [ 206.396287][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.447256][T11320] bridge_slave_0: left allmulticast mode [ 206.452982][T11320] bridge_slave_0: left promiscuous mode [ 206.471460][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.490166][T11320] : (slave bridge0): Releasing backup interface [ 206.533487][T11327] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.892880][T11349] syzkaller0: entered promiscuous mode [ 206.906088][T11349] syzkaller0: entered allmulticast mode [ 207.809469][ T1746] block nbd0: Possible stuck request ffff8880269c8000: control (read@0,1024B). Runtime 90 seconds [ 207.820895][ T1746] block nbd0: Possible stuck request ffff8880269c8200: control (read@1024,1024B). Runtime 90 seconds [ 207.833512][ T1746] block nbd0: Possible stuck request ffff8880269c8400: control (read@2048,1024B). Runtime 90 seconds [ 207.844536][ T1746] block nbd0: Possible stuck request ffff8880269c8600: control (read@3072,1024B). Runtime 90 seconds [ 208.316772][T11356] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.341243][T11356] bond8: (slave lo): Enslaving as an active interface with an up link [ 208.369254][T11356] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 208.406061][ T9009] lo speed is unknown, defaulting to 1000 [ 208.435620][ T9009] lo speed is unknown, defaulting to 1000 [ 208.444629][ T9001] lo speed is unknown, defaulting to 1000 [ 208.869210][T11410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.904284][T11411] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 208.917942][T11414] x_tables: duplicate underflow at hook 2 [ 209.068712][T11420] __nla_validate_parse: 21 callbacks suppressed [ 209.068733][T11420] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1510'. [ 209.085800][T11420] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 209.226321][T11430] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1515'. [ 209.408660][T11444] netlink: 'syz.0.1517': attribute type 10 has an invalid length. [ 209.440885][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 209.457453][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 209.529756][T11437] bond8 (unregistering): Released all slaves [ 209.575082][T11456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1521'. [ 209.642956][T11456] vlan5: entered allmulticast mode [ 209.649783][T11456] geneve1: entered allmulticast mode [ 209.866992][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1527'. [ 209.916929][T11471] veth1_vlan (unregistering): left allmulticast mode [ 209.948837][T11477] netlink: 'syz.4.1526': attribute type 4 has an invalid length. [ 210.018403][T11471] tipc: Disabling bearer [ 210.357339][T11501] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 210.466931][T11508] bond0: Unable to set up delay as MII monitoring is disabled [ 210.565238][T11515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1540'. [ 210.574744][T11515] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1540'. [ 210.583989][T11515] netlink: 'syz.0.1540': attribute type 6 has an invalid length. [ 210.592031][T11515] netlink: 'syz.0.1540': attribute type 5 has an invalid length. [ 210.607845][T11515] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1540'. [ 210.686938][T11526] tipc: Enabling of bearer rejected, media not registered [ 210.739701][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 211.094302][T11552] bridge5: entered promiscuous mode [ 211.137076][T11552] bridge5: entered allmulticast mode [ 211.260668][T11565] openvswitch: netlink: Missing key (keys=40, expected=100) [ 211.380880][T11570] No such timeout policy "syz0" [ 211.505501][T11577] x_tables: unsorted entry at hook 3 [ 211.520670][T11575] ip6gre1: entered promiscuous mode [ 212.033652][T11604] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 212.135161][T11619] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.145828][T11618] xt_hashlimit: size too large, truncated to 1048576 [ 212.278982][T11622] –: renamed from vxcan1 [ 212.503935][T11631] xt_cgroup: invalid path, errno=-2 [ 212.631478][T11636] bond10: entered promiscuous mode [ 212.639766][T11636] bond10: entered allmulticast mode [ 212.661509][T11636] 8021q: adding VLAN 0 to HW filter on device bond10 [ 213.024372][T11658] netlink: 'syz.1.1580': attribute type 15 has an invalid length. [ 213.148505][T11662] syzkaller0: entered promiscuous mode [ 213.154030][T11662] syzkaller0: entered allmulticast mode [ 213.232066][T11674] netlink: 'syz.2.1584': attribute type 1 has an invalid length. [ 214.744952][T11694] syzkaller0: entered promiscuous mode [ 214.764538][T11714] __nla_validate_parse: 14 callbacks suppressed [ 214.764563][T11714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1591'. [ 214.766736][T11694] syzkaller0: entered allmulticast mode [ 214.815114][T11707] syzkaller1: entered promiscuous mode [ 214.827465][T11707] syzkaller1: entered allmulticast mode [ 215.130455][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 216.388965][T11738] sch_fq: defrate 0 ignored. [ 216.409441][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1595'. [ 216.428710][T11738] bond0: entered promiscuous mode [ 216.448200][T11738] bond_slave_0: entered promiscuous mode [ 216.472125][T11738] bond_slave_1: entered promiscuous mode [ 216.493997][T11738] batadv0: entered promiscuous mode [ 216.518656][T11738] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 216.536931][T11738] hsr0: entered promiscuous mode [ 216.542053][T11738] hsr0: entered allmulticast mode [ 216.551825][T11738] bond0: entered allmulticast mode [ 216.568157][T11738] bond_slave_0: entered allmulticast mode [ 216.579492][T11738] bond_slave_1: entered allmulticast mode [ 216.585418][T11738] batadv0: entered allmulticast mode [ 216.592717][T11738] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 216.620785][T11738] bond0: left promiscuous mode [ 216.625633][T11738] bond_slave_0: left promiscuous mode [ 216.653953][T11738] bond_slave_1: left promiscuous mode [ 216.673944][T11738] batadv0: left promiscuous mode [ 217.187354][T11792] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1607'. [ 217.387866][T11799] pimreg: entered allmulticast mode [ 217.626953][T11808] team0: Device gtp0 is up. Set it down before adding it as a team port [ 217.740569][T11818] C: renamed from ªªªªª9oïß+Œü4€ (while UP) [ 218.019516][T11840] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 218.384511][T11869] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 218.396962][T11868] syzkaller0: entered promiscuous mode [ 218.410171][T11868] syzkaller0: entered allmulticast mode [ 218.429897][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1627'. [ 218.493322][T11875] netlink: 'syz.3.1629': attribute type 1 has an invalid length. [ 218.579325][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 218.599154][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1630'. [ 218.619231][T11876] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 218.656093][T11876] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 218.708151][T11891] xt_CONNSECMARK: invalid mode: 0 [ 218.717122][T11876] bond4: (slave ip6gre2): making interface the new active one [ 218.746888][T11876] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 218.825374][T11895] x_tables: unsorted underflow at hook 3 [ 218.926540][T11902] netlink: 'syz.2.1634': attribute type 11 has an invalid length. [ 218.943345][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 218.964108][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.975972][T11904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.007778][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.015343][T11904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.092360][T11911] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 219.133753][T11920] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1640'. [ 219.342190][T11928] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 219.365076][T11928] netlink: 'syz.2.1643': attribute type 10 has an invalid length. [ 219.410991][T11928] veth0_macvtap: left promiscuous mode [ 219.464366][T11928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.624972][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1650'. [ 219.660745][T11952] ipt_rpfilter: unknown options [ 219.751824][T11958] bond11: entered promiscuous mode [ 219.759082][T11958] 8021q: adding VLAN 0 to HW filter on device bond11 [ 219.766824][T11962] __nla_validate_parse: 2 callbacks suppressed [ 219.766842][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 219.802512][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 220.021335][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 220.042673][T11981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1660'. [ 220.691807][ T6260] smc: removing ib device  [ 220.854550][T12011] lo speed is unknown, defaulting to 1000 [ 221.094609][T12032] netlink: 'syz.0.1672': attribute type 12 has an invalid length. [ 221.111762][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 221.141517][T12032] netlink: 'syz.0.1672': attribute type 12 has an invalid length. [ 221.186937][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 221.366156][T12038] netlink: 'syz.4.1674': attribute type 1 has an invalid length. [ 221.556166][T12038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.573361][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1676'. [ 221.646308][T12040] bond3: entered promiscuous mode [ 221.651438][T12040] bond3: entered allmulticast mode [ 221.894593][T12056] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.236250][T12070] syzkaller1: entered allmulticast mode [ 222.820792][T12090] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 222.860064][T12086] bond0: option mode: unable to set because the bond device has slaves [ 222.948834][T12089] bond0: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 223.031970][T12089] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 223.348309][T12095] lo speed is unknown, defaulting to 1000 [ 224.031435][T12108] netlink: 'syz.1.1687': attribute type 1 has an invalid length. [ 224.057302][T12108] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.1687'. [ 224.350900][T12128] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1691'. [ 224.824948][T12144] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1696'. [ 224.948561][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 224.960639][T12150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1698'. [ 225.121870][T12158] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1700'. [ 225.264686][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 225.296035][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 225.313991][T12170] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 225.370150][T12175] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.376920][T12177] netlink: 'syz.2.1705': attribute type 4 has an invalid length. [ 225.376944][T12177] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1705'. [ 225.396758][T12175] team0: Cannot enslave team device to itself [ 225.525155][T12184] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 225.555326][T12184] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1707'. [ 225.621790][T12190] +: renamed from syzkaller0 [ 225.644990][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1709'. [ 225.860748][T12204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1714'. [ 225.946071][T12209] vlan1: entered allmulticast mode [ 225.957807][T12209] bridge6: entered allmulticast mode [ 225.978353][T12203] delete_channel: no stack [ 226.253189][T12228] tipc: Cannot configure node identity twice [ 226.288798][T12230] gretap1: entered promiscuous mode [ 226.294531][T12230] gretap1: entered allmulticast mode [ 226.412778][T12244] lo speed is unknown, defaulting to 1000 [ 226.537421][T12251] nbd1: detected capacity change from 0 to 127 [ 226.550681][T12251] netlink: 'syz.0.1727': attribute type 4 has an invalid length. [ 226.579990][ T5833] block nbd1: Receive control failed (result -104) [ 226.683383][T12262] Unsupported ieee802154 address type: 0 [ 226.732785][T12246] lo speed is unknown, defaulting to 1000 [ 227.288194][T12280] netlink: 'syz.1.1736': attribute type 178 has an invalid length. [ 227.568793][T12288] bond4: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 227.612790][T12288] bond4: (slave C): Enslaving as an active interface with an up link [ 227.635357][T12288] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 228.163029][T12316] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 228.197281][T12316] bond7 (unregistering): Released all slaves [ 228.329601][T12333] netlink: 'syz.4.1749': attribute type 11 has an invalid length. [ 228.340770][T12332] lo speed is unknown, defaulting to 1000 [ 228.511930][T12337] netlink: 'syz.2.1750': attribute type 1 has an invalid length. [ 228.992132][T12369] openvswitch: netlink: Flow actions attr not present in new flow. [ 229.456190][T12395] nbd: illegal input index 2958377 [ 229.644137][T12366] delete_channel: no stack [ 229.829546][T12403] pimreg3: entered allmulticast mode [ 229.882453][T12409] __nla_validate_parse: 10 callbacks suppressed [ 229.882489][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 230.252548][T12429] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 230.260606][ T9006] IPVS: starting estimator thread 0... [ 230.268188][T12423] bridge0: port 3(gretap0) entered blocking state [ 230.275802][T12423] bridge0: port 3(gretap0) entered disabled state [ 230.297774][T12423] gretap0: entered allmulticast mode [ 230.305011][T12423] gretap0: entered promiscuous mode [ 230.311397][T12423] bridge0: port 3(gretap0) entered blocking state [ 230.318000][T12423] bridge0: port 3(gretap0) entered forwarding state [ 230.366085][T12430] IPVS: using max 32 ests per chain, 76800 per kthread [ 230.442344][T12435] syzkaller0: entered promiscuous mode [ 230.449041][T12435] syzkaller0: entered allmulticast mode [ 230.478887][T12443] openvswitch: netlink: IPv6 tunnel dst address is zero [ 230.508951][T12426] tipc: Started in network mode [ 230.514228][T12426] tipc: Node identity 363f3713676a, cluster identity 4711 [ 230.522226][T12426] tipc: Enabled bearer , priority 0 [ 230.550011][T12425] tipc: Resetting bearer [ 230.699912][T12454] netlink: 'syz.0.1781': attribute type 7 has an invalid length. [ 230.719211][T12454] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1781'. [ 232.071332][T12425] tipc: Disabling bearer [ 232.098509][ T5897] tipc: Node number set to 1364539155 [ 232.531997][T12489] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 232.578481][T12489] bond12: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.591316][T12489] bond12: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 232.601966][T12489] bond12: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 232.700449][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'. [ 232.751615][T12500] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1794'. [ 232.779577][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 232.836775][T12500] bond13: Invalid ad_actor_system MAC address. [ 232.843485][T12500] bond13: option ad_actor_system: invalid value (1) [ 232.860461][T12500] bond13 (unregistering): Released all slaves [ 233.205516][T12522] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1798'. [ 233.272093][T12522] nbd: illegal input index -8454144 [ 233.335279][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 233.369157][T12522] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.398246][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 233.456336][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 233.696403][T12547] netlink: 'syz.4.1807': attribute type 1 has an invalid length. [ 233.760743][T12547] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.021589][T12564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1813'. [ 234.059037][T12565] netlink: 'syz.3.1812': attribute type 8 has an invalid length. [ 234.079037][T12565] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.324775][T12570] veth1_macvtap: renamed from veth0_vlan [ 234.358868][T12575] ipt_REJECT: TCP_RESET invalid for non-tcp [ 234.889207][T12599] __nla_validate_parse: 2 callbacks suppressed [ 234.889229][T12599] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1824'. [ 234.995511][T12602] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 235.040189][T12602] bond6 (unregistering): Released all slaves [ 235.140422][T12612] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 235.218779][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'. [ 235.257117][T12612] bond5: entered promiscuous mode [ 235.263416][T12612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.322745][T12618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.364379][T12618] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 235.425602][T12618] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 235.465409][T12618] bond5: (slave vti0): making interface the new active one [ 235.485657][T12628] netlink: 'syz.4.1829': attribute type 10 has an invalid length. [ 235.493995][T12628] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1829'. [ 235.498917][T12618] vti0: entered promiscuous mode [ 235.529657][T12618] bond5: (slave vti0): Enslaving as an active interface with an up link [ 235.720675][T12628] smc: removing net device wlan0 with user defined pnetid SYZ2 [ 235.793310][ T5488] veth1_macvtap: left promiscuous mode [ 235.862107][ T5488] veth1_macvtap: entered promiscuous mode [ 235.913748][T12637] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1830'. [ 236.504914][T12674] netlink: 'syz.4.1842': attribute type 1 has an invalid length. [ 236.718701][T12674] bond6: entered promiscuous mode [ 236.724296][T12674] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.167694][T12701] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 237.218417][T12701] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 237.256433][T12701] gretap2: entered promiscuous mode [ 237.270131][T12701] gretap2: entered allmulticast mode [ 237.282443][T12707] netlink: 'syz.4.1850': attribute type 21 has an invalid length. [ 237.305079][T12707] netlink: 'syz.4.1850': attribute type 22 has an invalid length. [ 237.328233][T12707] netlink: 'syz.4.1850': attribute type 23 has an invalid length. [ 237.347079][T12707] netlink: 'syz.4.1850': attribute type 25 has an invalid length. [ 237.361208][T12710] pim6reg: entered allmulticast mode [ 237.365693][T12707] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1850'. [ 237.550480][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1855'. [ 237.625007][T12731] x_tables: duplicate underflow at hook 2 [ 237.824923][T12734] syzkaller0: entered promiscuous mode [ 237.830582][T12734] syzkaller0: entered allmulticast mode [ 237.891763][ T1746] block nbd0: Possible stuck request ffff8880269c8000: control (read@0,1024B). Runtime 120 seconds [ 237.902677][ T1746] block nbd0: Possible stuck request ffff8880269c8200: control (read@1024,1024B). Runtime 120 seconds [ 237.914027][ T1746] block nbd0: Possible stuck request ffff8880269c8400: control (read@2048,1024B). Runtime 120 seconds [ 237.925203][ T1746] block nbd0: Possible stuck request ffff8880269c8600: control (read@3072,1024B). Runtime 120 seconds [ 238.059055][T12749] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1860'. [ 238.301793][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 238.613753][T12771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1865'. [ 238.636037][T12764] syzkaller0: entered promiscuous mode [ 238.642128][T12764] syzkaller0: entered allmulticast mode [ 238.720087][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'. [ 239.203893][T12784] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 239.487964][T12799] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 239.822347][T12803] syzkaller0: entered promiscuous mode [ 239.839829][T12803] syzkaller0: entered allmulticast mode [ 239.901990][T12809] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 239.919016][T12809] bond7 (unregistering): Released all slaves [ 240.048478][T12819] syzkaller0: entered promiscuous mode [ 240.074165][T12819] syzkaller0: entered allmulticast mode [ 242.412402][T12865] __nla_validate_parse: 5 callbacks suppressed [ 242.412422][T12865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1888'. [ 242.530750][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 242.900558][T12903] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 242.953430][T12907] netlink: 'syz.1.1906': attribute type 4 has an invalid length. [ 243.243204][T12923] sock: sock_timestamping_bind_phc: sock not bind to device [ 243.263160][T12924] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1911'. [ 243.276764][T12920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.391239][T12932] netlink: 'syz.4.1913': attribute type 26 has an invalid length. [ 243.413077][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'. [ 243.629833][T12951] sctp: [Deprecated]: syz.1.1917 (pid 12951) Use of int in max_burst socket option deprecated. [ 243.629833][T12951] Use struct sctp_assoc_value instead [ 243.653498][T12951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1917'. [ 243.669946][T12951] sctp: [Deprecated]: syz.1.1917 (pid 12951) Use of int in max_burst socket option deprecated. [ 243.669946][T12951] Use struct sctp_assoc_value instead [ 243.960236][T12974] RDS: rds_bind could not find a transport for fe80::30, load rds_tcp or rds_rdma? [ 244.277135][T13001] C: entered promiscuous mode [ 244.287071][T13001] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 244.297969][T13001] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.638955][T13022] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1937'. [ 244.663359][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1936'. [ 244.773857][T13030] IPv6: sit2: Disabled Multicast RS [ 244.780572][T13030] sit2: entered allmulticast mode [ 244.838984][T13033] xt_TCPMSS: Only works on TCP SYN packets [ 245.143091][T13056] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1948'. [ 245.172144][T13056] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 245.223955][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 245.346927][T13068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1949'. [ 245.558333][T13078] netlink: Conntrack attr has 3 unknown bytes [ 245.586794][T13078] netlink: 'syz.4.1954': attribute type 64 has an invalid length. [ 245.767251][T13089] netlink: 'syz.4.1956': attribute type 12 has an invalid length. [ 245.805742][T13089] bond7: option primary_reselect: invalid value (255) [ 245.818210][T13089] bond7 (unregistering): Released all slaves [ 246.422344][T13131] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 246.461197][T13131] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.469687][T13137] ip6t_srh: unknown srh invflags 4000 [ 246.502212][T13131] bond7: (slave geneve2): making interface the new active one [ 246.533605][T13131] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 246.547244][ T9814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.560376][ T9814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.579275][ T9814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.591115][ T9814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.682609][T13144] tipc: Started in network mode [ 246.697007][T13144] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 246.718148][T13144] tipc: Enabled bearer , priority 10 [ 246.763809][T13150] bridge: RTM_NEWNEIGH with invalid ether address [ 246.822053][T13150] bridge: RTM_NEWNEIGH with invalid ether address [ 246.872440][T13152] syzkaller1: entered promiscuous mode [ 246.891102][T13152] syzkaller1: entered allmulticast mode [ 247.024026][T13168] netlink: 'syz.4.1980': attribute type 9 has an invalid length. [ 247.219553][T13182] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.468888][T13196] unsupported nla_type 33542 [ 247.666644][T13210] __nla_validate_parse: 13 callbacks suppressed [ 247.666664][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 247.838429][ T9006] tipc: Node number set to 4269801492 [ 248.093627][T13235] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 248.116771][T13235] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1998'. [ 248.233204][T13240] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2000'. [ 248.267226][T13240] only policy match revision 0 supported [ 248.267266][T13240] unable to load match [ 248.281775][T13240] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2000'. [ 248.349628][T13245] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2002'. [ 248.433815][T13249] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2003'. [ 248.466379][T13250] syzkaller0: entered promiscuous mode [ 248.471908][T13250] syzkaller0: entered allmulticast mode [ 248.498878][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2005'. [ 248.520691][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2005'. [ 248.614655][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2006'. [ 248.691521][T13255] ipvlan0: entered allmulticast mode [ 248.698738][T13255] batadv_slave_1: entered allmulticast mode [ 248.716597][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 248.920306][T13279] bridge: RTM_NEWNEIGH with invalid ether address [ 249.318985][T13307] ip6gre3: entered promiscuous mode [ 249.344615][T13309] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 249.347628][T13307] ip6gre3: entered allmulticast mode [ 249.405301][T13309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.629622][T13323] syzkaller0: entered promiscuous mode [ 249.635204][T13323] syzkaller0: entered allmulticast mode [ 250.032496][T13352] netlink: 'syz.0.2034': attribute type 29 has an invalid length. [ 250.041913][T13352] netlink: 'syz.0.2034': attribute type 29 has an invalid length. [ 250.257886][T13362] sctp: [Deprecated]: syz.3.2039 (pid 13362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.257886][T13362] Use struct sctp_sack_info instead [ 250.301748][T13362] veth9: entered promiscuous mode [ 250.307101][T13362] veth9: entered allmulticast mode [ 250.409636][T13369] C: renamed from lo (while UP) [ 250.416740][T13369] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 250.431983][T13370] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 250.640368][T13382] xt_hashlimit: size too large, truncated to 1048576 [ 250.736766][T13388] syzkaller1: entered promiscuous mode [ 250.756236][T13388] syzkaller1: entered allmulticast mode [ 251.000788][T13402] netlink: 'syz.2.2050': attribute type 3 has an invalid length. [ 251.417252][T13430] syzkaller0: entered promiscuous mode [ 251.422793][T13430] syzkaller0: entered allmulticast mode [ 251.464519][T13435] netlink: 'syz.3.2058': attribute type 10 has an invalid length. [ 251.493183][T13435] team0: Device vxcan1 is of different type [ 251.623612][T13442] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 251.719307][T13442] bond8: entered promiscuous mode [ 251.725012][T13442] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.759290][T13448] bond8: (slave bridge0): making interface the new active one [ 251.767236][T13448] bridge0: entered promiscuous mode [ 251.773829][T13448] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 251.853615][T13453] netlink: 'syz.0.2063': attribute type 1 has an invalid length. [ 251.862177][T13453] netlink: 'syz.0.2063': attribute type 2 has an invalid length. [ 251.871891][T13453] netlink: 'syz.0.2063': attribute type 2 has an invalid length. [ 251.882512][T13453] netlink: 'syz.0.2063': attribute type 2 has an invalid length. [ 252.192676][T13483] Bluetooth: MGMT ver 1.23 [ 252.418187][T13498] netlink: 'syz.1.2077': attribute type 11 has an invalid length. [ 253.031558][T13539] C speed is unknown, defaulting to 1000 [ 253.130008][T13544] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 253.144894][T13524] __nla_validate_parse: 24 callbacks suppressed [ 253.144918][T13524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.161017][T13545] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 255.808807][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.087727][ T11] block nbd1: Possible stuck request ffff888026a38000: control (read@0,1024B). Runtime 30 seconds [ 257.098784][ T11] block nbd1: Possible stuck request ffff888026a38200: control (read@1024,1024B). Runtime 30 seconds [ 257.109903][ T11] block nbd1: Possible stuck request ffff888026a38400: control (read@2048,1024B). Runtime 30 seconds [ 257.120880][ T11] block nbd1: Possible stuck request ffff888026a38600: control (read@3072,1024B). Runtime 30 seconds [ 267.968752][ T1746] block nbd0: Possible stuck request ffff8880269c8000: control (read@0,1024B). Runtime 150 seconds [ 267.979758][ T1746] block nbd0: Possible stuck request ffff8880269c8200: control (read@1024,1024B). Runtime 150 seconds [ 267.990913][ T1746] block nbd0: Possible stuck request ffff8880269c8400: control (read@2048,1024B). Runtime 150 seconds [ 268.002170][ T1746] block nbd0: Possible stuck request ffff8880269c8600: control (read@3072,1024B). Runtime 150 seconds [ 268.428519][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.438913][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.450124][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.461674][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.473102][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.485215][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 268.498063][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 268.511532][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 268.524655][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 268.536533][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.539662][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 268.565321][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 268.565328][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.575433][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.588228][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 268.597219][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.605030][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.614878][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 268.625071][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 268.632858][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 268.729970][T13588] C speed is unknown, defaulting to 1000 [ 268.764204][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 268.774161][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 268.783870][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 268.798022][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 268.808733][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 268.966209][T13590] C speed is unknown, defaulting to 1000 [ 269.175799][T13588] chnl_net:caif_netlink_parms(): no params data found [ 269.175928][T13586] C speed is unknown, defaulting to 1000 [ 269.409776][T13588] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.417182][T13588] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.424820][T13588] bridge_slave_0: entered allmulticast mode [ 269.435592][T13588] bridge_slave_0: entered promiscuous mode [ 269.460606][T13588] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.476640][T13588] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.483979][T13588] bridge_slave_1: entered allmulticast mode [ 269.507280][T13588] bridge_slave_1: entered promiscuous mode [ 269.548103][T13595] C speed is unknown, defaulting to 1000 [ 269.601511][ T5831] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 269.611307][ T5831] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 269.619544][ T5831] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 269.631830][ T5831] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 269.639794][ T5831] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 269.705395][T13588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.760056][T13588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.888871][T13588] team0: Port device team_slave_0 added [ 269.898523][T13588] team0: Port device team_slave_1 added [ 269.930282][T13605] C speed is unknown, defaulting to 1000 [ 269.950486][T13590] chnl_net:caif_netlink_parms(): no params data found [ 270.032475][T13588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.039755][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.069530][T13588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.107922][T13588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.114922][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.143618][T13588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.369751][T13590] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.377128][T13590] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.384450][T13590] bridge_slave_0: entered allmulticast mode [ 270.393418][T13590] bridge_slave_0: entered promiscuous mode [ 270.419580][T13588] hsr_slave_0: entered promiscuous mode [ 270.427043][T13588] hsr_slave_1: entered promiscuous mode [ 270.434900][T13590] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.442982][T13590] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.450492][T13590] bridge_slave_1: entered allmulticast mode [ 270.458687][T13590] bridge_slave_1: entered promiscuous mode [ 270.532408][T13586] chnl_net:caif_netlink_parms(): no params data found [ 270.561675][T13590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.606293][ T5831] Bluetooth: hci6: command tx timeout [ 270.622410][T13590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.686256][ T5831] Bluetooth: hci7: command tx timeout [ 270.686270][ T5833] Bluetooth: hci5: command tx timeout [ 270.699270][T13590] team0: Port device team_slave_0 added [ 270.705299][T13595] chnl_net:caif_netlink_parms(): no params data found [ 270.758868][T13590] team0: Port device team_slave_1 added [ 270.847651][ T5831] Bluetooth: hci8: command tx timeout [ 270.885312][T13590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.892953][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.919231][T13590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.932229][T13590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.939608][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.966875][T13590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.056117][T13586] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.063343][T13586] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.071068][T13586] bridge_slave_0: entered allmulticast mode [ 271.078763][T13586] bridge_slave_0: entered promiscuous mode [ 271.094505][T13605] chnl_net:caif_netlink_parms(): no params data found [ 271.145334][T13586] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.153353][T13586] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.161058][T13586] bridge_slave_1: entered allmulticast mode [ 271.170705][T13586] bridge_slave_1: entered promiscuous mode [ 271.257668][T13590] hsr_slave_0: entered promiscuous mode [ 271.265304][T13590] hsr_slave_1: entered promiscuous mode [ 271.272407][T13590] debugfs: 'hsr0' already exists in 'hsr' [ 271.278739][T13590] Cannot create hsr debugfs directory [ 271.284544][T13595] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.293005][T13595] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.301858][T13595] bridge_slave_0: entered allmulticast mode [ 271.310911][T13595] bridge_slave_0: entered promiscuous mode [ 271.322010][T13595] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.330064][T13595] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.337927][T13595] bridge_slave_1: entered allmulticast mode [ 271.345782][T13595] bridge_slave_1: entered promiscuous mode [ 271.466531][T13586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.529199][T13595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.541674][T13586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.582491][T13595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.688961][T13605] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.696489][T13605] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.703740][T13605] bridge_slave_0: entered allmulticast mode [ 271.712169][T13605] bridge_slave_0: entered promiscuous mode [ 271.720360][T13605] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.728025][ T5831] Bluetooth: hci9: command tx timeout [ 271.728232][T13605] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.741077][T13605] bridge_slave_1: entered allmulticast mode [ 271.749232][T13605] bridge_slave_1: entered promiscuous mode [ 271.764202][T13595] team0: Port device team_slave_0 added [ 271.772791][T13586] team0: Port device team_slave_0 added [ 271.811072][T13595] team0: Port device team_slave_1 added [ 271.819445][T13586] team0: Port device team_slave_1 added [ 271.889061][T13605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.902110][T13605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.930727][T13595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.938371][T13595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.964551][T13595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.978350][T13586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.985311][T13586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.011788][T13586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.055156][T13595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.062267][T13595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.088829][T13595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.100928][T13586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.108034][T13586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.134253][T13586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.191969][T13605] team0: Port device team_slave_0 added [ 272.243131][T13605] team0: Port device team_slave_1 added [ 272.316839][T13595] hsr_slave_0: entered promiscuous mode [ 272.323361][T13595] hsr_slave_1: entered promiscuous mode [ 272.330737][T13595] debugfs: 'hsr0' already exists in 'hsr' [ 272.337342][T13595] Cannot create hsr debugfs directory [ 272.349298][T13586] hsr_slave_0: entered promiscuous mode [ 272.356223][T13586] hsr_slave_1: entered promiscuous mode [ 272.362538][T13586] debugfs: 'hsr0' already exists in 'hsr' [ 272.368558][T13586] Cannot create hsr debugfs directory [ 272.387981][T13605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.395030][T13605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.421330][T13605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.434043][T13605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.441865][T13605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.468609][T13605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.648351][T13605] hsr_slave_0: entered promiscuous mode [ 272.655119][T13605] hsr_slave_1: entered promiscuous mode [ 272.661722][T13605] debugfs: 'hsr0' already exists in 'hsr' [ 272.667791][T13605] Cannot create hsr debugfs directory [ 272.687347][ T5831] Bluetooth: hci6: command tx timeout [ 272.765982][ T5831] Bluetooth: hci5: command tx timeout [ 272.771753][ T5831] Bluetooth: hci7: command tx timeout [ 272.927664][ T5831] Bluetooth: hci8: command tx timeout [ 273.806131][ T5831] Bluetooth: hci9: command tx timeout [ 274.766183][ T5831] Bluetooth: hci6: command tx timeout [ 274.846084][ T5833] Bluetooth: hci5: command tx timeout [ 274.851589][ T5831] Bluetooth: hci7: command tx timeout [ 275.006212][ T5831] Bluetooth: hci8: command tx timeout [ 275.886125][ T5831] Bluetooth: hci9: command tx timeout [ 276.846154][ T5831] Bluetooth: hci6: command tx timeout [ 276.926199][ T5831] Bluetooth: hci7: command tx timeout [ 276.926205][ T5833] Bluetooth: hci5: command tx timeout [ 277.086363][ T5831] Bluetooth: hci8: command tx timeout [ 277.966186][ T5831] Bluetooth: hci9: command tx timeout [ 287.166274][ T11] block nbd1: Possible stuck request ffff888026a38000: control (read@0,1024B). Runtime 60 seconds [ 287.177499][ T11] block nbd1: Possible stuck request ffff888026a38200: control (read@1024,1024B). Runtime 60 seconds [ 287.188746][ T11] block nbd1: Possible stuck request ffff888026a38400: control (read@2048,1024B). Runtime 60 seconds [ 287.199910][ T11] block nbd1: Possible stuck request ffff888026a38600: control (read@3072,1024B). Runtime 60 seconds [ 288.092090][ T5193] udevd[5193]: worker [6023] /devices/virtual/block/nbd1 is taking a long time [ 298.046920][ T1746] block nbd0: Possible stuck request ffff8880269c8000: control (read@0,1024B). Runtime 180 seconds [ 298.058233][ T1746] block nbd0: Possible stuck request ffff8880269c8200: control (read@1024,1024B). Runtime 180 seconds [ 298.069379][ T1746] block nbd0: Possible stuck request ffff8880269c8400: control (read@2048,1024B). Runtime 180 seconds [ 298.080464][ T1746] block nbd0: Possible stuck request ffff8880269c8600: control (read@3072,1024B). Runtime 180 seconds [ 300.120408][ T5193] udevd[5193]: worker [5877] /devices/virtual/block/nbd0 timeout; kill it [ 300.129787][ T5193] udevd[5193]: seq 11798 '/devices/virtual/block/nbd0' killed [ 317.246754][ T11] block nbd1: Possible stuck request ffff888026a38000: control (read@0,1024B). Runtime 90 seconds [ 317.258287][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.265995][ T11] block nbd1: Possible stuck request ffff888026a38200: control (read@1024,1024B). Runtime 90 seconds [ 317.277108][ T11] block nbd1: Possible stuck request ffff888026a38400: control (read@2048,1024B). Runtime 90 seconds [ 317.288240][ T11] block nbd1: Possible stuck request ffff888026a38600: control (read@3072,1024B). Runtime 90 seconds [ 328.126425][ T1746] block nbd0: Possible stuck request ffff8880269c8000: control (read@0,1024B). Runtime 210 seconds [ 328.137290][ T1746] block nbd0: Possible stuck request ffff8880269c8200: control (read@1024,1024B). Runtime 210 seconds [ 328.148474][ T1746] block nbd0: Possible stuck request ffff8880269c8400: control (read@2048,1024B). Runtime 210 seconds [ 328.159534][ T1746] block nbd0: Possible stuck request ffff8880269c8600: control (read@3072,1024B). Runtime 210 seconds [ 328.674764][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 328.690647][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 328.699350][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 328.712238][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 328.722621][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 328.730794][ T5837] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 328.740670][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 328.759172][ T5837] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 328.769130][ T5837] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 328.787296][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 328.840047][ T5831] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 328.857380][ T5831] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 328.866096][ T5831] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 328.874202][ T5831] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 328.882333][ T5831] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 328.933820][ T5831] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 328.944149][ T5831] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 328.951147][T13640] C speed is unknown, defaulting to 1000 [ 328.958321][ T5831] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 328.977271][ T5831] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 328.985165][ T5831] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 329.145781][T13642] C speed is unknown, defaulting to 1000 [ 329.332337][T13640] chnl_net:caif_netlink_parms(): no params data found [ 329.386669][T13644] C speed is unknown, defaulting to 1000 [ 329.515584][T13640] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.523200][T13640] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.533572][T13640] bridge_slave_0: entered allmulticast mode [ 329.542279][T13640] bridge_slave_0: entered promiscuous mode [ 329.559298][T13640] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.567708][T13640] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.575005][T13640] bridge_slave_1: entered allmulticast mode [ 329.583351][T13640] bridge_slave_1: entered promiscuous mode [ 329.647995][T13640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.670257][T13640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.694587][T13646] C speed is unknown, defaulting to 1000 [ 329.747935][T13640] team0: Port device team_slave_0 added [ 329.806498][T13640] team0: Port device team_slave_1 added [ 329.929838][T13640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.938086][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.986883][T13640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.026164][T13640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.033170][T13640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.066599][T13640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.088887][T13642] chnl_net:caif_netlink_parms(): no params data found [ 330.107380][ T5831] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 330.117286][ T5831] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 330.125637][ T5831] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 330.134063][ T5831] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 330.142412][ T5831] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 330.261279][T13640] hsr_slave_0: entered promiscuous mode [ 330.268297][T13640] hsr_slave_1: entered promiscuous mode [ 330.274627][T13640] debugfs: 'hsr0' already exists in 'hsr' [ 330.280740][T13640] Cannot create hsr debugfs directory [ 330.433805][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.441309][T13642] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.449151][T13642] bridge_slave_0: entered allmulticast mode [ 330.457002][T13642] bridge_slave_0: entered promiscuous mode [ 330.466207][T13658] C speed is unknown, defaulting to 1000 [ 330.525323][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.533605][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.541489][T13642] bridge_slave_1: entered allmulticast mode [ 330.549577][T13642] bridge_slave_1: entered promiscuous mode [ 330.681905][T13642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.731610][T13642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.804906][T13642] team0: Port device team_slave_0 added [ 330.836978][T13642] team0: Port device team_slave_1 added [ 330.842888][T13646] chnl_net:caif_netlink_parms(): no params data found [ 330.849835][ T5831] Bluetooth: hci10: command tx timeout [ 330.851760][ T5841] Bluetooth: hci11: command tx timeout [ 330.871634][T13644] chnl_net:caif_netlink_parms(): no params data found [ 330.926139][ T5841] Bluetooth: hci12: command tx timeout [ 330.988738][T13642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.995738][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.022344][T13642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.075114][T13642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.082547][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.087421][ T5841] Bluetooth: hci13: command tx timeout [ 331.111117][T13642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.247646][T13644] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.254874][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.262829][T13644] bridge_slave_0: entered allmulticast mode [ 331.271629][T13644] bridge_slave_0: entered promiscuous mode [ 331.285054][T13644] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.292426][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.299953][T13644] bridge_slave_1: entered allmulticast mode [ 331.307659][T13644] bridge_slave_1: entered promiscuous mode [ 331.372808][T13642] hsr_slave_0: entered promiscuous mode [ 331.379466][T13642] hsr_slave_1: entered promiscuous mode [ 331.385685][T13642] debugfs: 'hsr0' already exists in 'hsr' [ 331.392088][T13642] Cannot create hsr debugfs directory [ 331.399990][T13646] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.410011][T13646] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.417604][T13646] bridge_slave_0: entered allmulticast mode [ 331.425032][T13646] bridge_slave_0: entered promiscuous mode [ 331.471080][T13646] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.478363][T13646] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.485596][T13646] bridge_slave_1: entered allmulticast mode [ 331.495019][T13646] bridge_slave_1: entered promiscuous mode [ 331.515263][T13644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.529255][T13644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.617364][T13646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.632852][T13646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.658640][T13644] team0: Port device team_slave_0 added [ 331.697252][T13644] team0: Port device team_slave_1 added [ 331.703164][T13658] chnl_net:caif_netlink_parms(): no params data found [ 331.782779][T13646] team0: Port device team_slave_0 added [ 331.829996][T13646] team0: Port device team_slave_1 added [ 331.847868][T13644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.854841][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.881279][T13644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.928997][T13644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.936623][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.962715][T13644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.044978][T13646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.052309][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.078734][T13646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.132692][T13646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.140736][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.167815][T13646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.197374][T13644] hsr_slave_0: entered promiscuous mode [ 332.203897][T13644] hsr_slave_1: entered promiscuous mode [ 332.210584][T13644] debugfs: 'hsr0' already exists in 'hsr' [ 332.216459][ T5841] Bluetooth: hci14: command tx timeout [ 332.222694][T13644] Cannot create hsr debugfs directory [ 332.241391][T13658] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.248804][T13658] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.256401][T13658] bridge_slave_0: entered allmulticast mode [ 332.263748][T13658] bridge_slave_0: entered promiscuous mode [ 332.272122][T13658] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.279427][T13658] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.286943][T13658] bridge_slave_1: entered allmulticast mode [ 332.294375][T13658] bridge_slave_1: entered promiscuous mode [ 332.367868][T13658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.399378][T13658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.463534][T13658] team0: Port device team_slave_0 added [ 332.476006][T13646] hsr_slave_0: entered promiscuous mode [ 332.482556][T13646] hsr_slave_1: entered promiscuous mode [ 332.489554][T13646] debugfs: 'hsr0' already exists in 'hsr' [ 332.495297][T13646] Cannot create hsr debugfs directory [ 332.518628][T13658] team0: Port device team_slave_1 added [ 332.593970][T13658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.601300][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.633681][T13658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.721047][T13658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.729234][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.755993][T13658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.909330][T13658] hsr_slave_0: entered promiscuous mode [ 332.916822][T13658] hsr_slave_1: entered promiscuous mode [ 332.923304][T13658] debugfs: 'hsr0' already exists in 'hsr' [ 332.929671][ T5841] Bluetooth: hci11: command tx timeout [ 332.929687][ T5831] Bluetooth: hci10: command tx timeout [ 332.931964][T13658] Cannot create hsr debugfs directory [ 333.006411][ T5841] Bluetooth: hci12: command tx timeout [ 333.167930][ T5841] Bluetooth: hci13: command tx timeout [ 334.286171][ T5841] Bluetooth: hci14: command tx timeout [ 335.006765][ T5841] Bluetooth: hci10: command tx timeout [ 335.006782][ T5831] Bluetooth: hci11: command tx timeout [ 335.086283][ T5841] Bluetooth: hci12: command tx timeout [ 335.246530][ T5841] Bluetooth: hci13: command tx timeout [ 336.376102][ T5841] Bluetooth: hci14: command tx timeout [ 337.086479][ T5841] Bluetooth: hci11: command tx timeout [ 337.086496][ T5831] Bluetooth: hci10: command tx timeout [ 337.166440][ T5841] Bluetooth: hci12: command tx timeout [ 337.326584][ T5841] Bluetooth: hci13: command tx timeout [ 338.446169][ T5841] Bluetooth: hci14: command tx timeout [ 347.326303][ T11] block nbd1: Possible stuck request ffff888026a38000: control (read@0,1024B). Runtime 120 seconds [ 347.337322][ T11] block nbd1: Possible stuck request ffff888026a38200: control (read@1024,1024B). Runtime 120 seconds [ 347.348704][ T11] block nbd1: Possible stuck request ffff888026a38400: control (read@2048,1024B). Runtime 120 seconds [ 347.359855][ T11] block nbd1: Possible stuck request ffff888026a38600: control (read@3072,1024B). Runtime 120 seconds [ 358.218713][ T1746] block nbd0: Possible stuck request ffff8880269c8000: control (read@0,1024B). Runtime 240 seconds [ 358.229753][ T1746] block nbd0: Possible stuck request ffff8880269c8200: control (read@1024,1024B). Runtime 240 seconds [ 358.241076][ T1746] block nbd0: Possible stuck request ffff8880269c8400: control (read@2048,1024B). Runtime 240 seconds [ 358.252491][ T1746] block nbd0: Possible stuck request ffff8880269c8600: control (read@3072,1024B). Runtime 240 seconds [ 377.406285][ T11] block nbd1: Possible stuck request ffff888026a38000: control (read@0,1024B). Runtime 150 seconds [ 377.417135][ T11] block nbd1: Possible stuck request ffff888026a38200: control (read@1024,1024B). Runtime 150 seconds [ 377.428309][ T11] block nbd1: Possible stuck request ffff888026a38400: control (read@2048,1024B). Runtime 150 seconds [ 377.439445][ T11] block nbd1: Possible stuck request ffff888026a38600: control (read@3072,1024B). Runtime 150 seconds [ 378.689739][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.288224][ T1746] block nbd0: Possible stuck request ffff8880269c8000: control (read@0,1024B). Runtime 270 seconds [ 388.299109][ T1746] block nbd0: Possible stuck request ffff8880269c8200: control (read@1024,1024B). Runtime 270 seconds [ 388.310183][ T1746] block nbd0: Possible stuck request ffff8880269c8400: control (read@2048,1024B). Runtime 270 seconds [ 388.321570][ T1746] block nbd0: Possible stuck request ffff8880269c8600: control (read@3072,1024B). Runtime 270 seconds [ 389.134059][T13692] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 389.146848][T13692] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 389.155249][T13692] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 389.165039][T13692] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 389.173502][T13692] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 389.209944][T13696] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 389.223359][T13696] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 389.231510][T13696] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 389.242166][T13696] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 389.253000][T13696] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 389.269161][T13696] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 389.281020][ T5838] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 389.289618][ T5838] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 389.298028][ T5838] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 389.309767][ T5838] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 389.319354][ T5838] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 389.333704][ T5838] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 389.354923][ T5838] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 389.365200][ T5838] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 389.373333][ T5838] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 389.434325][T13691] C speed is unknown, defaulting to 1000 [ 389.585691][T13694] C speed is unknown, defaulting to 1000 [ 389.783805][T13691] chnl_net:caif_netlink_parms(): no params data found [ 389.825963][T13695] C speed is unknown, defaulting to 1000 [ 389.990972][T13691] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.999210][T13691] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.006935][T13691] bridge_slave_0: entered allmulticast mode [ 390.016199][T13691] bridge_slave_0: entered promiscuous mode [ 390.029410][T13691] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.038158][T13691] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.046249][T13691] bridge_slave_1: entered allmulticast mode [ 390.054299][T13691] bridge_slave_1: entered promiscuous mode [ 390.168145][T13691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.181795][T13691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.198159][T13699] C speed is unknown, defaulting to 1000 [ 390.244818][ T5838] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 390.256988][ T5838] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 390.276517][ T5838] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 390.284555][ T5838] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 390.296462][ T5838] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 390.389658][T13691] team0: Port device team_slave_0 added [ 390.419688][T13691] team0: Port device team_slave_1 added [ 390.491236][T13691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.505949][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.534877][T13691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.574558][T13691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.581774][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.610862][T13691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.625990][T13711] C speed is unknown, defaulting to 1000 [ 390.662052][T13694] chnl_net:caif_netlink_parms(): no params data found [ 390.833599][T13691] hsr_slave_0: entered promiscuous mode [ 390.840679][T13691] hsr_slave_1: entered promiscuous mode [ 390.847987][T13691] debugfs: 'hsr0' already exists in 'hsr' [ 390.853759][T13691] Cannot create hsr debugfs directory [ 391.006245][T13696] Bluetooth: hci5: command 0x0406 tx timeout [ 391.006898][ T5838] Bluetooth: hci6: command 0x0406 tx timeout [ 391.018987][T13702] Bluetooth: hci7: command 0x0406 tx timeout [ 391.022734][T13696] Bluetooth: hci8: command 0x0406 tx timeout [ 391.117153][T13694] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.124375][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.132088][T13694] bridge_slave_0: entered allmulticast mode [ 391.139857][T13694] bridge_slave_0: entered promiscuous mode [ 391.147923][T13695] chnl_net:caif_netlink_parms(): no params data found [ 391.179672][T13694] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.187169][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.194453][T13694] bridge_slave_1: entered allmulticast mode [ 391.202153][T13694] bridge_slave_1: entered promiscuous mode [ 391.246067][ T5841] Bluetooth: hci15: command tx timeout [ 391.332641][ T5841] Bluetooth: hci16: command tx timeout [ 391.361934][T13694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.403348][T13694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.412994][ T5841] Bluetooth: hci17: command tx timeout [ 391.419074][ T5841] Bluetooth: hci18: command tx timeout [ 391.523853][T13695] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.531218][T13695] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.538681][T13695] bridge_slave_0: entered allmulticast mode [ 391.546410][T13695] bridge_slave_0: entered promiscuous mode [ 391.567036][T13694] team0: Port device team_slave_0 added [ 391.586460][T13695] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.593692][T13695] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.601323][T13695] bridge_slave_1: entered allmulticast mode [ 391.610225][T13695] bridge_slave_1: entered promiscuous mode [ 391.625258][T13694] team0: Port device team_slave_1 added [ 391.631277][T13699] chnl_net:caif_netlink_parms(): no params data found [ 391.758814][T13695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.776763][T13695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.787696][T13694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.794658][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.821782][T13694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.835145][T13694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.843144][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.871404][T13694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.905712][T13711] chnl_net:caif_netlink_parms(): no params data found [ 391.981280][T13695] team0: Port device team_slave_0 added [ 392.027334][T13694] hsr_slave_0: entered promiscuous mode [ 392.034064][T13694] hsr_slave_1: entered promiscuous mode [ 392.041082][T13694] debugfs: 'hsr0' already exists in 'hsr' [ 392.047629][T13694] Cannot create hsr debugfs directory [ 392.055591][T13695] team0: Port device team_slave_1 added [ 392.120478][T13695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.127872][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.154552][T13695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.187354][T13699] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.194689][T13699] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.202850][T13699] bridge_slave_0: entered allmulticast mode [ 392.211472][T13699] bridge_slave_0: entered promiscuous mode [ 392.219586][T13695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.227075][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.253671][T13695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.291158][T13699] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.298453][T13699] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.305740][T13699] bridge_slave_1: entered allmulticast mode [ 392.314085][T13699] bridge_slave_1: entered promiscuous mode [ 392.366491][ T5833] Bluetooth: hci19: command tx timeout [ 392.437599][T13699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.450850][T13699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.460747][T13711] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.468160][T13711] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.475424][T13711] bridge_slave_0: entered allmulticast mode [ 392.484026][T13711] bridge_slave_0: entered promiscuous mode [ 392.529714][T13711] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.537596][T13711] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.544854][T13711] bridge_slave_1: entered allmulticast mode [ 392.552506][T13711] bridge_slave_1: entered promiscuous mode [ 392.583383][T13695] hsr_slave_0: entered promiscuous mode [ 392.590429][T13695] hsr_slave_1: entered promiscuous mode [ 392.597268][T13695] debugfs: 'hsr0' already exists in 'hsr' [ 392.603025][T13695] Cannot create hsr debugfs directory [ 392.659389][T13699] team0: Port device team_slave_0 added [ 392.675730][T13711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.690894][T13711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.703637][T13699] team0: Port device team_slave_1 added [ 392.811099][T13711] team0: Port device team_slave_0 added [ 392.829465][T13699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.836709][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.863473][T13699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.877323][T13711] team0: Port device team_slave_1 added [ 392.896852][T13699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.903834][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.930259][T13699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.989340][T13711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.996904][T13711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.023303][T13711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.065310][T13711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.072916][T13711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.099818][T13711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.199334][T13699] hsr_slave_0: entered promiscuous mode [ 393.206975][T13699] hsr_slave_1: entered promiscuous mode [ 393.213303][T13699] debugfs: 'hsr0' already exists in 'hsr' [ 393.219984][T13699] Cannot create hsr debugfs directory [ 393.257580][T13711] hsr_slave_0: entered promiscuous mode [ 393.264627][T13711] hsr_slave_1: entered promiscuous mode [ 393.271518][T13711] debugfs: 'hsr0' already exists in 'hsr' [ 393.277564][T13711] Cannot create hsr debugfs directory [ 393.338021][ T5833] Bluetooth: hci15: command tx timeout [ 393.406500][ T5833] Bluetooth: hci16: command tx timeout [ 393.487696][ T5841] Bluetooth: hci18: command tx timeout [ 393.493332][ T5841] Bluetooth: hci17: command tx timeout [ 394.456140][ T5833] Bluetooth: hci19: command tx timeout [ 395.406297][ T5833] Bluetooth: hci15: command tx timeout [ 395.486065][ T5833] Bluetooth: hci16: command tx timeout [ 395.566196][ T5833] Bluetooth: hci18: command tx timeout [ 395.572618][ T5831] Bluetooth: hci17: command tx timeout [ 396.126131][ T5831] Bluetooth: hci9: command 0x0406 tx timeout [ 396.526082][ T5841] Bluetooth: hci19: command tx timeout [ 397.486365][ T5841] Bluetooth: hci15: command tx timeout [ 397.566116][ T5841] Bluetooth: hci16: command tx timeout [ 397.646399][ T5841] Bluetooth: hci17: command tx timeout [ 397.646431][ T5831] Bluetooth: hci18: command tx timeout [ 398.606358][ T5831] Bluetooth: hci19: command tx timeout [ 404.286802][ T31] INFO: task syz.0.2084:13524 blocked for more than 143 seconds. [ 404.294594][ T31] Not tainted syzkaller #0 [ 404.300657][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.309605][ T31] task:syz.0.2084 state:D stack:22808 pid:13524 tgid:13523 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 404.322045][ T31] Call Trace: [ 404.325372][ T31] [ 404.328447][ T31] __schedule+0x1585/0x5340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 404.333092][ T31] ? __pfx___schedule+0x10/0x10 [ 404.338268][ T31] ? schedule+0x90/0x360 [ 404.343187][ T31] schedule+0x164/0x360 [ 404.349257][ T31] schedule_preempt_disabled+0x13/0x30 [ 404.355151][ T31] __mutex_lock+0x7fe/0x1300 [ 404.359944][ T31] ? __mutex_lock+0x5ac/0x1300 [ 404.364767][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 404.369846][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 404.374937][ T31] ? radix_tree_lookup+0x240/0x290 [ 404.380364][ T31] genl_rcv_msg+0x10b/0x7a0 [ 404.384940][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.390531][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 404.395552][ T31] netlink_rcv_skb+0x232/0x4b0 [ 404.400864][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.406344][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.411719][ T31] ? down_read+0x272/0x2e0 [ 404.456305][ T31] ? genl_rcv+0xd/0x40 [ 404.460485][ T31] genl_rcv+0x28/0x40 [ 404.464515][ T31] netlink_unicast+0x80f/0x9b0 [ 404.487550][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 404.492927][ T31] ? netlink_sendmsg+0x650/0xb40 [ 404.498466][ T31] ? skb_put+0x11b/0x210 [ 404.502772][ T31] netlink_sendmsg+0x813/0xb40 [ 404.508185][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.513527][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 404.519072][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.524895][ T31] __sys_sendto+0x709/0x7a0 [ 404.530178][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 404.535291][ T31] ? fd_install+0x94/0x3d0 [ 404.539933][ T31] ? fd_install+0x306/0x3d0 [ 404.544519][ T31] __x64_sys_sendto+0xde/0x100 [ 404.549439][ T31] do_syscall_64+0x14d/0xf80 [ 404.554059][ T31] ? trace_irq_disable+0x3b/0x150 [ 404.559241][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.565433][ T31] ? clear_bhb_loop+0x40/0x90 [ 404.570732][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.577086][ T31] RIP: 0033:0x7f34ec55cfce [ 404.581559][ T31] RSP: 002b:00007f34ed50ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 404.590132][ T31] RAX: ffffffffffffffda RBX: 00007f34ed50e6c0 RCX: 00007f34ec55cfce [ 404.598366][ T31] RDX: 0000000000000020 RSI: 00007f34ed50d000 RDI: 000000000000000b [ 404.606664][ T31] RBP: 0000000000000000 R08: 00007f34ed50cf04 R09: 000000000000000c [ 404.614717][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 404.622841][ T31] R13: 00007f34ed50cf58 R14: 00007f34ed50d000 R15: 0000000000000000 [ 404.631036][ T31] [ 404.634119][ T31] INFO: task syz.0.2084:13529 blocked for more than 143 seconds. [ 404.642109][ T31] Not tainted syzkaller #0 [ 404.647258][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.656067][ T31] task:syz.0.2084 state:D stack:26240 pid:13529 tgid:13523 ppid:5821 task_flags:0x480140 flags:0x00080002 [ 404.668091][ T31] Call Trace: [ 404.671577][ T31] [ 404.674549][ T31] __schedule+0x1585/0x5340 [ 404.679492][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.684683][ T31] ? __pfx___schedule+0x10/0x10 [ 404.690021][ T31] ? schedule+0x90/0x360 [ 404.694339][ T31] schedule+0x164/0x360 [ 404.698708][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 404.704380][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 404.710619][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 404.716868][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 404.723051][ T31] nbd_set_size+0x454/0x680 [ 404.727739][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 404.732856][ T31] ? nla_memcpy+0x5b/0xc0 [ 404.737295][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 404.742659][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 404.748584][ T31] ? rcu_is_watching+0x15/0xb0 [ 404.753659][ T31] ? trace_kmalloc+0x2a/0x110 [ 404.758466][ T31] ? __nla_parse+0x40/0x60 [ 404.763011][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 404.769872][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 404.775468][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 404.781673][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 404.786807][ T31] genl_rcv_msg+0x61c/0x7a0 [ 404.791358][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.796581][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 404.802360][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 404.807451][ T31] netlink_rcv_skb+0x232/0x4b0 [ 404.812279][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.817416][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.822756][ T31] ? down_read+0x272/0x2e0 [ 404.827335][ T31] ? genl_rcv+0xd/0x40 [ 404.831456][ T31] genl_rcv+0x28/0x40 [ 404.835626][ T31] netlink_unicast+0x80f/0x9b0 [ 404.840509][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 404.846032][ T31] ? netlink_sendmsg+0x650/0xb40 [ 404.851008][ T31] ? skb_put+0x11b/0x210 [ 404.855267][ T31] netlink_sendmsg+0x813/0xb40 [ 404.860243][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.865570][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 404.870611][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.875992][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.881350][ T31] ____sys_sendmsg+0xa68/0xad0 [ 404.886334][ T31] ? futex_unqueue+0x211/0x240 [ 404.891192][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.896708][ T31] ? import_iovec+0x73/0xa0 [ 404.901295][ T31] ___sys_sendmsg+0x2a5/0x360 [ 404.906071][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.911493][ T31] ? futex_wait+0x29a/0x380 [ 404.916155][ T31] ? __fget_files+0x2a/0x420 [ 404.920790][ T31] ? __fget_files+0x3a0/0x420 [ 404.925498][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 404.931503][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.937125][ T31] ? rcu_is_watching+0x15/0xb0 [ 404.941952][ T31] do_syscall_64+0x14d/0xf80 [ 404.946680][ T31] ? trace_irq_disable+0x3b/0x150 [ 404.951754][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.957940][ T31] ? clear_bhb_loop+0x40/0x90 [ 404.962659][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.968757][ T31] RIP: 0033:0x7f34ec59c799 [ 404.973209][ T31] RSP: 002b:00007f34ed4ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.981754][ T31] RAX: ffffffffffffffda RBX: 00007f34ec816090 RCX: 00007f34ec59c799 [ 404.989886][ T31] RDX: 0000000020000004 RSI: 0000200000000280 RDI: 0000000000000009 [ 404.997974][ T31] RBP: 00007f34ec632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 405.006539][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.014644][ T31] R13: 00007f34ec816128 R14: 00007f34ec816090 R15: 00007ffe1a548288 [ 405.022896][ T31] [ 405.026009][ T31] INFO: task syz.4.2086:13531 blocked for more than 144 seconds. [ 405.033761][ T31] Not tainted syzkaller #0 [ 405.038805][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.047866][ T31] task:syz.4.2086 state:D stack:25832 pid:13531 tgid:13530 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 405.059915][ T31] Call Trace: [ 405.063235][ T31] [ 405.066264][ T31] __schedule+0x1585/0x5340 [ 405.070939][ T31] ? __pfx___schedule+0x10/0x10 [ 405.076035][ T31] ? schedule+0x90/0x360 [ 405.080342][ T31] schedule+0x164/0x360 [ 405.084570][ T31] schedule_preempt_disabled+0x13/0x30 [ 405.090270][ T31] __mutex_lock+0x7fe/0x1300 [ 405.094916][ T31] ? __mutex_lock+0x5ac/0x1300 [ 405.099810][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 405.104534][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 405.109688][ T31] ? radix_tree_lookup+0x240/0x290 [ 405.114853][ T31] genl_rcv_msg+0x10b/0x7a0 [ 405.119640][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.124711][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 405.129795][ T31] netlink_rcv_skb+0x232/0x4b0 [ 405.134598][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.139730][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.145073][ T31] ? down_read+0x272/0x2e0 [ 405.149570][ T31] ? genl_rcv+0xd/0x40 [ 405.153770][ T31] genl_rcv+0x28/0x40 [ 405.158654][ T31] netlink_unicast+0x80f/0x9b0 [ 405.163794][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 405.169488][ T31] ? netlink_sendmsg+0x650/0xb40 [ 405.174472][ T31] ? skb_put+0x11b/0x210 [ 405.178806][ T31] netlink_sendmsg+0x813/0xb40 [ 405.183616][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.189121][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.194112][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.199529][ T31] __sys_sendto+0x709/0x7a0 [ 405.204091][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 405.209246][ T31] ? do_futex+0x395/0x420 [ 405.213640][ T31] ? rcu_is_watching+0x15/0xb0 [ 405.218513][ T31] __x64_sys_sendto+0xde/0x100 [ 405.223321][ T31] do_syscall_64+0x14d/0xf80 [ 405.228108][ T31] ? trace_irq_disable+0x3b/0x150 [ 405.233191][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.239445][ T31] ? clear_bhb_loop+0x40/0x90 [ 405.244315][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.252915][ T31] RIP: 0033:0x7f972015cfce [ 405.257453][ T31] RSP: 002b:00007f971e3ece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 405.265959][ T31] RAX: ffffffffffffffda RBX: 00007f971e3ee6c0 RCX: 00007f972015cfce [ 405.273971][ T31] RDX: 0000000000000020 RSI: 00007f971e3ed000 RDI: 0000000000000007 [ 405.282070][ T31] RBP: 0000000000000000 R08: 00007f971e3ecf04 R09: 000000000000000c [ 405.290126][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 405.298308][ T31] R13: 00007f971e3ecf58 R14: 00007f971e3ed000 R15: 0000000000000000 [ 405.306429][ T31] [ 405.309520][ T31] INFO: task syz.1.2087:13533 blocked for more than 144 seconds. [ 405.322399][ T31] Not tainted syzkaller #0 [ 405.327450][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.336493][ T31] task:syz.1.2087 state:D stack:28040 pid:13533 tgid:13532 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 405.348701][ T31] Call Trace: [ 405.352012][ T31] [ 405.354954][ T31] __schedule+0x1585/0x5340 [ 405.359607][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 405.364855][ T31] ? __pfx___schedule+0x10/0x10 [ 405.369847][ T31] ? schedule+0x90/0x360 [ 405.374136][ T31] schedule+0x164/0x360 [ 405.378403][ T31] schedule_preempt_disabled+0x13/0x30 [ 405.383910][ T31] __mutex_lock+0x7fe/0x1300 [ 405.388631][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 405.393879][ T31] ? __mutex_lock+0x5ac/0x1300 [ 405.398784][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 405.403513][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 405.408786][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 405.413780][ T31] ? radix_tree_lookup+0x240/0x290 [ 405.419001][ T31] genl_rcv_msg+0x10b/0x7a0 [ 405.423561][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.429334][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 405.434342][ T31] netlink_rcv_skb+0x232/0x4b0 [ 405.439653][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.444722][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.450299][ T31] ? down_read+0x272/0x2e0 [ 405.454769][ T31] ? genl_rcv+0xd/0x40 [ 405.458995][ T31] genl_rcv+0x28/0x40 [ 405.463028][ T31] netlink_unicast+0x80f/0x9b0 [ 405.468100][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 405.473542][ T31] ? netlink_sendmsg+0x650/0xb40 [ 405.478578][ T31] ? skb_put+0x11b/0x210 [ 405.482877][ T31] netlink_sendmsg+0x813/0xb40 [ 405.487953][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.493319][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.498404][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.503764][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.509196][ T31] ____sys_sendmsg+0xa68/0xad0 [ 405.514015][ T31] ? futex_unqueue+0x211/0x240 [ 405.519015][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.524356][ T31] ? import_iovec+0x73/0xa0 [ 405.528954][ T31] ___sys_sendmsg+0x2a5/0x360 [ 405.533707][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.539235][ T31] ? futex_wait+0x29a/0x380 [ 405.543825][ T31] ? __fget_files+0x2a/0x420 [ 405.548533][ T31] ? __fget_files+0x3a0/0x420 [ 405.553282][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 405.558449][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.563969][ T31] ? rcu_is_watching+0x15/0xb0 [ 405.569209][ T31] do_syscall_64+0x14d/0xf80 [ 405.573843][ T31] ? trace_irq_disable+0x3b/0x150 [ 405.579155][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.585255][ T31] ? clear_bhb_loop+0x40/0x90 [ 405.590085][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.596171][ T31] RIP: 0033:0x7ffb10d9c799 [ 405.600606][ T31] RSP: 002b:00007ffb11ca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.609123][ T31] RAX: ffffffffffffffda RBX: 00007ffb11015fa0 RCX: 00007ffb10d9c799 [ 405.617159][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 405.625147][ T31] RBP: 00007ffb10e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 405.633383][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.641478][ T31] R13: 00007ffb11016038 R14: 00007ffb11015fa0 R15: 00007ffe6bffd068 [ 405.649594][ T31] [ 405.652711][ T31] INFO: task syz.2.2088:13538 blocked for more than 144 seconds. [ 405.660668][ T31] Not tainted syzkaller #0 [ 405.666199][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.674999][ T31] task:syz.2.2088 state:D stack:27880 pid:13538 tgid:13535 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 405.687110][ T31] Call Trace: [ 405.690433][ T31] [ 405.693416][ T31] __schedule+0x1585/0x5340 [ 405.698080][ T31] ? __pfx___schedule+0x10/0x10 [ 405.702962][ T31] ? schedule+0x90/0x360 [ 405.707378][ T31] schedule+0x164/0x360 [ 405.711655][ T31] schedule_preempt_disabled+0x13/0x30 [ 405.717253][ T31] __mutex_lock+0x7fe/0x1300 [ 405.721912][ T31] ? __mutex_lock+0x5ac/0x1300 [ 405.726843][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 405.731592][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 405.736821][ T31] ? radix_tree_lookup+0x240/0x290 [ 405.741985][ T31] genl_rcv_msg+0x10b/0x7a0 [ 405.746763][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.751848][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 405.756948][ T31] netlink_rcv_skb+0x232/0x4b0 [ 405.761753][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.766882][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.772220][ T31] ? down_read+0x272/0x2e0 [ 405.776820][ T31] ? genl_rcv+0xd/0x40 [ 405.780934][ T31] genl_rcv+0x28/0x40 [ 405.784943][ T31] netlink_unicast+0x80f/0x9b0 [ 405.789911][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 405.795551][ T31] ? netlink_sendmsg+0x650/0xb40 [ 405.800597][ T31] ? skb_put+0x11b/0x210 [ 405.804895][ T31] netlink_sendmsg+0x813/0xb40 [ 405.810103][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.815551][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.820638][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.826076][ T31] __sys_sendto+0x709/0x7a0 [ 405.830629][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 405.835708][ T31] ? exc_page_fault+0x6a/0xc0 [ 405.840538][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 405.846079][ T31] __x64_sys_sendto+0xde/0x100 [ 405.850877][ T31] do_syscall_64+0x14d/0xf80 [ 405.855479][ T31] ? trace_irq_disable+0x3b/0x150 [ 405.860613][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.866801][ T31] ? clear_bhb_loop+0x40/0x90 [ 405.871515][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.877497][ T31] RIP: 0033:0x7fec3cd5cfce [ 405.881941][ T31] RSP: 002b:00007fec3dc0de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 405.890669][ T31] RAX: ffffffffffffffda RBX: 00007fec3dc0f6c0 RCX: 00007fec3cd5cfce [ 405.898801][ T31] RDX: 0000000000000020 RSI: 00007fec3dc0e000 RDI: 0000000000000003 [ 405.906936][ T31] RBP: 0000000000000000 R08: 00007fec3dc0df04 R09: 000000000000000c [ 405.914941][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 405.923020][ T31] R13: 00007fec3dc0df58 R14: 00007fec3dc0e000 R15: 0000000000000000 [ 405.931135][ T31] [ 405.934215][ T31] INFO: task syz.3.2090:13549 blocked for more than 145 seconds. [ 405.942099][ T31] Not tainted syzkaller #0 [ 405.947141][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.956018][ T31] task:syz.3.2090 state:D stack:27744 pid:13549 tgid:13548 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 405.968545][ T31] Call Trace: [ 405.971863][ T31] [ 405.974825][ T31] __schedule+0x1585/0x5340 [ 405.979517][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 405.984500][ T31] ? __update_page_owner_handle+0x5a/0x570 [ 405.990430][ T31] ? __pfx___schedule+0x10/0x10 [ 405.995357][ T31] ? schedule+0x90/0x360 [ 405.999823][ T31] schedule+0x164/0x360 [ 406.004068][ T31] schedule_preempt_disabled+0x13/0x30 [ 406.009642][ T31] __mutex_lock+0x7fe/0x1300 [ 406.014267][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 406.019559][ T31] ? __mutex_lock+0x5ac/0x1300 [ 406.024451][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 406.029263][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 406.034350][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 406.039399][ T31] ? radix_tree_lookup+0x240/0x290 [ 406.044581][ T31] genl_rcv_msg+0x10b/0x7a0 [ 406.049374][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.054456][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 406.059517][ T31] netlink_rcv_skb+0x232/0x4b0 [ 406.064324][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.069605][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.074960][ T31] ? down_read+0x272/0x2e0 [ 406.079487][ T31] ? genl_rcv+0xd/0x40 [ 406.083613][ T31] genl_rcv+0x28/0x40 [ 406.087814][ T31] netlink_unicast+0x80f/0x9b0 [ 406.092637][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 406.098059][ T31] ? netlink_sendmsg+0x650/0xb40 [ 406.103037][ T31] ? skb_put+0x11b/0x210 [ 406.107475][ T31] netlink_sendmsg+0x813/0xb40 [ 406.112291][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.117687][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 406.122665][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.128222][ T31] __sys_sendto+0x709/0x7a0 [ 406.132859][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 406.138039][ T31] ? exc_page_fault+0x6a/0xc0 [ 406.142775][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 406.148252][ T31] __x64_sys_sendto+0xde/0x100 [ 406.153080][ T31] do_syscall_64+0x14d/0xf80 [ 406.157795][ T31] ? trace_irq_disable+0x3b/0x150 [ 406.162872][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.169095][ T31] ? clear_bhb_loop+0x40/0x90 [ 406.173843][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.180000][ T31] RIP: 0033:0x7f163975cfce [ 406.184466][ T31] RSP: 002b:00007f163a71de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 406.193014][ T31] RAX: ffffffffffffffda RBX: 00007f163a71f6c0 RCX: 00007f163975cfce [ 406.201054][ T31] RDX: 0000000000000020 RSI: 00007f163a71e000 RDI: 0000000000000007 [ 406.209591][ T31] RBP: 0000000000000000 R08: 00007f163a71df04 R09: 000000000000000c [ 406.217761][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 406.225893][ T31] R13: 00007f163a71df58 R14: 00007f163a71e000 R15: 0000000000000000 [ 406.233922][ T31] [ 406.237080][ T31] INFO: task syz.3.2090:13550 blocked for more than 145 seconds. [ 406.244848][ T31] Not tainted syzkaller #0 [ 406.249929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 406.258658][ T31] task:syz.3.2090 state:D stack:28040 pid:13550 tgid:13548 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 406.270709][ T31] Call Trace: [ 406.274019][ T31] [ 406.277042][ T31] __schedule+0x1585/0x5340 [ 406.281608][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 406.289058][ T31] ? __pfx___schedule+0x10/0x10 [ 406.293947][ T31] ? schedule+0x90/0x360 [ 406.298292][ T31] schedule+0x164/0x360 [ 406.302505][ T31] schedule_preempt_disabled+0x13/0x30 [ 406.308052][ T31] __mutex_lock+0x7fe/0x1300 [ 406.312683][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 406.318073][ T31] ? __mutex_lock+0x5ac/0x1300 [ 406.322868][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 406.327801][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 406.332959][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 406.338120][ T31] ? radix_tree_lookup+0x240/0x290 [ 406.343331][ T31] genl_rcv_msg+0x10b/0x7a0 [ 406.348215][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.353401][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 406.358618][ T31] netlink_rcv_skb+0x232/0x4b0 [ 406.363531][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.368726][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.374128][ T31] ? down_read+0x272/0x2e0 [ 406.378656][ T31] ? genl_rcv+0xd/0x40 [ 406.382761][ T31] genl_rcv+0x28/0x40 [ 406.386906][ T31] netlink_unicast+0x80f/0x9b0 [ 406.391731][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 406.397283][ T31] ? netlink_sendmsg+0x650/0xb40 [ 406.402280][ T31] ? skb_put+0x11b/0x210 [ 406.406649][ T31] netlink_sendmsg+0x813/0xb40 [ 406.411511][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.417083][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 406.422051][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.427462][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.432804][ T31] ____sys_sendmsg+0xa68/0xad0 [ 406.437783][ T31] ? futex_unqueue+0x211/0x240 [ 406.442610][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.448038][ T31] ? import_iovec+0x73/0xa0 [ 406.452601][ T31] ___sys_sendmsg+0x2a5/0x360 [ 406.457393][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.462653][ T31] ? futex_wait+0x29a/0x380 [ 406.467487][ T31] ? __fget_files+0x2a/0x420 [ 406.472133][ T31] ? __fget_files+0x3a0/0x420 [ 406.476948][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 406.481947][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.487557][ T31] ? rcu_is_watching+0x15/0xb0 [ 406.492377][ T31] do_syscall_64+0x14d/0xf80 [ 406.497141][ T31] ? trace_irq_disable+0x3b/0x150 [ 406.502209][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.508565][ T31] ? clear_bhb_loop+0x40/0x90 [ 406.513273][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.519266][ T31] RIP: 0033:0x7f163979c799 [ 406.523850][ T31] RSP: 002b:00007f163a6fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.532523][ T31] RAX: ffffffffffffffda RBX: 00007f1639a16090 RCX: 00007f163979c799 [ 406.541054][ T31] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000004 [ 406.549266][ T31] RBP: 00007f1639832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 406.557440][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.565426][ T31] R13: 00007f1639a16128 R14: 00007f1639a16090 R15: 00007ffed2504478 [ 406.573529][ T31] [ 406.576705][ T31] [ 406.576705][ T31] Showing all locks held in the system: [ 406.584441][ T31] 1 lock held by khungtaskd/31: [ 406.589494][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 406.599572][ T31] 1 lock held by syslogd/5175: [ 406.604377][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 406.614625][ T31] 1 lock held by klogd/5182: [ 406.619419][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 406.629522][ T31] 2 locks held by getty/5582: [ 406.634225][ T31] #0: ffff8880369590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 406.644100][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 406.654385][ T31] 1 lock held by udevd/5877: [ 406.659148][ T31] #0: ffff888026925358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 406.668570][ T31] 1 lock held by udevd/6023: [ 406.673201][ T31] #0: ffff88802598d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 406.682564][ T31] 2 locks held by syz.0.2084/13524: [ 406.688011][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.696355][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.705396][ T31] 6 locks held by syz.0.2084/13529: [ 406.710691][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.719005][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.728234][ T31] #2: ffff8880268a6278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 406.738740][ T31] #3: ffff88802694c978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 406.748251][ T31] #4: ffff88802694c318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 406.760418][ T31] #5: ffff88802694c350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 406.773008][ T31] 2 locks held by syz.4.2086/13531: [ 406.778303][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.786639][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.795659][ T31] 2 locks held by syz.1.2087/13533: [ 406.800965][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.809261][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.818410][ T31] 2 locks held by syz.2.2088/13538: [ 406.823718][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.832009][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.841162][ T31] 2 locks held by syz.3.2090/13549: [ 406.846772][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.855035][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.864179][ T31] 2 locks held by syz.3.2090/13550: [ 406.869509][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.877905][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.887058][ T31] 2 locks held by syz-executor/13586: [ 406.892441][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.900727][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.909825][ T31] 2 locks held by syz-executor/13588: [ 406.915221][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.923551][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.932710][ T31] 2 locks held by syz-executor/13590: [ 406.938166][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.946542][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.955539][ T31] 2 locks held by syz-executor/13595: [ 406.961005][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.969316][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 406.978444][ T31] 2 locks held by syz-executor/13605: [ 406.983845][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.992275][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.001390][ T31] 2 locks held by syz-executor/13640: [ 407.007281][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.015543][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.024604][ T31] 2 locks held by syz-executor/13642: [ 407.030051][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.038342][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.047548][ T31] 2 locks held by syz-executor/13644: [ 407.052943][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.061375][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.070476][ T31] 2 locks held by syz-executor/13646: [ 407.075955][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.084219][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.093554][ T31] 2 locks held by syz-executor/13658: [ 407.099130][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.107510][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.116605][ T31] 2 locks held by syz-executor/13691: [ 407.122010][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.130439][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.139510][ T31] 2 locks held by syz-executor/13694: [ 407.144891][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.153369][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.162456][ T31] 2 locks held by syz-executor/13695: [ 407.168093][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.176482][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.185575][ T31] 2 locks held by syz-executor/13699: [ 407.191092][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.199543][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.208754][ T31] 2 locks held by syz-executor/13711: [ 407.214236][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 407.222520][ T31] #1: ffffffff8fc3a448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 407.231652][ T31] [ 407.233998][ T31] ============================================= [ 407.233998][ T31] [ 407.242652][ T31] NMI backtrace for cpu 0 [ 407.242677][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 407.242701][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.242714][ T31] Call Trace: [ 407.242722][ T31] [ 407.242731][ T31] dump_stack_lvl+0xe8/0x150 [ 407.242767][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 407.242795][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 407.242828][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 407.242859][ T31] sys_info+0x135/0x170 [ 407.242883][ T31] watchdog+0xfd9/0x1030 [ 407.242923][ T31] ? watchdog+0x21a/0x1030 [ 407.242963][ T31] kthread+0x388/0x470 [ 407.242985][ T31] ? __pfx_watchdog+0x10/0x10 [ 407.243015][ T31] ? __pfx_kthread+0x10/0x10 [ 407.243037][ T31] ret_from_fork+0x51e/0xb90 [ 407.243069][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 407.243095][ T31] ? __switch_to+0xc7d/0x1450 [ 407.243125][ T31] ? __pfx_kthread+0x10/0x10 [ 407.243147][ T31] ret_from_fork_asm+0x1a/0x30 [ 407.243196][ T31] [ 407.243204][ T31] Sending NMI from CPU 0 to CPUs 1: [ 407.355840][ C1] NMI backtrace for cpu 1 [ 407.355857][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 407.355877][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.355888][ C1] RIP: 0010:debug_object_deactivate+0xc0/0x3a0 [ 407.355914][ C1] Code: 00 00 00 4d 85 ed 74 49 45 31 e4 eb 0c 4d 8b 6d 00 41 ff c4 4d 85 ed 74 38 49 8d 5d 18 48 89 dd 48 c1 ed 03 42 80 7c 35 00 00 <74> 08 48 89 df e8 86 85 77 fd 4c 39 3b 74 41 4c 89 e8 48 c1 e8 03 [ 407.355931][ C1] RSP: 0018:ffffc90000a08a78 EFLAGS: 00000046 [ 407.355948][ C1] RAX: 1ffff1100f178c70 RBX: ffff8880248038d8 RCX: 0000000000000001 [ 407.355961][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a089e0 [ 407.355973][ C1] RBP: 1ffff1100490071b R08: 0000000000000003 R09: 0000000000000004 [ 407.355984][ C1] R10: dffffc0000000000 R11: fffff5200014113c R12: 0000000000000005 [ 407.355997][ C1] R13: ffff8880248038c0 R14: dffffc0000000000 R15: ffff8880b873b7c8 [ 407.356011][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 407.356026][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.356039][ C1] CR2: 000055856730aee8 CR3: 000000001fb16000 CR4: 00000000003526f0 [ 407.356055][ C1] Call Trace: [ 407.356063][ C1] [ 407.356075][ C1] debug_deactivate+0x1f/0x230 [ 407.356106][ C1] hrtimer_try_to_cancel+0x300/0x5b0 [ 407.356137][ C1] update_curr_dl_se+0x2fe/0xeb0 [ 407.356162][ C1] ? update_curr_idle+0xab/0x260 [ 407.356189][ C1] sched_tick+0x242/0x820 [ 407.356215][ C1] update_process_times+0x26f/0x2f0 [ 407.356238][ C1] tick_nohz_handler+0x42b/0x770 [ 407.356264][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 407.356286][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 407.356305][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 407.356325][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 407.356344][ C1] __hrtimer_run_queues+0x4e7/0xcc0 [ 407.356382][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 407.356406][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 407.356433][ C1] hrtimer_interrupt+0x42b/0x1010 [ 407.356466][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 407.356499][ C1] __sysvec_apic_timer_interrupt+0x102/0x460 [ 407.356529][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 407.356556][ C1] [ 407.356562][ C1] [ 407.356569][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 407.356588][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 407.356615][ C1] Code: 5e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 fd 1b 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 407.356630][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 407.356645][ C1] RAX: 0000000000175edd RBX: ffffffff819a80dd RCX: 0000000080000001 [ 407.356657][ C1] RDX: 0000000000000001 RSI: ffffffff8def2f90 RDI: ffffffff8c27aa00 [ 407.356669][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 407.356683][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901186b0 [ 407.356696][ C1] R13: 1ffff11003ad8000 R14: 0000000000000001 R15: 0000000000000001 [ 407.356711][ C1] ? do_idle+0x1bd/0x500 [ 407.356748][ C1] default_idle+0x9/0x20 [ 407.356766][ C1] default_idle_call+0x72/0xb0 [ 407.356785][ C1] do_idle+0x1bd/0x500 [ 407.356808][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.356838][ C1] ? __pfx_do_idle+0x10/0x10 [ 407.356867][ C1] cpu_startup_entry+0x43/0x60 [ 407.356892][ C1] start_secondary+0x101/0x110 [ 407.356914][ C1] common_startup_64+0x13e/0x147 [ 407.356941][ C1] [ 407.708513][ T11] block nbd1: Possible stuck request ffff888026a38000: control (read@0,1024B). Runtime 180 seconds [ 407.719342][ T11] block nbd1: Possible stuck request ffff888026a38200: control (read@1024,1024B). Runtime 180 seconds [ 407.730686][ T11] block nbd1: Possible stuck request ffff888026a38400: control (read@2048,1024B). Runtime 180 seconds [ 407.741801][ T11] block nbd1: Possible stuck request ffff888026a38600: control (read@3072,1024B). Runtime 180 seconds [ 407.741869][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 407.741953][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 407.742031][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.742072][ T31] Call Trace: [ 407.742104][ T31] [ 407.742136][ T31] vpanic+0x56c/0xa60 [ 407.742232][ T31] ? __pfx___schedule+0x10/0x10 [ 407.742318][ T31] ? __pfx_vpanic+0x10/0x10 [ 407.742402][ T31] ? __pfx_console_unlock+0x10/0x10 [ 407.742507][ T31] panic+0xc5/0xd0 [ 407.742582][ T31] ? __pfx_panic+0x10/0x10 [ 407.742676][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 407.742748][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 407.742832][ T31] watchdog+0x1023/0x1030 [ 407.742937][ T31] ? watchdog+0x21a/0x1030 [ 407.743048][ T31] kthread+0x388/0x470 [ 407.743102][ T31] ? __pfx_watchdog+0x10/0x10 [ 407.743184][ T31] ? __pfx_kthread+0x10/0x10 [ 407.743247][ T31] ret_from_fork+0x51e/0xb90 [ 407.743343][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 407.743438][ T31] ? __switch_to+0xc7d/0x1450 [ 407.743518][ T31] ? __pfx_kthread+0x10/0x10 [ 407.743580][ T31] ret_from_fork_asm+0x1a/0x30 [ 407.743698][ T31] [ 407.753369][ T31] Kernel Offset: disabled