last executing test programs: 18.526481873s ago: executing program 4 (id=4841): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000012c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000200"/28], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x0, 0xff, 0x7, 0x6, 0xffff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x10040, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x29, 0x803, 0x200) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4044094) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x0, 0x0, 0x2}}, 0x18) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_icmp(0x2, 0x2, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 18.199427369s ago: executing program 3 (id=4845): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x305800, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x8000, 0x0, 0x5b66, 0xffff38ba, {{0x25, 0x4, 0x2, 0x2e, 0x94, 0x68, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x42}, {[@end, @lsrr={0x83, 0x17, 0x8d, [@remote, @multicast2, @local, @local, @dev={0xac, 0x14, 0x14, 0x25}]}, @cipso={0x86, 0x66, 0x0, [{0x2, 0xb, "16bd7163ae868c3478"}, {0x5, 0x12, "c16d73985b2bddb473cfd5d05203e430"}, {0x1, 0x6, "92d0035a"}, {0x0, 0x5, "d44349"}, {0x1, 0xb, "9de8f6b91a9f3a1835"}, {0x2, 0xa, "ef28382f56ca9965"}, {0x1, 0xe, "c645058dd9871ddc08721258"}, {0x6, 0x10, "a6a8045e7ee01eb2835b1b813882"}, {0x6, 0x5, "890833"}]}, @noop]}}}}}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x15, &(0x7f0000000200)=@raw=[@ldst={0x1, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9c}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x4, 0x2, 0xd, 0x40, 0x8001}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0xff, 0xfd, &(0x7f0000000300)=""/253, 0x40f00, 0x4, '\x00', r4, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x1, 0x0, 0x10}, 0x10, 0xffffffffffffffff, r5, 0x4, 0x0, &(0x7f0000000600)=[{0x2, 0x5, 0xd, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x3, 0x4, 0x5, 0x9}, {0x5, 0x1, 0x3, 0x7}], 0x10, 0x8}, 0x94) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x40010, r0, 0x5af84000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000700)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000740)={0x8, 0x2}) socket$unix(0x1, 0x1, 0x0) r7 = socket(0x0, 0x0, 0x4c) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc7e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x82e0, 0x401, 0x50d6, 0x40000, r3, 0xa, '\x00', r4, r9, 0x5, 0x3, 0x1, 0xd}, 0x50) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40021) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd8, 0x1403, 0x523, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x801}, 0x4) socket$alg(0x26, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e40)={&(0x7f0000000c40)="bab7a531288a7e1452a284c827c6ed8ae305d53944ab94dfa7bb971cc91ea3eb37d84d559236b24894570f4c156503339c8b72b3da99188e1d8502c0b36d2393d3330587f3a905e93004785f6125d85f69da9c8214edf3855b66", &(0x7f0000000cc0)=""/27, &(0x7f0000000d00)="1ffc265a0670fed7b14d53758d0b77014864a0591cbf470b60be711a458ea3cc967bb9105bb4d9a05218105cd16ab3cf371a7f5c47683a82eb0c9a63bfe6e68b5fab311fd8e041793f390be53ab1aabe712a09c49583e13f1d5298495fbac0a0a533001c5ab5991f90e57edc2d5f687d26f8ff0e35664059d37a1fcf92b8670ffb7ae0dfec076816b5aa1ec2b1e6f50e4488d32f64bad97c0ef3352011be638a6137e198f9", &(0x7f0000000dc0)="2d7f1ff1f69e97b9c6e33844906e2a683d15bcef657390683b9571f9d7b1b593bc2229a787f4e0fc3d3f89225b822bdfdcb1285071b615409ba7b0706129ba9ab95a4f1b7534cf5cf42d822c471b122bd7a028ba329b5221fbbc4d260ed034df47253a1b259c2bb7d9", 0x6, r10, 0x4}, 0x38) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000e80)=0x2, &(0x7f0000000ec0)=0x4) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000f00)={0x3, 0x1, "1d47af", 0xf7, 0x7}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0xc4d, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000001080)={0x4, 0x6, 0x5, 0x4, 0x1}) 17.939288716s ago: executing program 2 (id=4846): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0xf, r2, 0x0, r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000001000000000e00090000009508000000c2840600"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e}, 0x94) socket$kcm(0x10, 0x2, 0x0) 17.829975659s ago: executing program 2 (id=4847): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x9, @mcast2, 0x7}, {0xa, 0x4e20, 0x8, @empty, 0x2}, 0x1, {[0x9, 0x2, 0x4, 0x4, 0x9, 0xdfb, 0x8, 0x5]}}, 0x5c) 17.813966476s ago: executing program 3 (id=4848): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, r2, 0x1, 0x1, 0x0, 0x2, "d92981bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e4220000190a0000000000000200000000001900", 0x3c}, 0x60) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010000000000000000000af9130000000002000000001400010000000000000000000000000000000001140002"], 0x44}}, 0x84) close(r1) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="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", 0xff}], 0x1, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="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", 0xfe}, {&(0x7f0000000740)="fe02a5cf033d9d154c3baf6300eff39c4af004006eb6c7d54a0ed398e64d373c0f348bec91fcc1b7b0530dfe1906a237162dc942cf593b33ac787441666a8cbd8128ac7d2e078f406fb2466957729b19e5ed4957944bbe7125f7d6c116c1617cc799c0157939f9b57275f43677f1acfdfdbd937e2bc5bb317ec7f23d3dcc47be89db4214f555bf4ac07ee463d059aa92eb9dc4970b", 0x95}], 0x2, 0x0, 0x0, 0x40041}], 0x2, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9deb01001800000000000000180000001800000008000000000000ec01000013020000000500000000000000000000000000300000513e00"], 0x0, 0x38}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x100, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x400, 0x1007fc, 0xffff8000, 0x7, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x4, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x3, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xff, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb82, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x1ff, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 17.744001086s ago: executing program 4 (id=4849): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="6802000000050104000000000000000003000006540201000200000000020000800904000100160073797a31000000000000000000000000000000000000000000000000000000009f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b335a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20"], 0x268}, 0x1, 0x0, 0x0, 0x64805}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r1, 0x952de000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc36be63", @ANYRES16=r2, @ANYBLOB="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"], 0x3b0}, 0x1, 0x0, 0x0, 0x80}, 0x40800) 17.74354202s ago: executing program 1 (id=4850): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) listen(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c00108004000e8004004480040002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r6, 0x1, 0xd, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x8001, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 17.648442041s ago: executing program 2 (id=4851): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r5, 0x1}, 0x20) close(r4) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/76, 0x4c}], 0x1}, 0x0) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/76, 0x4c}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090) 17.564038234s ago: executing program 1 (id=4852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, &(0x7f0000000040), 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000040000000000000097aa000118430000fdffffff00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000f1b60300004000000085000000b400000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.506987898s ago: executing program 4 (id=4853): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)}, 0x20000814) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x4, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17.459806507s ago: executing program 2 (id=4854): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x120, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x38}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newsa={0x1a0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0xa8, 0x3, {{'deflate\x00'}, 0x300, "d889da7a8edb7c7bc2a19504436f0565d95074e306fc4d3c17bfdcd7c2a92b8b65307a9db233b421056fe6f6e416b6bf3e64019471cf0c5ea0ac67912d3e27a95af9559e352fa36421987f11dbc79bbf5127f6f102fcec2b5834b7869d82cf85"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x1a0}}, 0x844) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 17.433586803s ago: executing program 1 (id=4855): r0 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x43}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4, 0x2, 0x3}}]}, 0x38}}, 0x0) 17.254579436s ago: executing program 1 (id=4857): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdc00, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20006911}, 0x20008801) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25000}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x80000000, 0xffffffff, {{0xe, 0x4, 0x2, 0x4, 0xfec8, 0x67, 0x0, 0x7f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x84, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x35}, 0xfffffffa}]}, @generic={0xd0, 0x12, "3d7c2828c45e52e48a5c25ea74b4b398"}, @end, @timestamp={0x44, 0x4, 0xf5, 0x0, 0x2}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000700)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000780)={'wg1\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r13, {0xe, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x58, &(0x7f0000000980)}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000c40)=@can_newroute={0x180, 0x18, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "34012679fbd25889"}, 0x6}}, @CGW_CS_CRC8={0xffffffb9, 0x6, {0x4c, 0x73, 0x54, 0x6, 0x2, "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", 0x1, "4aa9553501eeeeaf09f1ed12b4a21ee6cea5f1c7"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x7b}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "fa4e283211bfd48e"}, 0x1}}, @CGW_LIM_HOPS={0x5, 0xd, 0x3}]}, 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf0, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e1946c79521b1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r14, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r15, @ANYBLOB="100028bd7000fddbdf25991bc54987d0e9af1f721500000058002b80480003800c0004000604feffffffffff0600aaaaaaaaaa0c0004000201aaaaaaaaaaaa06000300a3aa000006000300a0aa000006000100030000000c000500060000000000000008000300d1bbd16d528dc92db6a05d687bdbc7c6f0e0f5d4be0c1c36458201e97f5f0a58de7155769cc2c0e61439716f7237b18a854161a3f7258dee85f2d2effbd089bf61219ccfccd2d67d07736b4c5c52272f0dfde5475504000000000000005e", @ANYRES32=0x0, @ANYRESOCT=r5], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) r16 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000016100bfc6000000000001725d738ac1e8560fe7ff1aa0e000062b40000", 0x21}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0xbc, r4, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3632cd3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34e77b9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b655a84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a0fafc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x569d962}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d914a59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x341eb6a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40ea40e8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba9b48a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1acd1030}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31b7313c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xbc}}, 0x0) 17.163711764s ago: executing program 3 (id=4858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r3, 0x29, 0x7, 0x0, &(0x7f0000000180)) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000080)=0x4, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"/440], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 16.959762707s ago: executing program 2 (id=4860): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r1, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="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", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="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", 0xbd5}, {&(0x7f0000000500)="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", 0x12a}, {&(0x7f00000030c0)="8ce8c35d7b1affb769fccfa96b01041ba03a20539d616b0700eba4a7a196640add27cc85831f5abb721b68f6b700eab89d44cfa3a3eb4ac273250f2750d9f1861d03fed070d600edd9a7d2bfbb032edf0f7b3965df777f32d1a5c0f42cb754079c257f0418fab16206454d9676efe740258c6714457b908fb47425a79584c44bee29f99bb4aba1c90d2064b471631d5fb166c236f705f8055fca40ec442e8356c224acd58e9ff7c936ad0720593b9befebb3587291c2150265b2b350611c45734dc892c386687f139868cea94d4453da5a0e1e07b79175609aeeb565c0c2be84406d190c1539b3382aa37de9cc5986bd31f5bda1ada205d9d38e5854326f141488ecee0edf4e41857332c50585aafa25d9d0b149795d7191cac117f2f4fc25b1d590a248f8acd4cec1b64f663abbd9f77d02f8c5e70a0fdbb44c8f1aff6eca92d3406d58ae9a19f1d1154d65676cbe46caff113e91b3b5228d5af8a1bc5d4d7de6a69660f59a0d17fc39bfdc1346fa0d4b211a6ecff34deafc3235db007dbb4b37964cf3d77560ac8886e32885342e6142aeb0d6c4a994cb07ae3bb81739c8ec555f5858d320b5f4e90edab743bfdebe54e4bc747a36169b0d428a21b275d1c33336731acefd99aad829744a933cd2a9615c7a42799be5953357cb249d6fa438a2727f5469b0c4a1f9d652492fa69ca47e16bfbfe539bf0eccada921ccc3d5cf93fbc8db54cb8a24c79d5d6843f64294f93e2b3817b355efea20396b07194e25c969f69fa9c9eff8709d7afc038ff5ba69038a6155fa128d3715e388771fbbc32069ad3076750baba0def136fe03faa6df60833321371bfe83341eb1863a1c4b2f8e5d8d58906b1e1e5c0464a3c078eeb707f934c261a20e02a0e160727751d83518a79d8d29aec0056528eddbeb35588f073aefde2238d4d297ad340277ba4b65417f20acc5966d73d96df6bb4618d7688fc438d05352869aa903066e97c67ae4d4e9d56e2b991de05bd801119ab6f74f9b4ab8955f8c4e1ffed109cf5888c0d35af82fee1a65f2b6970b3d88bacf559e65a9775a62b6246b3ac39777b2fd5fc92bec4d5fdc03f6bcd4ce035c68b2c183eb6d5a9d69cef0d67beebf848969905d8c02b1a197c6ee58b8ca86b05af3a933e770ad301f2a89e626023abfc1133528820f9f9a08323d30b5feb0e2fddcecb9de0a5ad37c4fdf39f83324a512178293ce6e628163bd8e314839a35b8160f61be1d8d6eac92235df354ff961c8714d7e5a50f1e0962f64c551061b1c4b6fceda2dde8fa89d04620d957f285ca67e0999fd5fe889f81309e91ffc15a1c0be854b777f10d461e723c86b7b295409c3ff7dfeefbad3de6a4ec05985164d69a5129cfe42b9c8bc15954f1636d97ecce5ed8e9c8f222ef50b15d40326573efdbaca6f8331bdd882e56ca1f150237650a625b5f7be7c970f579f3246f1065656705144869f66837678113846f580782e2be5f7f6053c573714a61a4bc581fb5733cbecd7ce7b4c872df94623dd67f65493961bb33cda5ef5c02460396f31e05b65924ce742f4d95a17ffebdad6ca73b8cc6fe882b95e265ea0167d9761761ae7a710c1be078615d753a7af6bb341bdaaa6295f118081a0d9c292d3593153885683da5009bca5ecf3236779a9da7d3bd70f8f37885e5504b348a541ffcb7e2c564d5e6a1c30801fa5f7973d08d0834fbd0ced14a804d8a03f800580ccd01ee9ccf77a067733b11c75ec6ceea1baf88e9e41da2a449bd0e2777d1bfa780311c5b42575f4c88b6e4466c9ddac823728cff9491f0ceea4dd826ff058460ee80c698f270fb57a2f8ecfe996f149354d609e1cd155252d5b0e921c93586c1148071a2e267b8141af9b9be48633a5eb5594da83180625e506bd96b279e39151606521c6aa31fbc52a963d15192c5e23d0e7e3ddbb2fbe3835a1d0dd51d3d3b9dd32322579505b55dc57c8f44e77916b56e5008377049cc370a91edcc5ab5f79f1649cb153da11d0bfb0a0ca62a9b8d593f1149c8cac5d60a857ad1f30531c7859bd7b17c4c96e42e331d15392819d7423709044d9e02dd87fb2e4dd3428df76ac2c05b0b427cfec7feea2c2755f3bd0c532e75b1a76d5566913484cdab2bef5bdd644fd6c1c0809d3436ee7da8bb07aa15fb843bdbe7253b01566586fb3fda998d8e98d7f95968bff783f6a93b8c4c1383c162d8ea50ea435036c3938574bcf4c9aca432f6e5368e724cba7b2e36fa2eac7d3001cb4171063dd90a7f95a37cb439392944e878957a2df3f7b1e1ad5e275d7b6c8ec6028b941c1a694b54b72502a263e542fffb55d9eb91748ee8a1ac93a55615e0b70466191348fdc9b68c257ec523d334f64db6b3fbd304bd60bcf3de0e80000000000000010a660eec2e22806744c7a2ed8949f5582b1c41e1c2df343cc754787ac4b28a1098f716a0f19ffeb3d5838559a9f345f95893784e39393b869d6abd913394f6d1fc7645548b86c234d886b366b7f91fc55076bb3545c9973f8ae548da4a4665ed8f7b78d1b8a7cf8cdb605a127daa3d4d0ba5df0acbbce2de896f57b933d9a649fb8bf70148495e022090da8951c4156517959a627f906c8da390b1e5ab2ef38ca9c49c3ac5c73b4af7bf875107da27fa8435a84a6dd6ef4128ddbb35a762e34244e30d46529bdeedf66ddd7a1da584811ab3d86fe81bfb1c8430fa9542d116c30d6aba15a9b62d0558487d98cb2f5fc2d18150f405418ecc7d5553a754ae229d56faa2e685d2fa202af63614334b8e4e833bf8d4de6b30fe95208a9ec11c940265f0398f2d60a2675f2ee98e302277f69fedee9fb7a6fe5ebc1d03cf25d0fde7e714ee2e45d85f7541a2985eae4f8000dea290d0e1d4c5d38e9151793cc27e8a97438bed0ccb656ee10721dfce787982f2c89382b8faeec89118fe5cf005a55b8adef86cf2367fa32984a1d4a7fbd8806622d1fabe44ac7c87d24847deb85559e9e530c641db6dc0cd8a62826638633a7b276d47326fdd36cf238b6e8642db7e501b30d82507547dda00c7049e675a6748fe2e8992761fa040cf583e546105bb54be494d2cecd5a7b0b727dfcbc143537d8888e11fd8529a456a03cf09d16d38dd41270470c97ac7e5b24dcc4ccecc168518ec4034ad20758cb9bc489fd767a8b7de80b009d10da4d3d81075f4ab082586e4e8db2bc106087d3fd5fde44945b0e459a46ac5267c1221f1135185d9dcc0ec9475ab1213d6eb083619813388e16a66ed9ecf03624c1aab218eeab3321aa9a6e9254ecc30f83cb36981f6824889128a19699522a7beb45c1662a850360efdef032d21962dbd1d1dd715e569aeddc4f6ab776d81808975034b490030ee8da5d0a52a768fd90af8a61664acc8dc15f2a5e3f915eef1eca89719460918c39fe7243f25fc9507d5dded31c9faee44a145f34fff66d2e08840412b48a9f279d62d50ef10c8dd896a893872acd30ecf5ded1819b35eb84b135a49cccb1b9921cbf16e859b94db500aa395a0e7f53f20111109925f3eec139b16e36a23c9ee2458725c803e78cbf4fd81d5de7d53570b7e1580310a928148c66e50fad8a11d441c1742455db9bc43e2e97775a867ffa86723cb8f8b0b7e1c4401d14e4a5cccb1d774966fc26d2a3460e13b35c05007573470a9d06852af7e98575bace7b218fa4f18f078b9113c10f67ad15fd588794e1de612dd2162f9f592febfa635c424e9afac67978c59325764081654b475c2bf6914e95c922741e537ec0fd7e62325426f18bb3976a210cdca8dc19576360ece1f2ac61c9c183314aaff528f0671f6b6c50778c53aadbb7f6d00129963276247c3b00281b562944b4a38039af5030b71f9c9048550f5be8571d27dd53b515e74a02c1c9f5db09c2fdde4a46cb5865c89975a0f382bf1b4fbc3ebd63ba8882af3efad30a5cd5b55a1acae490dbe4924aa5efbae09121a6ae3e30bd854b9d2827a7ce9686949ce73271bd8abb541e526bbcefc3ca7dfcfa89e91d0bb8d86ea24245a8f43271fcc4e27e934c94bbbb50b0f7ccb6582ab9413b5771597319acbfb6ebb3362a4e37e47b833186be4a15b62461f0a7a98784386d0d0ab34d937711c7654169a06668fbb8e621f29954f77a7ed59000e1e9b5e583a21fb4581ce686bae64f93224ce9949cf822694243dc67c1dbc0e2de33e3245f021c8d678747010c48bcbb2e022bc2e34f4605b6b99a405effd94652d08454b9f33f04e6847cdef21749fad0d9b4ff7ab3e18fbc3ee5414fe5bd45b329bf2b8720dbb267e67a3cafddf8aa9fe9efed23d3c15172ee59af1f111309c417eaad4c02ad510e5d0bd08728777056157da657e3e3cd8936043044e6beb6ef3fe152e8dcaa17993ba710537ccc89e9be6bbd333b5754aef57750e7ca6b70f719febc13bb9bf1336af02b07914fcfc70153cdcea23c8006fd2a8100785fd78b05e9fc23aa1aa9e045c9103d979da99f593f66fcae2a1e97f26042b248afa866c7390c42c6fad44e9f546ceec6df2e076714accf0917d983d33e762aab76561eb460aaa403a637669bcb71499f3deeb5f563827e8fee16f1c3ca969c070f3533f396503923d0ac50fd16c537f04e6f0f7544a3a738b33d8348b6d005e4a2fd913afbc1dc228ffae6209ed12341921e0e74adf076361504a3ce05e6a9005485fe4ac4a7e4f4d5eae7a5657e2c5b123c251b402e62f082e7005f8ec3ef24b9bfc6657165fd750bc1203e4ceb7b47a787accb49a44fc727f1e3f1a070aac91dbf0ba8d9bb7a72f9bb0e3678268fe29d75cdcdce58d6de9f2ccc17fc3ad1f64c3061e9a7010cfe5fc2cba4255228cf0ee66b27ed1b6de034d6feff9735cc2d5a68269c53c94f19b9e3f60694a3885b3de119628c1c8ad5128e8f09ef0463ba7d3758c0a84f0440638af22f93f561dee2a0a45698dc2dd68a65827c51f0d33a47e6753a2ed19088423baa68599bfbde71af9c9cef4e375a166a004878949ac7f12f59c45bc845c7ed0c5a6acf70b75477c54a7bcf97bafe8cd23ec38860ace3237152f2980cf392c47d8beacf112e65bb83872a0da8f62af98ca381e5c47d06a2650ca96ffa21a2f4696b7c3e81da381f8a997a65ec18df04c7ff057f9bd1388c5ab16cf7d0c42b7a8ed75d2e504ea274bda9fa96fc8f3bc36ca967e69838a2ec628cb77a1b5b842fae89d7e784634866a246de8fffe4efcce8f8d0d46a38e685fe254d7ad6f817f8cd11a610ebb298b6442691598704a76e67d86d577c6df3cc35fa181e9fd726c745f97f35f696b38a4439ab8e76f141c06a881db1946dc1b56ea58d52bb86487f6baa4c8c8f8771e3e73fb5a12a7fbaa6da2e0aab0be4aa86d776d5a83115312e650955b4675a7af6f8976d712ad15ca070df98e0fa1c2daa9679aa25739b6136f36d0935d2ffe9d1d967b575169ce1a9b64155806c183e9bef771e7a46ccc7d74a89ba471db5cb75b1da504c1733d5df78b2224d43657d35b1c4943c410fa8d9ebe89ed6a3dc64569bcf5e5c6d07d92f1d5cdc44d750a22772076ea17af16425ab110fe512f34adf117dcde6dd0bde6b2f0d189bd6a91d082c07b8438d74efb0ec2644bb50b1e06e32ca6ff1c99d1f08dbbeb116bab4cf58c1ecff4cd4f9fe627c9e5094e65f0b699902c971f47e7652935df6ba06ece2e4eb2ee0ad9a7550048b0ead6fd9637ca7219592a9bf9bba1e7e6a428258bce2d90983937ef044389d9de1c2ad3366218b9f3902f1330727c0bd6ff85a1822d8b24eb93fbd766a34e793a0738d42", 0x1000}], 0x6}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x20000091, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2, 0x4}, 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, &(0x7f0000000080)='^{^{:-*\x00', 0x402, &(0x7f0000000200)={@align=0x3, {0x6, 0x1, 0x90, 0xfffffffffffffff1}}, 0x0, &(0x7f0000000240), &(0x7f00000002c0)=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) shutdown(r0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102d00000005000000000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 16.883360431s ago: executing program 3 (id=4861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, 0x0, 0xe8469dacf6017451}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003940)={0x14, 0x2d, 0x107, 0xfffffffe, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000) 16.702438591s ago: executing program 1 (id=4863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x14, r2, 0xd5c15c672e322a81}, 0x14}}, 0x20000008) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 16.684497315s ago: executing program 3 (id=4864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r0], 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000002fc0)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef", 0x19, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @window={0x3, 0x9a, 0x8}, @window={0x3, 0x882c, 0x4}, @timestamp, @timestamp, @sack_perm, @sack_perm], 0x13) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000040000000029000000180001801400020076657468315f746f5f687372"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x200, 0x3, 0x101, 0xa0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100), 0x4) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x20, 0x3fa, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044001) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) 16.581754996s ago: executing program 0 (id=4865): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 16.526280818s ago: executing program 2 (id=4866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf25030000000c00030000000000000000000c0008000100000000000000340007800c00018008200100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c000200000000000000000006000a00295b00000c00050024000000000000000c0006000000000000000000080001"], 0xb0}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000080) 16.525464198s ago: executing program 4 (id=4867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x260, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x15}]}}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_DST={0x98, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x10}, 0xc004) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x260, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x15}]}}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_DST={0x98, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x10}, 0xc004) (async) 16.524401298s ago: executing program 3 (id=4868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000110}, 0x25) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23, @local}}, 0xfffffffb, 0x0, 0x8, 0x2, 0x1, 0x694, 0xa}, &(0x7f00000006c0)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000700)={r4, 0x9}, &(0x7f0000000740)=0x8) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) syz_emit_ethernet(0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r10, 0x1c614000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x33) 16.44146329s ago: executing program 0 (id=4869): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x6d5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x614a01, 0x0) 16.433159247s ago: executing program 1 (id=4870): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x40048d0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200144}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4003}, 0x44800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffddbdf251d00000008000300", @ANYRES32=r2, @ANYBLOB="44002f80080001000000e6ff0b00020002"], 0x60}, 0x1, 0x0, 0x0, 0xd49920d372514742}, 0x4000040) 16.29522074s ago: executing program 4 (id=4871): ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x1, 0x4, 0x1, 0x80000000, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}}, @NFT_MSG_DELRULE={0x148, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x99, 0x7, 0x1, 0x0, "436ea38e26521ad6ebc58b00fbfb58486e76746ef016fcc30adf70a1c0d320299ebcd47ca0832aa003eb958b6c49033c03514a6cfc08804e42e7c4b2369745c519e9b44d73762cec937cf82afeba244246e1017c1a6f08998eb6bb9fe1c936a027b3a7e70dcdd02c14c1c0ea2f0b8a8915ebd0da1dec4dd7d739dee121dccaf9815a2452eed99bd20e5aac36f54e575e18aac0c6b6"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0x184}}, 0x0) 16.210506208s ago: executing program 4 (id=4872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x240080c7) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000100)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x6d5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000140), 0x80000003, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r7}, 0x38) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r10}, 0x38) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f00000002c0)={0x18, 0x1c, 0x300, 0x70bd26, 0x25dfdbfc, "", [@typed={0x7, 0x86, 0x0, 0x0, @str='([\x00'}]}, 0x18}, {&(0x7f0000000340)={0x10, 0x3b, 0xc91cc2d27e6f089e, 0x70bd29, 0x25dfdbfd}, 0x10}, {&(0x7f0000000700)={0x228, 0x16, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xbd, 0x139, 0x0, 0x1, [@nested={0x4, 0x116}, @generic="d8c2154767282d6eae3ce59466ec8728f532c649147f90308e9ff5f9e195652e591c06383cbd4cfe3117db2716ed0d9c6acf352b32b460af93f4232b66e1c5b9592785451fa3e06e0adb74118a1f47722154ef6d6ffcc880e4ef7f442681e79865a50c39753615fd0b3f1cd2c02fc4dadbd06a2d3754c3c3a0d383691fc9", @nested={0x4, 0x13c}, @typed={0x8, 0x9c, 0x0, 0x0, @fd=r6}, @nested={0x4, 0xca}, @generic="ff3b566f350251dde5bf0d81ee1292", @generic="a0d837997c6b968a9d4f0acba0c79bf2f7ab7591fead47ac"]}, @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@remote}, @generic="e391329bf239cf84a9fa420efd0dbc9ae04970ae543b24d1564931ea147d4157d30c033cb9b4da965c89573b03bcaff84b55a747160dfe86b516fbf1c47401da6758eb1accdb822fa2066a3421e5df56c96869c8998c7e2b3416ce71d5a8bffa2f0466428d85ee08acbe9535135c863959a23bda91af65608f8451", @nested={0x9a, 0x98, 0x0, 0x1, [@typed={0xc, 0x15d, 0x0, 0x0, @u64=0x1a0d8da7}, @generic="aab4bd3f38e18eb47d60284d4101e91855047866b38bec812f8b974e6f28f4834f8013da51c1282c035d0e288f24a18ad14b735200b522a71dc0c3eee207452cfd47b886475421ee9a446017b42392e8feea6738644e17236e0232b45ec779017338b444ca0f818ad3e6d7936d1fa5fd1967a3f1396771a6dba38604b96b4ae104f5caec9d8609106603"]}, @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x9}, @nested={0x24, 0xc, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @u32=0x4}, @typed={0xb, 0xeb, 0x0, 0x0, @str='batadv\x00'}, @nested={0x4, 0x8d}, @typed={0x8, 0x2b, 0x0, 0x0, @pid}]}]}, 0x228}, {&(0x7f0000001b40)={0x1104, 0x21, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x4, 0x1e}, @nested={0x1010, 0x115, 0x0, 0x1, [@nested={0x4, 0x15c}, @generic="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", @nested={0x4, 0xff}, @nested={0x4, 0x110}]}, @nested={0xc9, 0x98, 0x0, 0x1, [@generic="8cf2bfe558e4fa6346371b5d82b677af06c0ae3906a2a54ea2f852f9c8edf1297bba40c7862cbf3b9a7547299a1bbcf1f6f9c43f535513b46f6028518d16584c07523e400240f72b0193d5d7d2ceaed23c10f4ee2affaf0486eb2de47f2dc2d87484b663fa9c3676853a253f98b785a2c70a513a8216c5b1397e2a51503848baa721fe425f851ec56b67ae14204fbaba4da466e4948a45a7e27b83b9ca58e76120c275794dc693614c94eb084b44e093c69d74176a3e84f8b64ec52c7d", @nested={0x4, 0x53}, @nested={0x4, 0xf4}]}, @typed={0x8, 0x120, 0x0, 0x0, @uid}, @typed={0xc, 0x158, 0x0, 0x0, @u64=0x8}]}, 0x1104}, {&(0x7f0000002c80)={0x4e0, 0x16, 0x10, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x167, 0x0, 0x0, @uid}, @generic="dd65ecae3ccf4e1d6ceb56fefd79f659b101ef50fd93838339a1c9414942b9f8006933e7f5df1dc01e78f89b27513a602e6fcdd1102cd23480b5469e0c1280429469ad37484053f0df8af25288fefea336fcba2b51dec014e934b3a751b4ef9345962d8198d35133c4ec7433301316eef864ff15f60b5cd566f9cbfc5ff7837445a823e2776fd62df638265f150740cf291dcdea4b3e35807f0f0dfe8bd21a6b2767bd8b72b40334d7468060df62b0b366c78c30c12d619abe4dc4c839e4d1ad2c300508982c6cddaf1a1de1c1a928bfa9150240729a2da293a44347eb1e0cc22f923128d021cf6d31ff20e78894f2", @nested={0x1b9, 0x103, 0x0, 0x1, [@nested={0x4, 0x28}, @nested={0x4, 0x98}, @generic="68106398a5f7da939818f617591ea246d89c40575cadcd4937d8958463f8a22418a4238fa1af5a82474c2c8f27d8880db8f7cbc1e8054302a0884c49458d12b6a2ec07f3e43af75dbce7381f8a4ce24d2c2bacd750fa67ee64cbf3d1fc1bcd58885982065689621bc35775656672a6b0b1afbcb49f915c7aac722b4bb1f8ee9c3d6416cdc007d51a04a9134e297aab7ef46c7f2afb02aaabe3814b591934441142825e1a7bed7710aa58b75b6bda09b46621aa6268a7f5f245cf0c1ad874474a97400beac071d05b98a81c55a8b1be20881ba3b83d216c79e0bd997c650616c3a0b14b38c6a3a0", @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@multicast2}, @generic="34741356", @generic="5ca883e31192dd6cf20c9a291b365aa9a168c2d2899bb3ebb51951417fc585d94fdfbdd6867b686770f313c3b68f3f99d15cb7ef6aeb5fcd1715060901440fa613dc16ab73ab8614722e3d1ebb7d356a77a25029d64101a7e2b4bae5b115e3fee43c7d29405ad33409b7a515368af41c378c6f4e622316a8db135f7ec6a0c7a1167e82bfe886d41111c14b7e3ecbf48d574975ac5621b0e7600c5731124dccb1a738", @nested={0x4, 0x74}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x1a1, 0x52, 0x0, 0x1, [@generic="bd412f039e4db9ef6e7ab77bc0ee680881f7bd249678dadcee7366e1edbea07c86df486b97d02e7d812c23003bfa7ae7b6f6712357d9a0f6dc351460f69b1d10c8fcadf728ab90d261b01c107e708d870fee5bd343f603bfa4a8346cb63d468ff8613c608b88b46c80088df755e89a6790db9b58a850b7663862dd1b7a1c2de621bd7895ae4d0c4208116418be3c37e4491dd45492d31cd38705e8cece1c943ffbaad23ecfb729d7817cd485ed271c6be24d29782f2c1934dbafffef117e99ef283fefa69e28d4590e4a44a8eecad7b2990e94c4ccddaa304450689191180ea3474576bb5f3019ddd2e5f60d5852", @generic="525cce1c16050133c0cb71bbcfca75bbfa43ee3d180a841d7030b7471ab9ba60e98ce0fc8ce9f7548447778296086db29546e69e41f6ce486d9d61e3986983fed238629fdbe17100df479eedb30b24406d51ddfd608d071887977d08ec8e62dfd517866c6ff628126c9adc814ecb252f2c43048402168cda4760728d23b6274d91dea166a14b551ecc41539af61e30f95182c192d8a0bcb86bf7df7a3c20615b341475f950a9b4c6ec23f7", @nested={0x4, 0x70}]}, @nested={0x68, 0xc3, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @uid}, @nested={0x4, 0x54}, @typed={0xc, 0x61, 0x0, 0x0, @str=',-)%+^^\x00'}, @nested={0x4, 0xed}, @generic="4e91718222ef8864aaddd53ac1e4b6de2e8907dc58b78c592b7b06df2858d48ae4326d01db682869f615c4e3a793b34fe92fee05ca8771cf", @nested={0x4, 0x26}, @typed={0xc, 0x13c, 0x0, 0x0, @u64=0x4}]}, @nested={0x10, 0xe6, 0x0, 0x1, [@nested={0x4, 0xe1}, @nested={0x4, 0x3a}, @nested={0x4, 0x116}]}]}, 0x4e0}, {&(0x7f0000003180)={0x224, 0x33, 0x8, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x8a, 0x0, 0x0, @uid}, @nested={0x80, 0x69, 0x0, 0x1, [@generic, @typed={0x70, 0x8, 0x0, 0x0, @binary="6ec7ee81c28844c2d5d27c2b66e78623c40c5be5160add52693bf5c62778f56d306cc644c83496d330811378fdf73e031e38b813dd6d2a417071346d2153d21cc4e1600c8a383dd34b844681630bc58a9aa3f4367fba2883d5926c80370d3e5a3a9f06c3cd2dbc14e41322d9"}, @nested={0x4, 0x35}, @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x148, 0xc0, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @uid}, @generic="51540620acc9e0ba305a3a1e4278497139283ae705884ad4db09fa2cbe758e98ad18b33577ffbf7def33a9e26a76dfcc7f183fd6618d3d546977ef965bee7004576ccd34545376ea5057b8b7796dda9085aa2be7a1cfa960d127dd20eb81e4c13f2b764e30e5ccc9a75aaa66fa5dcfba985b9ba038e2eebdaf98d6093297c92f704bd1c9eed6806f69100d75e306d7f080115259f55b5bc01303d04904", @generic="a5483ba8f7913bb348bf69fa7d53ac9d2b8ccb3b96aa7f25a47afa6c6b51c73e64d82389b83a35f3af352415e3a2516327e6a58d6c04ef15312df5eb0e4c2a6e540acc5cc80a6c74df9cf1d71c5d89c45f26ef8bb6c5526ad4e7e91aed8af6863f05a31c2c3c2514dc5e62bf6fe3c106b608743c3bbe7e2d5b48eb3de77a3b8142076abe1743de07ebb7559f3c972a62be0c7d55ff5f5a", @nested={0x4, 0xe2}, @nested={0x4, 0x85}]}, @generic="4f7621d0c5002e2bdf22ee4675c354281db56ebd25f81e103c2918be054c6236dc312c86344c5a98dc4041dad06d9374c86bff28af85f962e6", @typed={0x8, 0xc, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x224}, {&(0x7f00000033c0)={0x58, 0x17, 0x504, 0x70bd25, 0x25dfdbfc, "", [@nested={0x48, 0xd6, 0x0, 0x1, [@typed={0x4, 0xf7}, @generic="9510e7fede385d37840011b0efad37f88d47a0a74d51eed8ea617b72c052bf431a4f72604931d3a2e22643558d90ba536dc2b701405fff83fc827c2a0ed25a1a"]}]}, 0x58}], 0x7, 0x0, 0x0, 0x10}, 0x0) sendto(r2, &(0x7f0000000100)="c96874a2041e28c1d56bd98acefd500693fa90cadc45ddd07cb93501f4", 0x1d, 0x400c004, &(0x7f0000000180)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) 15.844945777s ago: executing program 0 (id=4873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0xd}}, 0x0) (async, rerun: 32) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x40}}, 0x14}}, 0x44) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}}, 0x800) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 15.729270693s ago: executing program 0 (id=4874): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x8, &(0x7f0000000000), 0x8}, 0x94) 15.702963369s ago: executing program 0 (id=4875): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2}, 0x2}], 0x1, 0x20, 0x0) r3 = socket(0x8, 0x80000, 0x7) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) recvmsg(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/48, 0x30}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x3}, 0x8000) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000000)) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x6) close(r5) 15.292676489s ago: executing program 0 (id=4876): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffffff, 0xffffffff, 'veth0_macvtap\x00', 'rose0\x00', {0xff}, {}, 0x5e, 0x1, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x5, 0x5, 0x7, 0x20], 0x7, 0x5}, {0xffffffffffffffff, [0x56, 0x4, 0x8, 0x5e, 0x1], 0x0, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x10000, 0x8, 'pptp\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 1.266538052s ago: executing program 32 (id=4870): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x40048d0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200144}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4003}, 0x44800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffddbdf251d00000008000300", @ANYRES32=r2, @ANYBLOB="44002f80080001000000e6ff0b00020002"], 0x60}, 0x1, 0x0, 0x0, 0xd49920d372514742}, 0x4000040) 1.210319256s ago: executing program 33 (id=4866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf25030000000c00030000000000000000000c0008000100000000000000340007800c00018008200100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c000200000000000000000006000a00295b00000c00050024000000000000000c0006000000000000000000080001"], 0xb0}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000080) 1.147383603s ago: executing program 34 (id=4868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000110}, 0x25) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23, @local}}, 0xfffffffb, 0x0, 0x8, 0x2, 0x1, 0x694, 0xa}, &(0x7f00000006c0)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000700)={r4, 0x9}, &(0x7f0000000740)=0x8) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) syz_emit_ethernet(0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r10, 0x1c614000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x33) 83.017776ms ago: executing program 35 (id=4876): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffffff, 0xffffffff, 'veth0_macvtap\x00', 'rose0\x00', {0xff}, {}, 0x5e, 0x1, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x5, 0x5, 0x7, 0x20], 0x7, 0x5}, {0xffffffffffffffff, [0x56, 0x4, 0x8, 0x5e, 0x1], 0x0, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x10000, 0x8, 'pptp\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 0s ago: executing program 36 (id=4872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x240080c7) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000100)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x6d5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000140), 0x80000003, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r7}, 0x38) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r10}, 0x38) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f00000002c0)={0x18, 0x1c, 0x300, 0x70bd26, 0x25dfdbfc, "", [@typed={0x7, 0x86, 0x0, 0x0, @str='([\x00'}]}, 0x18}, {&(0x7f0000000340)={0x10, 0x3b, 0xc91cc2d27e6f089e, 0x70bd29, 0x25dfdbfd}, 0x10}, {&(0x7f0000000700)={0x228, 0x16, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xbd, 0x139, 0x0, 0x1, [@nested={0x4, 0x116}, @generic="d8c2154767282d6eae3ce59466ec8728f532c649147f90308e9ff5f9e195652e591c06383cbd4cfe3117db2716ed0d9c6acf352b32b460af93f4232b66e1c5b9592785451fa3e06e0adb74118a1f47722154ef6d6ffcc880e4ef7f442681e79865a50c39753615fd0b3f1cd2c02fc4dadbd06a2d3754c3c3a0d383691fc9", @nested={0x4, 0x13c}, @typed={0x8, 0x9c, 0x0, 0x0, @fd=r6}, @nested={0x4, 0xca}, @generic="ff3b566f350251dde5bf0d81ee1292", @generic="a0d837997c6b968a9d4f0acba0c79bf2f7ab7591fead47ac"]}, @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@remote}, @generic="e391329bf239cf84a9fa420efd0dbc9ae04970ae543b24d1564931ea147d4157d30c033cb9b4da965c89573b03bcaff84b55a747160dfe86b516fbf1c47401da6758eb1accdb822fa2066a3421e5df56c96869c8998c7e2b3416ce71d5a8bffa2f0466428d85ee08acbe9535135c863959a23bda91af65608f8451", @nested={0x9a, 0x98, 0x0, 0x1, [@typed={0xc, 0x15d, 0x0, 0x0, @u64=0x1a0d8da7}, @generic="aab4bd3f38e18eb47d60284d4101e91855047866b38bec812f8b974e6f28f4834f8013da51c1282c035d0e288f24a18ad14b735200b522a71dc0c3eee207452cfd47b886475421ee9a446017b42392e8feea6738644e17236e0232b45ec779017338b444ca0f818ad3e6d7936d1fa5fd1967a3f1396771a6dba38604b96b4ae104f5caec9d8609106603"]}, @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x9}, @nested={0x24, 0xc, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @u32=0x4}, @typed={0xb, 0xeb, 0x0, 0x0, @str='batadv\x00'}, @nested={0x4, 0x8d}, @typed={0x8, 0x2b, 0x0, 0x0, @pid}]}]}, 0x228}, {&(0x7f0000001b40)={0x1104, 0x21, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x4, 0x1e}, @nested={0x1010, 0x115, 0x0, 0x1, [@nested={0x4, 0x15c}, @generic="48c1bef0ade84d8e6db5a5892237f07f8b75eb38a529ffdfc1a2370a07d81723b47fa8e4b23a17e381d4ed69ce9166e62db9b0eae2434bfc8885d99fa936ac66613c2839827d3eb53a38192d23c2cd315885aac6b5dadedc74ee6d9cbfe9b4d76d8b989c392b1b9497daa97d8bf660d75b545d1932b923cc42688eff450558cd65170e13bf8f965771ac28bc5ae847c2f211a7cff62a2a66c10f87d2d26f0fa929cda20f626d6f64f2de31a00b5db875a2d3cf417489756df43050da01659a14fa530f050e0f6686bfaccb67e3aa3ef88bdd55722bb678cb3d2ca254e61147334dc87e2ff19006c52f774d529898ea2cb266999a56a69eda3a8153a24407c28785e42dd108cacc1671bf8acd8db82aaf9df82cda4073eb6c46836371b989706888c73e27597a4d012d7d2de1bfc4184f0442332545da8859e56aec436d47f81a71193be0767a92bb257d092820bc11fe2889692c9791a6cdd9dbc2eb789615cde67a2dc88679c9c0e4ba1b6be3776ffc2b8e7a33e09a42d0b72ac3a868f32fc5267277cb1c656d8194bb690238f94922dce7a2e1fa9622037616a94123feda802964b882727c2fe4d20cf18bc89d5bad2f33dd0812552c1274f4ff9176466902071c3eec724a20686bf5c80e86d96a0120b0ace5dd4f9a5af6317569703546d4bbc8a1e5ab58a904a916bd0266827e7af513b93e4a195e13a08652c0f690fa6628e7d7e5570fc039ce8b2b7e3a9c531d4c344bf521808bf22dc2a7424711422d9db838c886312fe86c94ff409807f7e11d4f4e0693932b991a694754f543b884b99b3196369a260100c918bef29945a3eea0e62b1add86f1b56db9ff99f4be5abfe67a1614e42013837e64e4226816a143d2b3d3f186588a631bc42243fa9a237bd3732c6df87ec4a4a4939239ced95c7ed75d5a0f6861f6076e5b1339e560ab5f0520255f394c5c3b9044cd04f1303206d32a6d5d5059a4d33fa8b0747d74c939c8cf17342ee9c3ec1e718b87d71ec556653671a6951763d0faf40d13dea6cf192fc46b7474a60b061eeecf52b8f739e663979810d5bf6a1330e89071762ba74897231babb97e51f2d1275e1eaf069d39f8294c6fcd7cb5691e662ce4d4b14d705c39590488064a9ff8298bec8509cd0bf32b637efffd6d150ee8e552df3a44a99c7e3f979a585a1167bbdfede0706bea5236873cd5746083546c5dc5b521ca881b71eff5e6f4f8b1403a46b8c3a45c52ebc1bb8a00516696e6f01e6e92d19e6882f90d4d3f87860891fc84e75c4a9f66aff9b807f651632e91e701d931e94a76bab7d3d4a123877310967bcf4be38835c931b7b605062538fe7bbd6319bf17ad349cb1e626113d5eeeab8c28e479a058b4fbafb277ffa1edb0c6d97eb69c4538cd3053d61417ac1f39fc2d075d0083b7bb10bf0297781d22b05f11ce2c39219e9ee50a153fba917705bbb12dcd235bda26a03671d7cbf245f2629ea588b10db978e49b978f35e7aa322cec064ed6d2fe1d4116a99ee2fd7c14629ac0335ac596add9d6bc2703a683d2114f68d05a2f5863dac859f6adf9e06428b16fe7469953c2388d96fd0f42ecaed3a6f919d36dfed310936f81d921ba59828158fbf041148ab447ecbae8bdfb962788256574eeeeb6898da079d9a2ef4fe5f2c79fe1033a984530522df8522d474fda9b1fd5d7eb5de5d2b05b93d8f42d102f708ea5a36fafe0469cd61889a49ce39e257aba03e960078d373fb175592311ef87c208f573cbe169a7303ba346814200a858131a1d952840bb380b1e1a7b4c361268086088d7e070f84ef3b4ae667d6303fe5e3ff5c80c425a6ee48dd120b6302ea1975c23aa3ed4655b9bb811b67dea75c34d0872f0e98b31aef305e29f3f40caac1eef01c388b68b50aae91b6ae3b453b76c40292e46e9ac7c9217d66c6282c59378a2c67c7f8582d847a0ca08c2466075847f917c0fa75b13b2786152dbb77aaa6744c9382c151b76cc781ae4e46f0762c8fc353fee3347e927fecce37c79685faa1e8a6cf62128f9d3ea09ab2fd2d2370acb5670208206c78e7ba699a41590bce95df35c4cdbb8a55344182f73c9f314ebf88f306b6a46ed3daf7095ba5130f7182285e36d55ccbec5ba0655a7f84bd1626ea46d84e85ff89469342e831c3191a389d5d468fde1debf7f2fb1f71c81f5f13d29ba8f9776ff742cb22923e17dc2150b739179f2696cac427c7cacde14a841ef101e59f04b64fd8869d790fca1110986d5a343bf9f485a133fdfcc479dcb30d5aa12828a4d036ecc9a7b7cb1e18cd80bdf0e385b29660d0a1d921d8f50e9ee52c866b3f15d4eca8c922da767ce12833ef77618a63790fb5caa8d3ee106507d66610a4ed6b4fe73498c7c7fa4a262285ea90e16ab5b4b90aad0dd33e449c28e038164355017d5f2b44f315d9eba18d15d8e8efeb77f15097a297a3f9d2e6329e83004f0bb5c91c60e9d9bb1ccc4e3560083437857242fab3846971de0b7a5e506d90f710ecea560b509eb486f982cd49c06ea9ed615574ac1b084081e3b07698ee6baa7195874b7b4ac3fe167ab279860ed09002c6e8f8819c895c7495b37c5ff6c7b1eb0321be105668d6b34a11d9eb5bbf187012086084309acd73955b42c261bfee3fef8aa67748e8c15deb0a52bb9ad8a827bd841b71c3318df7fb03fccced4eb5193ca0df4df2ad3c24c31e74612fd063a194df807db4310171c2b1c1af62ee10149552b96ddfbeace098e253f7e29e9c1d9265ee88fb37031d35c0fa3518deff8c227ee6266163360f978c164558001eab8285e76bcbc1177be143e9862da9e3659ca318e6acc0431ba4895a7f2205d190c32290ae0f3820ab92e8ce08c407176bf414c2d781cc210853f62c36f73d0309907a2906a6138be1aa7a2f82b0d266ca49ea3d2f15b549998da25645ceb32955fbeacb9d0e42009d47c971f28905874471aab3ff9ae83e7f840745a4be3d9d1eb6ff8d5e75b0e86b705038c42233fdae6fab5ef3d718cc809cbf83e01fb84fbc5ddb729962585a997d4a1e355733d22f97a4d6d694557f95c42c54b405f4ddebbff7750705cd7b1d7f473d7573056f7857d4a8070b3d40db82e35a2f09a71a1a192b03ed5bcc8326bd5befbea90ac730fdd952b820a3022125f351a825fc54b212935f87ff934c3b1e267142dbb33f24706f3eb08e9637946d0987d8fd8f2456eeac68e39f80be6380bc5fb08fd6f34cd0ba672965d7327ad1b56eb899a561dd10ad2f7fd5550a65a47ce6644d4a921476ff956df9bbed77833780087b90bddecbaa71dfc6b9bf2c8fc040e9560dbeef2f185bb576b95eccdb8d297a26b08b09976c5e48590cb639f9d267b345b54e8a091d0aedfd3a37e1ee4daa0932dc116ef3e4577a0c17aab0410358724bca29e533a946cd6d607ed54be6d02d05e74699088036636ff0da0559408c4b7bc7efe10d6e17cb6fec80b52f493299249b858180c858d8a1c8a0e626d5b5bbeee7e70994cf924cc62d2a6e2110077a97513274c5094b15f9be9b0d2522c03ee6db159152e1d142352bb80f49828791134f64c3f3f0dcf2e190180a563eb8eab71da3c9a9980a48a24c715745e4b4425f1bf495a2cf33526078f4683bdbea77879931944c06d390d31b6491e1cac24e646be614aa6e5b613f1137decb7cbdbda25f065a81d4812ea009d553b5ea3f72ff37ae8211bfb66aed9764f1a59985fd714e2c8f2e5a33e0147a151a3016095ee048beeef42213b0f1891bd25c0dd05adb99a66b4921037d2f55b13852a7591725751025d00f36450f6dfdb69ebde959228d2bb833bc7fc14b9e705e1caef53a8918d696e08abc9d7c5847f105680d54cd1239f52cdfbc3ff17e494d95bab5d5742e9444d50768f4a520b697a84f455ebe6970ca29abefef7b69446f2979d6c633c4b6c588c7f8e71fa04927568707fa9682b7cca8ac07d820226baafda05db291d127bce4ad75661525632ea335935d4d165ce26ef58763f5629a1a5b9d841073ec4b4427ab8ec3242f4672b8531d9e01a3805683d91eea0776b5a4d84345bb3cd6a5e4f6fac820bf6e6d660015aabf59e2748f3c78d92c42100246a704522f92d31b4d3c4dca19351edfc997268a56a9826d35ee99901d7ceef0af19ec164bfb99786205cb00ca36de7230f8a380af24e4643f4e2bb4bd0e6e2ac933c8381009bd96b3249204c8de01d86a2074523aefd792dfb3fb78a9c7b43a264ebf613030ee812dd98449b8479c2e9a40ee2d019fae13d7ee2bd4c66513f6028e786c5b45f4f2794a600f4fd0457eadafa5c5428e13b5c433a09368c39055787089102c862c1438850174b990d1089270a36c4caa78eabc7c86fa4b833f93944eaaa02aae7f9b21ebaa1b8112906fbf3d2bdc7aeb897dae35f8fdb3fedc2e80054ff430dd6677845750cbf07a2f810bd3913e0cc8d0905f8d01336a6d20b5b34ac457f9db4e78274e7fcb399536784e12918be9b8d46767440fdead2499a0c1945964eeb28f9707943a0acf3ea4bdbc1bc799b8aaf1e40a4696f9b0d40c22381b28167fe6c36685eef496a244635fd062b9b5a95e364cb51d68721932f31c088039d34283aeb69701c7ac6a22e39686341f0a3cd9d759ca5eecf1791df8c48131aa054286afc3e3e72460e42452ca84c067c19ee871bd3635ca315aee50938b4c94e05e6b64baa65ef03e1fb10b916ad07deded4eb011311841317627ea1eae4d2688d07b4ebdbfc3d58baf6c49d73be394096e842f49c4dddb8986ea670f993913e2004fa25f06762ed00d64480375170d3a9ac3952310205f38fc22e5ca7eac3153cfede09d84fd0267489fd05f58e8ee1195103820e71cd5d3c0ac3f50d3eb96a1ffc604188f12c2c2f2cc7b1c5924a1f7668242e61ad0b3241235e45995ff6172c69f50e6eaf50eb7b91f4172324db5e760625b5292fec820d8c256aa06d4b4d9588c797378f2e781b73812ccb33f0a807cc4e0e4952091e519492382a0724a6b05d652395f955fb728478039cd24b2593a36faef021f9bd17f425f2c0e5cf877db5c7f34e1c84a830f5cb6bac3ffaedfd025fe446ea1c79a05c3eb21d01a41be1edbcfedeac55209891256746f9c7a38187e8f26abdb989be0c3624c55b44fef5f5386a88424dd1b69cc5914bf4f0e567014056692a70987939db9b073fe3739c0b6d7cdb811a508d9cd3b783b22087dfe48c89d0a0be74dfa882374ae039908c014bb6a1c813856f6610bee8dffb8119d8933b25e880086c1cefb0b11a918e2c4dcf9c74d7bacb3ae31b6e02d273d6e4ba72fa063ec387914d9d504bcf695bfc2aeea72a112c9f1c61f4aa4cc98609e922ce3e0c778c194b650d8e4510c93f9430c5be888df3b5123ce06ef9e680c0315f7ba6c7ff68f108b3479b854e53b32300d9d70de06a63e25d2a22f8eb80291d6019924424a4a63c60278cf4afdd2e1538edc8546365e21cce95a7155ff248e97e6259a3cc7b6cb1771d6e7b60991bccec842630dc04c7cc0439df70ccd85eed7c110bcde5e562809ba6fe461442f5cc1d4deabb582e52938af2f2490f1dc248880c818e5f9531b30c3ebd9c561aae8e93d067850ef8786ba345f6f58321cf79cff5e7037e81abf416d60a52791e1c8514fe83a387d680deb19d260121ee3a3a65a0019e79ca4a8d683fc359c6e7afd4c2c34b4ad66538108f5393dedab182acffadfc19f76f69a9df5602e80634a5064a63572f38a4bb451216d320902f3fa8b85f276c93c034d9708279ceeffead2926", @nested={0x4, 0xff}, @nested={0x4, 0x110}]}, @nested={0xc9, 0x98, 0x0, 0x1, [@generic="8cf2bfe558e4fa6346371b5d82b677af06c0ae3906a2a54ea2f852f9c8edf1297bba40c7862cbf3b9a7547299a1bbcf1f6f9c43f535513b46f6028518d16584c07523e400240f72b0193d5d7d2ceaed23c10f4ee2affaf0486eb2de47f2dc2d87484b663fa9c3676853a253f98b785a2c70a513a8216c5b1397e2a51503848baa721fe425f851ec56b67ae14204fbaba4da466e4948a45a7e27b83b9ca58e76120c275794dc693614c94eb084b44e093c69d74176a3e84f8b64ec52c7d", @nested={0x4, 0x53}, @nested={0x4, 0xf4}]}, @typed={0x8, 0x120, 0x0, 0x0, @uid}, @typed={0xc, 0x158, 0x0, 0x0, @u64=0x8}]}, 0x1104}, {&(0x7f0000002c80)={0x4e0, 0x16, 0x10, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x167, 0x0, 0x0, @uid}, @generic="dd65ecae3ccf4e1d6ceb56fefd79f659b101ef50fd93838339a1c9414942b9f8006933e7f5df1dc01e78f89b27513a602e6fcdd1102cd23480b5469e0c1280429469ad37484053f0df8af25288fefea336fcba2b51dec014e934b3a751b4ef9345962d8198d35133c4ec7433301316eef864ff15f60b5cd566f9cbfc5ff7837445a823e2776fd62df638265f150740cf291dcdea4b3e35807f0f0dfe8bd21a6b2767bd8b72b40334d7468060df62b0b366c78c30c12d619abe4dc4c839e4d1ad2c300508982c6cddaf1a1de1c1a928bfa9150240729a2da293a44347eb1e0cc22f923128d021cf6d31ff20e78894f2", @nested={0x1b9, 0x103, 0x0, 0x1, [@nested={0x4, 0x28}, @nested={0x4, 0x98}, @generic="68106398a5f7da939818f617591ea246d89c40575cadcd4937d8958463f8a22418a4238fa1af5a82474c2c8f27d8880db8f7cbc1e8054302a0884c49458d12b6a2ec07f3e43af75dbce7381f8a4ce24d2c2bacd750fa67ee64cbf3d1fc1bcd58885982065689621bc35775656672a6b0b1afbcb49f915c7aac722b4bb1f8ee9c3d6416cdc007d51a04a9134e297aab7ef46c7f2afb02aaabe3814b591934441142825e1a7bed7710aa58b75b6bda09b46621aa6268a7f5f245cf0c1ad874474a97400beac071d05b98a81c55a8b1be20881ba3b83d216c79e0bd997c650616c3a0b14b38c6a3a0", @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@multicast2}, @generic="34741356", @generic="5ca883e31192dd6cf20c9a291b365aa9a168c2d2899bb3ebb51951417fc585d94fdfbdd6867b686770f313c3b68f3f99d15cb7ef6aeb5fcd1715060901440fa613dc16ab73ab8614722e3d1ebb7d356a77a25029d64101a7e2b4bae5b115e3fee43c7d29405ad33409b7a515368af41c378c6f4e622316a8db135f7ec6a0c7a1167e82bfe886d41111c14b7e3ecbf48d574975ac5621b0e7600c5731124dccb1a738", @nested={0x4, 0x74}, @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x1a1, 0x52, 0x0, 0x1, [@generic="bd412f039e4db9ef6e7ab77bc0ee680881f7bd249678dadcee7366e1edbea07c86df486b97d02e7d812c23003bfa7ae7b6f6712357d9a0f6dc351460f69b1d10c8fcadf728ab90d261b01c107e708d870fee5bd343f603bfa4a8346cb63d468ff8613c608b88b46c80088df755e89a6790db9b58a850b7663862dd1b7a1c2de621bd7895ae4d0c4208116418be3c37e4491dd45492d31cd38705e8cece1c943ffbaad23ecfb729d7817cd485ed271c6be24d29782f2c1934dbafffef117e99ef283fefa69e28d4590e4a44a8eecad7b2990e94c4ccddaa304450689191180ea3474576bb5f3019ddd2e5f60d5852", @generic="525cce1c16050133c0cb71bbcfca75bbfa43ee3d180a841d7030b7471ab9ba60e98ce0fc8ce9f7548447778296086db29546e69e41f6ce486d9d61e3986983fed238629fdbe17100df479eedb30b24406d51ddfd608d071887977d08ec8e62dfd517866c6ff628126c9adc814ecb252f2c43048402168cda4760728d23b6274d91dea166a14b551ecc41539af61e30f95182c192d8a0bcb86bf7df7a3c20615b341475f950a9b4c6ec23f7", @nested={0x4, 0x70}]}, @nested={0x68, 0xc3, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @uid}, @nested={0x4, 0x54}, @typed={0xc, 0x61, 0x0, 0x0, @str=',-)%+^^\x00'}, @nested={0x4, 0xed}, @generic="4e91718222ef8864aaddd53ac1e4b6de2e8907dc58b78c592b7b06df2858d48ae4326d01db682869f615c4e3a793b34fe92fee05ca8771cf", @nested={0x4, 0x26}, @typed={0xc, 0x13c, 0x0, 0x0, @u64=0x4}]}, @nested={0x10, 0xe6, 0x0, 0x1, [@nested={0x4, 0xe1}, @nested={0x4, 0x3a}, @nested={0x4, 0x116}]}]}, 0x4e0}, {&(0x7f0000003180)={0x224, 0x33, 0x8, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x8a, 0x0, 0x0, @uid}, @nested={0x80, 0x69, 0x0, 0x1, [@generic, @typed={0x70, 0x8, 0x0, 0x0, @binary="6ec7ee81c28844c2d5d27c2b66e78623c40c5be5160add52693bf5c62778f56d306cc644c83496d330811378fdf73e031e38b813dd6d2a417071346d2153d21cc4e1600c8a383dd34b844681630bc58a9aa3f4367fba2883d5926c80370d3e5a3a9f06c3cd2dbc14e41322d9"}, @nested={0x4, 0x35}, @typed={0x8, 0x46, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x148, 0xc0, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @uid}, @generic="51540620acc9e0ba305a3a1e4278497139283ae705884ad4db09fa2cbe758e98ad18b33577ffbf7def33a9e26a76dfcc7f183fd6618d3d546977ef965bee7004576ccd34545376ea5057b8b7796dda9085aa2be7a1cfa960d127dd20eb81e4c13f2b764e30e5ccc9a75aaa66fa5dcfba985b9ba038e2eebdaf98d6093297c92f704bd1c9eed6806f69100d75e306d7f080115259f55b5bc01303d04904", @generic="a5483ba8f7913bb348bf69fa7d53ac9d2b8ccb3b96aa7f25a47afa6c6b51c73e64d82389b83a35f3af352415e3a2516327e6a58d6c04ef15312df5eb0e4c2a6e540acc5cc80a6c74df9cf1d71c5d89c45f26ef8bb6c5526ad4e7e91aed8af6863f05a31c2c3c2514dc5e62bf6fe3c106b608743c3bbe7e2d5b48eb3de77a3b8142076abe1743de07ebb7559f3c972a62be0c7d55ff5f5a", @nested={0x4, 0xe2}, @nested={0x4, 0x85}]}, @generic="4f7621d0c5002e2bdf22ee4675c354281db56ebd25f81e103c2918be054c6236dc312c86344c5a98dc4041dad06d9374c86bff28af85f962e6", @typed={0x8, 0xc, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x224}, {&(0x7f00000033c0)={0x58, 0x17, 0x504, 0x70bd25, 0x25dfdbfc, "", [@nested={0x48, 0xd6, 0x0, 0x1, [@typed={0x4, 0xf7}, @generic="9510e7fede385d37840011b0efad37f88d47a0a74d51eed8ea617b72c052bf431a4f72604931d3a2e22643558d90ba536dc2b701405fff83fc827c2a0ed25a1a"]}]}, 0x58}], 0x7, 0x0, 0x0, 0x10}, 0x0) sendto(r2, &(0x7f0000000100)="c96874a2041e28c1d56bd98acefd500693fa90cadc45ddd07cb93501f4", 0x1d, 0x400c004, &(0x7f0000000180)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): in process `syz.2.3588'. [ 419.439867][T19294] syzkaller0: entered promiscuous mode [ 419.447473][T19294] syzkaller0: entered allmulticast mode [ 419.481490][T19295] bridge0: port 3(vlan2) entered blocking state [ 419.503846][T19295] bridge0: port 3(vlan2) entered disabled state [ 419.516528][T19295] vlan2: entered allmulticast mode [ 419.527005][T19295] geneve0: entered allmulticast mode [ 419.540742][T19300] nbd0: detected capacity change from 0 to 63 [ 419.565272][T19295] vlan2: entered promiscuous mode [ 419.590007][T19295] geneve0: entered promiscuous mode [ 419.610761][T19304] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3591'. [ 419.621469][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'. [ 419.634937][ T5635] block nbd0: Receive control failed (result -104) [ 419.847510][T19314] netlink: 'syz.3.3593': attribute type 3 has an invalid length. [ 420.889979][T19363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3603'. [ 420.948843][T19342] syzkaller0: entered promiscuous mode [ 420.954448][T19342] syzkaller0: entered allmulticast mode [ 424.381227][T19433] netlink: 'syz.3.3621': attribute type 1 has an invalid length. [ 424.412449][T19435] netlink: 'syz.4.3622': attribute type 12 has an invalid length. [ 424.595107][T19433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.690072][T19456] __nla_validate_parse: 4 callbacks suppressed [ 424.690089][T19456] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3621'. [ 424.768765][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'. [ 424.814659][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3626'. [ 424.852019][T19460] netlink: 'syz.2.3626': attribute type 14 has an invalid length. [ 424.897986][T19441] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 425.056932][T19443] erspan1: entered allmulticast mode [ 425.262266][T19469] vlan3: entered promiscuous mode [ 425.268192][T19469] hsr0: entered promiscuous mode [ 425.275386][T19469] vlan3: entered allmulticast mode [ 425.283897][T19469] hsr0: entered allmulticast mode [ 425.303016][T19469] hsr_slave_0: entered allmulticast mode [ 425.317215][T19469] hsr_slave_1: entered allmulticast mode [ 425.699200][T19497] netlink: 'syz.1.3636': attribute type 1 has an invalid length. [ 425.767562][T19499] openvswitch: netlink: IPv4 tunnel dst address is zero [ 425.923109][T19509] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3640'. [ 425.955918][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3640'. [ 425.968569][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3641'. [ 425.990006][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3640'. [ 426.056996][T19508] macsec1: entered promiscuous mode [ 426.068363][T19508] bridge0: entered promiscuous mode [ 426.081004][T19508] macsec1: entered allmulticast mode [ 426.105204][T19508] bridge0: entered allmulticast mode [ 426.570381][T19541] netlink: 'syz.1.3651': attribute type 4 has an invalid length. [ 426.645930][T19546] FAULT_INJECTION: forcing a failure. [ 426.645930][T19546] name failslab, interval 1, probability 0, space 0, times 1 [ 426.681389][T19546] CPU: 1 UID: 0 PID: 19546 Comm: syz.0.3654 Not tainted syzkaller #0 PREEMPT(full) [ 426.681428][T19546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.681442][T19546] Call Trace: [ 426.681450][T19546] [ 426.681458][T19546] dump_stack_lvl+0xe8/0x150 [ 426.681490][T19546] should_fail_ex+0x40c/0x560 [ 426.681518][T19546] should_failslab+0xa8/0x100 [ 426.681587][T19546] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 426.681619][T19546] ? local_lock_release+0x9c/0x160 [ 426.681704][T19546] ? __alloc_skb+0x1d7/0x7a0 [ 426.681728][T19546] ? __alloc_skb+0x1d7/0x7a0 [ 426.681761][T19546] __alloc_skb+0x1d7/0x7a0 [ 426.681790][T19546] netlink_ack+0x136/0xb30 [ 426.681859][T19546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.681883][T19546] ? __pfx_nl80211_post_doit+0x10/0x10 [ 426.681976][T19546] ? __pfx_ref_tracker_free+0x10/0x10 [ 426.682020][T19546] netlink_rcv_skb+0x2a4/0x4a0 [ 426.682039][T19546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 426.682061][T19546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.682092][T19546] ? down_read+0x2be/0x330 [ 426.682147][T19546] genl_rcv+0x28/0x40 [ 426.682180][T19546] netlink_unicast+0x7bb/0x940 [ 426.682245][T19546] netlink_sendmsg+0x813/0xb40 [ 426.682273][T19546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.682295][T19546] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.682343][T19546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.682361][T19546] sock_sendmsg_nosec+0x13a/0x180 [ 426.682387][T19546] ____sys_sendmsg+0x54e/0x850 [ 426.682411][T19546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.682436][T19546] ? import_iovec+0x73/0xa0 [ 426.682465][T19546] ___sys_sendmsg+0x2a5/0x360 [ 426.682481][T19546] ? __lock_acquire+0x683/0x2cf0 [ 426.682510][T19546] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.682562][T19546] ? __fget_files+0x2a/0x420 [ 426.682585][T19546] ? __fget_files+0x3a2/0x420 [ 426.682618][T19546] __x64_sys_sendmsg+0x1b1/0x290 [ 426.682640][T19546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.682674][T19546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.682695][T19546] do_syscall_64+0x174/0x580 [ 426.682712][T19546] ? trace_irq_disable+0x3b/0x140 [ 426.682735][T19546] ? clear_bhb_loop+0x40/0x90 [ 426.682758][T19546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.682776][T19546] RIP: 0033:0x7fef29b9de99 [ 426.682795][T19546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.682811][T19546] RSP: 002b:00007fef2aa92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.682831][T19546] RAX: ffffffffffffffda RBX: 00007fef29e25fa0 RCX: 00007fef29b9de99 [ 426.682844][T19546] RDX: 0000000004000040 RSI: 0000200000000480 RDI: 0000000000000003 [ 426.682856][T19546] RBP: 00007fef2aa92090 R08: 0000000000000000 R09: 0000000000000000 [ 426.682868][T19546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.682879][T19546] R13: 00007fef29e26038 R14: 00007fef29e25fa0 R15: 00007ffed62d7908 [ 426.682909][T19546] [ 427.275439][T19557] syzkaller0: entered promiscuous mode [ 427.281124][T19557] syzkaller0: entered allmulticast mode [ 427.469606][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3664'. [ 427.471692][T19576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.865361][T19598] netlink: 'syz.3.3668': attribute type 1 has an invalid length. [ 428.994018][T19649] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3683'. [ 429.035811][T19649] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3683'. [ 429.073409][T19649] IPv4: Oversized IP packet from 127.202.26.0 [ 429.307950][T19663] netlink: 'syz.3.3686': attribute type 4 has an invalid length. [ 429.338373][T19661] v: renamed from veth0_vlan (while UP) [ 429.511575][T19669] syzkaller1: entered promiscuous mode [ 429.526927][T19669] syzkaller1: entered allmulticast mode [ 429.719381][T19667] syzkaller0: entered promiscuous mode [ 429.757010][T19667] syzkaller0: entered allmulticast mode [ 429.817145][T19693] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 430.326478][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3699'. [ 430.396260][T19718] xt_hashlimit: size too large, truncated to 1048576 [ 432.419190][T19719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3699'. [ 432.701749][T19738] netlink: 'syz.1.3704': attribute type 1 has an invalid length. [ 432.853750][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3705'. [ 432.881609][T19749] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3706'. [ 432.909628][T19738] bond2: entered promiscuous mode [ 432.915277][T19738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.948741][T19747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.963669][T19747] bond2: (slave vti1): The slave device specified does not support setting the MAC address [ 432.975380][T19747] bond2: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 432.995426][T19747] bond2: (slave vti1): making interface the new active one [ 433.006354][T19747] vti1: entered promiscuous mode [ 433.014137][T19747] bond2: (slave vti1): Enslaving as an active interface with an up link [ 433.024072][T19748] veth1_macvtap: left promiscuous mode [ 433.060367][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3707'. [ 433.138165][T19759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3708'. [ 433.207196][T19760] netlink: 'syz.0.3707': attribute type 1 has an invalid length. [ 433.230577][T19756] vlan2: left allmulticast mode [ 433.252623][T19756] geneve0: left allmulticast mode [ 433.270832][T19756] vlan2: left promiscuous mode [ 433.287447][T19756] geneve0: left promiscuous mode [ 433.302066][T19756] bridge0: port 3(vlan2) entered disabled state [ 433.327582][T19770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3711'. [ 433.338617][T19756] bridge_slave_1: left allmulticast mode [ 433.352246][T19756] bridge_slave_1: left promiscuous mode [ 433.369560][T19756] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.391218][T19773] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3711'. [ 433.402359][T19756] bridge_slave_0: left allmulticast mode [ 433.409269][T19756] bridge_slave_0: left promiscuous mode [ 433.415060][T19756] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.910190][T19774] syzkaller0: entered promiscuous mode [ 433.930283][T19774] syzkaller0: entered allmulticast mode [ 434.034538][T19781] netlink: 'syz.2.3712': attribute type 27 has an invalid length. [ 434.204297][T19784] xt_connbytes: Forcing CT accounting to be enabled [ 434.221400][T19790] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.3713'. [ 434.226729][T19784] Cannot find set identified by id 65534 to match [ 436.757464][ T5288] veth1_macvtap: entered promiscuous mode [ 437.186829][T19842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3720'. [ 437.188622][T19843] syzkaller0: entered promiscuous mode [ 437.249496][T19843] syzkaller0: entered allmulticast mode [ 437.354518][T19843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3724'. [ 437.413506][T19854] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 437.663501][T19857] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3726'. [ 438.132580][T19878] netlink: 'syz.2.3731': attribute type 1 has an invalid length. [ 438.308391][T19878] bond2: entered promiscuous mode [ 438.333709][T19878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.399583][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3731'. [ 438.452730][T19898] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3733'. [ 438.513307][T19888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.545595][T19888] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 438.580549][T19888] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 438.644845][T19888] bond2: (slave vti0): making interface the new active one [ 438.676612][T19888] vti0: entered promiscuous mode [ 438.698156][T19888] bond2: (slave vti0): Enslaving as an active interface with an up link [ 439.160418][T19907] macvlan0: entered promiscuous mode [ 439.593519][T19936] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3740'. [ 439.870512][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.285514][T19969] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3747'. [ 440.316011][T19969] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3747'. [ 440.347752][T19969] netlink: 'syz.3.3747': attribute type 6 has an invalid length. [ 440.381066][T19969] netlink: 'syz.3.3747': attribute type 5 has an invalid length. [ 440.405979][T19969] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3747'. [ 440.494929][T19984] netlink: 'syz.4.3753': attribute type 7 has an invalid length. [ 440.793514][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3757'. [ 440.825558][T19997] openvswitch: netlink: Flow key attribute not present in set flow. [ 441.136890][ T5635] Bluetooth: hci4: command tx timeout [ 441.928297][T20049] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 442.207132][T20073] __nla_validate_parse: 6 callbacks suppressed [ 442.207149][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3779'. [ 442.321427][T20073] veth5: entered allmulticast mode [ 442.333476][T20081] netlink: 'syz.3.3778': attribute type 27 has an invalid length. [ 442.355346][T20071] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 442.495355][T20082] bond3: option lp_interval: invalid value (0) [ 442.518231][T20082] bond3: option lp_interval: allowed values 1 - 2147483647 [ 442.533826][T20082] bond3 (unregistering): Released all slaves [ 442.579005][T20083] syzkaller0: entered promiscuous mode [ 442.585125][T20093] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3782'. [ 442.596348][T20083] syzkaller0: entered allmulticast mode [ 442.618464][T20096] 8021q: VLANs not supported on sit0 [ 442.771543][T20103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.809523][T20103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.839746][T20106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3786'. [ 443.053671][T20120] netlink: 'syz.2.3791': attribute type 39 has an invalid length. [ 443.231063][T20118] tipc: Enabling of bearer rejected, failed to enable media [ 443.264257][T20116] syzkaller0: entered promiscuous mode [ 443.276277][T20116] syzkaller0: entered allmulticast mode [ 443.329211][T20117] tipc: Enabling of bearer rejected, failed to enable media [ 443.421573][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3793'. [ 443.651126][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3796'. [ 443.670925][T20143] netlink: 'syz.2.3797': attribute type 2 has an invalid length. [ 443.692487][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3796'. [ 443.713194][T20145] netlink: 'syz.0.3798': attribute type 83 has an invalid length. [ 443.723716][T20143] netlink: 'syz.2.3797': attribute type 2 has an invalid length. [ 443.773745][T20143] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3797'. [ 443.783964][T20150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3796'. [ 443.817002][T20150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3796'. [ 443.940610][T20162] ÿÿÿÿÿÿ: renamed from vlan1 [ 444.270871][T20175] netlink: 'syz.3.3805': attribute type 24 has an invalid length. [ 444.497199][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3808'. [ 444.692161][T20195] Cannot find set identified by id 2 to match [ 444.800898][T20199] netlink: 'syz.3.3812': attribute type 10 has an invalid length. [ 445.139804][T20219] xfrm1: entered promiscuous mode [ 445.161233][T20219] xfrm1: entered allmulticast mode [ 445.228284][T20219] tipc: Started in network mode [ 445.248835][T20219] tipc: Node identity 965721575ca8, cluster identity 4711 [ 445.296418][T20219] tipc: Enabled bearer , priority 0 [ 445.433143][T20226] syzkaller0: entered promiscuous mode [ 445.444712][T20226] syzkaller0: entered allmulticast mode [ 445.451677][T20226] tipc: Resetting bearer [ 445.672438][T20226] tipc: Resetting bearer [ 446.479868][ T7606] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 446.560994][T20268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.364794][T20226] tipc: Disabling bearer [ 448.399741][T20253] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 448.431427][ T7480] tipc: Node number set to 3405717847 [ 448.631387][T20300] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 448.665406][T20305] __nla_validate_parse: 6 callbacks suppressed [ 448.665437][T20305] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3833'. [ 449.049084][T20323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3838'. [ 449.076304][T20323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3838'. [ 449.098299][T20323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3838'. [ 449.208882][T20334] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3842'. [ 449.228574][T20334] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3842'. [ 449.252302][T20334] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3842'. [ 449.278672][T20337] xt_TPROXY: Can be used only with -p tcp or -p udp [ 449.427216][T20340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3844'. [ 449.548498][T20345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3846'. [ 449.614732][T20345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3846'. [ 449.679607][T20349] FAULT_INJECTION: forcing a failure. [ 449.679607][T20349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.695941][T20346] IPVS: length: 1152 != 8 [ 449.703534][T20349] CPU: 1 UID: 0 PID: 20349 Comm: syz.3.3847 Not tainted syzkaller #0 PREEMPT(full) [ 449.703558][T20349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.703571][T20349] Call Trace: [ 449.703578][T20349] [ 449.703587][T20349] dump_stack_lvl+0xe8/0x150 [ 449.703620][T20349] should_fail_ex+0x40c/0x560 [ 449.703648][T20349] _copy_from_iter+0x1d3/0x1660 [ 449.703673][T20349] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 449.703705][T20349] ? __pfx_policy_nodemask+0x10/0x10 [ 449.703730][T20349] ? irqentry_exit+0x218/0x8f0 [ 449.703834][T20349] ? __pfx__copy_from_iter+0x10/0x10 [ 449.703862][T20349] ? alloc_pages_mpol+0x24a/0x380 [ 449.703898][T20349] copy_page_from_iter+0x219/0x2d0 [ 449.703926][T20349] tun_get_user+0x1bf1/0x4370 [ 449.703994][T20349] ? tun_get_user+0x6e7/0x4370 [ 449.704036][T20349] ? aa_file_perm+0x4ed/0x15f0 [ 449.704057][T20349] ? __pfx_tun_get_user+0x10/0x10 [ 449.704088][T20349] ? __lock_acquire+0x683/0x2cf0 [ 449.704126][T20349] ? ref_tracker_alloc+0x341/0x4b0 [ 449.704148][T20349] ? get_pid_task+0x20/0x1f0 [ 449.704187][T20349] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 449.704209][T20349] ? tun_get+0x1c/0x2f0 [ 449.704231][T20349] ? tun_get+0x1c/0x2f0 [ 449.704258][T20349] ? tun_get+0x1c/0x2f0 [ 449.704279][T20349] ? tun_get+0x1c/0x2f0 [ 449.704306][T20349] tun_chr_write_iter+0x113/0x200 [ 449.704333][T20349] vfs_write+0x612/0xba0 [ 449.704368][T20349] ? __pfx_vfs_write+0x10/0x10 [ 449.704405][T20349] ? __fget_files+0x2a/0x420 [ 449.704438][T20349] ksys_write+0x150/0x270 [ 449.704468][T20349] ? __pfx_ksys_write+0x10/0x10 [ 449.704502][T20349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.704525][T20349] do_syscall_64+0x174/0x580 [ 449.704543][T20349] ? trace_irq_disable+0x3b/0x140 [ 449.704567][T20349] ? clear_bhb_loop+0x40/0x90 [ 449.704591][T20349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.704609][T20349] RIP: 0033:0x7f95e6d5e6ce [ 449.704628][T20349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 449.704644][T20349] RSP: 002b:00007f95e7b7efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.704664][T20349] RAX: ffffffffffffffda RBX: 00007f95e7b7f6c0 RCX: 00007f95e6d5e6ce [ 449.704677][T20349] RDX: 0000000000000086 RSI: 0000200000000440 RDI: 00000000000000c8 [ 449.704688][T20349] RBP: 00007f95e7b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 449.704698][T20349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.704709][T20349] R13: 00007f95e7026038 R14: 00007f95e7025fa0 R15: 00007fff11057cf8 [ 449.704740][T20349] [ 450.106994][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 30 seconds [ 450.124319][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 30 seconds [ 450.135319][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 30 seconds [ 450.146516][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 30 seconds [ 450.311022][ T7609] dvmrp0: left allmulticast mode [ 450.711733][T20380] openvswitch: netlink: Message has 12 unknown bytes. [ 450.738142][T20380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.060875][ T7609] bond3 (unregistering): (slave gretap2): Releasing active interface [ 451.087961][ T7609] bond4 (unregistering): (slave gretap3): Releasing active interface [ 451.151415][ T7609] bond2 (unregistering): (slave geneve2): Releasing active interface [ 451.261911][ T7609] bond0 (unregistering): Released all slaves [ 451.300310][ T7609] bond1 (unregistering): Released all slaves [ 451.369272][ T7609] bond2 (unregistering): Released all slaves [ 451.405239][ T7609] bond3 (unregistering): Released all slaves [ 451.447376][ T7609] bond4 (unregistering): Released all slaves [ 451.465286][ T7609] bond5 (unregistering): Released all slaves [ 451.497377][ T7609] bond6 (unregistering): Released all slaves [ 451.522437][ T7609] bond7 (unregistering): Released all slaves [ 451.550039][ T7609] bond8 (unregistering): Released all slaves [ 451.575054][ T7609] bond9 (unregistering): Released all slaves [ 451.603819][ T7609] bond10 (unregistering): Released all slaves [ 451.633151][ T7609] bond11 (unregistering): Released all slaves [ 451.654430][ T7609] bond12 (unregistering): Released all slaves [ 451.716420][T20397] syzkaller0: entered promiscuous mode [ 451.739805][T20397] syzkaller0: entered allmulticast mode [ 451.977292][ T7609] tipc: Left network mode [ 452.644074][T20435] netlink: 'syz.2.3866': attribute type 1 has an invalid length. [ 452.712868][T20440] block nbd0: Unsupported socket: should be TCP or UNIX. [ 452.731766][T20429] syzkaller1: entered promiscuous mode [ 452.746727][T20429] syzkaller1: entered allmulticast mode [ 453.441696][T20467] xt_CT: No such helper "snmp" [ 453.518475][T20472] netlink: 'syz.4.3875': attribute type 21 has an invalid length. [ 453.825563][T20481] __nla_validate_parse: 6 callbacks suppressed [ 453.825580][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3879'. [ 454.284793][T20491] syzkaller0: entered promiscuous mode [ 454.314629][T20491] syzkaller0: entered allmulticast mode [ 454.392357][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3884'. [ 454.471056][ T7609] hsr_slave_0: left promiscuous mode [ 454.512135][ T7609] hsr_slave_1: left promiscuous mode [ 454.642092][ T7609] veth1_macvtap: left promiscuous mode [ 454.684254][ T7609] veth0_macvtap: left promiscuous mode [ 454.720710][ T7609] veth1_vlan: left promiscuous mode [ 454.740264][ T7609] veth0_vlan: left promiscuous mode [ 455.269701][T20552] netlink: 'syz.3.3893': attribute type 1 has an invalid length. [ 455.299647][T20552] netlink: 'syz.3.3893': attribute type 4 has an invalid length. [ 455.365736][T20552] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3893'. [ 455.849537][T20563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3895'. [ 456.453420][T20571] tunl0: entered promiscuous mode [ 456.490606][T20571] netlink: 'syz.4.3898': attribute type 4 has an invalid length. [ 456.531298][T20571] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3898'. [ 456.622305][T20571] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 456.667725][T20571] netdevsim netdevsim4: Falling back to sysfs fallback for: ÿ [ 456.687530][ T7609] IPVS: stop unused estimator thread 0... [ 457.101866][T20608] netlink: 'syz.1.3909': attribute type 4 has an invalid length. [ 457.111149][T20606] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 457.124478][T20606] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 457.142473][T20606] gretap1: entered promiscuous mode [ 457.153868][T20606] gretap1: entered allmulticast mode [ 457.156742][T20610] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3910'. [ 457.245093][T20613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'. [ 457.278752][T20613] openvswitch: netlink: Flow actions attr not present in new flow. [ 457.965782][ T7599] smbdirect: ib_dev[syz1] removed [ 457.971379][T20656] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3923'. [ 457.990390][ T7480] wlan1 speed is unknown, defaulting to 1000 [ 458.004463][ T7480] syz1: Port: 1 Link DOWN [ 458.103691][T20652] syzkaller0: entered promiscuous mode [ 458.105648][T20663] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3924'. [ 458.109397][T20652] syzkaller0: entered allmulticast mode [ 458.110657][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3922'. [ 458.135255][T20662] ip6tnl0: Caught tx_queue_len zero misconfig [ 458.163457][T20652] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.171092][T20652] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.448264][T20652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.488008][T20652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.665161][T20681] netlink: 'syz.0.3930': attribute type 1 has an invalid length. [ 458.735807][T20683] netlink: 'syz.3.3929': attribute type 4 has an invalid length. [ 459.174376][ T7609] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.321995][ T7609] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.349115][ T7609] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.374639][ T7609] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.564062][T20695] tc_dump_action: action bad kind [ 459.605739][T20695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3933'. [ 459.708924][T20698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.729229][T20699] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3936'. [ 459.889076][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3938'. [ 459.901569][T20704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3938'. [ 459.933549][T20704] netlink: 'syz.1.3938': attribute type 15 has an invalid length. [ 460.028738][ T7599] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 460.075952][ T7599] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 460.084123][T20716] xt_hashlimit: size too large, truncated to 1048576 [ 460.105559][ T7599] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 460.143820][ T7599] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 460.166027][T20719] sctp: [Deprecated]: syz.2.3941 (pid 20719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.166027][T20719] Use struct sctp_sack_info instead [ 460.181260][T20718] smc: net device vlan1 applied user defined pnetid SYZ2 [ 460.217262][T20718] smc: net device vlan1 erased user defined pnetid SYZ2 [ 460.251315][T20718] syzkaller0: entered promiscuous mode [ 460.266225][T20718] syzkaller0: entered allmulticast mode [ 460.614383][T20729] syzkaller0: entered promiscuous mode [ 460.635142][T20729] syzkaller0: entered allmulticast mode [ 461.089057][T20758] sock: sock_set_timeout: `syz.3.3954' (pid 20758) tries to set negative timeout [ 461.197732][T20763] netlink: 'syz.2.3956': attribute type 10 has an invalid length. [ 461.244344][T20763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.289639][T20763] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 461.431645][T20493] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 461.499726][T20764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.552947][T20764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.582877][T20764] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 461.609422][T20764] bond0 (unregistering): Released all slaves [ 462.036603][T20799] C: renamed from lo (while UP) [ 462.043504][T20799] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 462.167621][T20767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.408037][T20811] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3969'. [ 462.427327][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 462.434971][T20812] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3969'. [ 462.499990][T20809] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3971'. [ 462.852939][T20824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3976'. [ 462.909509][T20834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3976'. [ 462.957717][T20824] team0: Port device team_slave_0 removed [ 463.068623][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805459d400: rx timeout, send abort [ 463.200119][T20842] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 463.202277][T20845] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 463.365604][T20852] xt_bpf: check failed: parse error [ 463.918512][T20871] syzkaller0: entered promiscuous mode [ 463.968209][T20871] syzkaller0: entered allmulticast mode [ 463.997420][T20881] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3993'. [ 464.101322][T20879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.049354][T20914] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 465.069412][T20917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4002'. [ 465.078627][T20914] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 466.372418][T20964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.385080][T20964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 466.694903][T20964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.734499][T20964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 466.851245][T20987] syzkaller1: entered promiscuous mode [ 466.857053][T20987] syzkaller1: entered allmulticast mode [ 466.981236][T20964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.993373][T20964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 467.010868][T20992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4028'. [ 467.039860][T20995] netlink: 'syz.4.4029': attribute type 1 has an invalid length. [ 467.049632][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4029'. [ 467.089966][T20997] netlink: 'syz.0.4030': attribute type 1 has an invalid length. [ 467.103072][T20989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.112780][T20989] bond0: (slave bond3): Enslaving as an active interface with an up link [ 467.258782][T21002] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4032'. [ 467.269620][T20997] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.281513][T21003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4031'. [ 467.309610][T21003] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4031'. [ 467.325333][T20964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.335863][T20964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 467.382237][T20994] syzkaller0: entered promiscuous mode [ 467.409445][T20994] syzkaller0: entered allmulticast mode [ 467.890825][ T7609] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 467.900927][ T7609] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 467.916555][T21029] veth0: entered promiscuous mode [ 467.960304][T21027] veth0: left promiscuous mode [ 467.969454][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 467.985772][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 468.044649][T20493] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 468.076308][T20493] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 468.159478][ T7599] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 468.162596][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 468.186599][ T7599] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 468.195704][T21034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4039'. [ 468.207818][T21034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4039'. [ 468.225746][T21034] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 468.263072][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4040'. [ 468.335104][T21040] bridge_slave_0: left allmulticast mode [ 468.342514][T21040] bridge_slave_0: left promiscuous mode [ 468.350332][T21040] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.365900][T21040] bridge_slave_1: left allmulticast mode [ 468.380590][T21040] bridge_slave_1: left promiscuous mode [ 468.393473][T21040] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.424987][T21040] bond0: (slave bond_slave_0): Releasing backup interface [ 468.451952][T21040] bond0: (slave bond_slave_1): Releasing backup interface [ 468.473328][T21040] team0: Port device team_slave_0 removed [ 468.484554][T21040] team0: Port device team_slave_1 removed [ 468.491730][T21040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.500608][T21040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.512466][T21040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.520540][T21040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.530523][T21040] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 468.802413][T21053] vlan2: entered promiscuous mode [ 468.827682][T21053] team_slave_0: entered promiscuous mode [ 468.843212][T21053] vlan2: entered allmulticast mode [ 468.850845][T21053] team_slave_0: entered allmulticast mode [ 469.482540][T21089] netlink: 'syz.3.4058': attribute type 12 has an invalid length. [ 469.717255][T21089] bond4: option primary_reselect: invalid value (255) [ 469.741649][T21089] bond4 (unregistering): Released all slaves [ 470.095296][T21118] __nla_validate_parse: 4 callbacks suppressed [ 470.095314][T21118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'. [ 470.222695][T21122] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4066'. [ 470.304957][T21130] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 470.657226][T21143] netlink: 'syz.0.4073': attribute type 8 has an invalid length. [ 470.896828][ T5629] Bluetooth: hci3: command tx timeout [ 470.974480][T21155] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 471.058459][T21159] xt_connbytes: Forcing CT accounting to be enabled [ 471.107633][T21159] Cannot find set identified by id 65534 to match [ 471.233454][T21168] netlink: 'syz.3.4082': attribute type 142 has an invalid length. [ 471.413281][T21181] netlink: 'syz.1.4086': attribute type 2 has an invalid length. [ 471.489542][T21187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4088'. [ 471.513407][T21183] netlink: 'syz.0.4085': attribute type 12 has an invalid length. [ 471.524772][T21182] netlink: 'syz.0.4085': attribute type 12 has an invalid length. [ 471.818690][T21206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4091'. [ 471.904498][T21197] syzkaller0: entered promiscuous mode [ 471.931893][T21197] syzkaller0: entered allmulticast mode [ 471.977429][T21205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4093'. [ 472.005915][T21205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4093'. [ 472.042730][T21213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4091'. [ 472.515500][T21245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.537361][T21245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.555484][T21245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.568159][T21245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.609363][T21255] netlink: 'syz.2.4104': attribute type 1 has an invalid length. [ 472.784432][T21255] bond0: entered promiscuous mode [ 472.792217][T21255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.864460][T21267] bond0: (slave bridge2): making interface the new active one [ 472.872258][T21267] bridge2: entered promiscuous mode [ 472.882826][T21267] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 473.238756][T21291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4111'. [ 473.274292][T21289] syzkaller0: entered promiscuous mode [ 473.285658][T21289] syzkaller0: entered allmulticast mode [ 473.418728][T21289] tipc: Enabling of bearer rejected, failed to enable media [ 473.440614][T21298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4114'. [ 473.476725][T21298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4114'. [ 473.911186][T21309] h: entered promiscuous mode [ 474.102823][T21313] syzkaller0: entered promiscuous mode [ 474.140670][T21313] syzkaller0: entered allmulticast mode [ 474.164218][T21314] syzkaller0: entered promiscuous mode [ 474.170235][T21314] syzkaller0: entered allmulticast mode [ 474.185382][T21334] netlink: 'syz.4.4123': attribute type 83 has an invalid length. [ 474.212596][T21335] nftables ruleset with unbound chain [ 474.379878][T21340] netlink: 'syz.2.4125': attribute type 21 has an invalid length. [ 477.073560][T21355] __nla_validate_parse: 5 callbacks suppressed [ 477.073594][T21355] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4130'. [ 477.092366][T21356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4131'. [ 477.105980][T21356] netlink: 'syz.1.4131': attribute type 7 has an invalid length. [ 477.115319][T21356] netlink: 'syz.1.4131': attribute type 8 has an invalid length. [ 477.124499][T21356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 477.149242][T21360] netlink: 'syz.0.4132': attribute type 12 has an invalid length. [ 477.776173][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 478.524098][T21408] netlink: 'syz.1.4148': attribute type 1 has an invalid length. [ 478.561695][T21406] syzkaller0: entered promiscuous mode [ 478.589062][T21406] syzkaller0: entered allmulticast mode [ 478.602191][T21412] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4150'. [ 478.655533][T21412] xt_cgroup: path and classid specified [ 479.078444][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4158'. [ 479.096042][T21442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4156'. [ 479.129630][T21441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4158'. [ 479.239698][ T5635] block nbd1: Receive control failed (result -32) [ 479.358380][T21448] SET target dimension over the limit! [ 479.688082][T21457] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4163'. [ 479.996760][T21476] netlink: 'syz.0.4168': attribute type 1 has an invalid length. [ 480.017584][T21471] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 480.131522][T21484] ip6t_srh: unknown srh match flags 4000 [ 480.181105][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 60 seconds [ 480.191848][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 60 seconds [ 480.202908][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 60 seconds [ 480.214003][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 60 seconds [ 480.251984][T21476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 480.312806][T21482] vlan0: entered promiscuous mode [ 480.318878][T21482] bond4: entered promiscuous mode [ 480.324341][T21482] vlan0: entered allmulticast mode [ 480.335101][T21482] bond4: entered allmulticast mode [ 480.344378][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4168'. [ 480.357389][T21476] block nbd2: Unsupported socket: should be TCP or UNIX. [ 480.403152][T21495] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4171'. [ 480.457852][T21495] team0: Caught tx_queue_len zero misconfig [ 480.602849][T21506] FAULT_INJECTION: forcing a failure. [ 480.602849][T21506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.605161][T21505] netlink: 'syz.1.4174': attribute type 1 has an invalid length. [ 480.617883][T21506] CPU: 0 UID: 0 PID: 21506 Comm: syz.0.4175 Not tainted syzkaller #0 PREEMPT(full) [ 480.617906][T21506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 480.617916][T21506] Call Trace: [ 480.617924][T21506] [ 480.617931][T21506] dump_stack_lvl+0xe8/0x150 [ 480.617964][T21506] should_fail_ex+0x40c/0x560 [ 480.617989][T21506] _copy_from_iter+0x1d3/0x1660 [ 480.618011][T21506] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 480.618034][T21506] ? rcu_is_watching+0x15/0xb0 [ 480.618099][T21506] ? trace_kmem_cache_alloc+0x29/0xe0 [ 480.618122][T21506] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 480.618143][T21506] ? __pfx__copy_from_iter+0x10/0x10 [ 480.618166][T21506] ? __alloc_skb+0x276/0x7a0 [ 480.618189][T21506] ? __alloc_skb+0x276/0x7a0 [ 480.618218][T21506] ? netlink_sendmsg+0x650/0xb40 [ 480.618236][T21506] ? skb_put+0x112/0x210 [ 480.618263][T21506] netlink_sendmsg+0x6c0/0xb40 [ 480.618290][T21506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.618312][T21506] ? aa_sock_msg_perm+0xf1/0x1b0 [ 480.618336][T21506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.618353][T21506] sock_sendmsg_nosec+0x13a/0x180 [ 480.618379][T21506] ____sys_sendmsg+0x54e/0x850 [ 480.618400][T21506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.618426][T21506] ? import_iovec+0x73/0xa0 [ 480.618454][T21506] ___sys_sendmsg+0x2a5/0x360 [ 480.618471][T21506] ? __lock_acquire+0x683/0x2cf0 [ 480.618498][T21506] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.618553][T21506] ? __fget_files+0x2a/0x420 [ 480.618576][T21506] ? __fget_files+0x3a2/0x420 [ 480.618606][T21506] __x64_sys_sendmsg+0x1b1/0x290 [ 480.618627][T21506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.618661][T21506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.618681][T21506] do_syscall_64+0x174/0x580 [ 480.618700][T21506] ? clear_bhb_loop+0x40/0x90 [ 480.618722][T21506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.618740][T21506] RIP: 0033:0x7fef29b9de99 [ 480.618757][T21506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.618772][T21506] RSP: 002b:00007fef2aa92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.618791][T21506] RAX: ffffffffffffffda RBX: 00007fef29e25fa0 RCX: 00007fef29b9de99 [ 480.618803][T21506] RDX: 0000000000004800 RSI: 0000200000000280 RDI: 0000000000000003 [ 480.618815][T21506] RBP: 00007fef2aa92090 R08: 0000000000000000 R09: 0000000000000000 [ 480.618826][T21506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.618837][T21506] R13: 00007fef29e26038 R14: 00007fef29e25fa0 R15: 00007ffed62d7908 [ 480.618864][T21506] [ 480.948246][T21504] netlink: 'syz.4.4176': attribute type 7 has an invalid length. [ 480.960890][T21511] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 480.975165][T21511] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 481.023894][T21505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.205037][T21519] x_tables: duplicate underflow at hook 2 [ 481.240437][T21523] syzkaller0: entered promiscuous mode [ 481.247118][T21523] syzkaller0: entered allmulticast mode [ 481.344683][T21529] tc_dump_action: action bad kind [ 481.769957][T21550] FAULT_INJECTION: forcing a failure. [ 481.769957][T21550] name failslab, interval 1, probability 0, space 0, times 0 [ 481.825402][T21550] CPU: 1 UID: 0 PID: 21550 Comm: syz.2.4188 Not tainted syzkaller #0 PREEMPT(full) [ 481.825427][T21550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.825438][T21550] Call Trace: [ 481.825445][T21550] [ 481.825453][T21550] dump_stack_lvl+0xe8/0x150 [ 481.825486][T21550] should_fail_ex+0x40c/0x560 [ 481.825514][T21550] should_failslab+0xa8/0x100 [ 481.825543][T21550] __kmalloc_noprof+0xfe/0x720 [ 481.825565][T21550] ? is_bpf_text_address+0x26/0x2b0 [ 481.825592][T21550] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 481.825617][T21550] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 481.825649][T21550] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 481.825682][T21550] genl_family_rcv_msg_doit+0xda/0x340 [ 481.825713][T21550] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 481.825745][T21550] ? apparmor_capable+0x126/0x170 [ 481.825769][T21550] ? bpf_lsm_capable+0x9/0x20 [ 481.825833][T21550] ? security_capable+0x7e/0x2c0 [ 481.825867][T21550] genl_rcv_msg+0x614/0x7a0 [ 481.825896][T21550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.825926][T21550] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 481.825948][T21550] ? __pfx_nl80211_set_qos_map+0x10/0x10 [ 481.826029][T21550] ? __pfx_nl80211_post_doit+0x10/0x10 [ 481.826068][T21550] netlink_rcv_skb+0x226/0x4a0 [ 481.826087][T21550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.826111][T21550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.826145][T21550] ? down_read+0x2be/0x330 [ 481.826170][T21550] genl_rcv+0x28/0x40 [ 481.826190][T21550] netlink_unicast+0x7bb/0x940 [ 481.826227][T21550] netlink_sendmsg+0x813/0xb40 [ 481.826255][T21550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.826278][T21550] ? aa_sock_msg_perm+0xf1/0x1b0 [ 481.826304][T21550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.826327][T21550] sock_sendmsg_nosec+0x13a/0x180 [ 481.826355][T21550] ____sys_sendmsg+0x54e/0x850 [ 481.826380][T21550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.826411][T21550] ? import_iovec+0x73/0xa0 [ 481.826443][T21550] ___sys_sendmsg+0x2a5/0x360 [ 481.826460][T21550] ? __lock_acquire+0x683/0x2cf0 [ 481.826490][T21550] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.826546][T21550] ? __fget_files+0x2a/0x420 [ 481.826571][T21550] ? __fget_files+0x3a2/0x420 [ 481.826605][T21550] __x64_sys_sendmsg+0x1b1/0x290 [ 481.826626][T21550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.826662][T21550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.826683][T21550] do_syscall_64+0x174/0x580 [ 481.826699][T21550] ? trace_irq_disable+0x3b/0x140 [ 481.826722][T21550] ? clear_bhb_loop+0x40/0x90 [ 481.826745][T21550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.826763][T21550] RIP: 0033:0x7f3259d9de99 [ 481.826780][T21550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.826796][T21550] RSP: 002b:00007f325acca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.826815][T21550] RAX: ffffffffffffffda RBX: 00007f325a025fa0 RCX: 00007f3259d9de99 [ 481.826828][T21550] RDX: 0000000000004800 RSI: 0000200000000280 RDI: 0000000000000003 [ 481.826840][T21550] RBP: 00007f325acca090 R08: 0000000000000000 R09: 0000000000000000 [ 481.826850][T21550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.826861][T21550] R13: 00007f325a026038 R14: 00007f325a025fa0 R15: 00007ffe5d318888 [ 481.826891][T21550] [ 482.341191][T21565] netlink: 'syz.1.4193': attribute type 12 has an invalid length. [ 482.470392][T21565] __nla_validate_parse: 8 callbacks suppressed [ 482.470409][T21565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4193'. [ 482.557515][T21569] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4197'. [ 482.591781][T21572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 482.695113][T21576] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4197'. [ 483.101184][T21600] netlink: 'syz.4.4206': attribute type 3 has an invalid length. [ 483.520217][T21620] netlink: 'syz.4.4208': attribute type 1 has an invalid length. [ 483.547377][T21626] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4210'. [ 483.727970][T21634] openvswitch: netlink: Message has 24 unknown bytes. [ 483.861020][T21639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4214'. [ 483.877904][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'. [ 483.891177][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'. [ 484.079463][T21651] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 484.155339][T21651] netlink: 'syz.0.4219': attribute type 1 has an invalid length. [ 484.172163][T21658] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4222'. [ 484.191277][T21651] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4219'. [ 484.339344][T21671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.362823][T21671] netlink: 'syz.1.4224': attribute type 4 has an invalid length. [ 484.380895][T21669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4223'. [ 486.280336][T21756] netlink: 'syz.0.4249': attribute type 20 has an invalid length. [ 486.507418][T21771] Cannot find map_set index 135 as target [ 487.030561][T21787] tipc: Started in network mode [ 487.055774][T21787] tipc: Node identity aaaaaaaaaa1c, cluster identity 4711 [ 487.078788][T21787] tipc: Enabled bearer , priority 10 [ 487.566327][T21815] netlink: 'syz.3.4259': attribute type 1 has an invalid length. [ 488.072121][T21830] syzkaller0: entered promiscuous mode [ 488.096603][T21830] syzkaller0: entered allmulticast mode [ 488.123395][T21832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.125562][T21833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.212274][T21839] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 488.232409][ T8981] tipc: Node number set to 11971242 [ 488.528894][T21854] __nla_validate_parse: 8 callbacks suppressed [ 488.528927][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4274'. [ 488.794738][T21871] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 488.810367][T21871] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 489.500607][T21864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.583537][T21900] netlink: 'syz.2.4284': attribute type 4 has an invalid length. [ 489.632165][T21900] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4284'. [ 490.481791][T21939] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4296'. [ 490.606521][T21945] netlink: 'syz.0.4298': attribute type 17 has an invalid length. [ 490.681548][T21941] IPv6: sit1: Disabled Multicast RS [ 490.718841][T21953] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4299'. [ 490.738739][T21952] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4300'. [ 490.762169][ T7599] bond0: (slave bond_slave_0): interface is now down [ 490.775819][T21944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4299'. [ 490.795429][T21957] ipt_REJECT: ECHOREPLY no longer supported. [ 490.802925][ T7599] bond0: (slave bond_slave_1): interface is now down [ 490.813976][T21944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4299'. [ 490.825571][ T7599] bond0: (slave bond3): interface is now down [ 490.898773][ T7599] bond0: now running without any active interface! [ 491.043276][T21964] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4302'. [ 491.132460][T21973] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4305'. [ 491.162111][T21966] syzkaller0: entered promiscuous mode [ 491.181774][T21966] syzkaller0: entered allmulticast mode [ 491.270983][T21966] sch_fq: defrate 3 ignored. [ 491.642438][T22012] syzkaller0: entered promiscuous mode [ 491.650771][T22012] syzkaller0: entered allmulticast mode [ 491.683910][T22019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4311'. [ 491.852500][T22022] netlink: 'syz.2.4315': attribute type 8 has an invalid length. [ 491.920767][T22022] gretap0: entered promiscuous mode [ 491.935830][T22022] team0: entered promiscuous mode [ 491.947705][T22022] team_slave_0: entered promiscuous mode [ 491.963959][T22022] team_slave_1: entered promiscuous mode [ 491.989363][T22022] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 492.012888][T22022] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 492.038407][T22022] hsr1: entered promiscuous mode [ 492.214182][T22035] bridge_slave_0: left allmulticast mode [ 492.244973][T22035] bridge_slave_0: left promiscuous mode [ 492.270702][T22035] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.432074][T22035] bridge_slave_1: left allmulticast mode [ 492.439582][T22035] bridge_slave_1: left promiscuous mode [ 492.448262][T22035] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.458339][T22047] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 492.469460][T22047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.493987][T22035] bond0: (slave bond_slave_0): Releasing backup interface [ 492.535273][T22035] bond0: (slave bond_slave_1): Releasing backup interface [ 492.609719][T22035] team0: Port device team_slave_1 removed [ 492.628283][T22035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.637895][T22035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.647973][T22035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.658563][T22035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 493.253415][T22066] syzkaller0: entered promiscuous mode [ 493.266262][T22066] syzkaller0: entered allmulticast mode [ 493.768797][T22106] __nla_validate_parse: 4 callbacks suppressed [ 493.768817][T22106] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4342'. [ 496.319352][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4350'. [ 496.330313][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4350'. [ 496.346655][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4350'. [ 496.659841][T22158] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4352'. [ 496.928861][T22166] syzkaller0: entered promiscuous mode [ 496.952209][T22166] syzkaller0: entered allmulticast mode [ 497.071592][T22178] openvswitch: netlink: Missing key (keys=40, expected=100) [ 497.107071][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4361'. [ 497.756537][T22213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4372'. [ 497.958365][T22222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4375'. [ 497.970570][T22222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4375'. [ 497.980340][T22222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4375'. [ 498.183803][T22225] syzkaller0: entered promiscuous mode [ 498.205268][T22225] syzkaller0: entered allmulticast mode [ 498.256682][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 498.395760][T22233] syzkaller1: entered promiscuous mode [ 498.414266][T22233] syzkaller1: entered allmulticast mode [ 498.805741][T22252] __nla_validate_parse: 1 callbacks suppressed [ 498.805758][T22252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4386'. [ 499.134133][ T30] audit: type=1804 audit(1784774666.223:7): pid=22265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4390" name="/newroot/222/cgroup.controllers" dev="tmpfs" ino=1151 res=1 errno=0 [ 499.172623][T22266] syzkaller0: entered promiscuous mode [ 499.181561][ T30] audit: type=1800 audit(1784774666.263:8): pid=22265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4390" name="cgroup.controllers" dev="tmpfs" ino=1151 res=0 errno=0 [ 499.205590][T22266] syzkaller0: entered allmulticast mode [ 499.295116][T22271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4394'. [ 499.351647][T22278] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4394'. [ 499.385971][T22272] erspan0: entered promiscuous mode [ 499.395432][T22280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4395'. [ 499.400948][T22272] erspan0: entered allmulticast mode [ 499.474968][T22271] vlan3: entered promiscuous mode [ 499.492150][T22271] bond0: entered promiscuous mode [ 500.153476][T22309] syzkaller1: entered promiscuous mode [ 500.174648][T22309] syzkaller1: entered allmulticast mode [ 500.209577][T22309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4403'. [ 500.687047][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4409'. [ 500.779452][T22341] vlan1: entered allmulticast mode [ 500.797532][T22341] bridge30: entered allmulticast mode [ 500.808156][T22335] syzkaller0: entered promiscuous mode [ 500.814223][T22335] syzkaller0: entered allmulticast mode [ 500.883100][T22345] netlink: 524 bytes leftover after parsing attributes in process `syz.2.4411'. [ 500.924707][T22337] erspan0: left allmulticast mode [ 500.931978][T22337] bridge30: port 1(erspan0) entered blocking state [ 500.951238][T22337] bridge30: port 1(erspan0) entered disabled state [ 500.970484][T22337] erspan0: entered allmulticast mode [ 501.304032][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.070127][T22402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4421'. [ 502.452419][T22402] macvtap1: entered promiscuous mode [ 502.483089][T22402] vlan0: entered promiscuous mode [ 502.524173][T22402] macvtap1: entered allmulticast mode [ 502.564136][T22402] vlan0: entered allmulticast mode [ 502.580209][T22402] veth0_vlan: entered allmulticast mode [ 503.189696][T22456] netlink: 3080 bytes leftover after parsing attributes in process `syz.1.4433'. [ 503.235661][T22456] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4433'. [ 503.480608][T22461] vlan5: entered allmulticast mode [ 503.516369][T22461] bridge_slave_0: entered allmulticast mode [ 504.223311][T22492] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4444'. [ 504.317244][T22496] xt_TCPMSS: Only works on TCP SYN packets [ 504.340882][T22497] netlink: 542 bytes leftover after parsing attributes in process `syz.2.4444'. [ 504.565010][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 504.618430][T22504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4447'. [ 504.696750][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 504.737332][T22508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4447'. [ 504.916906][T22514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 504.924196][T22514] IPv6: NLM_F_CREATE should be set when creating new route [ 504.931460][T22514] IPv6: NLM_F_CREATE should be set when creating new route [ 504.950648][T22515] netlink: 'syz.2.4450': attribute type 10 has an invalid length. [ 505.084264][T22515] dummy0: entered promiscuous mode [ 505.121116][T22524] netlink: 'syz.2.4450': attribute type 10 has an invalid length. [ 505.186567][T22515] team0: Port device dummy0 added [ 505.378146][T22532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4450'. [ 505.486309][T22532] netlink: 'syz.2.4450': attribute type 18 has an invalid length. [ 505.795449][T22524] dummy0 (unregistering): left promiscuous mode [ 505.868546][T22524] team0: Port device dummy0 removed [ 506.123060][T22556] netlink: 'syz.3.4458': attribute type 21 has an invalid length. [ 506.199482][T22556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4458'. [ 506.492735][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4464'. [ 507.507545][T22610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4475'. [ 507.667249][T22619] netlink: 'syz.4.4477': attribute type 1 has an invalid length. [ 508.141501][T22631] syzkaller0: entered promiscuous mode [ 508.198898][T22631] syzkaller0: entered allmulticast mode [ 508.514858][T22653] netlink: 'syz.4.4487': attribute type 2 has an invalid length. [ 508.533891][T22654] netlink: 'syz.3.4488': attribute type 1 has an invalid length. [ 508.535759][T22653] netlink: 'syz.4.4487': attribute type 2 has an invalid length. [ 508.673288][T22654] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 509.065467][T22662] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 509.111398][T22662] bond1 (unregistering): Released all slaves [ 509.410902][T22685] syzkaller0: entered promiscuous mode [ 509.438239][T22685] syzkaller0: entered allmulticast mode [ 509.494625][T22690] macsec1: entered promiscuous mode [ 509.510681][T22699] __nla_validate_parse: 8 callbacks suppressed [ 509.510726][T22699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4498'. [ 509.511549][T22690] batadv0: entered promiscuous mode [ 509.590107][T22690] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 509.633200][T22690] batadv0: left promiscuous mode [ 509.702397][T22685] tipc: Started in network mode [ 509.717137][T22685] tipc: Node identity 2e4672dbd794, cluster identity 4711 [ 509.734424][T22685] tipc: Enabled bearer , priority 0 [ 509.749107][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4503'. [ 509.762404][T22684] tipc: Resetting bearer [ 509.836753][T22684] tipc: Disabling bearer [ 510.052595][T22725] netlink: 'syz.4.4505': attribute type 1 has an invalid length. [ 510.191524][T22735] xt_hashlimit: size too large, truncated to 1048576 [ 510.247253][T22739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4509'. [ 510.268839][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 90 seconds [ 510.280136][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 90 seconds [ 510.294726][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 90 seconds [ 510.310458][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 90 seconds [ 510.370462][T22725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.068674][T22766] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.272785][T22775] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4520'. [ 511.553364][T22788] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 511.585931][T22792] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 511.802991][T22798] bridge_slave_1: entered promiscuous mode [ 511.829146][T22807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4527'. [ 511.894373][T22798] syzkaller0: entered promiscuous mode [ 511.916232][T22798] syzkaller0: entered allmulticast mode [ 511.966027][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4527'. [ 512.183530][T22823] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4531'. [ 512.299353][T22813] bond5: peer notification delay (25) is not a multiple of miimon (28933), value rounded to 0 ms [ 512.317620][T22813] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 512.437847][T22813] bond5 (unregistering): Released all slaves [ 512.618325][T22838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.669477][T22839] syzkaller0: entered promiscuous mode [ 512.695925][T22839] syzkaller0: entered allmulticast mode [ 512.882268][T22851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4539'. [ 512.942021][T22851] bond0: entered promiscuous mode [ 512.956970][T22851] bond_slave_0: entered promiscuous mode [ 512.967574][T22851] bond_slave_1: entered promiscuous mode [ 512.981320][T22851] bond3: entered promiscuous mode [ 513.009166][T22851] gretap0: entered promiscuous mode [ 513.022120][T22851] debugfs: 'hsr1' already exists in 'hsr' [ 513.038322][T22851] Cannot create hsr debugfs directory [ 513.058974][T22851] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 513.099568][T22851] hsr1: entered promiscuous mode [ 513.292203][T22860] tipc: Enabling of bearer rejected, failed to enable media [ 513.978679][ T5288] veth0_vlan: left promiscuous mode [ 513.998161][T22888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4543'. [ 514.170511][ T8982] veth0_vlan: entered promiscuous mode [ 514.788686][T22934] syzkaller0: entered promiscuous mode [ 514.809187][T22934] syzkaller0: entered allmulticast mode [ 515.326049][T22948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.353268][T22948] bond0: (slave bond2): Enslaving as an active interface with an up link [ 516.321709][T23003] netlink: 'syz.3.4567': attribute type 1 has an invalid length. [ 516.479613][T23006] sctp: [Deprecated]: syz.2.4568 (pid 23006) Use of int in max_burst socket option deprecated. [ 516.479613][T23006] Use struct sctp_assoc_value instead [ 516.485053][T23003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.732609][T23023] syzkaller0: entered promiscuous mode [ 516.751999][T23023] syzkaller0: entered allmulticast mode [ 516.930190][T23030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4574'. [ 520.210398][ T4993] udevd[4993]: worker [11939] /devices/virtual/block/nbd0 is taking a long time [ 540.338394][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 120 seconds [ 540.349778][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 120 seconds [ 540.361481][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 120 seconds [ 540.373099][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 120 seconds [ 562.749837][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.662904][T23098] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4582'. [ 563.954088][T23114] netlink: 'syz.0.4587': attribute type 33 has an invalid length. [ 564.164985][T23119] netlink: 'syz.3.4588': attribute type 23 has an invalid length. [ 564.328698][T23135] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20000 [ 564.376241][T23135] netlink: 'syz.1.4593': attribute type 1 has an invalid length. [ 564.434427][T23141] netlink: 'syz.1.4593': attribute type 10 has an invalid length. [ 564.518125][T23141] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4593'. [ 564.599914][T23135] bond5: option mode: invalid value (7) [ 564.623902][T23135] bond5 (unregistering): Released all slaves [ 564.785471][T23161] syzkaller0: entered promiscuous mode [ 564.791832][T23161] syzkaller0: entered allmulticast mode [ 564.968079][T23168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4600'. [ 567.196854][T23175] netlink: 'syz.3.4600': attribute type 1 has an invalid length. [ 567.241182][T23183] syzkaller0: entered promiscuous mode [ 567.282708][T23183] syzkaller0: entered allmulticast mode [ 567.727396][T23223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4608'. [ 567.738785][T23223] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4608'. [ 568.103379][T23244] netlink: 'syz.4.4614': attribute type 13 has an invalid length. [ 570.418250][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 150 seconds [ 570.429747][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 150 seconds [ 570.441357][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 150 seconds [ 570.452647][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 150 seconds [ 570.616034][T23212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.710861][T23263] netlink: 'syz.3.4619': attribute type 1 has an invalid length. [ 570.738531][T23263] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4619'. [ 570.901232][T23276] netlink: 'syz.4.4623': attribute type 16 has an invalid length. [ 570.928601][T23276] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4623'. [ 570.928880][T23274] netlink: 'syz.0.4622': attribute type 1 has an invalid length. [ 570.946579][T23276] veth0_macvtap: entered allmulticast mode [ 570.966813][T23279] netlink: 'syz.4.4623': attribute type 16 has an invalid length. [ 571.005995][T23279] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4623'. [ 571.012401][T23274] netlink: 'syz.0.4622': attribute type 2 has an invalid length. [ 571.062189][T23285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4626'. [ 571.284549][T23293] netlink: 'syz.0.4629': attribute type 9 has an invalid length. [ 571.357044][T23297] lo: entered promiscuous mode [ 571.369580][T23297] netlink: 'syz.3.4631': attribute type 2 has an invalid length. [ 571.384372][T23297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.408199][T23302] syzkaller1: entered promiscuous mode [ 571.420021][T23302] syzkaller1: entered allmulticast mode [ 572.305138][T23354] netlink: 'syz.1.4646': attribute type 1 has an invalid length. [ 572.347762][T23354] nbd: error processing sock list [ 572.399602][T23356] netlink: 'syz.1.4646': attribute type 10 has an invalid length. [ 572.433869][T23356] veth1_macvtap: left promiscuous mode [ 572.449519][T23356] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 572.711843][T23369] lo: entered promiscuous mode [ 572.727820][T23369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.383876][T23402] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4665'. [ 573.563584][T23406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.821835][T23420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4670'. [ 573.924120][T23423] netlink: 'syz.0.4671': attribute type 1 has an invalid length. [ 574.021481][T23430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4671'. [ 574.161836][T23430] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.319688][T23393] infiniband syz0: set down [ 574.356731][T23393] infiniband syz0: added ipvlan1 [ 574.399053][T23445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4677'. [ 574.430158][T23393] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 574.432871][T23451] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4678'. [ 574.459844][T23393] infiniband syz0: Couldn't open port 1 [ 574.476848][T23393] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 574.504830][T23393] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 574.531170][T23393] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 574.689288][T23393] RDS/IB: syz0: added [ 574.708947][T23393] smc: adding ib device syz0 with port count 1 [ 574.721361][T23393] smc: ib device syz0 port 1 has no pnetid [ 574.817859][T23463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.862583][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4682'. [ 574.888721][T23467] gretap0: entered allmulticast mode [ 575.356660][T23484] IPVS: ip_vs_add_dest(): server weight less than zero [ 575.368517][ T5757] IPVS: starting estimator thread 0... [ 575.476673][T23485] IPVS: using max 30 ests per chain, 72000 per kthread [ 575.968800][T23505] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.287534][T23523] netlink: 'syz.0.4700': attribute type 1 has an invalid length. [ 576.402678][T23523] 8021q: adding VLAN 0 to HW filter on device bond6 [ 576.569574][T23527] bond6: (slave geneve2): making interface the new active one [ 576.598582][T23527] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 576.637221][T23538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4703'. [ 576.676052][T23538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4703'. [ 577.102388][T23557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4708'. [ 577.137458][T23557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4708'. [ 577.231566][T23559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4709'. [ 577.266971][T23559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 577.274223][T23559] IPv6: NLM_F_CREATE should be set when creating new route [ 579.790550][T23571] bridge31: entered promiscuous mode [ 579.908043][T23573] bridge31: entered promiscuous mode [ 579.967649][T23584] netlink: 'syz.3.4716': attribute type 2 has an invalid length. [ 580.155728][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4717'. [ 580.198543][T23589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4717'. [ 580.252823][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4718'. [ 580.299543][T23595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4717'. [ 580.681127][T23607] netlink: 'syz.2.4722': attribute type 12 has an invalid length. [ 580.769556][T23615] x_tables: unsorted entry at hook 2 [ 580.972704][T23621] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4727'. [ 581.053748][T23623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.229374][T23633] netlink: 'syz.0.4731': attribute type 4 has an invalid length. [ 581.519887][T23640] bond4: option min_links: invalid value (18446744073709551614) [ 581.528807][T23640] bond4: option min_links: allowed values 0 - 2147483647 [ 581.543222][T23640] bond4 (unregistering): Released all slaves [ 581.599792][T23647] veth0_macvtap: entered allmulticast mode [ 581.617387][T23647] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 581.710108][T23627] __nla_validate_parse: 4 callbacks suppressed [ 581.710124][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4728'. [ 581.764955][T23627] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4728'. [ 581.810066][T23627] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4728'. [ 581.955826][T23651] syzkaller0: entered promiscuous mode [ 581.962160][T23651] syzkaller0: entered allmulticast mode [ 582.197185][T23677] netlink: 'syz.4.4744': attribute type 4 has an invalid length. [ 582.391841][T23692] netlink: 'syz.3.4747': attribute type 4 has an invalid length. [ 582.411519][T23692] netlink: 'syz.3.4747': attribute type 4 has an invalid length. [ 582.838429][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4750'. [ 582.874727][T23716] netlink: 'syz.2.4755': attribute type 3 has an invalid length. [ 583.072320][T23722] openvswitch: netlink: Duplicate or invalid key (type 0). [ 583.082157][T23722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.101376][T23722] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4756'. [ 583.211163][ T8981] IPVS: starting estimator thread 0... [ 583.338042][T23728] IPVS: using max 27 ests per chain, 64800 per kthread [ 583.430364][T23735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4760'. [ 583.448175][T23736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4761'. [ 583.533466][T23740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4759'. [ 583.664668][T23738] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 583.721233][T23738] bond3 (unregistering): Released all slaves [ 583.791529][T23753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.085556][T23761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4767'. [ 584.127564][T23761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4767'. [ 584.362608][T23775] IPv6: sit1: Disabled Multicast RS [ 584.382660][T23775] sit1: entered allmulticast mode [ 584.462595][T23778] tipc: Cannot configure node identity twice [ 584.508179][T23783] ipt_REJECT: ECHOREPLY no longer supported. [ 584.802092][T23800] nbd: socks must be embedded in a SOCK_ITEM attr [ 585.095165][T23810] bond0: (slave bond_slave_1): Releasing backup interface [ 585.123556][T23810] bond_slave_1 (unregistering): left promiscuous mode [ 585.262449][T23820] syzkaller0: entered promiscuous mode [ 585.276710][T23820] syzkaller0: entered allmulticast mode [ 585.717396][T23837] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 585.851846][T23846] netlink: 'syz.2.4793': attribute type 2 has an invalid length. [ 586.177355][T23866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.204619][T23861] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 586.217212][T23861] bond7: (slave vti0): Error -95 calling set_mac_address [ 586.254984][T23857] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 586.935880][T23901] __nla_validate_parse: 11 callbacks suppressed [ 586.935899][T23901] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4812'. [ 587.018012][T23910] netlink: 'syz.4.4815': attribute type 30 has an invalid length. [ 588.201409][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4831'. [ 588.403766][T23978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4835'. [ 588.966943][T23997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4840'. [ 589.182475][ T5629] Bluetooth: hci4: link tx timeout [ 589.195629][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 589.851748][T24039] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 589.873380][T24032] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4848'. [ 589.889611][ T30] audit: type=1800 audit(1784774756.973:9): pid=24040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4849" name=680B20 dev="tmpfs" ino=1369 res=0 errno=0 [ 589.992599][T24032] syzkaller0: entered promiscuous mode [ 590.005871][T24032] syzkaller0: entered allmulticast mode [ 590.216784][T24056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4855'. [ 590.925922][T24086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4864'. [ 591.138417][T24096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4866'. [ 591.282980][T24106] pimreg: entered allmulticast mode [ 591.296948][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 591.462400][T24112] netlink: 'syz.4.4872': attribute type 21 has an invalid length. [ 591.478914][T24112] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4872'. [ 591.514026][T24112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4872'. [ 591.795141][T24120] netlink: 'syz.0.4874': attribute type 1 has an invalid length. [ 591.805955][T24120] netlink: 'syz.0.4874': attribute type 1 has an invalid length. [ 598.609258][T21995] dvmrp8: left allmulticast mode [ 598.874893][T21995] bond5 (unregistering): (slave gretap2): Releasing active interface [ 598.898519][T21995] bond0 (unregistering): (slave gretap3): Releasing active interface [ 598.954611][T21995] bond3 (unregistering): (slave geneve2): Releasing active interface [ 599.033689][T21995] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 599.062146][T21995] .` (unregistering): (slave batadv0): Releasing backup interface [ 599.081204][T21995] .` (unregistering): (slave team0): Releasing backup interface [ 599.092128][T21995] .` (unregistering): Released all slaves [ 599.105174][T21995] bond1 (unregistering): Released all slaves [ 599.124832][T21995] bond2 (unregistering): Released all slaves [ 599.145721][T21995] bond3 (unregistering): Released all slaves [ 599.173498][T21995] bond4 (unregistering): Released all slaves [ 599.192679][T21995] bond5 (unregistering): Released all slaves [ 599.211746][T21995] bond6 (unregistering): Released all slaves [ 599.244538][T21995] bond0 (unregistering): Released all slaves [ 599.264579][T21995] bond7 (unregistering): Released all slaves [ 599.285552][T21995] bond8 (unregistering): Released all slaves [ 599.428455][T21995] tipc: Left network mode [ 600.212023][T21995] hsr_slave_0: left promiscuous mode [ 600.221758][T21995] bridge_slave_0: left promiscuous mode [ 600.228047][T21995] veth0_macvtap: left promiscuous mode [ 600.233631][T21995] veth1_vlan: left promiscuous mode [ 600.239412][T21995] veth0_vlan: left promiscuous mode [ 600.507299][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 180 seconds [ 600.520200][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 180 seconds [ 600.532481][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 180 seconds [ 600.544483][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 180 seconds [ 601.014931][T21995] IPVS: stop unused estimator thread 0... [ 604.066565][ T4993] udevd[4993]: worker [11939] /devices/virtual/block/nbd0 timeout; kill it [ 604.077466][ T4993] udevd[4993]: seq 24934 '/devices/virtual/block/nbd0' killed [ 606.478850][T24011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.490663][T24011] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 606.501873][T24011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 606.514199][T24011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 606.524363][T24011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 606.597548][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 606.612400][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 606.620959][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 606.629762][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 606.638322][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 606.683671][T24011] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 606.701521][T24011] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 606.711587][T24011] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 606.724299][T24011] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 606.734026][T24011] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 607.765888][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 607.781180][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 607.791362][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 607.801521][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 607.811128][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 607.922990][T24011] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 607.941743][T24011] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 607.953287][T24011] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 607.965285][T24011] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 607.980639][T24011] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 608.580976][T24011] Bluetooth: hci2: command tx timeout [ 608.654639][T24132] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.657105][T24011] Bluetooth: hci6: command tx timeout [ 608.673952][T24132] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.703414][T24132] bridge_slave_0: entered allmulticast mode [ 608.711901][T24132] bridge_slave_0: entered promiscuous mode [ 608.721861][T24132] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.729613][T24132] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.737809][T24132] bridge_slave_1: entered allmulticast mode [ 608.745538][T24132] bridge_slave_1: entered promiscuous mode [ 608.819322][T24011] Bluetooth: hci7: command tx timeout [ 608.832429][T24132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.848554][T24132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.922780][T24132] team0: Port device team_slave_0 added [ 608.956943][T24132] team0: Port device team_slave_1 added [ 609.037173][T24132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.044165][T24132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.071602][T24132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.110791][T24132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.119528][T24132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.152025][T24132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.300027][T24132] hsr_slave_0: entered promiscuous mode [ 609.309403][T24132] hsr_slave_1: entered promiscuous mode [ 609.854797][T24135] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.856751][T24011] Bluetooth: hci8: command tx timeout [ 609.863235][T24135] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.878142][T24135] bridge_slave_0: entered allmulticast mode [ 609.885628][T24135] bridge_slave_0: entered promiscuous mode [ 609.934303][T24135] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.941890][T24135] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.949932][T24135] bridge_slave_1: entered allmulticast mode [ 609.957842][T24135] bridge_slave_1: entered promiscuous mode [ 610.068260][T24135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.097203][T24011] Bluetooth: hci9: command tx timeout [ 610.120640][T24137] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.129519][T24137] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.137846][T24137] bridge_slave_0: entered allmulticast mode [ 610.145475][T24137] bridge_slave_0: entered promiscuous mode [ 610.156918][T24135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.180964][T24137] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.192392][T24137] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.200846][T24137] bridge_slave_1: entered allmulticast mode [ 610.210582][T24137] bridge_slave_1: entered promiscuous mode [ 610.350180][T24137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.362321][T24135] team0: Port device team_slave_0 added [ 610.395800][T24137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.422407][T24135] team0: Port device team_slave_1 added [ 610.538332][T24137] team0: Port device team_slave_0 added [ 610.545231][T24135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.553655][T24135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.584691][T24135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.618276][T24137] team0: Port device team_slave_1 added [ 610.647617][T24135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.657630][T24135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.659544][T24011] Bluetooth: hci2: command tx timeout [ 610.691523][T24135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.736964][T24011] Bluetooth: hci6: command tx timeout [ 610.768586][T24137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.775541][T24137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.802473][T24137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.815848][T24137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.823638][T24137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.851013][T24137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.896267][T24011] Bluetooth: hci7: command tx timeout [ 610.981228][T24165] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.989088][T24165] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.996823][T24165] bridge_slave_0: entered allmulticast mode [ 611.004479][T24165] bridge_slave_0: entered promiscuous mode [ 611.029291][T24135] hsr_slave_0: entered promiscuous mode [ 611.035861][T24135] hsr_slave_1: entered promiscuous mode [ 611.043130][T24135] debugfs: 'hsr0' already exists in 'hsr' [ 611.050359][T24135] Cannot create hsr debugfs directory [ 611.062764][T24137] hsr_slave_0: entered promiscuous mode [ 611.069793][T24137] hsr_slave_1: entered promiscuous mode [ 611.076784][T24137] debugfs: 'hsr0' already exists in 'hsr' [ 611.082517][T24137] Cannot create hsr debugfs directory [ 611.089020][T24165] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.096846][T24165] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.104354][T24165] bridge_slave_1: entered allmulticast mode [ 611.112793][T24165] bridge_slave_1: entered promiscuous mode [ 611.239928][T24170] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.247714][T24170] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.255638][T24170] bridge_slave_0: entered allmulticast mode [ 611.264028][T24170] bridge_slave_0: entered promiscuous mode [ 611.275192][T24165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.303669][T24170] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.311714][T24170] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.319714][T24170] bridge_slave_1: entered allmulticast mode [ 611.327914][T24170] bridge_slave_1: entered promiscuous mode [ 611.338727][T24165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.443007][T24165] team0: Port device team_slave_0 added [ 611.471221][T24170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.483388][T24165] team0: Port device team_slave_1 added [ 611.507285][T24170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.605897][T24165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.613256][T24165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.640892][T24165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.678351][T24170] team0: Port device team_slave_0 added [ 611.685015][T24165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.693040][T24165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.720624][T24165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.758386][T24170] team0: Port device team_slave_1 added [ 611.841361][T24170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.849028][T24170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.877744][T24170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.931687][T24170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.938999][T24011] Bluetooth: hci8: command tx timeout [ 611.944690][T24170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.972861][T24170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.991853][T24165] hsr_slave_0: entered promiscuous mode [ 611.999745][T24165] hsr_slave_1: entered promiscuous mode [ 612.006821][T24165] debugfs: 'hsr0' already exists in 'hsr' [ 612.012575][T24165] Cannot create hsr debugfs directory [ 612.162597][T24170] hsr_slave_0: entered promiscuous mode [ 612.169655][T24170] hsr_slave_1: entered promiscuous mode [ 612.176340][T24011] Bluetooth: hci9: command tx timeout [ 612.178627][T24170] debugfs: 'hsr0' already exists in 'hsr' [ 612.188414][T24170] Cannot create hsr debugfs directory [ 612.736200][T24011] Bluetooth: hci2: command tx timeout [ 612.816271][T24011] Bluetooth: hci6: command tx timeout [ 612.986246][T24011] Bluetooth: hci7: command tx timeout [ 614.026380][T24011] Bluetooth: hci8: command tx timeout [ 614.266733][T24011] Bluetooth: hci9: command tx timeout [ 614.816379][T24011] Bluetooth: hci2: command tx timeout [ 614.896449][T24011] Bluetooth: hci6: command tx timeout [ 615.056336][T24011] Bluetooth: hci7: command tx timeout [ 616.096205][T24011] Bluetooth: hci8: command tx timeout [ 616.336252][T24011] Bluetooth: hci9: command tx timeout [ 624.180865][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.578411][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 210 seconds [ 630.591453][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 210 seconds [ 630.602641][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 210 seconds [ 630.614594][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 210 seconds [ 660.658434][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 240 seconds [ 660.669750][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 240 seconds [ 660.681298][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 240 seconds [ 660.692839][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 240 seconds [ 666.921918][ T5629] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 666.934420][ T5629] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 666.942958][ T5629] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 666.951790][ T5629] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 666.963462][ T5629] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 667.104399][ T5629] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 667.121336][ T5629] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 667.135829][ T5629] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 667.146945][ T5629] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 667.169484][T24236] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 667.179526][T24236] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 667.199733][T24236] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 667.210994][T24236] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 667.229497][T24236] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 667.241318][T24236] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 668.123810][T24236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 668.140920][T24236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 668.151677][T24236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 668.163411][T24236] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 668.175039][T24236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 668.341342][T24236] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 668.359598][T24236] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 668.368116][T24236] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 668.377505][T24236] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 668.385338][T24236] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 669.028563][T24228] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.057027][T24236] Bluetooth: hci10: command tx timeout [ 669.062935][T24228] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.063197][T24228] bridge_slave_0: entered allmulticast mode [ 669.078299][T24228] bridge_slave_0: entered promiscuous mode [ 669.135352][T24228] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.145778][T24228] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.154816][T24228] bridge_slave_1: entered allmulticast mode [ 669.166479][T24228] bridge_slave_1: entered promiscuous mode [ 669.270022][T24228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.289863][T24228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.300115][T24236] Bluetooth: hci12: command tx timeout [ 669.307844][T24011] Bluetooth: hci11: command tx timeout [ 669.387459][T24228] team0: Port device team_slave_0 added [ 669.430401][T24228] team0: Port device team_slave_1 added [ 669.563236][T24228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.571043][T24228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.598423][T24228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.653040][T24228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.661016][T24228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.689938][T24228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.901983][T24228] hsr_slave_0: entered promiscuous mode [ 669.910630][T24228] hsr_slave_1: entered promiscuous mode [ 669.919801][T24228] debugfs: 'hsr0' already exists in 'hsr' [ 669.925551][T24228] Cannot create hsr debugfs directory [ 670.254260][T24231] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.264067][T24011] Bluetooth: hci13: command tx timeout [ 670.271452][T24231] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.279232][T24231] bridge_slave_0: entered allmulticast mode [ 670.287881][T24231] bridge_slave_0: entered promiscuous mode [ 670.322511][T24231] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.330114][T24231] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.338919][T24231] bridge_slave_1: entered allmulticast mode [ 670.348595][T24231] bridge_slave_1: entered promiscuous mode [ 670.495088][T24231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.504381][T24011] Bluetooth: hci14: command tx timeout [ 670.521476][T24231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.683325][T24233] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.691079][T24233] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.698921][T24233] bridge_slave_0: entered allmulticast mode [ 670.707490][T24233] bridge_slave_0: entered promiscuous mode [ 670.717931][T24231] team0: Port device team_slave_0 added [ 670.762543][T24233] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.770243][T24233] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.778081][T24233] bridge_slave_1: entered allmulticast mode [ 670.785784][T24233] bridge_slave_1: entered promiscuous mode [ 670.802382][T24231] team0: Port device team_slave_1 added [ 670.925223][T24233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.941172][T24233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.009568][T24231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.017129][T24231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.043846][T24231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.086062][T24233] team0: Port device team_slave_0 added [ 671.093887][T24231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.101307][T24231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.128888][T24231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.139434][T24011] Bluetooth: hci10: command tx timeout [ 671.182576][T24233] team0: Port device team_slave_1 added [ 671.255097][T24233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.262780][T24233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.292691][T24233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.347166][T24233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.354196][T24233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.381810][T24011] Bluetooth: hci11: command tx timeout [ 671.381908][T24011] Bluetooth: hci12: command tx timeout [ 671.394478][T24233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.414663][T24262] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.422556][T24262] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.430501][T24262] bridge_slave_0: entered allmulticast mode [ 671.438905][T24262] bridge_slave_0: entered promiscuous mode [ 671.448010][T24262] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.455134][T24262] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.463939][T24262] bridge_slave_1: entered allmulticast mode [ 671.472530][T24262] bridge_slave_1: entered promiscuous mode [ 671.562713][T24231] hsr_slave_0: entered promiscuous mode [ 671.571003][T24231] hsr_slave_1: entered promiscuous mode [ 671.578939][T24231] debugfs: 'hsr0' already exists in 'hsr' [ 671.584708][T24231] Cannot create hsr debugfs directory [ 671.605303][T24262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.664069][T24262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.690355][T24267] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.698511][T24267] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.706573][T24267] bridge_slave_0: entered allmulticast mode [ 671.714233][T24267] bridge_slave_0: entered promiscuous mode [ 671.745330][T24233] hsr_slave_0: entered promiscuous mode [ 671.752879][T24233] hsr_slave_1: entered promiscuous mode [ 671.759886][T24233] debugfs: 'hsr0' already exists in 'hsr' [ 671.765642][T24233] Cannot create hsr debugfs directory [ 671.804897][T24267] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.813867][T24267] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.821630][T24267] bridge_slave_1: entered allmulticast mode [ 671.830172][T24267] bridge_slave_1: entered promiscuous mode [ 671.869527][T24262] team0: Port device team_slave_0 added [ 671.922168][T24262] team0: Port device team_slave_1 added [ 671.948424][T24267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.962608][T24267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.090089][T24262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.098125][T24262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.125894][T24262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.156798][T24267] team0: Port device team_slave_0 added [ 672.170859][T24262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.179102][T24262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.209899][T24262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.242542][T24267] team0: Port device team_slave_1 added [ 672.346881][T24236] Bluetooth: hci13: command tx timeout [ 672.365783][T24267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.373580][T24267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.400813][T24267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.444160][T24267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.451494][T24267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.479048][T24267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.498516][T24262] hsr_slave_0: entered promiscuous mode [ 672.505567][T24262] hsr_slave_1: entered promiscuous mode [ 672.512760][T24262] debugfs: 'hsr0' already exists in 'hsr' [ 672.519486][T24262] Cannot create hsr debugfs directory [ 672.587118][T24236] Bluetooth: hci14: command tx timeout [ 672.713130][T24267] hsr_slave_0: entered promiscuous mode [ 672.720621][T24267] hsr_slave_1: entered promiscuous mode [ 672.727657][T24267] debugfs: 'hsr0' already exists in 'hsr' [ 672.733625][T24267] Cannot create hsr debugfs directory [ 673.216320][T24236] Bluetooth: hci10: command tx timeout [ 673.458314][T24236] Bluetooth: hci12: command tx timeout [ 673.458341][T24011] Bluetooth: hci11: command tx timeout [ 674.416506][T24011] Bluetooth: hci13: command tx timeout [ 674.656593][T24011] Bluetooth: hci14: command tx timeout [ 675.296193][T24011] Bluetooth: hci10: command tx timeout [ 675.536211][T24011] Bluetooth: hci12: command tx timeout [ 675.546718][T24011] Bluetooth: hci11: command tx timeout [ 676.506310][T24011] Bluetooth: hci13: command tx timeout [ 676.746841][T24011] Bluetooth: hci14: command tx timeout [ 685.627928][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.739486][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 270 seconds [ 690.750927][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 270 seconds [ 690.762650][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 270 seconds [ 690.774349][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 270 seconds [ 713.296199][T24011] Bluetooth: hci4: command 0x0406 tx timeout [ 720.817172][ T1671] block nbd0: Possible stuck request ffff888027845080: control (read@0,1024B). Runtime 300 seconds [ 720.829429][ T1671] block nbd0: Possible stuck request ffff888027845240: control (read@1024,1024B). Runtime 300 seconds [ 720.841130][ T1671] block nbd0: Possible stuck request ffff888027845400: control (read@2048,1024B). Runtime 300 seconds [ 720.852693][ T1671] block nbd0: Possible stuck request ffff8880278455c0: control (read@3072,1024B). Runtime 300 seconds [ 727.293041][T24237] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 727.304835][T24237] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 727.321886][T24330] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 727.322982][T24237] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 727.338293][T24237] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 727.347876][T24237] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 727.358679][T24237] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 727.367151][T24237] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 727.368335][T24330] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 727.378317][T24237] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 727.470018][T24237] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 727.489824][T24237] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 727.499014][T24237] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 727.513678][T24237] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 727.522450][T24237] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 728.532639][ T5629] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 728.560218][ T5629] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 728.566141][T24236] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 728.581079][T24236] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 728.594130][T24236] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 728.606000][T24236] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 728.619665][T24236] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 728.631167][T24236] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 728.641937][T24236] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 728.659502][T24236] Bluetooth: hci2: command 0x0406 tx timeout [ 728.665350][T24237] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 729.466290][T24011] Bluetooth: hci15: command tx timeout [ 729.468170][T24326] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.473641][T24330] Bluetooth: hci16: command tx timeout [ 729.489212][T24326] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.497537][T24326] bridge_slave_0: entered allmulticast mode [ 729.505294][T24326] bridge_slave_0: entered promiscuous mode [ 729.550039][T24326] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.558545][T24326] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.568036][T24326] bridge_slave_1: entered allmulticast mode [ 729.575773][T24326] bridge_slave_1: entered promiscuous mode [ 729.616258][T24330] Bluetooth: hci17: command tx timeout [ 729.695353][T24326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.712349][T24326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.822046][T24326] team0: Port device team_slave_0 added [ 729.855729][T24326] team0: Port device team_slave_1 added [ 729.948481][T24326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.955718][T24326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.982905][T24326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.014476][T24326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.023183][T24326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.053633][T24326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.234428][T24326] hsr_slave_0: entered promiscuous mode [ 730.243563][T24326] hsr_slave_1: entered promiscuous mode [ 730.251573][T24326] debugfs: 'hsr0' already exists in 'hsr' [ 730.258584][T24326] Cannot create hsr debugfs directory [ 730.454203][T24327] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.462068][T24327] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.470300][T24327] bridge_slave_0: entered allmulticast mode [ 730.479024][T24327] bridge_slave_0: entered promiscuous mode [ 730.542892][T24327] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.552337][T24327] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.560554][T24327] bridge_slave_1: entered allmulticast mode [ 730.571147][T24327] bridge_slave_1: entered promiscuous mode [ 730.682328][T24327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.735019][T24327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.744578][T24330] Bluetooth: hci18: command tx timeout [ 730.749870][T24330] Bluetooth: hci19: command tx timeout [ 730.837204][T24327] team0: Port device team_slave_0 added [ 730.895961][T24327] team0: Port device team_slave_1 added [ 730.941902][T24333] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.949701][T24333] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.958633][T24333] bridge_slave_0: entered allmulticast mode [ 730.966819][T24333] bridge_slave_0: entered promiscuous mode [ 731.027703][T24333] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.034910][T24333] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.043552][T24333] bridge_slave_1: entered allmulticast mode [ 731.052764][T24333] bridge_slave_1: entered promiscuous mode [ 731.063401][T24327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.071498][T24327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.098348][T24327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.179728][T24327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.187512][T24327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.215114][T24327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.270009][T24333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.284560][T24333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.484285][T24333] team0: Port device team_slave_0 added [ 731.496037][T24333] team0: Port device team_slave_1 added [ 731.523157][T24327] hsr_slave_0: entered promiscuous mode [ 731.530541][T24327] hsr_slave_1: entered promiscuous mode [ 731.539014][T24327] debugfs: 'hsr0' already exists in 'hsr' [ 731.540819][T24330] Bluetooth: hci16: command tx timeout [ 731.545152][T24011] Bluetooth: hci15: command tx timeout [ 731.545554][T24327] Cannot create hsr debugfs directory [ 731.648488][T24333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.655457][T24333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.683457][T24333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.702345][T24011] Bluetooth: hci17: command tx timeout [ 731.775488][T24333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.783691][T24333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.811744][T24333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.921290][T24359] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.929133][T24359] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.937579][T24359] bridge_slave_0: entered allmulticast mode [ 731.945354][T24359] bridge_slave_0: entered promiscuous mode [ 731.977408][T24359] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.985372][T24359] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.993140][T24359] bridge_slave_1: entered allmulticast mode [ 732.002580][T24359] bridge_slave_1: entered promiscuous mode [ 732.128133][T24359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.162973][T24333] hsr_slave_0: entered promiscuous mode [ 732.170910][T24333] hsr_slave_1: entered promiscuous mode [ 732.178506][T24333] debugfs: 'hsr0' already exists in 'hsr' [ 732.184263][T24333] Cannot create hsr debugfs directory [ 732.191880][T24360] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.199982][T24360] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.207734][T24360] bridge_slave_0: entered allmulticast mode [ 732.215477][T24360] bridge_slave_0: entered promiscuous mode [ 732.224617][T24360] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.232390][T24360] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.240557][T24360] bridge_slave_1: entered allmulticast mode [ 732.248931][T24360] bridge_slave_1: entered promiscuous mode [ 732.261779][T24359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.437099][T24360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.449551][T24359] team0: Port device team_slave_0 added [ 732.486919][T24360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.514251][T24359] team0: Port device team_slave_1 added [ 732.600253][T24360] team0: Port device team_slave_0 added [ 732.607281][T24359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.614364][T24359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.642205][T24359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.677329][T24360] team0: Port device team_slave_1 added [ 732.683921][T24359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.691525][T24359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.719442][T24359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.810471][T24360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.818643][T24360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.819443][ T5635] Bluetooth: hci19: command tx timeout [ 732.845636][T24360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.853071][T24410] Bluetooth: hci18: command tx timeout [ 732.907307][T24360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.914270][T24360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.940850][T24360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.019764][T24359] hsr_slave_0: entered promiscuous mode [ 733.027343][T24359] hsr_slave_1: entered promiscuous mode [ 733.034064][T24359] debugfs: 'hsr0' already exists in 'hsr' [ 733.040422][T24359] Cannot create hsr debugfs directory [ 733.154503][T24360] hsr_slave_0: entered promiscuous mode [ 733.162156][T24360] hsr_slave_1: entered promiscuous mode [ 733.169194][T24360] debugfs: 'hsr0' already exists in 'hsr' [ 733.174932][T24360] Cannot create hsr debugfs directory [ 733.616610][ T5635] Bluetooth: hci16: command tx timeout [ 733.618491][T24410] Bluetooth: hci15: command tx timeout [ 733.795591][T24410] Bluetooth: hci17: command tx timeout [ 733.796600][ T5635] Bluetooth: hci9: command 0x0406 tx timeout [ 733.809486][T24011] Bluetooth: hci6: command 0x0406 tx timeout [ 733.815876][T24410] Bluetooth: hci7: command 0x0406 tx timeout [ 733.822594][T24236] Bluetooth: hci8: command 0x0406 tx timeout [ 734.897277][ T5629] Bluetooth: hci19: command tx timeout [ 734.903363][T24330] Bluetooth: hci18: command tx timeout [ 735.696325][ T5629] Bluetooth: hci15: command tx timeout [ 735.706550][ T5629] Bluetooth: hci16: command tx timeout [ 735.866383][ T5629] Bluetooth: hci17: command tx timeout [ 736.976241][ T5629] Bluetooth: hci19: command tx timeout [ 736.986723][ T5629] Bluetooth: hci18: command tx timeout [ 742.577069][ T31] INFO: task syz.3.4868:24092 blocked for more than 143 seconds. [ 742.584900][ T31] Not tainted syzkaller #0 [ 742.590516][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 742.599782][ T31] task:syz.3.4868 state:D stack:25224 pid:24092 tgid:24091 ppid:16701 task_flags:0x400140 flags:0x00080002 [ 742.612435][ T31] Call Trace: [ 742.615746][ T31] [ 742.619239][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 742.623775][ T31] ? __lock_acquire+0x683/0x2cf0 [ 742.629366][ T31] ? __lock_acquire+0x683/0x2cf0 [ 742.635379][ T31] ? __pfx___schedule+0x10/0x10 [ 742.640862][ T31] ? schedule+0x90/0x2b0 [ 742.645142][ T31] schedule+0x164/0x2b0 [ 742.650059][ T31] schedule_preempt_disabled+0x13/0x30 [ 742.655564][ T31] __mutex_lock+0x7bf/0x1550 [ 742.661274][ T31] ? __mutex_lock+0x5d4/0x1550 [ 742.669476][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 742.674205][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 742.680138][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 742.685380][ T31] ? radix_tree_lookup+0x240/0x290 [ 742.716754][ T31] genl_rcv_msg+0x10b/0x7a0 [ 742.731919][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.742288][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 742.749330][ T31] netlink_rcv_skb+0x226/0x4a0 [ 742.754137][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.759701][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 742.765040][ T31] ? down_read+0x2be/0x330 [ 742.769923][ T31] genl_rcv+0x28/0x40 [ 742.773951][ T31] netlink_unicast+0x7bb/0x940 [ 742.780549][ T31] netlink_sendmsg+0x813/0xb40 [ 742.785362][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.791654][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 742.798005][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.803329][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 742.809332][ T31] __sys_sendto+0x408/0x5a0 [ 742.813959][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 742.822749][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 742.828633][ T31] __x64_sys_sendto+0xde/0x100 [ 742.833423][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.840976][ T31] do_syscall_64+0x174/0x580 [ 742.845605][ T31] ? trace_irq_disable+0x3b/0x140 [ 742.851268][ T31] ? clear_bhb_loop+0x40/0x90 [ 742.856012][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.862542][ T31] RIP: 0033:0x7f95e6d5e6ce [ 742.867671][ T31] RSP: 002b:00007f95e7b7de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 742.876665][ T31] RAX: ffffffffffffffda RBX: 00007f95e7b7f6c0 RCX: 00007f95e6d5e6ce [ 742.884647][ T31] RDX: 0000000000000020 RSI: 00007f95e7b7e000 RDI: 000000000000000c [ 742.893586][ T31] RBP: 0000000000000000 R08: 00007f95e7b7df04 R09: 000000000000000c [ 742.902442][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 742.911267][ T31] R13: 00007f95e7b7df58 R14: 00007f95e7b7e000 R15: 0000000000000000 [ 742.919816][ T31] [ 742.922873][ T31] INFO: task syz.2.4866:24096 blocked for more than 143 seconds. [ 742.931332][ T31] Not tainted syzkaller #0 [ 742.936937][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 742.946901][ T31] task:syz.2.4866 state:D stack:25096 pid:24096 tgid:24093 ppid:17875 task_flags:0x480140 flags:0x00080002 [ 742.959413][ T31] Call Trace: [ 742.962693][ T31] [ 742.965625][ T31] __schedule+0x17d9/0x56c0 [ 742.970775][ T31] ? __lock_acquire+0x683/0x2cf0 [ 742.975781][ T31] ? __pfx___schedule+0x10/0x10 [ 742.981390][ T31] ? schedule+0x90/0x2b0 [ 742.985679][ T31] schedule+0x164/0x2b0 [ 742.990482][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 742.996703][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 743.002807][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 743.009767][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 743.015903][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 743.022723][ T31] nbd_set_size+0x454/0x680 [ 743.027894][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 743.032976][ T31] ? nla_memcpy+0x5b/0xc0 [ 743.037518][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 743.043604][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 743.049547][ T31] ? rcu_is_watching+0x15/0xb0 [ 743.054353][ T31] ? trace_kmalloc+0x2a/0xf0 [ 743.059249][ T31] ? __kmalloc_noprof+0x396/0x720 [ 743.064314][ T31] ? __nla_parse+0x40/0x60 [ 743.069377][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 743.075739][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 743.082637][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 743.088870][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 743.094993][ T31] ? __lock_acquire+0x683/0x2cf0 [ 743.100509][ T31] genl_rcv_msg+0x614/0x7a0 [ 743.105042][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 743.110709][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 743.117023][ T31] netlink_rcv_skb+0x226/0x4a0 [ 743.121805][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 743.127517][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 743.132846][ T31] ? down_read+0x2be/0x330 [ 743.137911][ T31] genl_rcv+0x28/0x40 [ 743.141926][ T31] netlink_unicast+0x7bb/0x940 [ 743.148056][ T31] netlink_sendmsg+0x813/0xb40 [ 743.152875][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.158825][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 743.163805][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.169705][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 743.174771][ T31] ____sys_sendmsg+0x54e/0x850 [ 743.180083][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 743.185388][ T31] ? import_iovec+0x73/0xa0 [ 743.190573][ T31] ___sys_sendmsg+0x2a5/0x360 [ 743.195286][ T31] ? __lock_acquire+0x683/0x2cf0 [ 743.200903][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.206747][ T31] ? futex_wait+0x2a2/0x390 [ 743.211351][ T31] ? __fget_files+0x2a/0x420 [ 743.215957][ T31] ? __fget_files+0x3a2/0x420 [ 743.221879][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 743.227601][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 743.233112][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.239803][ T31] do_syscall_64+0x174/0x580 [ 743.244431][ T31] ? trace_irq_disable+0x3b/0x140 [ 743.250893][ T31] ? clear_bhb_loop+0x40/0x90 [ 743.255611][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.262063][ T31] RIP: 0033:0x7f3259d9de99 [ 743.267195][ T31] RSP: 002b:00007f325acca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.275640][ T31] RAX: ffffffffffffffda RBX: 00007f325a025fa0 RCX: 00007f3259d9de99 [ 743.284178][ T31] RDX: 0000000020000080 RSI: 0000200000000b40 RDI: 0000000000000006 [ 743.292813][ T31] RBP: 00007f3259e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 743.306707][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.315148][ T31] R13: 00007f325a026038 R14: 00007f325a025fa0 R15: 00007ffe5d318888 [ 743.323693][ T31] [ 743.326984][ T31] INFO: task syz.1.4870:24103 blocked for more than 144 seconds. [ 743.334725][ T31] Not tainted syzkaller #0 [ 743.339797][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 743.349328][ T31] task:syz.1.4870 state:D stack:27872 pid:24103 tgid:24099 ppid:16320 task_flags:0x400140 flags:0x00080002 [ 743.361882][ T31] Call Trace: [ 743.365164][ T31] [ 743.368693][ T31] __schedule+0x17d9/0x56c0 [ 743.373241][ T31] ? __lock_acquire+0x683/0x2cf0 [ 743.379251][ T31] ? __lock_acquire+0x683/0x2cf0 [ 743.384254][ T31] ? __pfx___schedule+0x10/0x10 [ 743.389745][ T31] ? schedule+0x90/0x2b0 [ 743.394030][ T31] schedule+0x164/0x2b0 [ 743.398776][ T31] schedule_preempt_disabled+0x13/0x30 [ 743.404260][ T31] __mutex_lock+0x7bf/0x1550 [ 743.409485][ T31] ? __mutex_lock+0x5d4/0x1550 [ 743.414284][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 743.419622][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 743.424690][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 743.430435][ T31] ? radix_tree_lookup+0x240/0x290 [ 743.435592][ T31] genl_rcv_msg+0x10b/0x7a0 [ 743.440725][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 743.445792][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 743.452518][ T31] netlink_rcv_skb+0x226/0x4a0 [ 743.458029][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 743.463096][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 743.469038][ T31] ? down_read+0x2be/0x330 [ 743.473503][ T31] genl_rcv+0x28/0x40 [ 743.478078][ T31] netlink_unicast+0x7bb/0x940 [ 743.482877][ T31] netlink_sendmsg+0x813/0xb40 [ 743.488336][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.493658][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 743.499151][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.504446][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 743.510099][ T31] __sys_sendto+0x408/0x5a0 [ 743.514650][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 743.520279][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 743.525588][ T31] __x64_sys_sendto+0xde/0x100 [ 743.531058][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.537970][ T31] do_syscall_64+0x174/0x580 [ 743.542594][ T31] ? trace_irq_disable+0x3b/0x140 [ 743.548288][ T31] ? clear_bhb_loop+0x40/0x90 [ 743.553507][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.560134][ T31] RIP: 0033:0x7f5014b5e6ce [ 743.564793][ T31] RSP: 002b:00007f5015abbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 743.573972][ T31] RAX: ffffffffffffffda RBX: 00007f5015abd6c0 RCX: 00007f5014b5e6ce [ 743.582532][ T31] RDX: 0000000000000024 RSI: 00007f5015abc000 RDI: 0000000000000003 [ 743.591157][ T31] RBP: 0000000000000000 R08: 00007f5015abbf04 R09: 000000000000000c [ 743.599789][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 743.608436][ T31] R13: 00007f5015abbf58 R14: 00007f5015abc000 R15: 0000000000000000 [ 743.616667][ T31] [ 743.619742][ T31] INFO: task syz.4.4872:24109 blocked for more than 144 seconds. [ 743.629339][ T31] Not tainted syzkaller #0 [ 743.634548][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 743.643393][ T31] task:syz.4.4872 state:D stack:27280 pid:24109 tgid:24108 ppid:18227 task_flags:0x400040 flags:0x00080002 [ 743.656453][ T31] Call Trace: [ 743.659961][ T31] [ 743.662903][ T31] __schedule+0x17d9/0x56c0 [ 743.668081][ T31] ? __lock_acquire+0x683/0x2cf0 [ 743.673043][ T31] ? __lock_acquire+0x683/0x2cf0 [ 743.678673][ T31] ? __pfx___schedule+0x10/0x10 [ 743.683577][ T31] ? schedule+0x90/0x2b0 [ 743.688370][ T31] schedule+0x164/0x2b0 [ 743.692551][ T31] schedule_preempt_disabled+0x13/0x30 [ 743.699014][ T31] __mutex_lock+0x7bf/0x1550 [ 743.703644][ T31] ? __mutex_lock+0x5d4/0x1550 [ 743.709090][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 743.713814][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 743.719447][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 743.724595][ T31] ? radix_tree_lookup+0x240/0x290 [ 743.730287][ T31] genl_rcv_msg+0x10b/0x7a0 [ 743.734828][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 743.740497][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 743.745927][ T31] netlink_rcv_skb+0x226/0x4a0 [ 743.751372][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 743.757056][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 743.762831][ T31] ? down_read+0x2be/0x330 [ 743.768229][ T31] genl_rcv+0x28/0x40 [ 743.772252][ T31] netlink_unicast+0x7bb/0x940 [ 743.777852][ T31] netlink_sendmsg+0x813/0xb40 [ 743.782660][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.788588][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 743.793563][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.799474][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 743.804539][ T31] __sys_sendto+0x408/0x5a0 [ 743.809628][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 743.814713][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 743.820735][ T31] __x64_sys_sendto+0xde/0x100 [ 743.825553][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.832151][ T31] do_syscall_64+0x174/0x580 [ 743.837454][ T31] ? trace_irq_disable+0x3b/0x140 [ 743.842528][ T31] ? clear_bhb_loop+0x40/0x90 [ 743.847795][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.853706][ T31] RIP: 0033:0x7f938bf5e6ce [ 743.859222][ T31] RSP: 002b:00007f938ce92e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 743.868968][ T31] RAX: ffffffffffffffda RBX: 00007f938ce946c0 RCX: 00007f938bf5e6ce [ 743.877648][ T31] RDX: 0000000000000020 RSI: 00007f938ce93000 RDI: 0000000000000004 [ 743.885659][ T31] RBP: 0000000000000000 R08: 00007f938ce92f04 R09: 000000000000000c [ 743.894154][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 743.902807][ T31] R13: 00007f938ce92f58 R14: 00007f938ce93000 R15: 0000000000000000 [ 743.910964][ T31] [ 743.914007][ T31] INFO: task syz.0.4876:24127 blocked for more than 144 seconds. [ 743.922653][ T31] Not tainted syzkaller #0 [ 743.927771][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 743.937149][ T31] task:syz.0.4876 state:D stack:27224 pid:24127 tgid:24126 ppid:17397 task_flags:0x400140 flags:0x00080002 [ 743.949634][ T31] Call Trace: [ 743.952926][ T31] [ 743.955861][ T31] __schedule+0x17d9/0x56c0 [ 743.960965][ T31] ? __lock_acquire+0x683/0x2cf0 [ 743.967333][ T31] ? __lock_acquire+0x683/0x2cf0 [ 743.972340][ T31] ? __pfx___schedule+0x10/0x10 [ 743.977910][ T31] ? schedule+0x90/0x2b0 [ 743.982190][ T31] schedule+0x164/0x2b0 [ 743.986951][ T31] schedule_preempt_disabled+0x13/0x30 [ 743.992486][ T31] __mutex_lock+0x7bf/0x1550 [ 743.997724][ T31] ? __mutex_lock+0x5d4/0x1550 [ 744.002533][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 744.007835][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 744.012905][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 744.018692][ T31] ? radix_tree_lookup+0x240/0x290 [ 744.023853][ T31] genl_rcv_msg+0x10b/0x7a0 [ 744.028912][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 744.033964][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 744.040046][ T31] netlink_rcv_skb+0x226/0x4a0 [ 744.044845][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 744.050429][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 744.055746][ T31] ? down_read+0x2be/0x330 [ 744.060877][ T31] genl_rcv+0x28/0x40 [ 744.065626][ T31] netlink_unicast+0x7bb/0x940 [ 744.071086][ T31] netlink_sendmsg+0x813/0xb40 [ 744.075878][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.081801][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 744.087400][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.092719][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 744.098444][ T31] __sys_sendto+0x408/0x5a0 [ 744.102997][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 744.108692][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 744.114026][ T31] __x64_sys_sendto+0xde/0x100 [ 744.119453][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.125554][ T31] do_syscall_64+0x174/0x580 [ 744.130759][ T31] ? trace_irq_disable+0x3b/0x140 [ 744.135824][ T31] ? clear_bhb_loop+0x40/0x90 [ 744.141034][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.147661][ T31] RIP: 0033:0x7fef29b5e6ce [ 744.152105][ T31] RSP: 002b:00007fef2aa90e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 744.161045][ T31] RAX: ffffffffffffffda RBX: 00007fef2aa926c0 RCX: 00007fef29b5e6ce [ 744.170399][ T31] RDX: 0000000000000020 RSI: 00007fef2aa91000 RDI: 000000000000000a [ 744.179210][ T31] RBP: 0000000000000000 R08: 00007fef2aa90f04 R09: 000000000000000c [ 744.187876][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 744.195880][ T31] R13: 00007fef2aa90f58 R14: 00007fef2aa91000 R15: 0000000000000000 [ 744.204131][ T31] [ 744.207405][ T31] [ 744.207405][ T31] Showing all locks held in the system: [ 744.215150][ T31] 1 lock held by khungtaskd/31: [ 744.220093][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 744.230644][ T31] 1 lock held by klogd/4982: [ 744.235264][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 744.245803][ T31] 2 locks held by getty/5379: [ 744.251112][ T31] #0: ffff8880364290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 744.261834][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 744.273375][ T31] 1 lock held by udevd/11939: [ 744.278650][ T31] #0: ffff8880277a6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 744.288520][ T31] 2 locks held by syz.3.4868/24092: [ 744.293745][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.302504][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.312180][ T31] 6 locks held by syz.2.4866/24096: [ 744.317993][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.326852][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.335867][ T31] #2: ffff888027799260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 744.352056][ T31] #3: ffff8880278047c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 744.362047][ T31] #4: ffff888027804190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 744.375624][ T31] #5: ffff8880278041c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 744.388596][ T31] 2 locks held by syz.1.4870/24103: [ 744.393818][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.402615][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.412230][ T31] 2 locks held by syz.4.4872/24109: [ 744.418631][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.427518][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.437115][ T31] 2 locks held by syz.0.4876/24127: [ 744.442313][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.451150][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.460790][ T31] 2 locks held by syz-executor/24132: [ 744.466823][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.475764][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.485427][ T31] 2 locks held by syz-executor/24135: [ 744.491447][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.500668][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.509907][ T31] 2 locks held by syz-executor/24137: [ 744.515307][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.523577][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.532741][ T31] 2 locks held by syz-executor/24165: [ 744.538757][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.547600][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.557195][ T31] 2 locks held by syz-executor/24170: [ 744.562575][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.571480][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.581960][ T31] 2 locks held by syz-executor/24228: [ 744.588010][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.596819][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.605812][ T31] 2 locks held by syz-executor/24231: [ 744.611778][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.620557][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.630196][ T31] 2 locks held by syz-executor/24233: [ 744.635599][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.644453][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.654101][ T31] 2 locks held by syz-executor/24262: [ 744.660194][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.669051][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.678666][ T31] 2 locks held by syz-executor/24267: [ 744.684798][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.693646][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.703303][ T31] 2 locks held by syz-executor/24326: [ 744.709328][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.718117][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.727779][ T31] 2 locks held by syz-executor/24327: [ 744.733177][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.742056][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.751746][ T31] 2 locks held by syz-executor/24333: [ 744.757776][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.766012][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.775645][ T31] 2 locks held by syz-executor/24359: [ 744.782300][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.791207][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.800359][ T31] 2 locks held by syz-executor/24360: [ 744.805728][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.814137][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.823350][ T31] [ 744.825695][ T31] ============================================= [ 744.825695][ T31] [ 744.834802][ T31] NMI backtrace for cpu 1 [ 744.834818][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 744.834838][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 744.834848][ T31] Call Trace: [ 744.834856][ T31] [ 744.834863][ T31] dump_stack_lvl+0xe8/0x150 [ 744.834895][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 744.834921][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 744.834950][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 744.834977][ T31] sys_info+0x135/0x170 [ 744.834997][ T31] watchdog+0xfd7/0x1030 [ 744.835026][ T31] ? watchdog+0x1c7/0x1030 [ 744.835053][ T31] kthread+0x388/0x470 [ 744.835079][ T31] ? __pfx_watchdog+0x10/0x10 [ 744.835098][ T31] ? __pfx_kthread+0x10/0x10 [ 744.835124][ T31] ret_from_fork+0x514/0xb70 [ 744.835186][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 744.835230][ T31] ? __switch_to+0xc89/0x1420 [ 744.835256][ T31] ? __pfx_kthread+0x10/0x10 [ 744.835281][ T31] ret_from_fork_asm+0x1a/0x30 [ 744.835314][ T31] [ 744.835321][ T31] Sending NMI from CPU 1 to CPUs 0: [ 744.952218][ C0] NMI backtrace for cpu 0 [ 744.952232][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 744.952251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 744.952261][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 744.952292][ C0] Code: cc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 9a 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 744.952307][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 744.952322][ C0] RAX: 0000000003664a39 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 744.952334][ C0] RDX: 0000000000000001 RSI: ffffffff8e22ba03 RDI: ffffffff8c4bda80 [ 744.952346][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 744.952359][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 744.952371][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 744.952383][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 744.952397][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.952408][ C0] CR2: 000055be241c8ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 744.952423][ C0] Call Trace: [ 744.952429][ C0] [ 744.952435][ C0] default_idle+0x9/0x20 [ 744.952453][ C0] default_idle_call+0x72/0xb0 [ 744.952470][ C0] do_idle+0x2e0/0x540 [ 744.952494][ C0] ? __pfx_do_idle+0x10/0x10 [ 744.952520][ C0] cpu_startup_entry+0x43/0x60 [ 744.952540][ C0] rest_init+0x2de/0x300 [ 744.952560][ C0] start_kernel+0x392/0x3e0 [ 744.952642][ C0] x86_64_start_reservations+0x24/0x30 [ 744.952720][ C0] x86_64_start_kernel+0x137/0x1b0 [ 744.952741][ C0] common_startup_64+0x13e/0x157 [ 744.952769][ C0] [ 745.136959][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 745.143811][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 745.152913][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 745.162954][ T31] Call Trace: [ 745.166221][ T31] [ 745.169143][ T31] vpanic+0x56c/0xa60 [ 745.173132][ T31] ? __pfx___schedule+0x10/0x10 [ 745.177989][ T31] ? __pfx_vpanic+0x10/0x10 [ 745.182490][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 745.188648][ T31] panic+0xc5/0xd0 [ 745.192368][ T31] ? __pfx_panic+0x10/0x10 [ 745.196789][ T31] ? preempt_schedule_common+0x82/0xd0 [ 745.202258][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 745.207623][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 745.213775][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 745.219930][ T31] watchdog+0x1030/0x1030 [ 745.224261][ T31] ? watchdog+0x1c7/0x1030 [ 745.228676][ T31] kthread+0x388/0x470 [ 745.232742][ T31] ? __pfx_watchdog+0x10/0x10 [ 745.237410][ T31] ? __pfx_kthread+0x10/0x10 [ 745.241995][ T31] ret_from_fork+0x514/0xb70 [ 745.246590][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 745.251702][ T31] ? __switch_to+0xc89/0x1420 [ 745.256382][ T31] ? __pfx_kthread+0x10/0x10 [ 745.260971][ T31] ret_from_fork_asm+0x1a/0x30 [ 745.265734][ T31] [ 745.269028][ T31] Kernel Offset: disabled [ 745.273343][ T31] Rebooting in 86400 seconds..