last executing test programs: 4m13.852916101s ago: executing program 3 (id=394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "1ad963b83d3347ba", "8f0b399319b71b055cd4aab382f90183e8cda4922a3e90b22a59ee51a3a37f78", "6d3346d7", "aea0bbfdac08f98c"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x0) 4m13.721577754s ago: executing program 3 (id=397): r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000600)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100b2abd7000fcdbdf250300000008001100010000000500210001000000060003000200000006001d000100000006001c000d00000006000e539dc3f07b00080000000800110001000000050022"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0xc804) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x32}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14000}, 0x404c001) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x8800) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'nr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000027400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x5032, 0x0, 0x1, 0x5, '\x00', r7, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r10, 0x6, 0xd, &(0x7f00000008c0)='.', 0x1) listen(r10, 0x6) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r9, &(0x7f0000000380)="6d659c5f0af972d0c6e1698cd8ee39b5a5ea40e51f6f418f43aec9df0b45c15b93699518a27cc0ac", &(0x7f00000003c0)=""/176}, 0x20) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4m13.23204276s ago: executing program 3 (id=404): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x6}}]}}]}, 0x40}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 4m12.700516955s ago: executing program 3 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 4m12.491270542s ago: executing program 3 (id=414): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x3, 0x0, 0x1, 0x2, 0xffff, 0x9}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x32, 0xffffffffffffffff, 0x2000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x7, 0x200007, 0x7, 0x2}, 0x10) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 4m11.591819647s ago: executing program 32 (id=416): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) close(0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 4m11.456904803s ago: executing program 3 (id=421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "1ad963b83d3347ba", "8f0b399319b71b055cd4aab382f90183e8cda4922a3e90b22a59ee51a3a37f78", "6d3346d7", "aea0bbfdac08f98c"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x0) 4m11.067557229s ago: executing program 33 (id=421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "1ad963b83d3347ba", "8f0b399319b71b055cd4aab382f90183e8cda4922a3e90b22a59ee51a3a37f78", "6d3346d7", "aea0bbfdac08f98c"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x0) 4m9.01627632s ago: executing program 4 (id=436): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4m8.869955958s ago: executing program 4 (id=438): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) (async) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) (async, rerun: 64) sendmmsg$inet6(r1, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="53cef5d9", 0x4}, {0x0}, {0x0}], 0x3}}], 0x1, 0x44004) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x82) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) (async) ioctl$PPPIOCGIDLE(r0, 0x4004743c, &(0x7f0000000040)) 4m8.528357612s ago: executing program 4 (id=443): unshare(0x2c020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/238, 0xee, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071124c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m8.391390408s ago: executing program 1 (id=445): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="e5370cba96f7506bea333227fb126c54", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @empty, 0x1}, 0x10) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 4m7.536088068s ago: executing program 1 (id=446): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4m7.422484238s ago: executing program 4 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb, 0xfff1}, {0xb, 0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0xb, 0x1, 0x9, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x18) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1}, {0xffff, 0xd}, {0xa, 0x1}}}, 0x24}}, 0x4000080) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x214, 0xd, 0x100}, 0x4, 0x0, 0x5, 0x0, 0x1, 0x1e, 0x0, 0x12, 0x5, 0x400, {0xfffffffc, 0x5, 0x0, 0x1, 0x5, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0xa6, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4m7.291237491s ago: executing program 1 (id=449): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xcb, &(0x7f0000000140)=""/203, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 4m7.115717808s ago: executing program 1 (id=451): recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000e504010035df2500200006", @ANYRES32=r1, @ANYBLOB="1008040001800400300016802c00018028000100fffffeff0180c200000e000000000000000000000000000000000000000000000000000008000400ff000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000e504010035df2500200006", @ANYRES32=r1, @ANYBLOB="1008040001800400300016802c00018028000100fffffeff0180c200000e000000000000000000000000000000000000000000000000000008000400ff000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$inet(0x10, 0x3, 0x0) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x60}}, 0x4000014) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003580)=@newchain={0x2e24, 0x64, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0xd}, {0xffff, 0xb}, {0x6, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xe66}, @filter_kind_options=@f_bpf={{0x8}, {0x504, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0x9, 0x2c, 0xcd}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x468, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x1, 0x4, 0x5, 0x3, 0xfffffffa, 0x880b, 0x0, 0x2, 0x1, 0x1, 0x1, 0x7f, 0x1, 0x2, 0x10001, 0xf03e, 0x5, 0x7, 0x7b, 0x3, 0x9, 0x1, 0x9, 0x8, 0x2, 0x4, 0x259ae465, 0x10000, 0x9, 0x7a91, 0x1, 0x8, 0x2, 0x98a5, 0x800, 0x8460, 0xcb, 0x3, 0xfff, 0xfff, 0x5, 0x8001, 0x0, 0xac3, 0x0, 0x97, 0x3ff, 0x0, 0x20000000, 0x9, 0x200, 0x10000, 0x2, 0x10001, 0x100, 0x5063, 0x7, 0x0, 0x51, 0x3, 0x2963, 0x626, 0x2, 0x6000000, 0x2, 0x2, 0x7, 0xff, 0x829, 0x1ffc000, 0x7, 0x2, 0x3, 0x0, 0x81, 0x3, 0xb0b1, 0x206, 0x4, 0xf, 0x31ae, 0xf7, 0x1000, 0x80, 0xfffffffb, 0x10000, 0x7, 0x81, 0x8000, 0x4, 0x4, 0xf331, 0xff, 0x200, 0x4, 0x8, 0x81, 0x1, 0x78ae, 0x800, 0xfff, 0x1, 0x9, 0xef, 0x9, 0x3, 0xfffffffa, 0x1, 0x3, 0xffffffff, 0x1, 0x5c19, 0x5, 0x0, 0x4b14, 0x6, 0x5, 0x8, 0x40, 0x7, 0x9, 0x8, 0x7, 0xb, 0x4, 0x1, 0x7, 0x6, 0x7fff, 0xb, 0x1a9b, 0x6, 0x4, 0x9, 0x8, 0x400, 0xfffffffe, 0x12e1, 0x5, 0x6, 0x2, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x20000000, 0x4, 0x7, 0x2, 0x5, 0x2, 0x7ff, 0x0, 0x81, 0x7, 0x38d, 0x401, 0x1ff, 0x4, 0x28, 0x8f2, 0x80000000, 0x7fffffff, 0xb, 0x1, 0xfffffffe, 0x6, 0x1, 0x1, 0x65, 0x8, 0x6, 0x5, 0x2, 0x4, 0x3, 0x2, 0x6e, 0xb4d, 0xff, 0xfffffff7, 0xffff1abf, 0x5, 0x0, 0x4, 0x4, 0x7bb6f16a, 0x796, 0x6, 0x6, 0x9, 0x1, 0x4, 0x3, 0x0, 0x4, 0x12d2, 0x9e, 0x9, 0x22537b56, 0x7, 0x42, 0x5, 0x200, 0x6, 0xb, 0x1, 0x5, 0x840c, 0xf09, 0x1982, 0x6, 0x2, 0x4b30, 0x81, 0x4, 0x382, 0x8001, 0x38, 0xffff, 0x5, 0x9, 0x0, 0x10000, 0x10, 0x0, 0x101, 0x4, 0x10000, 0xf, 0x0, 0x5, 0x1, 0x800, 0x8, 0x7, 0xfffffffe, 0x53c5, 0x4, 0x81, 0x4, 0x4, 0x7, 0x400, 0x34, 0x5, 0xfffffff7, 0xa, 0x0, 0x3ff, 0x5, 0x3, 0x3ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x180000, 0x3, 0x1, 0x5, 0x80000001, {0x50, 0x2, 0x5, 0x5, 0x2, 0x8}, {0x5, 0x1, 0xbf, 0x7, 0x4538, 0x5}, 0x2, 0x5, 0x6df00057}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x3, 0x2, 0xf6, 0x8000}, {0x4b, 0x5, 0x7, 0x6}, {0x3, 0x8, 0x25, 0x7e3}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0xc, 0x91, 0x6, 0x6}, {0x2, 0x4, 0x4, 0x4}, {0xf540, 0x3, 0x2}, {0x1, 0xff, 0xb, 0x9}, {0x2, 0x3, 0x4, 0x5}, {0xc831, 0x2, 0x8, 0x2}, {0x400, 0x9, 0x2, 0x10001}, {0x4c7e, 0x7, 0x8, 0x7ff}]}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x28cc, 0x2, [@TCA_MATCHALL_ACT={0x1d8, 0x2, [@m_police={0xc8, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0x83, 0x6, "4a4473d30c875f7c63ddb817c47bcd11497ecbb8ab23ca70619abd69203802dbd88c2f68b50094d9150ade09160af8303e5f906a275df9f97de3b01dfd3b2b7f95bf76f276a98aa849088c4d45496e4d80a6da39c59b4fce7ce7e0b5a33d9f156106dae9bc15cae9fe84cb08dbb1d756c614a9ea755aee40238d5e8e71c6a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x50, 0x1b, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1ff}]}, {0x17, 0x6, "1af427a42f93823da0f0c54fb270c55acafad7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xbc, 0x18, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x78, 0x1, 0x0, 0xd}, 0xcbd1}}]}, {0x6e, 0x6, "b629397f168aa99f8765b45b10a9ebc70e7853436670b7f18f74dc1f5d5f951a4efb483d8230e1d102c500dcbc2441dc08f2aaaa0f0d7a58d0d319cd7d365c7d8f3bde66e6cd97086618de440f5c672ef335e1583aff228a58fc8061bcd5dca730321d1b0c73ce4d3b74"}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xa}}, @TCA_MATCHALL_ACT={0x150, 0x2, [@m_skbmod={0x14c, 0x0, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x800}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="4f7ec19c7ccc"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="e420210dee58"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0xd3, 0x6, "4517681f28b2dd8e37d68b5a047438cd1649d79e69c0b6888ec7b5d3179216f1f6bf3d8a2465909c9c18f25f74965df09be5dd27233ef75fdd5c5a23940a913bc62ce10859f75890fd6694848f70517f1a51428b18c2d405d0923dfe950bf2d74e6e327fed92870ae9a26266b6ca0c9adea99dc2335e2c0a546412245ca7a3fe8701f3d562c35629bbf085a1230766d485e214fa22d7b0773ea3d8cf215e8736ada28d085341e18ed8caa17cb7544746de62efdcd608e876552fb63fdb3834175429ef78d9c4c37122d8db254ffb46"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x3}}, @TCA_MATCHALL_ACT={0x10a4, 0x2, [@m_mpls={0x1038, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xffc9d}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x68, 0x20, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xb}}]}, {0x2c, 0x6, "cc526256d576a3dd7c306c7d3f698e3a2427c99b514c56552ef1de6e81101adc61c4e01f3e4e7ba3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x14dc, 0x2, [@m_csum={0x154, 0xe, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4d, 0x5, 0x10000000, 0x4, 0x7fffffff}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x820, 0x3, 0x0, 0xfffeffff}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5b, 0x9, 0x0, 0x8, 0x6}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x0, 0x2, 0x6}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x335, 0x68a7, 0x1, 0x3}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x0, 0x5, 0x4}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x7, 0x7, 0x8}, 0x6f}}]}, {0x61, 0x6, "feb37ebf4451ec6662179ef325ea7a32ba6acddb2ba43b9bb95fafbda7f030ee8ba72ee3e743ae543eec07c01e4d255444285435d947ce39c8aee30b8feb4814e47414fad4c08a64c04aa7ddde42b06f108acddb68a7bf754090d36065"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x110c, 0x7, 0x0, 0x0, {{0x7}, {0xe4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x80, 0x6, {0xffff, 'filter\x00', 0x92, 0xee67, "a5975166476c560f6db960d3970b29b5c7a23f56774d8fe6715d08d9eb86bbe26514f3df0662436897b2c1d49b7319d7ebd8227c9238d3134d21d72644e3bcb7ecece0915133530fecff81ee44cc85fc7d2d16cf9324"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x32, 0x6, {0xe, 'raw\x00', 0x55, 0x2, "5757757fcda93d7a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000001}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x144, 0xc, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xffff}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x400, 0x20000000, 0xda83, 0x9}}}]}, {0xeb, 0x6, "3a9672193fcb59ff2e269b8f4a22b5a7223cdd8e81b348af35b7cf533fb4434f3c7e216d7a238bb3808bbfcdf8c9a4294037b0c6d91279e5d2713d6c5a15b60a7229498ab2cbe063569fe4f98d1fe07b369b9409e99b102661744b1cd179eb88c4216a02f0ae47ee30f14a7a7dc9ddd4c606591920d8619d7cae949c06339318ab407c1dc75c024498a81978f550de35ff78e5ad519312c43cdd8630562a4cfb87686ada9c06fce6e05c5a69bc177b99f0c9b2527a50f6228a0de47550856d56cd3b7b533660218d257d56ac4230b80a8472948cfded72b97066314939a32c8fd4b4d62a0f0764"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x134, 0x2, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8fe}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x575}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x400, 0x3, 0x2, 0x3, 0x1}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xff, 0x2, 0x20000000, 0xffff, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8b4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x9e, 0x6, "e18005fc7cdc38d991fcc108a0b2ac7c8bea54c316ba783bcd3c66dd3b15d8d06c5fdb0057946ae9334948ccdb2bc0cc9b05c76252ee62bf057b5af524f611dbd38b7aa6b8ee0c72f3df7476277d901dfecbe97a02155310c818a08f37c6b7fdc8527e82544117e49db22b94b2a9ed367a8634e25b1fbda655227a45108713824c59509d421abcf9ed2de779b3927409f054a9cd1882da8bebcf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0x2e24}, 0x1, 0x0, 0x0, 0x80}, 0x40081) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 4m6.84915145s ago: executing program 4 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d, 0x0, 0x6, 0x80000011}, {0x35}]}, 0x10) 4m6.735255993s ago: executing program 5 (id=417): syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6077132400003c00fc010000000000000000000000000000fe8000000000000100000000000000aa1008820d983872c4e5568a9f783f94da3bb045b30d19baff9c966306ca104b7ee0830710eed3a92878ff754d7c8d142c29abe17dcba11bee381499f821f38509391b90f401938902c363bb8b51c6e07c90991832ad72358765015ff36da9f8a37c23e5e36ef26185073dbaa6fd93cc63fd8c3a87e668f50eeb50d954aca50a0da0693b3bb670fc8787ee0a1633defb30993c6eddf890fbaf4d68549ad94423de4367d79edd636272f961566b524a499eba2490de0686529375cd2c2d59fab1959f3300"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getpeername(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r4, 0xad3, 0x8}, 0x8) 4m6.666588125s ago: executing program 1 (id=453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) vmsplice(r7, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000780)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x8, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x400, 0x2, &(0x7f0000000500)=""/2, 0x0, 0x1d, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000900)=[r5, r6, r7, r8, r9, r10], &(0x7f0000000940)=[{0x0, 0x5, 0xf, 0x1}, {0x3, 0x1, 0x0, 0x6}, {0x9, 0x5, 0x7, 0x7}, {0x5, 0x1, 0x8, 0x9}, {0x4, 0x1, 0x0, 0xb}], 0x10, 0x6}, 0x94) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000180)={0x7ffb, 0x5, 0xfffffffc, 0x7fffffe}, 0x10) recvmsg$kcm(r11, &(0x7f0000000100)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/208, 0xd0}], 0x1}, 0x20) write(r11, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='f2fs_bmap\x00', r0}, 0x18) unshare(0x62040200) 4m6.192122504s ago: executing program 34 (id=417): syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6077132400003c00fc010000000000000000000000000000fe8000000000000100000000000000aa1008820d983872c4e5568a9f783f94da3bb045b30d19baff9c966306ca104b7ee0830710eed3a92878ff754d7c8d142c29abe17dcba11bee381499f821f38509391b90f401938902c363bb8b51c6e07c90991832ad72358765015ff36da9f8a37c23e5e36ef26185073dbaa6fd93cc63fd8c3a87e668f50eeb50d954aca50a0da0693b3bb670fc8787ee0a1633defb30993c6eddf890fbaf4d68549ad94423de4367d79edd636272f961566b524a499eba2490de0686529375cd2c2d59fab1959f3300"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getpeername(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r4, 0xad3, 0x8}, 0x8) 4m6.157024758s ago: executing program 1 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) socketpair(0x2c, 0x803, 0x0, &(0x7f0000000240)) 4m6.15608433s ago: executing program 6 (id=423): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x6}}]}}]}, 0x40}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 4m6.118623311s ago: executing program 35 (id=423): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x6}}]}}]}, 0x40}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 4m6.076780805s ago: executing program 4 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8948, &(0x7f0000000300)={'bond0\x00', 0xb}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', r3, 0x6, 0x2, 0xeb, 0xf4, 0x52, @mcast2, @local, 0x22cdcb0f28b063f, 0x40, 0x6}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x33}, @in6=@mcast1, {0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0xff}, {0x1, 0x8, 0xcc}, {0x100000f5, 0x0, 0x1000}, 0x0, 0x2, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000076"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r9, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}], 0x1}}], 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095", @ANYBLOB="b64df6c4c2f381700ed9ef017786cc3e42bbb787ec5f2c962dc972b7516ac799499de406302cbcdbc5306fcf4f1f87e4a222006a53edacd407e64f600bbe8b419d6ca73405fa4d51aba7c4580d3b27dc05bf11576bd9df57d7878f92632a3ced88b9baf3e429a213196f3b235b392914bae615776ae34663a8bbd7d770c4345e27eaa0a52edda7356c9e4c440da7c338455eadfdf525c398c16fbdee0c12e973a04fb1dafba22ff09cf1d0376f512d8e938be1a606b4fe"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r10}, &(0x7f0000000200), &(0x7f0000000280)=r11}, 0x20) 4m5.756345517s ago: executing program 36 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8948, &(0x7f0000000300)={'bond0\x00', 0xb}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', r3, 0x6, 0x2, 0xeb, 0xf4, 0x52, @mcast2, @local, 0x22cdcb0f28b063f, 0x40, 0x6}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x33}, @in6=@mcast1, {0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0xff}, {0x1, 0x8, 0xcc}, {0x100000f5, 0x0, 0x1000}, 0x0, 0x2, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000076"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r9, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}], 0x1}}], 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095", @ANYBLOB="b64df6c4c2f381700ed9ef017786cc3e42bbb787ec5f2c962dc972b7516ac799499de406302cbcdbc5306fcf4f1f87e4a222006a53edacd407e64f600bbe8b419d6ca73405fa4d51aba7c4580d3b27dc05bf11576bd9df57d7878f92632a3ced88b9baf3e429a213196f3b235b392914bae615776ae34663a8bbd7d770c4345e27eaa0a52edda7356c9e4c440da7c338455eadfdf525c398c16fbdee0c12e973a04fb1dafba22ff09cf1d0376f512d8e938be1a606b4fe"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r10}, &(0x7f0000000200), &(0x7f0000000280)=r11}, 0x20) 4m5.584974262s ago: executing program 37 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) socketpair(0x2c, 0x803, 0x0, &(0x7f0000000240)) 19.619102501s ago: executing program 7 (id=2502): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f0000000200)="95de66096bcc111518d3640f969ee0f145ae77ab", 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f0000000380)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="3f000000010003", 0x7) recvmmsg(r5, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x6061, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r9, 0x890c, &(0x7f00000003c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x4, 'erspan0\x00'}) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty, 0x2}, 0x1c) 19.484153053s ago: executing program 9 (id=2504): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1}, {0xffff, 0xd}, {0xa, 0x1}}}, 0x24}}, 0x4000080) socket$inet(0x2, 0x2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}}, 0x0) 19.162040846s ago: executing program 9 (id=2507): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x964, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0xf, 0xffff, 0x17f32da6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf4a8, 0x0, 0x0, 0x0, 0x2a}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x1, 0x6, 0x4, 0x80, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x3, 0x9, 0x6, 0x0, 0x8}, @tail_call]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0xee, &(0x7f00000003c0)=""/238, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0xe, 0x8, 0x80000000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x5, 0x3, 0xf, 0x7}, {0x5, 0x1, 0xd, 0x3}, {0x5, 0x4, 0xf, 0x1}, {0x2, 0x1, 0x9, 0x5}, {0x5, 0x4, 0x6, 0x4}, {0x1, 0x5, 0xe}, {0x3, 0x4, 0xf, 0xa}, {0x5, 0x3, 0x3, 0x8}, {0x4, 0x3, 0x9, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x550, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x6, '\x00', r5, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1d608, r6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=[{0x4, 0x3, 0xf, 0x6}, {0x1, 0x3, 0x10, 0x7}, {0x2, 0x1, 0x9}], 0x10, 0xfffffffd}, 0x94) 19.095785022s ago: executing program 7 (id=2509): r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) accept4$rose(r0, &(0x7f0000000280)=@short={0xb, @dev, @null}, &(0x7f00000002c0)=0x1c, 0x800) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) close(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) readv(r2, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1) 18.853363276s ago: executing program 9 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x1, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x40801) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0), 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x5}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f00000003c0)) preadv(r7, &(0x7f0000000100), 0xa, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) r8 = socket$netlink(0x10, 0x3, 0x6) writev(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0500200004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000d70700c0feb1578b678b7766d0fc", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.759975118s ago: executing program 0 (id=2513): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x67, 0x4, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x0, 0xffffff4c, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0xf, 0x29, 0x0, @local, @local}}}}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x62615fccad5916a8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local, r5}, 0xc) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000000201040000001b00000000aa88fa00000004280001800c00028005000100000000000c00028005000100840000000c00028005000100110000001800028006000340000200000c00028005000100210000000e0006007369702d32365bc7f4000000"], 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x800c080) 18.576829597s ago: executing program 2 (id=2515): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8b040400000000002000128008000100736974001400028008000100", @ANYRES16=r1], 0x40}}, 0x8800) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast2}}}], 0x20}}], 0x1, 0x0) 18.575045717s ago: executing program 0 (id=2516): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffff613, 0x1, 0x884a}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x200c880) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="6b8a9eb4c226ccf277bdfc496d92cefd", 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) getpeername$ax25(r3, &(0x7f0000000240)={{}, [@netrom, @null, @null, @remote, @rose, @rose, @netrom, @netrom]}, &(0x7f00000002c0)=0x48) accept$alg(r3, 0x0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000300)={0x1}) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) accept$alg(r3, 0x0, 0x0) r4 = accept(r0, &(0x7f0000000440)=@hci, &(0x7f00000004c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x20, 0x10, 0x0, 0x5, {{0x1a, 0x4, 0x0, 0x9, 0x68, 0x65, 0x0, 0x1, 0xcf0687fc289cd9e0, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x13, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010102, @broadcast]}, @ssrr={0x89, 0x1f, 0x21, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, @multicast1, @broadcast, @broadcast]}, @rr={0x7, 0x1b, 0xa7, [@empty, @private=0xa010102, @private=0xa010102, @private=0xa010102, @multicast1, @loopback]}, @ra={0x94, 0x4}]}}}}}) sendto$packet(r3, &(0x7f0000000500)="5a5c5d149100df0dd24a58907e00e782570a5d4cb0004c0791093fac49d70900b4f9fe26077cd2c36e7c57b99d385789e5a44806326b67b5bb7a32eea5d32d3277baebbb44474178f09fe42c97cb8304a3192f2e2b74b5b74126ed47e38104fd0afc378162b6932aa73bc210d40c3756dcbc40f50c7127dd51baa55d5b6a3aa7286964e4679c0dd30c2d714be4dbb6f41fd11f6f74f7d833ae24d6b2c27750fa85420657706b7a91d8c610f7ab6d6eb0b734ef789ab0e8de0ddefff1473740768c6c028d", 0xc4, 0x28090, &(0x7f0000000700)={0x11, 0x1b, r5, 0x1, 0x7}, 0x14) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r6, 0x800, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x4000980) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80008001}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1b4, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x110, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xeb}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2245}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x88, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x881) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r6, 0x1c2f90a9475cddd6, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000c80)={0x2b, @remote, 0x4e20, 0x0, 'dh\x00', 0x1, 0xb, 0xb}, 0x2c) pread64(r0, &(0x7f0000000cc0)=""/145, 0x91, 0xb04c) accept4$ax25(r3, &(0x7f0000000d80)={{0x3, @netrom}, [@netrom, @remote, @remote, @netrom, @rose, @rose, @null, @netrom]}, &(0x7f0000000e00)=0x48, 0x80000) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000e40)={'dvmrp1\x00', 0x800}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r4) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r7) socket$rxrpc(0x21, 0x2, 0x96ba29929fca457e) bpf$TOKEN_CREATE(0x24, &(0x7f0000001100), 0x8) 18.450702074s ago: executing program 2 (id=2518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140ce966c729205e1f42bda4d4bfa0d04ea0f3aca34a12be7fe01477df17cede1d86888516e1b14299f716b74b1d65a922e13f8bce125009baf93221c5f41f11d1857ca48bf5c81f74a64be5b9de7c64d738d37573cc57f4bec3afa91f0b84c91673a2bcdcd3e557cf20fecd685e93c0bc1d318c2ed56d1796609a1d8774c99b74b6c4e65b276813c3ebd7c0695bdc4c", 0x93}, {&(0x7f0000001040)="7f37c2baff0de55ce257091de4c8892e4e2d3615845085eae2e0699584e968c7141722f4305e686bb965fd42e6d1e565ac9a4c61a54b", 0x36}], 0x2}}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 18.396672805s ago: executing program 0 (id=2519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000000b48a1d160564ace638e600000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000108000240000000150900010073797a300000000014000000"], 0xc4}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000140)=0x58, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x40c4010}, 0x8010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000000)=0x5, 0x4) ppoll(&(0x7f0000000040)=[{r6, 0x1000}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) close(r5) connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) unshare(0x20400) pipe(&(0x7f0000000100)) 18.064223979s ago: executing program 7 (id=2521): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x74}}, 0x2044890) 17.816650781s ago: executing program 8 (id=2522): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='6\x00'], 0x20) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x14, 0x38, 0x1, 0x20, 0x0, {0x6a}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40014) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x890b, &(0x7f0000000000)=@buf={0xc0fe, &(0x7f0000000140)}) r3 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002180)="f8d1c77d6dcbd92e9497d9ab1af5a50c00823b80a869df40c71b29ba", 0x1c}, {&(0x7f00000021c0)="28564cac5c4fd196b78495035d77cf067cfb87ad16e60bb969ff4930b0682e1f6b943c89e148f96543641d698430d4c66b705c5d6ffa8c041665f822468a31bd359abf8afad40bf978862619e145422848be54", 0x53}], 0x2}}, {{&(0x7f0000003580)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x3, 0x3, 0x2, {0xa, 0x4e23, 0x0, @remote, 0x8000}}}, 0x80, &(0x7f0000003780)=[{0x0}], 0x1}}], 0x2, 0x4000004) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000280)=0xd, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000200110300000000000000000000000100000d000000000e00000001000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x28) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d2587236570752a"], 0x5) readv(r9, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) 17.815176574s ago: executing program 7 (id=2523): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='rtc_irq_set_freq\x00', r1, 0x0, 0xe}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='rtc_irq_set_freq\x00', r1, 0x0, 0xe}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0xb, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0xb, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xf1, 0x7, 0x5e, @dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x10, 0x5, 0xd}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xf1, 0x7, 0x5e, @dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x10, 0x5, 0xd}}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000cc0)={0x240, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000cc0)={0x240, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) socket$vsock_stream(0x28, 0x1, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) (async) connect$vsock_stream(r10, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r10, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) shutdown(r10, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x4c854}, 0x41) 17.78317346s ago: executing program 9 (id=2524): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x2}, 0x1c) 17.726749593s ago: executing program 8 (id=2525): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000340)="00000064c6ee84b46cd2525d13c96b5dbe1a", 0x12}, {&(0x7f0000000000)="1746", 0x2}], 0x2}}], 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) shutdown(r1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(0x3) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000000101040000000000000000060000002400018014000180080001000000000008000200000000000c0002800500010000000000240002800c00020900000000000000001400018008000100e000000108000200ac1e000108000740000000001000058009000cff70"], 0x74}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0x0, 0x800000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x4f) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000000), 0x4) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) 17.497788721s ago: executing program 0 (id=2526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0xffffffff, @mcast1, 0x6, 0x4}, 0x20) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r3}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="5b54e8e5116c867d891969fd36adf0fca2eef24179e6a5a2664e21f41c1f894afd5ad7126309a388e0f22218812e41047eea8d85aee168d8b9aaff2d0d5378f08349ef8d5bc6e4facf2469249efcc8e407d1e0b1ce213a914280cfd62282a6beb1bdf1c845bcee6aae6e788ae04d02ea729a3c7c23c26d4dfff90336447b723fc02c1dbe08422ef4e6adcc89ff9ab923f4fb2a18e2dc9524a3144098db4e9e92ce891092b2283a1cc28b839a1c6b42f67e6d9f955b67dab5a41c8f9ec63b99056ca86831a0e2c16682e6cb9dd6e2a37ea3aa0beab422c9441e195b7db70b1a"], &(0x7f0000000500)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000790116005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000340), &(0x7f00000004c0)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x12063) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0xfd5b, 0x0, 0x41100}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r0, @ANYRES8=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x40000d1) 17.27672052s ago: executing program 0 (id=2527): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x4}, @IFLA_NET_NS_FD={0xffffffffffffff20}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x4}, @IFLA_NET_NS_FD={0xffffffffffffff20}]}, 0x2c}}, 0x0) r1 = accept(r0, &(0x7f0000000000)=@generic, &(0x7f00000000c0)=0x80) socket$inet6(0xa, 0xc, 0x4) (async) r2 = socket$inet6(0xa, 0xc, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4096, 0x1000}, 0x5}], 0x1, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4096, 0x1000}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x1ef9, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000300)={r4, 0x1}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000300)={r4, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r4, 0x5}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x4000040) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x4000040) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019888"], 0xfdef) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r4, 0x2}, 0x8) 17.275229579s ago: executing program 2 (id=2528): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14c, r0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x10000, @loopback, 0x8f9}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x60, 0x0) recvmsg(r1, &(0x7f00000015c0)={&(0x7f0000000340)=@isdn, 0x80, &(0x7f00000014c0)=[{&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/77, 0x4d}], 0x3, &(0x7f0000001500)=""/139, 0x8b}, 0x40004142) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002780)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000027c0)={&(0x7f0000001600)="19b2de6b0c6e26bb04c1870ff308a3bee4da21d3efe8d310727fda9671ac6fa5ba21ef2444e57a40dd5128935be317973cfa36958519baa087fc2c949fff639c226373e0236ad6457ebfa84fb9e3cba3e0ddafe493c507f0c2a09e9f0d27feacb41cd03196ee17f3a0b0427dad11b567f17d9db3fe0270b6967ca66483aeac87aba5d429663ceba2ef394d37c8fc35325a27efc380e561524fbf230ac3923f49290386d46d6bcc21657c", &(0x7f00000016c0)=""/100, &(0x7f0000001740)="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", &(0x7f0000002740)="b41b33011a94c228f08e4352f051795413e6200a0c410114311b782303f101c5b5b6ab40fdca2c1b1a933527c817", 0x4, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002800)='freezer.state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002880)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x6c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x400c010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000002b40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)={0x100, 0x1403, 0x200, 0x70bd28, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20004800}, 0x24024014) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002bc0), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0xdd0, 0x3, 0xe]}]}, 0x28}}, 0x880) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14, 0x1, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8115}, 0x4004) write$cgroup_int(r3, &(0x7f0000002dc0)=0x3ff, 0x12) ioctl$int_in(r3, 0x5421, &(0x7f0000002e00)=0x1) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000002e40)={0xffffffff, 0x80000000, 0x1, 0x6, 0x6, 0x0, [{0x7, 0x10, 0x6, '\x00', 0x806}, {0x7, 0x8, 0xffffffffffffffc0, '\x00', 0x80}, {0xe, 0x95e, 0x9, '\x00', 0x600}, {0x7f, 0x6, 0x0, '\x00', 0x801}, {0x9, 0x1, 0x2, '\x00', 0x103}, {0x288, 0x8, 0x2, '\x00', 0x800}]}) recvmmsg$unix(r3, &(0x7f0000004880)=[{{&(0x7f0000002fc0), 0x6e, &(0x7f0000003240)=[{&(0x7f0000003040)=""/177, 0xb1}, {&(0x7f0000003100)=""/64, 0x40}, {&(0x7f0000003140)=""/238, 0xee}], 0x3, &(0x7f0000003280)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000032c0)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003340)=""/67, 0x43}, {&(0x7f00000033c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/19, 0x13}, {&(0x7f0000003500)=""/44, 0x2c}], 0x4, &(0x7f0000003580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f00000035c0), 0x6e, &(0x7f00000047c0)=[{&(0x7f0000003640)=""/72, 0x48}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/199, 0xc7}], 0x3, &(0x7f0000004800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x70}}], 0x3, 0x40010000, &(0x7f0000004940)={0x0, 0x989680}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000049c0), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r13, &(0x7f0000004b00)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a00)={0x84, r14, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r15 = accept$phonet_pipe(r10, &(0x7f0000004b40), &(0x7f0000004b80)=0x10) getsockopt$PNPIPE_IFINDEX(r15, 0x113, 0x2, &(0x7f0000004bc0)=0x0, &(0x7f0000004c00)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000004d80)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004c80)={0xa4, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4804}, 0xc015) ioctl$SIOCAX25GETUID(r7, 0x89e0, &(0x7f0000004dc0)={0x3, @bcast, r12}) connect$can_bcm(r9, &(0x7f0000004e00)={0x1d, r16}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000004fc0)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004f80)={&(0x7f0000004e80)={0x100, 0x1, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x936}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xa}]}}, @CTA_NAT_SRC={0x90, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7f}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x48041}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000005000)=r11, 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000005040), &(0x7f0000005080)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000050c0)={r15}) 17.144665998s ago: executing program 2 (id=2529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x100, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x40480d4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000485000000a600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.020109124s ago: executing program 2 (id=2530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0]}, 0xfffffffffffffdba) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000000875a0000040000000300000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000fbffffff00"/28], 0x50) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0000000600000033000000ff7f400040010000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000003000000010000000c00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x18, 0x5a, 0x30d, 0x0, 0x3, "", [@generic="3373619d52"]}, 0x18}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r5, 0x84, 0x70, &(0x7f0000001280)=""/4122, &(0x7f0000001040)=0x101a) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x1, 0x1, 0x1, 0x6, {{0x20, 0x4, 0x1, 0x34, 0x80, 0x64, 0x0, 0x6, 0x2f, 0x0, @broadcast, @local, {[@rr={0x7, 0xb, 0xaa, [@loopback, @rand_addr=0x64010102]}, @generic={0x88, 0xd, "b23e3f2011511ff756cafd"}, @timestamp={0x44, 0x14, 0x5, 0x0, 0x8, [0x9, 0x9, 0x1, 0x67]}, @ssrr={0x89, 0x1b, 0x30, [@loopback, @private=0xa010102, @local, @initdev={0xac, 0x1e, 0x57, 0x0}, @loopback, @empty]}, @timestamp={0x44, 0xc, 0x4f, 0x0, 0x7, [0x0, 0x3]}, @cipso={0x86, 0x19, 0x3, [{0x2, 0xa, "87175d7b2ec9cdf7"}, {0x6, 0x4, "b421"}, {0x7, 0x5, "2f6dc2"}]}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000150000f4060e0f0176fe6d9f929a3d55", @ANYRES32=r9, @ANYBLOB="80001005140001000000000000000000000000000000000114000100fc0200000000000000000000000000010800040001000000"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x62, 0x7}}]}, 0x3c}}, 0x0) 16.940890789s ago: executing program 7 (id=2531): r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) accept4$rose(r0, &(0x7f0000000280)=@short={0xb, @dev, @null}, &(0x7f00000002c0)=0x1c, 0x800) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) close(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) readv(r2, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1) 16.915962762s ago: executing program 0 (id=2532): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x20, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r4, 0x58, &(0x7f0000000a40)}, 0x10) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/135, 0x87}], 0x4, &(0x7f0000000240)=""/89, 0x59}, 0x4}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/191, 0xbf}], 0x1}, 0x9}], 0x2, 0x100, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0xfffffffffffffdfd, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r5, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000080)=0x7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=r8, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x4000) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 16.790921984s ago: executing program 9 (id=2533): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0xa, 0x5e2a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280011000000069078000000000000000000004e22032957061b7a7740141684b8bdf2c3666662e983e4a04fcca946489d1e9609d37f5ff3f342e27b4f7c1c54c6", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@remote, @local, 0x1d, 0x19}}) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x12) 16.732921023s ago: executing program 8 (id=2534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d67002e24cda2f35d0bb938b6e7d9fff45f5a1"], 0x50) close(0x3) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000480), 0x10, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000004c0)=0x4, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x1104}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x45}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xfd, 0xd, 0x0, 0x1, 0xfffff800}]}, &(0x7f0000000240)='syzkaller\x00', 0x401, 0x1d, &(0x7f0000000380)=""/29, 0x40f00, 0xc, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3119}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.709863291s ago: executing program 2 (id=2535): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c0001800800feff", @ANYRES32, @ANYRES64=r1], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8000081"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000100)=""/123, &(0x7f0000000180)=0x7b) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) 16.641578441s ago: executing program 8 (id=2536): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r1, 0x7}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) r7 = accept4(r5, 0x0, 0x0, 0x800) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r8, 0x0, 0x0, 0x40000001, 0x0, 0x0) r9 = accept$unix(r7, &(0x7f0000000140), &(0x7f0000000200)=0x6e) poll(&(0x7f0000000240)=[{r7, 0x4009}, {r6, 0x200a}, {r9, 0x210a}, {r3, 0x404}], 0x11, 0x2b3) setsockopt(0xffffffffffffffff, 0x7c, 0x7, &(0x7f0000001b40)="47f82fd1", 0x4) sendmmsg$alg(r7, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) 16.536616354s ago: executing program 9 (id=2537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a0002"], 0x394}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r2, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000ff7f000000000000fbff000085100000f9ffffff9876040008000000851000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000e77b328d9ca9766f8a0400000034330000850000008600000070560c00100001e1ffff94000000000012"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000640)=""/212, 0x41100, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xf, 0x1}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x7}, 0x94) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e22, 0x9, @empty, 0x6}}, 0x0, 0x0, 0x2a, 0x0, "955b94b19a44f02aa23c6a4a3c6ec11144bdee5d5ac0d8cb63051a062ed1c96567b1db8c7c21607784474bf11312bf3fcd5722a45429b214a097963a1a5644d190193a1ceb23ed9bb6d25ad252bd381d"}, 0xd8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) sendto$inet6(r9, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 15.962915198s ago: executing program 7 (id=2538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b000200000005000500ef"], 0x3c}}, 0x20000034) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x3}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x48, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000095}, 0x4c000) r10 = epoll_create(0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000540)=0x6, 0x4) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)={0x10}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f00000000c0)={0xa}) r12 = socket$inet6(0xa, 0xa, 0xfffffff9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x700, 0x80, 0x0, 0x8, {{0x28, 0x4, 0x0, 0x9, 0xa0, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@generic={0x89, 0xe, "70ebdcc7d9b348171254593c"}, @end, @timestamp_prespec={0x44, 0x2c, 0xfb, 0x3, 0x3, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x1}, {@local, 0x27}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7d69}]}, @timestamp_addr={0x44, 0x14, 0xfa, 0x1, 0x0, [{@broadcast, 0x1}, {@broadcast}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x91, 0x1, 0x7, [{@loopback, 0x4}, {@private=0xa010101, 0xc0}]}, @generic={0x86, 0x4, "461e"}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x5, 0xd, "7e4da7e5b9bb0924bbccd1"}]}, @lsrr={0x83, 0xb, 0xdf, [@broadcast, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', r13, 0x4, 0x3, 0x7, 0x4, 0x4, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x40, 0x6, 0xa}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2e, 0x5f]}}, 0x0, 0x3c}, 0x28) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) 15.747681728s ago: executing program 8 (id=2539): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x884) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000080000008000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="3660b86f99da403b2708b4a770e8e5a4b9af08331885cc393ee4773a174cb47ab691d5ddd6a1a93457d4a2c864a3029fb91c2e93ce39be1fde28840ab19a003d1652301c63cfdc63a5282e06831685ff3626bfdd8b6f8024fe44e781aec20be08849de0858b416a485e1fd351fcd08fa381a32bf58e2b90697c7970b570a9f7e9ffee28cde6d5b68d7189ec6b050ffa2f54e0f1af5c77326208df9c3e313", @ANYBLOB='\x00'/28], 0x50) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = epoll_create(0x1) r3 = epoll_create1(0x80000) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, 0x0, 0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x3c, 0x1, 0x3cab, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x24}}, 0x4000004) r6 = accept(r1, 0x0, &(0x7f0000000480)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x5}], 0x2c) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES64=r8], 0x0, 0x56}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r9, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$inet6_udp(0xa, 0x2, 0x0) 15.540695358s ago: executing program 8 (id=2540): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x8, 0x7, 0x1, 0x5, 0x100, 0xe, 0xceb, {0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x9}}, 0x5, 0xe, 0x4, 0x8000, 0x9}}, &(0x7f0000000100)=0xb0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 32) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async, rerun: 32) sendmsg$tipc(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4}, 0x20) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x5}, &(0x7f0000000300)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000dfeffff0000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b703000000000000850000000500000018010000642700000000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000b82fe4cfec9ce722dc2252d7f609bec28107a2415abe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.57332605s ago: executing program 38 (id=2532): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x20, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r4, 0x58, &(0x7f0000000a40)}, 0x10) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/135, 0x87}], 0x4, &(0x7f0000000240)=""/89, 0x59}, 0x4}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/191, 0xbf}], 0x1}, 0x9}], 0x2, 0x100, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0xfffffffffffffdfd, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r5, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000080)=0x7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=r8, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x4000) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 1.525338927s ago: executing program 39 (id=2535): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c0001800800feff", @ANYRES32, @ANYRES64=r1], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8000081"], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000100)=""/123, &(0x7f0000000180)=0x7b) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) 1.490467223s ago: executing program 40 (id=2537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a0002"], 0x394}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r2, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000ff7f000000000000fbff000085100000f9ffffff9876040008000000851000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000e77b328d9ca9766f8a0400000034330000850000008600000070560c00100001e1ffff94000000000012"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000640)=""/212, 0x41100, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xf, 0x1}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x7}, 0x94) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e22, 0x9, @empty, 0x6}}, 0x0, 0x0, 0x2a, 0x0, "955b94b19a44f02aa23c6a4a3c6ec11144bdee5d5ac0d8cb63051a062ed1c96567b1db8c7c21607784474bf11312bf3fcd5722a45429b214a097963a1a5644d190193a1ceb23ed9bb6d25ad252bd381d"}, 0xd8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) sendto$inet6(r9, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 51.810879ms ago: executing program 41 (id=2538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b000200000005000500ef"], 0x3c}}, 0x20000034) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x3}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x48, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000095}, 0x4c000) r10 = epoll_create(0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000540)=0x6, 0x4) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)={0x10}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f00000000c0)={0xa}) r12 = socket$inet6(0xa, 0xa, 0xfffffff9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x700, 0x80, 0x0, 0x8, {{0x28, 0x4, 0x0, 0x9, 0xa0, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@generic={0x89, 0xe, "70ebdcc7d9b348171254593c"}, @end, @timestamp_prespec={0x44, 0x2c, 0xfb, 0x3, 0x3, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x1}, {@local, 0x27}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7d69}]}, @timestamp_addr={0x44, 0x14, 0xfa, 0x1, 0x0, [{@broadcast, 0x1}, {@broadcast}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x91, 0x1, 0x7, [{@loopback, 0x4}, {@private=0xa010101, 0xc0}]}, @generic={0x86, 0x4, "461e"}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x5, 0xd, "7e4da7e5b9bb0924bbccd1"}]}, @lsrr={0x83, 0xb, 0xdf, [@broadcast, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', r13, 0x4, 0x3, 0x7, 0x4, 0x4, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x40, 0x6, 0xa}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2e, 0x5f]}}, 0x0, 0x3c}, 0x28) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) 0s ago: executing program 42 (id=2540): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x8, 0x7, 0x1, 0x5, 0x100, 0xe, 0xceb, {0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x9}}, 0x5, 0xe, 0x4, 0x8000, 0x9}}, &(0x7f0000000100)=0xb0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 32) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async, rerun: 32) sendmsg$tipc(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4}, 0x20) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x5}, &(0x7f0000000300)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000dfeffff0000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b703000000000000850000000500000018010000642700000000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000b82fe4cfec9ce722dc2252d7f609bec28107a2415abe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Enslaving as an active interface with an up link [ 247.652610][T11164] lo speed is unknown, defaulting to 1000 [ 247.801697][T11168] IPVS: dh: FWM 3 0x00000003 - no destination available [ 247.833576][T11170] netlink: 'syz.2.1410': attribute type 1 has an invalid length. [ 247.883870][T11174] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1410'. [ 248.165690][T11183] lo speed is unknown, defaulting to 1000 [ 248.179401][T11186] lo speed is unknown, defaulting to 1000 [ 248.244404][T11190] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1415'. [ 248.599751][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1416'. [ 249.008155][T11213] netlink: 'syz.8.1420': attribute type 1 has an invalid length. [ 249.064852][T11213] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1420'. [ 249.593688][T11246] netlink: 212316 bytes leftover after parsing attributes in process `syz.7.1426'. [ 249.849919][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1430'. [ 250.149517][T11282] lo speed is unknown, defaulting to 1000 [ 250.853911][T11309] __nla_validate_parse: 2 callbacks suppressed [ 250.853933][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1439'. [ 251.058969][T11310] lo speed is unknown, defaulting to 1000 [ 251.207712][T11330] netlink: 'syz.8.1443': attribute type 11 has an invalid length. [ 251.226661][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1443'. [ 251.710449][T11344] netlink: 'syz.7.1446': attribute type 10 has an invalid length. [ 252.045261][T11352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.138601][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1452'. [ 252.284744][T11352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.386015][T11365] lo speed is unknown, defaulting to 1000 [ 252.434235][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1456'. [ 252.492731][T11352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.669808][T11352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.773479][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1458'. [ 252.965718][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.019484][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.044211][ T8878] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.079056][ T8878] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.166864][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1460'. [ 253.175897][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1460'. [ 253.180539][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 253.203175][T11390] block nbd2: server does not support multiple connections per device. [ 253.212895][T11390] block nbd2: shutting down sockets [ 253.309914][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 253.504022][T11403] lo speed is unknown, defaulting to 1000 [ 253.649515][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1467'. [ 253.709770][T11408] vlan2: entered promiscuous mode [ 253.715108][T11408] bridge0: entered promiscuous mode [ 254.047091][T11416] netlink: 'syz.7.1468': attribute type 2 has an invalid length. [ 254.111669][T11418] tipc: Enabled bearer , priority 0 [ 254.129931][T11418] syzkaller0: entered promiscuous mode [ 254.149670][T11418] syzkaller0: entered allmulticast mode [ 254.179404][T11418] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 254.262563][T11428] tipc: Resetting bearer [ 254.322623][T11425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.344454][T11417] tipc: Resetting bearer [ 254.367845][T11425] netlink: 'syz.9.1464': attribute type 10 has an invalid length. [ 254.401395][T11417] tipc: Disabling bearer [ 254.599588][T11448] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 254.625933][T11425] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 255.748567][T11486] lo speed is unknown, defaulting to 1000 [ 255.811282][T11490] syzkaller0: entered promiscuous mode [ 255.820480][T11490] syzkaller0: entered allmulticast mode [ 255.831356][T11489] tipc: Enabled bearer , priority 0 [ 255.864302][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.904983][T11489] tipc: Resetting bearer [ 255.924352][T11489] tipc: Disabling bearer [ 256.062776][T11498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.733248][T11524] __nla_validate_parse: 6 callbacks suppressed [ 256.733266][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1495'. [ 257.395260][T11538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1502'. [ 257.490232][T11543] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1502'. [ 257.501193][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 257.822695][T11548] tc_dump_action: action bad kind [ 260.305823][T11629] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1521'. [ 260.424045][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1521'. [ 260.450199][T11630] macvtap1: entered promiscuous mode [ 260.455777][T11630] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 260.798251][T11633] sctp: [Deprecated]: syz.9.1522 (pid 11633) Use of int in max_burst socket option. [ 260.798251][T11633] Use struct sctp_assoc_value instead [ 260.883006][T11633] syzkaller0: entered promiscuous mode [ 260.897018][T11633] syzkaller0: entered allmulticast mode [ 260.976649][T11639] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 260.986103][ T6572] IPVS: starting estimator thread 0... [ 261.099607][T11646] IPVS: using max 32 ests per chain, 76800 per kthread [ 261.262721][T11658] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1529'. [ 261.305995][T11659] ±ÿ: renamed from batadv_slave_1 [ 262.793512][T11673] syzkaller0: entered promiscuous mode [ 262.808192][T11673] syzkaller0: entered allmulticast mode [ 263.056489][T11694] tipc: Enabled bearer , priority 0 [ 263.063739][ T5187] Bluetooth: hci1: command 0x0406 tx timeout [ 263.063749][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 263.082799][T11694] syzkaller0: entered promiscuous mode [ 263.088924][T11694] syzkaller0: entered allmulticast mode [ 263.106420][T11694] tipc: Resetting bearer [ 263.129500][T11693] tipc: Resetting bearer [ 263.162545][T11693] tipc: Disabling bearer [ 263.172252][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1537'. [ 263.401102][T11701] can: request_module (can-proto-0) failed. [ 263.466858][T11713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1542'. [ 263.704985][T11728] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1548'. [ 264.056114][T11743] lo speed is unknown, defaulting to 1000 [ 264.265116][T11750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1553'. [ 264.449667][T11755] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1553'. [ 264.459205][T11755] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1553'. [ 264.468490][T11755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1553'. [ 264.729558][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1555'. [ 264.989228][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'. [ 265.032802][T11779] lo speed is unknown, defaulting to 1000 [ 265.205160][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1559'. [ 265.698394][T11811] netlink: 'syz.9.1565': attribute type 39 has an invalid length. [ 265.723306][T11812] lo speed is unknown, defaulting to 1000 [ 266.128110][T11829] netlink: 'syz.8.1569': attribute type 15 has an invalid length. [ 266.672005][T11849] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 266.912604][T11861] netlink: 'syz.8.1580': attribute type 1 has an invalid length. [ 266.962548][T11868] bond3: entered allmulticast mode [ 267.846140][T11911] netlink: 'syz.0.1594': attribute type 12 has an invalid length. [ 268.178446][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 268.412124][T11947] __nla_validate_parse: 15 callbacks suppressed [ 268.412148][T11947] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1602'. [ 268.737053][ T51] Bluetooth: hci0: command tx timeout [ 268.762576][T11956] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1604'. [ 268.774787][T11957] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1604'. [ 268.788829][T11956] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1604'. [ 268.897481][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1606'. [ 269.093791][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1607'. [ 269.110764][T11939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.118604][T11939] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 269.133146][T11939] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.144030][T11939] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 269.154594][T11939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.161539][T11939] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 269.174358][T11939] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.183358][T11939] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 269.210784][T11974] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1608'. [ 269.255272][T11973] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1608'. [ 269.291773][T11976] tipc: Enabled bearer , priority 0 [ 269.320311][T11976] syzkaller0: entered promiscuous mode [ 269.330642][T11976] syzkaller0: entered allmulticast mode [ 269.344857][T11980] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 269.359690][T11973] lo speed is unknown, defaulting to 1000 [ 269.365682][T11980] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1610'. [ 269.381654][T11980] netlink: 'syz.0.1610': attribute type 2 has an invalid length. [ 269.400920][T11978] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 269.402972][T11980] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 269.422482][T11982] tipc: Resetting bearer [ 269.522243][T11975] tipc: Resetting bearer [ 269.573310][T11975] tipc: Disabling bearer [ 269.602159][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1612'. [ 269.635690][T11987] lo speed is unknown, defaulting to 1000 [ 269.653928][T11988] vlan2: entered allmulticast mode [ 269.659400][T11988] bridge0: entered allmulticast mode [ 269.977816][T12000] lo speed is unknown, defaulting to 1000 [ 270.629563][T12020] Bluetooth: MGMT ver 1.23 [ 271.364498][T12036] lo speed is unknown, defaulting to 1000 [ 271.980531][T12058] openvswitch: netlink: Multiple metadata blocks provided [ 272.010114][T12061] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 272.032323][T12062] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 272.071487][T12062] netlink: 'syz.8.1632': attribute type 11 has an invalid length. [ 272.098692][T12061] netlink: 'syz.8.1632': attribute type 11 has an invalid length. [ 272.511258][ T55] block nbd0: Possible stuck request ffff88802527e000: control (read@0,4096B). Runtime 90 seconds [ 272.534306][T12082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.602415][T12084] netlink: 'syz.2.1637': attribute type 2 has an invalid length. [ 272.635192][T12084] netlink: 'syz.2.1637': attribute type 2 has an invalid length. [ 272.897976][T12098] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 272.949452][T12100] dvmrp0: left allmulticast mode [ 273.070694][T12106] netlink: 'syz.0.1643': attribute type 3 has an invalid length. [ 273.126463][T12102] lo speed is unknown, defaulting to 1000 [ 273.502552][T12110] __nla_validate_parse: 14 callbacks suppressed [ 273.502574][T12110] netlink: 364 bytes leftover after parsing attributes in process `syz.2.1644'. [ 273.519736][T12110] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 273.884513][T12132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1648'. [ 274.058531][T12139] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1649'. [ 274.237902][T12146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1653'. [ 274.260147][T12145] tipc: Enabled bearer , priority 0 [ 274.278589][T12145] syzkaller0: entered promiscuous mode [ 274.292590][T12145] syzkaller0: entered allmulticast mode [ 274.329530][T12140] tipc: Resetting bearer [ 274.398098][T12140] tipc: Disabling bearer [ 274.511311][T12153] netlink: zone id is out of range [ 274.581044][T12153] netlink: set zone limit has 4 unknown bytes [ 274.649403][T12154] netlink: del zone limit has 4 unknown bytes [ 274.802763][T12159] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1657'. [ 275.015512][T12165] batadv_slave_0: entered allmulticast mode [ 275.026991][T12165] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 275.066888][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1660'. [ 275.085821][T12165] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 275.730962][T12195] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1669'. [ 276.113423][T12214] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1674'. [ 276.205866][T12214] lo speed is unknown, defaulting to 1000 [ 276.361646][T12223] netlink: 'syz.7.1677': attribute type 10 has an invalid length. [ 276.510018][T12223] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 276.643478][T12227] lo speed is unknown, defaulting to 1000 [ 277.051612][T12241] tipc: Enabled bearer , priority 0 [ 277.067063][T12242] syzkaller0: entered promiscuous mode [ 277.072676][T12242] syzkaller0: entered allmulticast mode [ 277.126399][T12239] tipc: Resetting bearer [ 277.186895][T12236] tipc: Resetting bearer [ 277.266013][T12236] tipc: Disabling bearer [ 277.581678][T12260] netlink: 'syz.7.1683': attribute type 1 has an invalid length. [ 277.727467][T12259] lo speed is unknown, defaulting to 1000 [ 278.395779][T12029] Set syz1 is full, maxelem 65536 reached [ 279.488173][T12300] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 279.645497][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1692'. [ 281.395140][T12315] tipc: Enabled bearer , priority 0 [ 281.489081][T12314] tipc: Disabling bearer [ 281.497333][T12324] xt_limit: Overflow, try lower: 604147548/4200216962 [ 281.508773][T12325] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1696'. [ 281.545001][T12324] 8021q: VLANs not supported on caif0 [ 281.803144][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 281.889794][T12349] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.062232][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1708'. [ 282.092123][T12365] tipc: Enabled bearer , priority 0 [ 282.101615][T12365] syzkaller0: entered promiscuous mode [ 282.113636][T12365] syzkaller0: entered allmulticast mode [ 282.126442][T12365] netlink: 212 bytes leftover after parsing attributes in process `syz.7.1708'. [ 282.141060][T12365] netlink: 'syz.7.1708': attribute type 1 has an invalid length. [ 282.191838][ T8885] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.204949][ T8885] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.215892][T12365] tipc: Resetting bearer [ 282.230053][ T8885] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.261388][ T8885] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.422701][T12364] tipc: Resetting bearer [ 282.432110][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1716'. [ 282.479846][T12364] tipc: Disabling bearer [ 282.669857][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1719'. [ 282.758328][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 282.815601][T12405] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1722'. [ 282.875533][T12405] tipc: Enabled bearer , priority 0 [ 283.033617][T12418] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 283.055730][T12418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.126292][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'. [ 283.433040][T12405] syzkaller0: entered promiscuous mode [ 283.438999][T12405] syzkaller0: entered allmulticast mode [ 283.543847][T12420] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 283.563125][T12424] tipc: Resetting bearer [ 283.591523][T12415] lo speed is unknown, defaulting to 1000 [ 283.609005][T12404] tipc: Resetting bearer [ 283.637454][T12404] tipc: Disabling bearer [ 283.889319][T12431] lo speed is unknown, defaulting to 1000 [ 284.272825][T12460] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 284.324518][T12461] macvlan0: entered promiscuous mode [ 284.563688][T12472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.128814][T12490] netlink: 'syz.8.1743': attribute type 10 has an invalid length. [ 285.155976][T12487] netlink: 'syz.8.1743': attribute type 10 has an invalid length. [ 285.163215][T12490] team0: Port device vethd§¿t_hi\i added [ 285.525729][T12499] netlink: 'syz.9.1749': attribute type 2 has an invalid length. [ 285.533801][T12499] netlink: 'syz.9.1749': attribute type 1 has an invalid length. [ 285.564634][T12499] __nla_validate_parse: 15 callbacks suppressed [ 285.564654][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1749'. [ 285.580947][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 285.648280][T12499] bond4 (unregistering): Released all slaves [ 285.967753][T12516] lo speed is unknown, defaulting to 1000 [ 285.967923][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1756'. [ 286.073280][T12527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.093424][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1757'. [ 286.268357][T12534] netlink: 'syz.8.1758': attribute type 1 has an invalid length. [ 286.306901][T12534] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1758'. [ 286.823430][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.858423][T12543] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 286.952940][T12546] vxcan2: entered promiscuous mode [ 287.124018][T12555] dvmrp8: entered allmulticast mode [ 287.208031][T12555] lo speed is unknown, defaulting to 1000 [ 287.364513][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1768'. [ 287.446066][T12504] lo speed is unknown, defaulting to 1000 [ 287.457959][T12575] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1770'. [ 287.561141][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1769'. [ 287.570856][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1769'. [ 289.482232][T12585] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1772'. [ 289.680468][T12610] 8021q: VLANs not supported on ip6tnl0 [ 289.718166][T12606] bond_slave_1: entered promiscuous mode [ 289.785036][T12606] bond_slave_1: left promiscuous mode [ 289.822405][T12617] 8021q: VLANs not supported on caif0 [ 290.148512][T12626] lo speed is unknown, defaulting to 1000 [ 290.336885][T12637] bridge5: entered promiscuous mode [ 290.347850][T12637] bridge5: entered allmulticast mode [ 290.607779][T12644] netlink: 'syz.2.1789': attribute type 4 has an invalid length. [ 290.651615][T12646] netlink: 'syz.2.1789': attribute type 4 has an invalid length. [ 290.673048][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 290.903116][T12641] macvlan0: left promiscuous mode [ 290.998866][T12645] hsr_slave_0: left promiscuous mode [ 291.011247][T12645] hsr_slave_1: left promiscuous mode [ 291.091668][ T8885] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.101873][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1786'. [ 291.112443][ T8885] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.123034][T12656] netlink: 'syz.7.1786': attribute type 13 has an invalid length. [ 291.133142][T12656] netlink: 'syz.7.1786': attribute type 17 has an invalid length. [ 291.186273][ T8885] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.216832][ T8885] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.432137][T12656] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.462605][T12656] 0ªX¹¦À: left allmulticast mode [ 291.475310][T12656] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 291.913751][T12693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1798'. [ 292.109946][T12699] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1803'. [ 292.154041][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 292.273343][T12705] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1806'. [ 292.564889][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'. [ 292.619137][T12731] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1813'. [ 292.757606][T12735] netlink: 'syz.9.1814': attribute type 322 has an invalid length. [ 292.795792][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 292.882029][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 293.086237][T12751] tun0: tun_chr_ioctl cmd 1074025675 [ 293.112396][T12751] tun0: persist enabled [ 293.124711][T12751] tun0: tun_chr_ioctl cmd 1074025675 [ 293.139364][T12751] tun0: persist disabled [ 293.407413][T12770] lo speed is unknown, defaulting to 1000 [ 293.628471][T12777] tap0: tun_chr_ioctl cmd 1074025677 [ 293.634030][T12777] tap0: linktype set to 800 [ 294.922004][T12807] lo speed is unknown, defaulting to 1000 [ 295.174904][T12812] netlink: 'syz.0.1838': attribute type 13 has an invalid length. [ 295.193439][T12812] netlink: 'syz.0.1838': attribute type 17 has an invalid length. [ 295.391876][T12812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.418745][T12812] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.481081][T12812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.567856][T12821] veth1_to_bond: entered allmulticast mode [ 295.587128][T12821] veth1_to_bond: entered promiscuous mode [ 295.603108][T12788] mpoa:mpoad_close: () going down [ 295.617844][T12820] veth1_to_bond: left promiscuous mode [ 295.623546][T12820] veth1_to_bond: left allmulticast mode [ 295.650168][T12816] lo speed is unknown, defaulting to 1000 [ 296.226367][T12845] __nla_validate_parse: 8 callbacks suppressed [ 296.226386][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1846'. [ 296.242731][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1846'. [ 296.251907][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1846'. [ 296.314669][T12848] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.492550][ T8885] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.514511][ T8885] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.534433][ T8885] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.553422][ T8885] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.574792][ T8885] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.591358][ T8885] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.662466][ T8885] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.691810][ T8885] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.961786][T12864] syzkaller1: entered promiscuous mode [ 296.967656][T12864] syzkaller1: entered allmulticast mode [ 297.801449][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1863'. [ 297.874760][T12906] tipc: Enabled bearer , priority 0 [ 297.930082][T12906] syzkaller0: entered promiscuous mode [ 297.954450][T12906] syzkaller0: entered allmulticast mode [ 297.972553][T12906] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 298.137368][T12906] tipc: Resetting bearer [ 298.153866][T12905] tipc: Resetting bearer [ 298.176349][T12905] tipc: Disabling bearer [ 298.463676][T12922] tipc: Enabled bearer , priority 0 [ 298.478873][T12922] syzkaller0: entered promiscuous mode [ 298.486865][T12922] syzkaller0: entered allmulticast mode [ 298.532763][T12925] tipc: Enabling of bearer rejected, failed to enable media [ 298.554883][T12922] tipc: Resetting bearer [ 298.567011][T12921] tipc: Resetting bearer [ 298.602463][T12921] tipc: Disabling bearer [ 298.614766][T12925] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1871'. [ 298.826892][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1874'. [ 298.831268][T12934] Bluetooth: MGMT ver 1.23 [ 298.924643][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1876'. [ 298.939484][T12943] netlink: 'syz.9.1876': attribute type 12 has an invalid length. [ 299.004949][ T8874] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.018477][ T8874] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.052968][ T8874] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.065401][T12949] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1877'. [ 299.076065][ T8874] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.121830][T12950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1878'. [ 299.482505][T12963] lo speed is unknown, defaulting to 1000 [ 299.513098][T12971] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1884'. [ 299.704108][T12968] syzkaller0: entered allmulticast mode [ 300.370366][T12992] FAULT_INJECTION: forcing a failure. [ 300.370366][T12992] name failslab, interval 1, probability 0, space 0, times 0 [ 300.406689][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.0.1888 Not tainted syzkaller #0 PREEMPT(full) [ 300.406719][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.406736][T12992] Call Trace: [ 300.406745][T12992] [ 300.406755][T12992] dump_stack_lvl+0x189/0x250 [ 300.406786][T12992] ? __pfx____ratelimit+0x10/0x10 [ 300.406809][T12992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.406834][T12992] ? __pfx__printk+0x10/0x10 [ 300.406866][T12992] ? __pfx___might_resched+0x10/0x10 [ 300.406887][T12992] ? fs_reclaim_acquire+0x7d/0x100 [ 300.406912][T12992] should_fail_ex+0x414/0x560 [ 300.406946][T12992] should_failslab+0xa8/0x100 [ 300.406979][T12992] __kmalloc_noprof+0xcb/0x4f0 [ 300.407006][T12992] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 300.407042][T12992] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 300.407080][T12992] genl_family_rcv_msg_doit+0xb8/0x300 [ 300.407116][T12992] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.407154][T12992] ? apparmor_capable+0x137/0x1b0 [ 300.407182][T12992] ? bpf_lsm_capable+0x9/0x20 [ 300.407215][T12992] ? security_capable+0x7e/0x2e0 [ 300.407254][T12992] genl_rcv_msg+0x60e/0x790 [ 300.407290][T12992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.407316][T12992] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 300.407341][T12992] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 300.407363][T12992] ? __pfx_nl80211_post_doit+0x10/0x10 [ 300.407392][T12992] ? __asan_memcpy+0x40/0x70 [ 300.407415][T12992] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.407454][T12992] netlink_rcv_skb+0x208/0x470 [ 300.407473][T12992] ? __lock_acquire+0xab9/0xd20 [ 300.407504][T12992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.407533][T12992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.407577][T12992] ? down_read+0x1ad/0x2e0 [ 300.407605][T12992] genl_rcv+0x28/0x40 [ 300.407630][T12992] netlink_unicast+0x82f/0x9e0 [ 300.407672][T12992] ? __pfx_netlink_unicast+0x10/0x10 [ 300.407706][T12992] ? netlink_sendmsg+0x642/0xb30 [ 300.407726][T12992] ? skb_put+0x11b/0x210 [ 300.407753][T12992] netlink_sendmsg+0x805/0xb30 [ 300.407786][T12992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.407814][T12992] ? aa_sock_msg_perm+0xf1/0x1d0 [ 300.407835][T12992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.407857][T12992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.407880][T12992] __sock_sendmsg+0x21c/0x270 [ 300.407914][T12992] ____sys_sendmsg+0x505/0x830 [ 300.407945][T12992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.407982][T12992] ? import_iovec+0x74/0xa0 [ 300.408010][T12992] ___sys_sendmsg+0x21f/0x2a0 [ 300.408038][T12992] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.408106][T12992] ? __fget_files+0x2a/0x420 [ 300.408123][T12992] ? __fget_files+0x3a0/0x420 [ 300.408154][T12992] __x64_sys_sendmsg+0x19b/0x260 [ 300.408183][T12992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.408226][T12992] ? __pfx_ksys_write+0x10/0x10 [ 300.408251][T12992] ? rcu_is_watching+0x15/0xb0 [ 300.408278][T12992] ? do_syscall_64+0xbe/0x3b0 [ 300.408306][T12992] do_syscall_64+0xfa/0x3b0 [ 300.408328][T12992] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.408348][T12992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.408369][T12992] ? clear_bhb_loop+0x60/0xb0 [ 300.408395][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.408419][T12992] RIP: 0033:0x7f57d538eba9 [ 300.408438][T12992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.408456][T12992] RSP: 002b:00007f57d6298038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.408478][T12992] RAX: ffffffffffffffda RBX: 00007f57d55d5fa0 RCX: 00007f57d538eba9 [ 300.408493][T12992] RDX: 0000000000000010 RSI: 0000200000000e40 RDI: 0000000000000003 [ 300.408506][T12992] RBP: 00007f57d6298090 R08: 0000000000000000 R09: 0000000000000000 [ 300.408518][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.408530][T12992] R13: 00007f57d55d6038 R14: 00007f57d55d5fa0 R15: 00007ffd77b89038 [ 300.408565][T12992] [ 300.899959][T12998] netlink: 'syz.8.1890': attribute type 1 has an invalid length. [ 300.908206][T12998] netlink: 'syz.8.1890': attribute type 1 has an invalid length. [ 301.104615][T13006] netlink: 'syz.8.1890': attribute type 1 has an invalid length. [ 301.868923][T12856] Set syz1 is full, maxelem 65536 reached [ 301.936255][T13012] __nla_validate_parse: 3 callbacks suppressed [ 301.936275][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 302.581683][ T55] block nbd0: Possible stuck request ffff88802527e000: control (read@0,4096B). Runtime 120 seconds [ 303.208216][T12996] syz_tun: refused to change device tx_queue_len [ 303.237606][T13006] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 303.567154][T13017] syzkaller0: entered promiscuous mode [ 303.635194][T13017] syzkaller0: entered allmulticast mode [ 303.755840][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1901'. [ 303.844283][T13041] lo speed is unknown, defaulting to 1000 [ 303.906686][T13048] siw: device registration error -23 [ 304.028597][T13048] netlink: 'syz.7.1903': attribute type 4 has an invalid length. [ 304.045461][T13053] vlan2: entered promiscuous mode [ 304.051263][T13053] vlan2: entered allmulticast mode [ 304.309015][T13054] syzkaller0: entered promiscuous mode [ 304.314630][T13054] syzkaller0: entered allmulticast mode [ 304.886271][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 306.500670][T13075] lo speed is unknown, defaulting to 1000 [ 306.861692][T13103] lo speed is unknown, defaulting to 1000 [ 307.370706][T13123] lo speed is unknown, defaulting to 1000 [ 307.727674][T13140] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1926'. [ 307.829240][T13143] netlink: 'syz.7.1926': attribute type 10 has an invalid length. [ 307.898198][T13143] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 307.929277][T13147] netlink: 216 bytes leftover after parsing attributes in process `syz.9.1929'. [ 307.947604][T13147] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1929'. [ 308.006789][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1929'. [ 308.626837][T13160] netlink: 830 bytes leftover after parsing attributes in process `syz.9.1932'. [ 308.894692][T13166] batadv1: entered promiscuous mode [ 308.908118][T13166] batadv1: entered allmulticast mode [ 308.920370][T13180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1940'. [ 308.929861][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1937'. [ 308.934138][T13180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1940'. [ 309.003013][T13180] lo speed is unknown, defaulting to 1000 [ 309.326561][T13199] lo speed is unknown, defaulting to 1000 [ 309.562985][T13213] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 309.592128][T13213] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1947'. [ 309.746466][T13218] tipc: Enabling of bearer rejected, failed to enable media [ 310.051801][T13226] tipc: Enabled bearer , priority 0 [ 310.065037][T13226] syzkaller0: entered promiscuous mode [ 310.073456][T13226] syzkaller0: entered allmulticast mode [ 310.073510][T13228] trusted_key: syz.9.1952 sent an empty control message without MSG_MORE. [ 310.171120][T13229] veth1_to_hsr: mtu less than device minimum [ 310.283700][T13232] netlink: 'syz.8.1953': attribute type 1 has an invalid length. [ 310.294680][T13226] tipc: Resetting bearer [ 310.301217][T13232] netlink: 124 bytes leftover after parsing attributes in process `syz.8.1953'. [ 310.343714][T13226] tipc: Disabling bearer [ 310.678856][T13251] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001 [ 310.924447][T13263] lo speed is unknown, defaulting to 1000 [ 311.053669][T13275] netlink: 'syz.9.1966': attribute type 10 has an invalid length. [ 311.081671][T13275] team0: Port device macvlan1 added [ 311.161592][T13265] netlink: 'syz.8.1963': attribute type 4 has an invalid length. [ 311.209961][T13266] netlink: 'syz.8.1963': attribute type 4 has an invalid length. [ 311.980626][T13305] macsec2: entered promiscuous mode [ 311.986032][T13305] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 311.993519][T13305] macsec2: entered allmulticast mode [ 312.000269][T13305] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 312.129511][T13317] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 312.139643][T13316] IPVS: stopping backup sync thread 13317 ... [ 312.148163][T13304] tipc: Enabled bearer , priority 0 [ 312.170992][T13319] Unsupported ieee802154 address type: 0 [ 312.264536][T13308] syzkaller0: entered promiscuous mode [ 312.270465][T13308] syzkaller0: entered allmulticast mode [ 312.352516][T13301] tipc: Resetting bearer [ 312.405065][T13301] tipc: Disabling bearer [ 312.435857][T13326] tipc: Enabled bearer , priority 0 [ 312.446384][T13314] syzkaller0: entered promiscuous mode [ 312.452625][T13314] syzkaller0: entered allmulticast mode [ 312.464878][T13333] tipc: Enabled bearer , priority 0 [ 312.473685][T13333] syzkaller0: entered promiscuous mode [ 312.481505][T13333] syzkaller0: entered allmulticast mode [ 312.524595][T13335] bond_slave_0: entered promiscuous mode [ 312.530729][T13335] bond_slave_1: entered promiscuous mode [ 312.542606][T13335] macvlan2: entered allmulticast mode [ 312.548134][T13335] bond0: entered allmulticast mode [ 312.553350][T13335] bond_slave_0: entered allmulticast mode [ 312.564815][T13335] bond_slave_1: entered allmulticast mode [ 312.572613][T13335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.585543][T13335] bond0: left allmulticast mode [ 312.590740][T13335] bond_slave_0: left allmulticast mode [ 312.596363][T13335] bond_slave_1: left allmulticast mode [ 312.602273][T13335] bond_slave_0: left promiscuous mode [ 312.607805][T13335] bond_slave_1: left promiscuous mode [ 312.662772][T13339] tipc: Resetting bearer [ 312.675269][T13313] tipc: Resetting bearer [ 312.721712][T13313] tipc: Disabling bearer [ 312.750195][T13332] tipc: Resetting bearer [ 312.780130][T13332] tipc: Disabling bearer [ 312.956085][T13352] : entered promiscuous mode [ 313.201957][T13364] netlink: 'syz.0.1986': attribute type 5 has an invalid length. [ 313.219317][T13364] netlink: 'syz.0.1986': attribute type 7 has an invalid length. [ 313.397112][T13371] tipc: Enabled bearer , priority 0 [ 313.414202][T13371] syzkaller0: entered promiscuous mode [ 313.423232][T13371] syzkaller0: entered allmulticast mode [ 313.471106][T13370] tipc: Resetting bearer [ 313.500269][T13379] __nla_validate_parse: 8 callbacks suppressed [ 313.500291][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1990'. [ 313.527237][T13370] tipc: Disabling bearer [ 313.542313][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1990'. [ 314.058681][T13389] lo speed is unknown, defaulting to 1000 [ 314.381963][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1998'. [ 314.722262][T13412] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1999'. [ 314.736440][T13412] netlink: 'syz.8.1999': attribute type 7 has an invalid length. [ 314.762440][T13412] netlink: 'syz.8.1999': attribute type 8 has an invalid length. [ 314.798224][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1999'. [ 314.936981][T13418] tipc: Enabled bearer , priority 0 [ 314.944901][T13418] syzkaller0: entered promiscuous mode [ 314.950636][T13418] syzkaller0: entered allmulticast mode [ 315.066167][T13417] tipc: Resetting bearer [ 315.116934][T13417] tipc: Disabling bearer [ 315.317134][T13435] netem: unknown loss type 0 [ 315.332685][T13435] netem: change failed [ 315.368141][T13431] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2007'. [ 315.403989][T13434] lo speed is unknown, defaulting to 1000 [ 315.430631][T13438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2008'. [ 315.491573][T13439] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2009'. [ 315.509056][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2007'. [ 315.997649][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2011'. [ 316.046286][T13453] lo speed is unknown, defaulting to 1000 [ 316.806158][T13480] tipc: Enabled bearer , priority 0 [ 316.840110][T13480] syzkaller0: entered promiscuous mode [ 316.845638][T13480] syzkaller0: entered allmulticast mode [ 316.901330][T13482] tipc: Enabled bearer , priority 0 [ 316.909110][T13482] syzkaller0: entered promiscuous mode [ 316.914634][T13482] syzkaller0: entered allmulticast mode [ 316.930207][T13481] tipc: Resetting bearer [ 316.930376][T13464] netlink: 'syz.8.2012': attribute type 6 has an invalid length. [ 316.968436][T13481] tipc: Disabling bearer [ 316.987439][T13477] tipc: Resetting bearer [ 317.001877][T13476] tipc: Resetting bearer [ 317.100657][T13476] tipc: Disabling bearer [ 317.301826][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.621456][T13495] tipc: Enabled bearer , priority 0 [ 317.650951][T13494] tipc: Enabling of bearer rejected, already enabled [ 317.686115][T13495] syzkaller0: entered promiscuous mode [ 317.706467][T13495] syzkaller0: entered allmulticast mode [ 317.739565][T13500] netlink: 'syz.0.2020': attribute type 20 has an invalid length. [ 317.766312][T13494] netlink: 'syz.0.2020': attribute type 20 has an invalid length. [ 318.199309][T13511] macsec2: entered promiscuous mode [ 318.216579][T13511] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 318.230156][T13511] macsec2: entered allmulticast mode [ 318.240066][T13511] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 318.306852][T13492] tipc: Resetting bearer [ 318.368968][T13492] tipc: Disabling bearer [ 318.435392][T13521] : entered promiscuous mode [ 318.605234][T13523] IPv6: sit2: Disabled Multicast RS [ 318.637746][T13526] __nla_validate_parse: 2 callbacks suppressed [ 318.637765][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2027'. [ 318.641663][T13523] sit2: entered allmulticast mode [ 318.785073][T13525] netlink: 'syz.0.2028': attribute type 11 has an invalid length. [ 318.917482][T13532] syzkaller0: entered promiscuous mode [ 318.923012][T13532] syzkaller0: entered allmulticast mode [ 319.647691][T13562] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 319.841690][T13573] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2041'. [ 319.950246][T13576] pim6reg: entered allmulticast mode [ 319.958255][T13576] sctp: [Deprecated]: syz.9.2042 (pid 13576) Use of int in max_burst socket option deprecated. [ 319.958255][T13576] Use struct sctp_assoc_value instead [ 320.159995][T13582] tipc: Enabled bearer , priority 0 [ 320.175968][T13582] syzkaller0: entered promiscuous mode [ 320.189527][T13582] syzkaller0: entered allmulticast mode [ 320.222387][T13581] tipc: Resetting bearer [ 320.255963][T13581] tipc: Disabling bearer [ 320.297178][T13589] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2046'. [ 320.404235][T13587] lo speed is unknown, defaulting to 1000 [ 320.425320][T13592] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2047'. [ 320.574774][T13597] veth7: entered promiscuous mode [ 320.645036][T13604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2050'. [ 320.694271][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2052'. [ 320.716189][T13608] netlink: 'syz.2.2050': attribute type 10 has an invalid length. [ 320.832403][T13576] pim6reg: left allmulticast mode [ 320.857291][T13611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2053'. [ 320.990584][T13611] bond0: invalid ARP target 0.0.0.0 specified for addition [ 320.998706][T13611] bond0: option arp_ip_target: invalid value (0) [ 321.233300][T13626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2058'. [ 321.370677][T13632] syzkaller1: entered promiscuous mode [ 321.395026][T13632] syzkaller1: entered allmulticast mode [ 321.543487][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2057'. [ 321.725587][T13639] syzkaller0: entered promiscuous mode [ 321.763506][T13639] syzkaller0: entered allmulticast mode [ 321.871433][T13637] tipc: Enabled bearer , priority 0 [ 321.887563][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2061'. [ 321.957769][T13640] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 322.021557][T13627] tipc: Resetting bearer [ 322.082770][T13627] tipc: Disabling bearer [ 322.483142][T13640] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.128389][T13683] tipc: Enabled bearer , priority 0 [ 323.146438][T13683] syzkaller0: entered promiscuous mode [ 323.154062][T13683] syzkaller0: entered allmulticast mode [ 323.170363][T13682] tipc: Resetting bearer [ 323.201220][T13682] tipc: Disabling bearer [ 323.373130][T13690] syzkaller1: entered promiscuous mode [ 323.390019][T13690] syzkaller1: entered allmulticast mode [ 323.704087][T13698] netlink: 'syz.9.2078': attribute type 32 has an invalid length. [ 323.750094][T13698] _ÐZ`Ô€@S: entered promiscuous mode [ 323.810251][T13699] syz.9.2078 uses old SIOCAX25GETINFO [ 324.094164][T13703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.353825][T13705] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 324.767110][T13706] tipc: Enabled bearer , priority 0 [ 324.774018][T13710] __nla_validate_parse: 3 callbacks suppressed [ 324.774037][T13710] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2081'. [ 324.792522][T13708] tipc: Resetting bearer [ 325.635119][T13739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.776766][ T6567] tipc: Node number set to 155282339 [ 325.888391][T13704] tipc: Disabling bearer [ 325.927338][T13725] tipc: Enabled bearer , priority 0 [ 325.944449][T13727] syzkaller0: entered promiscuous mode [ 325.951948][T13727] syzkaller0: entered allmulticast mode [ 326.117218][T13751] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2088'. [ 326.167557][T13727] tipc: Resetting bearer [ 326.176439][T13754] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2088'. [ 326.531719][T13727] tipc: Disabling bearer [ 326.770711][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2094'. [ 326.870249][T13770] bond0: (slave syz_tun): Releasing backup interface [ 326.887256][T13770] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 326.910795][T13770] bond0: (slave dummy0): Releasing backup interface [ 326.925236][T13770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 327.165270][T13802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2103'. [ 327.283561][T13807] netlink: 'syz.9.2104': attribute type 1 has an invalid length. [ 327.553045][T13824] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2108'. [ 327.863707][T13837] tipc: Enabled bearer , priority 0 [ 327.883861][T13837] bridge_slave_1: left allmulticast mode [ 327.906859][T13837] veth1_vlan: mtu less than device minimum [ 327.939670][T13835] tipc: Disabling bearer [ 328.975311][T13894] netlink: 'syz.2.2123': attribute type 11 has an invalid length. [ 329.014927][T13891] netlink: 'syz.2.2123': attribute type 11 has an invalid length. [ 329.054339][T13900] netlink: 'syz.8.2121': attribute type 1 has an invalid length. [ 329.172546][T13906] tipc: Enabled bearer , priority 0 [ 329.180955][T13906] syzkaller0: entered promiscuous mode [ 329.192017][T13906] syzkaller0: entered allmulticast mode [ 329.239761][T13909] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2130'. [ 329.249501][T13906] tipc: Resetting bearer [ 329.259852][T13905] tipc: Resetting bearer [ 329.282883][T13905] tipc: Disabling bearer [ 329.312096][T13910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2129'. [ 329.403744][T13915] : renamed from veth0_to_bond [ 329.463707][T13917] netlink: 'syz.0.2133': attribute type 10 has an invalid length. [ 329.744652][T13933] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2135'. [ 329.844260][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 329.890795][T13938] tipc: Enabled bearer , priority 0 [ 329.908046][T13938] syzkaller0: entered promiscuous mode [ 329.914730][T13938] syzkaller0: entered allmulticast mode [ 329.935863][T13936] vlan0: entered promiscuous mode [ 329.959731][T13936] bridge0: entered promiscuous mode [ 330.041110][T13938] tipc: Resetting bearer [ 330.060027][T13937] tipc: Resetting bearer [ 330.151617][T13937] tipc: Disabling bearer [ 330.251949][T13960] netlink: 'syz.8.2145': attribute type 1 has an invalid length. [ 330.286904][T13960] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2145'. [ 330.710614][T13985] Àÿ: renamed from team_slave_1 [ 331.291568][T13992] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2155'. [ 331.309179][T13995] netlink: 'syz.2.2157': attribute type 13 has an invalid length. [ 331.324042][T13995] netlink: 'syz.2.2157': attribute type 17 has an invalid length. [ 331.791378][T13995] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.835770][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 331.836299][ T30] audit: type=1800 audit(1757539732.327:36): pid=14017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2161" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1693 res=0 errno=0 [ 331.868686][ T30] audit: type=1804 audit(1757539732.327:37): pid=14017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2161" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1693 res=1 errno=0 [ 331.929363][T13995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.162800][T14005] lo speed is unknown, defaulting to 1000 [ 332.510130][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2164'. [ 332.538307][T14033] vlan2: entered promiscuous mode [ 332.543400][T14033] macvtap0: entered promiscuous mode [ 332.658769][ T55] block nbd0: Possible stuck request ffff88802527e000: control (read@0,4096B). Runtime 150 seconds [ 332.951560][T14051] netlink: 'syz.2.2167': attribute type 13 has an invalid length. [ 333.011795][T14051] netlink: 'syz.2.2167': attribute type 17 has an invalid length. [ 333.146720][T14051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.274234][T14054] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.417348][T14054] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.450861][T14059] lo speed is unknown, defaulting to 1000 [ 333.536394][T14054] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.549408][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2173'. [ 333.585242][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2173'. [ 333.627102][T14054] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.857062][T14080] syzkaller1: entered allmulticast mode [ 333.958333][ T8885] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.995007][ T8885] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.022646][ T8885] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.055155][ T8885] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.159099][T14093] block nbd2: not configured, cannot reconfigure [ 334.168063][T14092] syzkaller1: entered promiscuous mode [ 334.173575][T14092] syzkaller1: entered allmulticast mode [ 334.412669][T14105] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2180'. [ 334.431404][T14105] bond0: entered promiscuous mode [ 334.436807][T14105] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 334.444476][T14105] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 334.467028][T14105] bond0: left promiscuous mode [ 334.471932][T14105] mac80211_hwsim hwsim24 wlan1: left promiscuous mode [ 334.479503][T14105] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 334.575559][T14109] syzkaller0: entered promiscuous mode [ 334.585108][T14109] syzkaller0: entered allmulticast mode [ 334.743635][T14116] tipc: Enabled bearer , priority 0 [ 334.775207][T14114] tipc: Disabling bearer [ 334.801654][T14119] netlink: 'syz.8.2185': attribute type 12 has an invalid length. [ 334.815251][T14119] netlink: 9472 bytes leftover after parsing attributes in process `syz.8.2185'. [ 334.839826][T14121] netlink: 'syz.0.2186': attribute type 16 has an invalid length. [ 334.847939][T14121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2186'. [ 335.125220][T14140] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2193'. [ 335.170545][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2193'. [ 335.254276][T14149] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.2195'. [ 335.340642][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2194'. [ 335.386254][T14147] syzkaller0: entered promiscuous mode [ 335.412467][T14147] syzkaller0: entered allmulticast mode [ 337.444632][T14168] lo speed is unknown, defaulting to 1000 [ 337.458046][T14181] netlink: 'syz.8.2200': attribute type 2 has an invalid length. [ 337.465909][T14181] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2200'. [ 337.749541][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2204'. [ 338.861622][T14207] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2206'. [ 339.121304][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2211'. [ 339.137583][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2211'. [ 339.158907][T14218] ip6tnl1: entered promiscuous mode [ 339.176364][T14218] ip6tnl1: entered allmulticast mode [ 339.630748][T14241] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 339.653684][ T13] tipc: Subscription rejected, illegal request [ 339.669503][T14241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.860533][T14249] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 340.451863][T14276] __nla_validate_parse: 1 callbacks suppressed [ 340.451883][T14276] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2229'. [ 340.603859][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2230'. [ 341.220755][T14306] netlink: 'syz.9.2240': attribute type 2 has an invalid length. [ 341.901795][T14332] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2246'. [ 342.494651][T14353] netlink: 'syz.9.2251': attribute type 10 has an invalid length. [ 342.568866][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2251'. [ 342.615429][T14355] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 342.808087][T14358] sit0: entered promiscuous mode [ 342.813102][T14358] sit0: left allmulticast mode [ 342.824098][T14358] netlink: 'syz.9.2252': attribute type 1 has an invalid length. [ 342.837942][T14358] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2252'. [ 343.092252][T14360] FAULT_INJECTION: forcing a failure. [ 343.092252][T14360] name failslab, interval 1, probability 0, space 0, times 0 [ 343.117953][T14360] CPU: 0 UID: 0 PID: 14360 Comm: syz.9.2253 Not tainted syzkaller #0 PREEMPT(full) [ 343.117987][T14360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.118000][T14360] Call Trace: [ 343.118009][T14360] [ 343.118018][T14360] dump_stack_lvl+0x189/0x250 [ 343.118049][T14360] ? __pfx____ratelimit+0x10/0x10 [ 343.118072][T14360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.118096][T14360] ? __pfx__printk+0x10/0x10 [ 343.118131][T14360] ? __pfx___might_resched+0x10/0x10 [ 343.118151][T14360] ? fs_reclaim_acquire+0x7d/0x100 [ 343.118176][T14360] should_fail_ex+0x414/0x560 [ 343.118208][T14360] should_failslab+0xa8/0x100 [ 343.118248][T14360] __kmalloc_cache_noprof+0x70/0x3d0 [ 343.118281][T14360] ? __request_module+0x2b5/0x5e0 [ 343.118316][T14360] __request_module+0x2b5/0x5e0 [ 343.118355][T14360] ? __pfx___request_module+0x10/0x10 [ 343.118386][T14360] ? __up_read+0x280/0x680 [ 343.118416][T14360] ? crypto_alg_lookup+0x3d3/0x450 [ 343.118459][T14360] crypto_alg_mod_lookup+0xeb/0x5f0 [ 343.118494][T14360] crypto_alloc_tfm_node+0x13e/0x3f0 [ 343.118535][T14360] crypto_ahash_init_tfm+0x1a3/0x770 [ 343.118572][T14360] crypto_create_tfm_node+0x189/0x3f0 [ 343.118608][T14360] crypto_alloc_tfm_node+0x172/0x3f0 [ 343.118648][T14360] alg_bind+0x2fa/0x570 [ 343.118681][T14360] __sys_bind+0x2c6/0x3e0 [ 343.118704][T14360] ? __pfx___sys_bind+0x10/0x10 [ 343.118739][T14360] ? __pfx_ksys_write+0x10/0x10 [ 343.118764][T14360] ? rcu_is_watching+0x15/0xb0 [ 343.118794][T14360] __x64_sys_bind+0x7a/0x90 [ 343.118815][T14360] do_syscall_64+0xfa/0x3b0 [ 343.118837][T14360] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.118858][T14360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.118879][T14360] ? clear_bhb_loop+0x60/0xb0 [ 343.118905][T14360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.118932][T14360] RIP: 0033:0x7f7db678eba9 [ 343.118951][T14360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.118969][T14360] RSP: 002b:00007f7db75d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 343.118992][T14360] RAX: ffffffffffffffda RBX: 00007f7db69d5fa0 RCX: 00007f7db678eba9 [ 343.119007][T14360] RDX: 0000000000000058 RSI: 0000200000000540 RDI: 0000000000000003 [ 343.119020][T14360] RBP: 00007f7db75d5090 R08: 0000000000000000 R09: 0000000000000000 [ 343.119033][T14360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.119045][T14360] R13: 00007f7db69d6038 R14: 00007f7db69d5fa0 R15: 00007ffdf6c05ca8 [ 343.119079][T14360] [ 343.440437][T14369] netlink: 'syz.8.2257': attribute type 23 has an invalid length. [ 343.491494][T14369] dvmrp1: entered allmulticast mode [ 344.597259][T14421] netlink: 'syz.7.2273': attribute type 1 has an invalid length. [ 344.628833][T14421] netlink: 'syz.7.2273': attribute type 1 has an invalid length. [ 344.682091][T14421] netlink: 'syz.7.2273': attribute type 1 has an invalid length. [ 344.714463][T14431] pim6reg1: entered promiscuous mode [ 344.747359][T14431] pim6reg1: entered allmulticast mode [ 344.879443][T14435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2275'. [ 344.899154][T14435] openvswitch: netlink: Flow key attr not present in new flow. [ 344.948893][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2277'. [ 345.321684][T14457] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2280'. [ 345.331720][T14459] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2281'. [ 345.395302][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2279'. [ 345.434585][T14454] lo speed is unknown, defaulting to 1000 [ 345.544060][T14466] netlink: 'syz.8.2282': attribute type 7 has an invalid length. [ 345.554888][T14467] netlink: 'syz.7.2283': attribute type 29 has an invalid length. [ 345.765829][T14474] netlink: 180 bytes leftover after parsing attributes in process `syz.8.2284'. [ 345.838597][T14473] batadv_slave_0: entered promiscuous mode [ 345.875673][T14473] batadv_slave_0: left allmulticast mode [ 345.895914][T14473] netlink: 'syz.7.2285': attribute type 3 has an invalid length. [ 346.123483][T14486] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2289'. [ 346.145026][T14486] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2289'. [ 346.168125][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 346.195165][T14486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2289'. [ 346.408818][T14500] tap0: tun_chr_ioctl cmd 2147767507 [ 346.424290][T14498] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2293'. [ 346.495980][T14502] geneve2: entered promiscuous mode [ 346.505552][ T8876] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.525522][ T8876] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.553379][ T8876] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.575359][ T8876] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.759240][T14508] lo speed is unknown, defaulting to 1000 [ 346.801592][T14515] lo speed is unknown, defaulting to 1000 [ 347.760842][T14549] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2303'. [ 348.021337][T14542] netlink: 'syz.2.2304': attribute type 15 has an invalid length. [ 348.038985][T14545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2304'. [ 348.068265][T14545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2304'. [ 348.241451][T14552] sctp: [Deprecated]: syz.0.2305 (pid 14552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.241451][T14552] Use struct sctp_sack_info instead [ 348.509735][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2308'. [ 348.513781][T14559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.682388][T14563] netlink: 'syz.2.2309': attribute type 21 has an invalid length. [ 348.807091][T14569] netlink: 'syz.2.2309': attribute type 21 has an invalid length. [ 348.985970][T14575] lo speed is unknown, defaulting to 1000 [ 349.063000][T14570] FAULT_INJECTION: forcing a failure. [ 349.063000][T14570] name failslab, interval 1, probability 0, space 0, times 0 [ 349.076162][T14570] CPU: 0 UID: 0 PID: 14570 Comm: syz.7.2311 Not tainted syzkaller #0 PREEMPT(full) [ 349.076192][T14570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.076206][T14570] Call Trace: [ 349.076214][T14570] [ 349.076223][T14570] dump_stack_lvl+0x189/0x250 [ 349.076254][T14570] ? __pfx____ratelimit+0x10/0x10 [ 349.076276][T14570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.076301][T14570] ? __pfx__printk+0x10/0x10 [ 349.076335][T14570] ? __pfx___might_resched+0x10/0x10 [ 349.076361][T14570] should_fail_ex+0x414/0x560 [ 349.076394][T14570] should_failslab+0xa8/0x100 [ 349.076427][T14570] __kmalloc_cache_noprof+0x70/0x3d0 [ 349.076455][T14570] ? crypto_larval_alloc+0x59/0x290 [ 349.076492][T14570] crypto_larval_alloc+0x59/0x290 [ 349.076523][T14570] crypto_alg_mod_lookup+0x1a4/0x5f0 [ 349.076557][T14570] crypto_alloc_tfm_node+0x13e/0x3f0 [ 349.076597][T14570] crypto_ahash_init_tfm+0x1a3/0x770 [ 349.076633][T14570] crypto_create_tfm_node+0x189/0x3f0 [ 349.076668][T14570] crypto_alloc_tfm_node+0x172/0x3f0 [ 349.076709][T14570] alg_bind+0x2fa/0x570 [ 349.076748][T14570] __sys_bind+0x2c6/0x3e0 [ 349.076771][T14570] ? __pfx___sys_bind+0x10/0x10 [ 349.076803][T14570] ? __pfx_ksys_write+0x10/0x10 [ 349.076829][T14570] ? rcu_is_watching+0x15/0xb0 [ 349.076859][T14570] __x64_sys_bind+0x7a/0x90 [ 349.076880][T14570] do_syscall_64+0xfa/0x3b0 [ 349.076903][T14570] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.076924][T14570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.076944][T14570] ? clear_bhb_loop+0x60/0xb0 [ 349.076970][T14570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.076990][T14570] RIP: 0033:0x7ffa2bd8eba9 [ 349.077009][T14570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.077027][T14570] RSP: 002b:00007ffa2cbdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 349.077048][T14570] RAX: ffffffffffffffda RBX: 00007ffa2bfd5fa0 RCX: 00007ffa2bd8eba9 [ 349.077062][T14570] RDX: 0000000000000058 RSI: 0000200000000540 RDI: 0000000000000003 [ 349.077075][T14570] RBP: 00007ffa2cbdf090 R08: 0000000000000000 R09: 0000000000000000 [ 349.077087][T14570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.077099][T14570] R13: 00007ffa2bfd6038 R14: 00007ffa2bfd5fa0 R15: 00007fffe91496c8 [ 349.077132][T14570] [ 349.390702][T14586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.467678][T14588] netlink: 'syz.2.2314': attribute type 21 has an invalid length. [ 349.672434][T14581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.713751][T14581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.091198][T14581] veth1_macvtap: left allmulticast mode [ 350.143334][T14581] macsec0: left allmulticast mode [ 350.150251][T14581] macsec0: left promiscuous mode [ 350.155477][T14581] macsec1: left promiscuous mode [ 350.164324][T14581] vlan2: left promiscuous mode [ 350.170064][T14581] erspan0: left promiscuous mode [ 350.176196][T14581] ip6gretap2: left promiscuous mode [ 350.194741][T14581] mac80211_hwsim hwsim20 wlan0: left allmulticast mode [ 350.202224][T14581] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 350.209697][T14581] macsec2: left promiscuous mode [ 350.232843][T14585] netem: change failed [ 350.254647][ T8880] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.282631][ T8880] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.353540][ T8880] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.376606][ T8880] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.652597][T14613] IPVS: Scheduler module ip_vs_sip not found [ 350.660235][T14621] IPVS: length: 141 != 8 [ 351.139864][T14630] FAULT_INJECTION: forcing a failure. [ 351.139864][T14630] name failslab, interval 1, probability 0, space 0, times 0 [ 351.164032][T14630] CPU: 1 UID: 0 PID: 14630 Comm: syz.8.2326 Not tainted syzkaller #0 PREEMPT(full) [ 351.164065][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.164078][T14630] Call Trace: [ 351.164086][T14630] [ 351.164094][T14630] dump_stack_lvl+0x189/0x250 [ 351.164124][T14630] ? __pfx____ratelimit+0x10/0x10 [ 351.164148][T14630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.164173][T14630] ? __pfx__printk+0x10/0x10 [ 351.164208][T14630] ? __pfx___might_resched+0x10/0x10 [ 351.164226][T14630] ? fs_reclaim_acquire+0x7d/0x100 [ 351.164251][T14630] should_fail_ex+0x414/0x560 [ 351.164285][T14630] should_failslab+0xa8/0x100 [ 351.164318][T14630] __kmalloc_cache_noprof+0x70/0x3d0 [ 351.164355][T14630] ? cryptomgr_notify+0x85/0x970 [ 351.164382][T14630] cryptomgr_notify+0x85/0x970 [ 351.164415][T14630] notifier_call_chain+0x1b3/0x3e0 [ 351.164453][T14630] blocking_notifier_call_chain+0x6a/0x90 [ 351.164478][T14630] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 351.164511][T14630] crypto_alloc_tfm_node+0x13e/0x3f0 [ 351.164550][T14630] crypto_ahash_init_tfm+0x1a3/0x770 [ 351.164588][T14630] crypto_create_tfm_node+0x189/0x3f0 [ 351.164623][T14630] crypto_alloc_tfm_node+0x172/0x3f0 [ 351.164664][T14630] alg_bind+0x2fa/0x570 [ 351.164697][T14630] __sys_bind+0x2c6/0x3e0 [ 351.164721][T14630] ? __pfx___sys_bind+0x10/0x10 [ 351.164755][T14630] ? __pfx_ksys_write+0x10/0x10 [ 351.164781][T14630] ? rcu_is_watching+0x15/0xb0 [ 351.164810][T14630] __x64_sys_bind+0x7a/0x90 [ 351.164831][T14630] do_syscall_64+0xfa/0x3b0 [ 351.164853][T14630] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.164874][T14630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.164894][T14630] ? clear_bhb_loop+0x60/0xb0 [ 351.164920][T14630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.164940][T14630] RIP: 0033:0x7f43cdd8eba9 [ 351.164958][T14630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.164976][T14630] RSP: 002b:00007f43cebe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 351.164997][T14630] RAX: ffffffffffffffda RBX: 00007f43cdfd5fa0 RCX: 00007f43cdd8eba9 [ 351.165012][T14630] RDX: 0000000000000058 RSI: 0000200000000540 RDI: 0000000000000003 [ 351.165025][T14630] RBP: 00007f43cebe2090 R08: 0000000000000000 R09: 0000000000000000 [ 351.165037][T14630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.165050][T14630] R13: 00007f43cdfd6038 R14: 00007f43cdfd5fa0 R15: 00007ffc94bfea58 [ 351.165084][T14630] [ 351.727818][T14651] __nla_validate_parse: 6 callbacks suppressed [ 351.727840][T14651] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2330'. [ 351.778111][T14652] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 351.906416][T14659] tipc: Enabled bearer , priority 0 [ 352.007166][T14659] syzkaller0: entered promiscuous mode [ 352.016724][T14659] syzkaller0: entered allmulticast mode [ 352.041844][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 352.051514][T14659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2332'. [ 352.061973][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 352.071883][T14659] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2332'. [ 352.092866][T14659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2332'. [ 352.194716][T14658] tipc: Resetting bearer [ 352.225551][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2337'. [ 352.258048][T14658] tipc: Disabling bearer [ 352.300871][T14663] lo speed is unknown, defaulting to 1000 [ 352.358454][T14675] netlink: 'syz.8.2338': attribute type 4 has an invalid length. [ 352.376269][T14675] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2338'. [ 352.419531][T14678] netlink: 'syz.8.2338': attribute type 1 has an invalid length. [ 352.427939][T14678] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2338'. [ 352.571188][T14686] netlink: 'syz.9.2342': attribute type 10 has an invalid length. [ 352.583682][T14686] veth0_vlan: left promiscuous mode [ 352.590210][T14686] veth0_vlan: entered promiscuous mode [ 352.597914][T14686] team0: Device veth0_vlan failed to register rx_handler [ 352.681735][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2343'. [ 352.797542][T14696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.258688][T14715] dvmrp0: entered allmulticast mode [ 353.363186][T14719] netlink: 'syz.0.2351': attribute type 13 has an invalid length. [ 353.374618][T14719] netlink: 'syz.0.2351': attribute type 17 has an invalid length. [ 353.575983][T14719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.612574][T14720] macvtap0: entered promiscuous mode [ 353.620265][T14720] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 353.690253][T14723] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.763532][T14721] lo speed is unknown, defaulting to 1000 [ 353.921610][T14723] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.020124][T14741] netlink: 'syz.8.2356': attribute type 1 has an invalid length. [ 354.055712][T14723] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.083594][T14741] netlink: 'syz.8.2356': attribute type 10 has an invalid length. [ 354.153183][T14723] bond0: (slave netdevsim0): Releasing backup interface [ 354.170065][T14723] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.255227][T14754] netlink: 'syz.7.2360': attribute type 12 has an invalid length. [ 354.377175][ T8876] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.385437][ T8876] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.426645][ T8876] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.607586][T14764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.677012][ T8885] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.273774][T14797] syzkaller0: entered promiscuous mode [ 355.288196][T14797] syzkaller0: entered allmulticast mode [ 355.624220][T14811] openvswitch: netlink: IP tunnel dst address not specified [ 356.049750][T14828] vlan2: entered promiscuous mode [ 356.066198][T14828] bond0: entered promiscuous mode [ 356.073467][T14828] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 356.356013][T14852] batadv_slave_1: left allmulticast mode [ 356.573482][T14864] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 356.600206][T14866] netlink: 'syz.7.2394': attribute type 10 has an invalid length. [ 356.624497][T14864] netlink: 'syz.2.2393': attribute type 19 has an invalid length. [ 356.633356][T14860] can: request_module (can-proto-0) failed. [ 356.682626][T14866] team0: Port device dummy0 added [ 356.704017][T14860] netlink: 'syz.7.2394': attribute type 10 has an invalid length. [ 356.741299][T14860] team0: Port device dummy0 removed [ 356.751584][T14860] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 356.815096][T14871] tap0: tun_chr_ioctl cmd 1074025677 [ 356.828769][T14871] tap0: linktype set to 804 [ 356.835309][T14875] __nla_validate_parse: 16 callbacks suppressed [ 356.835328][T14875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2397'. [ 356.894047][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 356.915670][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 356.941594][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 356.959864][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 356.971359][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 356.982436][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 356.994037][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 357.011506][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 357.023911][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2398'. [ 357.052955][T14879] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.072927][T14879] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 357.694033][T14915] geneve3: entered promiscuous mode [ 358.239898][T14935] netlink: 'syz.9.2413': attribute type 10 has an invalid length. [ 358.248761][T14935] dummy0: entered promiscuous mode [ 358.253938][T14935] dummy0: left allmulticast mode [ 358.317794][T14935] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 358.378787][T14948] vxcan1: entered allmulticast mode [ 358.389270][T14948] vxcan1: left allmulticast mode [ 358.394552][T14948] pim6reg: left allmulticast mode [ 358.417907][T14941] netlink: 'syz.0.2415': attribute type 33 has an invalid length. [ 359.103049][T14978] bridge9: entered allmulticast mode [ 359.202647][T14983] vlan3: entered promiscuous mode [ 359.226036][T14983] syz_tun: entered promiscuous mode [ 359.397064][T14992] lo speed is unknown, defaulting to 1000 [ 360.271229][T15032] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002 [ 360.616070][T15039] lo speed is unknown, defaulting to 1000 [ 360.851153][T15054] netlink: 'syz.8.2449': attribute type 1 has an invalid length. [ 360.894523][T15057] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 360.906067][T15057] sctp: [Deprecated]: syz.7.2448 (pid 15057) Use of int in max_burst socket option deprecated. [ 360.906067][T15057] Use struct sctp_assoc_value instead [ 361.045724][T15064] tipc: Enabled bearer , priority 0 [ 361.097518][T15063] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 361.144211][T15054] syzkaller0: entered promiscuous mode [ 361.161874][T15054] syzkaller0: entered allmulticast mode [ 361.348237][T15064] tipc: Resetting bearer [ 361.420314][T15067] lo speed is unknown, defaulting to 1000 [ 361.435391][T15053] tipc: Resetting bearer [ 361.502917][T15053] tipc: Disabling bearer [ 361.666896][T15099] netlink: 'syz.9.2460': attribute type 7 has an invalid length. [ 362.040977][T15114] lo speed is unknown, defaulting to 1000 [ 362.145821][T15117] lo speed is unknown, defaulting to 1000 [ 362.254257][T15124] __nla_validate_parse: 35 callbacks suppressed [ 362.254278][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2467'. [ 362.271691][T15118] lo speed is unknown, defaulting to 1000 [ 362.331037][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2467'. [ 362.370675][T15128] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2467'. [ 362.489585][T15120] lo speed is unknown, defaulting to 1000 [ 362.495507][T15127] dvmrp8: left allmulticast mode [ 362.737872][ T55] block nbd0: Possible stuck request ffff88802527e000: control (read@0,4096B). Runtime 180 seconds [ 362.799720][T15135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2470'. [ 362.871272][T15141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'. [ 363.608868][T15161] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 363.660867][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 364.054391][T15173] netlink: 'syz.7.2478': attribute type 3 has an invalid length. [ 364.143403][T15176] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2479'. [ 364.385703][T15189] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2483'. [ 364.439125][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2484'. [ 364.640751][T15176] team0: Port device macvlan1 removed [ 365.009531][T15206] netlink: 'syz.7.2487': attribute type 13 has an invalid length. [ 365.044916][T15206] netlink: 'syz.7.2487': attribute type 17 has an invalid length. [ 365.171698][T15206] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 365.211517][T15211] 8021q: adding VLAN 0 to HW filter on device bond6 [ 365.237029][T15207] lo speed is unknown, defaulting to 1000 [ 365.271576][T15217] openvswitch: netlink: IPv4 tun info is not correct [ 365.487694][T15223] bond3: entered promiscuous mode [ 365.493094][T15223] bond3: entered allmulticast mode [ 365.499049][T15223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.629765][T15223] bond3 (unregistering): Released all slaves [ 365.728004][T15231] netlink: 'syz.8.2494': attribute type 3 has an invalid length. [ 365.737770][T15231] netlink: 666 bytes leftover after parsing attributes in process `syz.8.2494'. [ 365.876224][T15235] lo speed is unknown, defaulting to 1000 [ 366.285698][T15257] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 366.468106][T15259] veth7: entered promiscuous mode [ 366.500618][T15257] erspan0: entered allmulticast mode [ 366.705206][T15274] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 366.747061][T15274] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 366.986010][T15287] hsr_slave_0: left promiscuous mode [ 366.995885][T15287] hsr_slave_1: left promiscuous mode [ 367.073131][T15292] xfrm0: left allmulticast mode [ 367.289721][T15301] __nla_validate_parse: 5 callbacks suppressed [ 367.289743][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 367.441935][T15313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2519'. [ 367.952930][T15313] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 367.965573][T15313] netlink: 'syz.0.2519': attribute type 4 has an invalid length. [ 367.976276][T15313] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2519'. [ 367.994139][T15313] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 368.004656][T15313] netlink: 'syz.0.2519': attribute type 4 has an invalid length. [ 368.029829][T15313] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2519'. [ 368.129310][T15326] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2524'. [ 368.717769][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 369.103614][T15361] netlink: 592 bytes leftover after parsing attributes in process `syz.9.2533'. [ 369.153914][T15363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2535'. [ 369.288595][T15370] netlink: 844 bytes leftover after parsing attributes in process `syz.9.2537'. [ 370.101239][T15379] bridge0: port 1(erspan0) entered blocking state [ 370.108429][T15379] bridge0: port 1(erspan0) entered disabled state [ 370.115130][T15379] erspan0: entered allmulticast mode [ 370.122663][T15379] erspan0: entered promiscuous mode [ 370.148178][T15379] erspan0: left allmulticast mode [ 370.153482][T15379] erspan0: left promiscuous mode [ 370.160634][T15379] bridge0: port 1(erspan0) entered disabled state [ 370.355172][T15383] syzkaller0: entered promiscuous mode [ 370.370356][T15383] syzkaller0: entered allmulticast mode [ 384.774931][ T5882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.785620][ T5187] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 384.798334][ T5882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 384.805568][ T5187] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 384.813989][ T5882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 384.821631][ T5882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 384.830132][ T5187] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 384.830715][ T5882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 384.846354][ T5187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 384.846511][ T5882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.900123][ T5875] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 384.910018][ T5875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 384.923679][ T5875] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 384.932846][ T5875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 384.934952][T15389] lo speed is unknown, defaulting to 1000 [ 384.947357][ T5875] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 384.958988][T15388] lo speed is unknown, defaulting to 1000 [ 385.062344][T15392] lo speed is unknown, defaulting to 1000 [ 385.283594][T15389] chnl_net:caif_netlink_parms(): no params data found [ 385.439602][T15388] chnl_net:caif_netlink_parms(): no params data found [ 385.472779][T15389] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.480231][T15389] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.488328][T15389] bridge_slave_0: entered allmulticast mode [ 385.495648][T15389] bridge_slave_0: entered promiscuous mode [ 385.534987][T15389] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.542540][T15389] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.550786][T15389] bridge_slave_1: entered allmulticast mode [ 385.558974][T15389] bridge_slave_1: entered promiscuous mode [ 385.647937][T15389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.657525][T15392] chnl_net:caif_netlink_parms(): no params data found [ 385.679801][T15389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.836445][T15389] team0: Port device team_slave_0 added [ 385.899192][T15388] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.906389][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.927070][T15388] bridge_slave_0: entered allmulticast mode [ 385.934863][T15388] bridge_slave_0: entered promiscuous mode [ 385.960633][T15389] team0: Port device team_slave_1 added [ 386.045364][T15388] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.074452][T15388] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.094453][T15388] bridge_slave_1: entered allmulticast mode [ 386.127062][T15388] bridge_slave_1: entered promiscuous mode [ 386.169595][ T5875] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 386.186976][ T5875] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 386.197453][ T5875] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 386.207552][ T5875] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 386.217128][ T5875] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 386.286060][T15388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.333835][T15389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.349526][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.384405][T15389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.405917][T15389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.413208][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.415097][ T5875] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 386.449297][T15389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.449860][ T5875] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 386.468641][ T5875] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 386.473223][T15388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.485526][ T5875] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 386.495669][ T5875] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 386.559088][T15392] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.566307][T15392] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.574533][T15392] bridge_slave_0: entered allmulticast mode [ 386.582736][T15392] bridge_slave_0: entered promiscuous mode [ 386.615690][T15388] team0: Port device team_slave_0 added [ 386.625105][T15388] team0: Port device team_slave_1 added [ 386.632567][T15392] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.640291][T15392] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.647942][T15392] bridge_slave_1: entered allmulticast mode [ 386.655261][T15392] bridge_slave_1: entered promiscuous mode [ 386.744611][T15388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.752178][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.778445][T15388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.792767][T15392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.810359][T15389] hsr_slave_0: entered promiscuous mode [ 386.817150][T15389] hsr_slave_1: entered promiscuous mode [ 386.843493][T15413] lo speed is unknown, defaulting to 1000 [ 386.856176][T15388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.863403][T15388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.889615][T15388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.897620][ T5875] Bluetooth: hci5: command tx timeout [ 386.907814][ T5187] Bluetooth: hci6: command tx timeout [ 386.912855][T15392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.956543][T15416] lo speed is unknown, defaulting to 1000 [ 386.976727][ T5187] Bluetooth: hci7: command tx timeout [ 387.062161][T15392] team0: Port device team_slave_0 added [ 387.086826][T15388] hsr_slave_0: entered promiscuous mode [ 387.093254][T15388] hsr_slave_1: entered promiscuous mode [ 387.100153][T15388] debugfs: 'hsr0' already exists in 'hsr' [ 387.105922][T15388] Cannot create hsr debugfs directory [ 387.119288][T15392] team0: Port device team_slave_1 added [ 387.272685][T15392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.279748][T15392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.306421][T15392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.325421][T15392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.332547][T15392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.359416][T15392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.516176][T15392] hsr_slave_0: entered promiscuous mode [ 387.524015][T15392] hsr_slave_1: entered promiscuous mode [ 387.531115][T15392] debugfs: 'hsr0' already exists in 'hsr' [ 387.539264][T15392] Cannot create hsr debugfs directory [ 387.909243][T15413] chnl_net:caif_netlink_parms(): no params data found [ 387.923397][T15416] chnl_net:caif_netlink_parms(): no params data found [ 388.197061][T15416] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.204325][T15416] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.211794][T15416] bridge_slave_0: entered allmulticast mode [ 388.220143][T15416] bridge_slave_0: entered promiscuous mode [ 388.245789][T15413] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.253185][T15413] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.257125][ T5187] Bluetooth: hci8: command tx timeout [ 388.266672][T15413] bridge_slave_0: entered allmulticast mode [ 388.273973][T15413] bridge_slave_0: entered promiscuous mode [ 388.283143][T15416] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.291385][T15416] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.298722][T15416] bridge_slave_1: entered allmulticast mode [ 388.306219][T15416] bridge_slave_1: entered promiscuous mode [ 388.330222][T15413] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.338363][T15413] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.345544][T15413] bridge_slave_1: entered allmulticast mode [ 388.354002][T15413] bridge_slave_1: entered promiscuous mode [ 388.435084][T15416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.467552][T15413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.479838][T15416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.508579][T15413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.581420][ T5187] Bluetooth: hci9: command tx timeout [ 388.592678][T15416] team0: Port device team_slave_0 added [ 388.602258][T15416] team0: Port device team_slave_1 added [ 388.610138][T15413] team0: Port device team_slave_0 added [ 388.650962][T15413] team0: Port device team_slave_1 added [ 388.690713][T15416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.697913][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.724652][T15416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.754580][T15413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.761914][T15413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.788521][T15413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.800478][T15416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.808366][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.834511][T15416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.861529][T15413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.869159][T15413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.895182][T15413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.977627][ T5187] Bluetooth: hci6: command tx timeout [ 388.978109][ T5875] Bluetooth: hci5: command tx timeout [ 389.045555][T15416] hsr_slave_0: entered promiscuous mode [ 389.052691][T15416] hsr_slave_1: entered promiscuous mode [ 389.059602][T15416] debugfs: 'hsr0' already exists in 'hsr' [ 389.065355][T15416] Cannot create hsr debugfs directory [ 389.071814][ T5875] Bluetooth: hci7: command tx timeout [ 389.084151][T15413] hsr_slave_0: entered promiscuous mode [ 389.091136][T15413] hsr_slave_1: entered promiscuous mode [ 389.097705][T15413] debugfs: 'hsr0' already exists in 'hsr' [ 389.103505][T15413] Cannot create hsr debugfs directory [ 390.336741][ T5875] Bluetooth: hci8: command tx timeout [ 390.656878][ T5875] Bluetooth: hci9: command tx timeout [ 391.056820][ T5187] Bluetooth: hci5: command tx timeout [ 391.062371][ T5875] Bluetooth: hci6: command tx timeout [ 391.136793][ T5875] Bluetooth: hci7: command tx timeout [ 392.426622][ T5875] Bluetooth: hci8: command tx timeout [ 392.746967][ T5875] Bluetooth: hci9: command tx timeout [ 392.816848][ T55] block nbd0: Possible stuck request ffff88802527e000: control (read@0,4096B). Runtime 210 seconds [ 393.136635][ T5875] Bluetooth: hci6: command tx timeout [ 393.136685][ T5187] Bluetooth: hci5: command tx timeout [ 393.216951][ T5187] Bluetooth: hci7: command tx timeout [ 394.496707][ T5187] Bluetooth: hci8: command tx timeout [ 394.816865][ T5187] Bluetooth: hci9: command tx timeout [ 422.902969][ T55] block nbd0: Possible stuck request ffff88802527e000: control (read@0,4096B). Runtime 240 seconds [ 444.724373][ T5875] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 444.736250][T15436] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 444.736266][ T5882] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 444.738821][ T5882] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 444.757282][T15436] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 444.760615][ T5882] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 444.772834][T15436] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 444.773554][ T5882] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 444.781214][T15436] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 444.795190][T15436] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 444.840170][T15433] lo speed is unknown, defaulting to 1000 [ 444.869297][T15432] lo speed is unknown, defaulting to 1000 [ 445.126900][T15432] chnl_net:caif_netlink_parms(): no params data found [ 445.210841][T15433] chnl_net:caif_netlink_parms(): no params data found [ 445.270874][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.278192][T15432] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.285449][T15432] bridge_slave_0: entered allmulticast mode [ 445.293491][T15432] bridge_slave_0: entered promiscuous mode [ 445.316382][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.324110][T15432] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.336714][T15432] bridge_slave_1: entered allmulticast mode [ 445.344640][T15432] bridge_slave_1: entered promiscuous mode [ 445.433806][T15432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.501803][T15432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.630309][T15433] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.646810][T15433] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.654378][T15433] bridge_slave_0: entered allmulticast mode [ 445.674486][T15433] bridge_slave_0: entered promiscuous mode [ 445.694935][T15433] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.704183][ T5882] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 445.707453][T15433] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.719523][T15433] bridge_slave_1: entered allmulticast mode [ 445.724854][ T5882] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 445.728003][T15433] bridge_slave_1: entered promiscuous mode [ 445.738944][ T5882] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 445.743073][T15432] team0: Port device team_slave_0 added [ 445.753223][ T5882] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 445.762077][ T5882] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 445.794127][T15432] team0: Port device team_slave_1 added [ 445.851678][T15432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.859970][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.886881][T15432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.901459][T15433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.921203][T15433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.931675][T15432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.939271][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.965573][T15432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.985145][T15450] lo speed is unknown, defaulting to 1000 [ 446.026998][T15433] team0: Port device team_slave_0 added [ 446.036292][T15433] team0: Port device team_slave_1 added [ 446.137705][T15432] hsr_slave_0: entered promiscuous mode [ 446.144234][T15432] hsr_slave_1: entered promiscuous mode [ 446.151293][T15432] debugfs: 'hsr0' already exists in 'hsr' [ 446.157119][T15432] Cannot create hsr debugfs directory [ 446.180900][T15433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.188538][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.214886][T15433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.251022][T15433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.259363][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.285620][T15433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.638466][T15433] hsr_slave_0: entered promiscuous mode [ 446.645290][T15433] hsr_slave_1: entered promiscuous mode [ 446.667536][T15433] debugfs: 'hsr0' already exists in 'hsr' [ 446.673330][T15433] Cannot create hsr debugfs directory [ 446.822502][T15436] Bluetooth: hci10: command tx timeout [ 446.897158][T15436] Bluetooth: hci11: command tx timeout [ 446.932666][ T5882] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 446.946727][ T5882] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 446.954978][ T5882] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 446.964447][ T5882] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 446.972387][ T5882] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 447.041718][ T5882] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 447.056786][ T5882] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 447.068982][ T5882] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 447.077861][ T5882] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 447.085886][ T5882] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 447.177097][T15450] chnl_net:caif_netlink_parms(): no params data found [ 447.340023][T15459] lo speed is unknown, defaulting to 1000 [ 447.384160][T15456] lo speed is unknown, defaulting to 1000 [ 447.401692][T15450] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.411179][T15450] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.419744][T15450] bridge_slave_0: entered allmulticast mode [ 447.428008][T15450] bridge_slave_0: entered promiscuous mode [ 447.441744][T15450] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.453239][T15450] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.464357][T15450] bridge_slave_1: entered allmulticast mode [ 447.472724][T15450] bridge_slave_1: entered promiscuous mode [ 447.585996][T15450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.600535][T15450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.679369][T15450] team0: Port device team_slave_0 added [ 447.706214][T15450] team0: Port device team_slave_1 added [ 447.801613][T15450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.808915][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.835189][T15450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.854103][T15450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.861809][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.867405][T15436] Bluetooth: hci12: command tx timeout [ 447.891387][T15450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.064472][T15450] hsr_slave_0: entered promiscuous mode [ 448.071801][T15450] hsr_slave_1: entered promiscuous mode [ 448.079213][T15450] debugfs: 'hsr0' already exists in 'hsr' [ 448.084962][T15450] Cannot create hsr debugfs directory [ 448.139419][T15459] chnl_net:caif_netlink_parms(): no params data found [ 448.313612][T15456] chnl_net:caif_netlink_parms(): no params data found [ 448.474214][T15459] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.481710][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.489990][T15459] bridge_slave_0: entered allmulticast mode [ 448.498338][T15459] bridge_slave_0: entered promiscuous mode [ 448.551614][T15459] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.559043][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.567065][T15459] bridge_slave_1: entered allmulticast mode [ 448.575113][T15459] bridge_slave_1: entered promiscuous mode [ 448.673831][T15456] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.681327][T15456] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.689181][T15456] bridge_slave_0: entered allmulticast mode [ 448.697154][T15456] bridge_slave_0: entered promiscuous mode [ 448.734955][T15456] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.742687][T15456] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.753799][T15456] bridge_slave_1: entered allmulticast mode [ 448.761382][T15456] bridge_slave_1: entered promiscuous mode [ 448.787770][T15459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.825661][T15459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.839828][T15456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.897202][T15436] Bluetooth: hci10: command tx timeout [ 448.905925][T15456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.934387][T15459] team0: Port device team_slave_0 added [ 448.955234][T15459] team0: Port device team_slave_1 added [ 448.977724][T15436] Bluetooth: hci11: command tx timeout [ 449.022324][T15459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.029556][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.056982][T15459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.064487][T15436] Bluetooth: hci13: command tx timeout [ 449.084446][T15456] team0: Port device team_slave_0 added [ 449.093696][T15456] team0: Port device team_slave_1 added [ 449.100690][T15459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.108114][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.134154][T15459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.137093][T15436] Bluetooth: hci14: command tx timeout [ 449.252903][T15456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.260517][T15456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.296786][T15456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.310895][T15456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.318495][T15456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.344720][T15456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.362743][T15459] hsr_slave_0: entered promiscuous mode [ 449.369812][T15459] hsr_slave_1: entered promiscuous mode [ 449.376042][T15459] debugfs: 'hsr0' already exists in 'hsr' [ 449.382083][T15459] Cannot create hsr debugfs directory [ 449.469020][T15456] hsr_slave_0: entered promiscuous mode [ 449.475536][T15456] hsr_slave_1: entered promiscuous mode [ 449.482053][T15456] debugfs: 'hsr0' already exists in 'hsr' [ 449.487990][T15456] Cannot create hsr debugfs directory [ 449.936717][T15436] Bluetooth: hci12: command tx timeout [ 450.976767][T15436] Bluetooth: hci10: command tx timeout [ 451.057280][T15436] Bluetooth: hci11: command tx timeout [ 451.136928][T15436] Bluetooth: hci13: command tx timeout [ 451.217282][T15436] Bluetooth: hci14: command tx timeout [ 452.017118][T15436] Bluetooth: hci12: command tx timeout [ 452.976993][ T55] block nbd0: Possible stuck request ffff88802527e000: control (read@0,4096B). Runtime 270 seconds [ 453.057077][T15436] Bluetooth: hci10: command tx timeout [ 453.137009][T15436] Bluetooth: hci11: command tx timeout [ 453.216678][T15436] Bluetooth: hci13: command tx timeout [ 453.297210][T15436] Bluetooth: hci14: command tx timeout [ 454.096859][T15436] Bluetooth: hci12: command tx timeout [ 455.297120][T15436] Bluetooth: hci13: command tx timeout [ 455.376974][T15436] Bluetooth: hci14: command tx timeout [ 483.057095][ T55] block nbd0: Possible stuck request ffff88802527e000: control (read@0,4096B). Runtime 300 seconds [ 505.370140][ T5882] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 505.379480][ T5882] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 505.387698][ T5882] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 505.395833][ T5882] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 505.404127][ T5882] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 505.452161][T15478] lo speed is unknown, defaulting to 1000 [ 505.512726][T15436] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 505.523394][T15436] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 505.532322][T15436] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 505.548677][T15436] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 505.557034][T15436] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 505.637680][T15480] lo speed is unknown, defaulting to 1000 [ 505.823267][T15478] chnl_net:caif_netlink_parms(): no params data found [ 506.001906][T15436] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 506.011228][T15436] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 506.019580][T15436] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 506.027724][T15436] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 506.035496][T15436] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 506.120888][T15478] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.128332][T15478] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.135626][T15478] bridge_slave_0: entered allmulticast mode [ 506.143701][T15478] bridge_slave_0: entered promiscuous mode [ 506.157680][T15478] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.164920][T15478] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.173523][T15478] bridge_slave_1: entered allmulticast mode [ 506.188534][T15478] bridge_slave_1: entered promiscuous mode [ 506.224596][T15480] chnl_net:caif_netlink_parms(): no params data found [ 506.263070][T15478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.295289][T15478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.339710][T15489] lo speed is unknown, defaulting to 1000 [ 506.391021][T15478] team0: Port device team_slave_0 added [ 506.400257][T15478] team0: Port device team_slave_1 added [ 506.513791][T15478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.529669][T15478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.556731][T15478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.575099][T15480] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.584398][T15480] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.592815][T15480] bridge_slave_0: entered allmulticast mode [ 506.601041][T15480] bridge_slave_0: entered promiscuous mode [ 506.610217][T15478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.618702][T15478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.645309][T15478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.672291][T15480] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.680550][T15480] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.688035][T15480] bridge_slave_1: entered allmulticast mode [ 506.697071][T15480] bridge_slave_1: entered promiscuous mode [ 506.836377][T15478] hsr_slave_0: entered promiscuous mode [ 506.843488][T15478] hsr_slave_1: entered promiscuous mode [ 506.850104][T15478] debugfs: 'hsr0' already exists in 'hsr' [ 506.855856][T15478] Cannot create hsr debugfs directory [ 506.938705][T15480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.960760][T15480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.048025][T15499] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 507.065472][T15499] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 507.076021][T15499] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 507.085575][T15499] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 507.093949][T15499] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 507.178707][T15480] team0: Port device team_slave_0 added [ 507.229978][T15480] team0: Port device team_slave_1 added [ 507.466666][T15499] Bluetooth: hci15: command tx timeout [ 507.475410][T15502] lo speed is unknown, defaulting to 1000 [ 507.502323][T15500] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 507.515228][T15500] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 507.524115][T15500] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 507.524953][T15480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.538716][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.556224][T15500] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 507.565148][T15480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.585169][T15500] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 507.597403][T15480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.605098][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.617168][T15500] Bluetooth: hci16: command tx timeout [ 507.642242][T15480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.755740][T15489] chnl_net:caif_netlink_parms(): no params data found [ 507.845519][T15506] lo speed is unknown, defaulting to 1000 [ 507.878596][T15480] hsr_slave_0: entered promiscuous mode [ 507.885193][T15480] hsr_slave_1: entered promiscuous mode [ 507.891822][T15480] debugfs: 'hsr0' already exists in 'hsr' [ 507.898573][T15480] Cannot create hsr debugfs directory [ 508.096746][T15499] Bluetooth: hci17: command tx timeout [ 508.190267][T15489] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.197584][T15489] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.204795][T15489] bridge_slave_0: entered allmulticast mode [ 508.213239][T15489] bridge_slave_0: entered promiscuous mode [ 508.222161][T15489] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.229582][T15489] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.236939][T15489] bridge_slave_1: entered allmulticast mode [ 508.244967][T15489] bridge_slave_1: entered promiscuous mode [ 508.414435][T15489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.469206][T15489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.533149][T15502] chnl_net:caif_netlink_parms(): no params data found [ 508.615307][T15489] team0: Port device team_slave_0 added [ 508.624931][T15489] team0: Port device team_slave_1 added [ 508.782125][T15489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.789406][T15489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.815746][T15489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.827380][T15499] Bluetooth: hci5: command 0x0406 tx timeout [ 508.833449][T15499] Bluetooth: hci7: command 0x0406 tx timeout [ 508.840129][T15500] Bluetooth: hci6: command 0x0406 tx timeout [ 508.846197][T15500] Bluetooth: hci8: command 0x0406 tx timeout [ 508.855028][T15489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.855895][T15499] Bluetooth: hci9: command 0x0406 tx timeout [ 508.870854][T15489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.897307][T15489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.077806][T15506] chnl_net:caif_netlink_parms(): no params data found [ 509.113355][T15489] hsr_slave_0: entered promiscuous mode [ 509.121121][T15489] hsr_slave_1: entered promiscuous mode [ 509.128577][T15489] debugfs: 'hsr0' already exists in 'hsr' [ 509.134336][T15489] Cannot create hsr debugfs directory [ 509.137539][ T5882] Bluetooth: hci18: command tx timeout [ 509.166136][T15502] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.177881][T15502] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.185173][T15502] bridge_slave_0: entered allmulticast mode [ 509.192987][T15502] bridge_slave_0: entered promiscuous mode [ 509.207469][T15502] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.214636][T15502] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.222567][T15502] bridge_slave_1: entered allmulticast mode [ 509.230752][T15502] bridge_slave_1: entered promiscuous mode [ 509.343794][T15502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.383085][T15502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.482250][T15502] team0: Port device team_slave_0 added [ 509.530828][T15502] team0: Port device team_slave_1 added [ 509.537000][ T5882] Bluetooth: hci15: command tx timeout [ 509.624713][T15506] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.632419][T15506] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.640270][T15506] bridge_slave_0: entered allmulticast mode [ 509.649266][T15506] bridge_slave_0: entered promiscuous mode [ 509.692410][T15506] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.697043][ T5882] Bluetooth: hci19: command tx timeout [ 509.700185][T15506] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.708201][ T5882] Bluetooth: hci16: command tx timeout [ 509.713039][T15506] bridge_slave_1: entered allmulticast mode [ 509.725855][T15506] bridge_slave_1: entered promiscuous mode [ 509.750534][T15502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.758000][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.784905][T15502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.834682][T15502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.842304][T15502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.869249][T15502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.903975][T15506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.926103][T15506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.055522][T15502] hsr_slave_0: entered promiscuous mode [ 510.063056][T15502] hsr_slave_1: entered promiscuous mode [ 510.077370][T15502] debugfs: 'hsr0' already exists in 'hsr' [ 510.083159][T15502] Cannot create hsr debugfs directory [ 510.125386][T15506] team0: Port device team_slave_0 added [ 510.157348][T15506] team0: Port device team_slave_1 added [ 510.186933][ T5882] Bluetooth: hci17: command tx timeout [ 510.271886][T15506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.279762][T15506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.310690][T15506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.342253][T15506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.350629][T15506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.377211][T15506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.498908][T15506] hsr_slave_0: entered promiscuous mode [ 510.506058][T15506] hsr_slave_1: entered promiscuous mode [ 510.512832][T15506] debugfs: 'hsr0' already exists in 'hsr' [ 510.518866][T15506] Cannot create hsr debugfs directory [ 511.217171][ T5882] Bluetooth: hci18: command tx timeout [ 511.616703][ T5875] Bluetooth: hci15: command tx timeout [ 511.776762][ T5875] Bluetooth: hci16: command tx timeout [ 511.781003][ T5882] Bluetooth: hci19: command tx timeout [ 512.256663][ T5882] Bluetooth: hci17: command tx timeout [ 513.138181][ T55] block nbd0: Possible stuck request ffff88802527e000: control (read@0,4096B). Runtime 330 seconds [ 513.296785][ T5882] Bluetooth: hci18: command tx timeout [ 513.696712][ T5882] Bluetooth: hci15: command tx timeout [ 513.857649][ T5882] Bluetooth: hci16: command tx timeout [ 513.863197][ T5882] Bluetooth: hci19: command tx timeout [ 514.336690][ T5882] Bluetooth: hci17: command tx timeout [ 515.376614][ T5882] Bluetooth: hci18: command tx timeout [ 515.936938][ T5882] Bluetooth: hci19: command tx timeout [ 531.699155][ T31] INFO: task syz.0.2532:15356 blocked for more than 143 seconds. [ 531.707201][ T31] Not tainted syzkaller #0 [ 531.712344][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.721095][ T31] task:syz.0.2532 state:D stack:26600 pid:15356 tgid:15354 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 531.733467][ T31] Call Trace: [ 531.737422][ T31] [ 531.740481][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 531.745041][ T31] ? __lock_acquire+0xab9/0xd20 [ 531.750372][ T31] ? __lock_acquire+0xab9/0xd20 [ 531.755487][ T31] ? __pfx___schedule+0x10/0x10 [ 531.761193][ T31] ? schedule+0x91/0x360 [ 531.765492][ T31] schedule+0x165/0x360 [ 531.771129][ T31] schedule_preempt_disabled+0x13/0x30 [ 531.776805][ T31] __mutex_lock+0x7e6/0x1350 [ 531.781472][ T31] ? __mutex_lock+0x5bb/0x1350 [ 531.786273][ T31] ? genl_rcv_msg+0x10d/0x790 [ 531.791327][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 531.796385][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 531.802113][ T31] ? radix_tree_lookup+0x240/0x290 [ 531.807471][ T31] genl_rcv_msg+0x10d/0x790 [ 531.812145][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.817689][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 531.822759][ T31] ? __asan_memcpy+0x40/0x70 [ 531.827913][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 531.833575][ T31] netlink_rcv_skb+0x208/0x470 [ 531.838465][ T31] ? __lock_acquire+0xab9/0xd20 [ 531.843354][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.848601][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.854109][ T31] ? down_read+0x1ad/0x2e0 [ 531.859030][ T31] genl_rcv+0x28/0x40 [ 531.863044][ T31] netlink_unicast+0x82f/0x9e0 [ 531.868032][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 531.873358][ T31] ? netlink_sendmsg+0x642/0xb30 [ 531.878466][ T31] ? skb_put+0x11b/0x210 [ 531.882747][ T31] netlink_sendmsg+0x805/0xb30 [ 531.888008][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.893330][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 531.898789][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.904117][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.915811][ T31] __sock_sendmsg+0x21c/0x270 [ 531.926677][ T31] __sys_sendto+0x3bd/0x520 [ 531.931247][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 531.936311][ T31] ? count_memcg_event_mm+0x21/0x260 [ 531.956614][ T31] ? exc_page_fault+0x76/0xf0 [ 531.961360][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 531.976573][ T31] __x64_sys_sendto+0xde/0x100 [ 531.981418][ T31] do_syscall_64+0xfa/0x3b0 [ 531.985955][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.026697][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.032847][ T31] ? clear_bhb_loop+0x60/0xb0 [ 532.065261][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.086628][ T31] RIP: 0033:0x7f57d5390a3c [ 532.091121][ T31] RSP: 002b:00007f57d6275ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 532.106113][ T31] RAX: ffffffffffffffda RBX: 00007f57d6275fc0 RCX: 00007f57d5390a3c [ 532.114317][ T31] RDX: 0000000000000020 RSI: 00007f57d6276010 RDI: 000000000000000b [ 532.122744][ T31] RBP: 0000000000000000 R08: 00007f57d6275f14 R09: 000000000000000c [ 532.131421][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 532.139706][ T31] R13: 00007f57d6275f68 R14: 00007f57d6276010 R15: 0000000000000000 [ 532.147817][ T31] [ 532.150914][ T31] INFO: task syz.2.2535:15363 blocked for more than 143 seconds. [ 532.159188][ T31] Not tainted syzkaller #0 [ 532.164172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.173474][ T31] task:syz.2.2535 state:D stack:26024 pid:15363 tgid:15362 ppid:7669 task_flags:0x480140 flags:0x00004004 [ 532.186811][ T31] Call Trace: [ 532.190141][ T31] [ 532.193099][ T31] __schedule+0x1798/0x4cc0 [ 532.203259][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.208359][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.213254][ T31] ? __pfx___schedule+0x10/0x10 [ 532.218660][ T31] ? schedule+0x91/0x360 [ 532.222948][ T31] schedule+0x165/0x360 [ 532.227455][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 532.232955][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 532.239155][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 532.245237][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 532.251681][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 532.258337][ T31] nbd_set_size+0x47e/0x6a0 [ 532.262895][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 532.268137][ T31] ? nla_memcpy+0x5b/0xc0 [ 532.272615][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 532.278068][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 532.283572][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 532.289646][ T31] ? bpf_lsm_capable+0x9/0x20 [ 532.294364][ T31] ? security_capable+0x7e/0x2e0 [ 532.299490][ T31] ? radix_tree_lookup+0x240/0x290 [ 532.304645][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 532.310446][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 532.316221][ T31] ? __nla_parse+0x40/0x60 [ 532.320909][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 532.327456][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 532.333045][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.340299][ T31] ? stack_trace_save+0x9c/0xe0 [ 532.345205][ T31] genl_rcv_msg+0x60e/0x790 [ 532.349851][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.354908][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 532.360823][ T31] netlink_rcv_skb+0x208/0x470 [ 532.365611][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.370851][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.375907][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.381400][ T31] ? down_read+0x1ad/0x2e0 [ 532.385848][ T31] genl_rcv+0x28/0x40 [ 532.389949][ T31] netlink_unicast+0x82f/0x9e0 [ 532.394765][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 532.400553][ T31] ? netlink_sendmsg+0x642/0xb30 [ 532.405518][ T31] ? skb_put+0x11b/0x210 [ 532.409846][ T31] netlink_sendmsg+0x805/0xb30 [ 532.414643][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.420408][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 532.425388][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.431162][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.436651][ T31] __sock_sendmsg+0x21c/0x270 [ 532.441387][ T31] ____sys_sendmsg+0x505/0x830 [ 532.446185][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.451683][ T31] ? import_iovec+0x74/0xa0 [ 532.456204][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 532.461352][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.466727][ T31] ? __fget_files+0x2a/0x420 [ 532.471370][ T31] ? __fget_files+0x3a0/0x420 [ 532.476091][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 532.481165][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.487092][ T31] ? rcu_is_watching+0x15/0xb0 [ 532.491898][ T31] ? do_syscall_64+0xbe/0x3b0 [ 532.496858][ T31] do_syscall_64+0xfa/0x3b0 [ 532.501391][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.506735][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.512840][ T31] ? clear_bhb_loop+0x60/0xb0 [ 532.517961][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.523908][ T31] RIP: 0033:0x7fca8a58eba9 [ 532.528419][ T31] RSP: 002b:00007fca8b3c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.537046][ T31] RAX: ffffffffffffffda RBX: 00007fca8a7d5fa0 RCX: 00007fca8a58eba9 [ 532.545050][ T31] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 532.553420][ T31] RBP: 00007fca8a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 532.561730][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.569915][ T31] R13: 00007fca8a7d6038 R14: 00007fca8a7d5fa0 R15: 00007ffce3594cc8 [ 532.578538][ T31] [ 532.581629][ T31] INFO: task syz.9.2537:15370 blocked for more than 144 seconds. [ 532.596212][ T31] Not tainted syzkaller #0 [ 532.604768][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.613760][ T31] task:syz.9.2537 state:D stack:24872 pid:15370 tgid:15368 ppid:7667 task_flags:0x400140 flags:0x00004004 [ 532.625806][ T31] Call Trace: [ 532.629161][ T31] [ 532.632120][ T31] __schedule+0x1798/0x4cc0 [ 532.637085][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.642075][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.647120][ T31] ? __pfx___schedule+0x10/0x10 [ 532.652066][ T31] ? schedule+0x91/0x360 [ 532.656916][ T31] schedule+0x165/0x360 [ 532.661114][ T31] schedule_preempt_disabled+0x13/0x30 [ 532.667193][ T31] __mutex_lock+0x7e6/0x1350 [ 532.671826][ T31] ? __mutex_lock+0x5bb/0x1350 [ 532.676951][ T31] ? genl_rcv_msg+0x10d/0x790 [ 532.681670][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 532.686796][ T31] ? stack_trace_save+0x9c/0xe0 [ 532.691677][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 532.697505][ T31] ? radix_tree_lookup+0x240/0x290 [ 532.702665][ T31] genl_rcv_msg+0x10d/0x790 [ 532.707346][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.712319][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.717541][ T31] netlink_rcv_skb+0x208/0x470 [ 532.722331][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.727599][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.732667][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.738264][ T31] ? down_read+0x1ad/0x2e0 [ 532.742716][ T31] genl_rcv+0x28/0x40 [ 532.746789][ T31] netlink_unicast+0x82f/0x9e0 [ 532.751601][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 532.757361][ T31] ? netlink_sendmsg+0x642/0xb30 [ 532.762339][ T31] ? skb_put+0x11b/0x210 [ 532.766723][ T31] netlink_sendmsg+0x805/0xb30 [ 532.771533][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.777682][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 532.782649][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.788350][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.793709][ T31] __sock_sendmsg+0x21c/0x270 [ 532.798647][ T31] __sys_sendto+0x3bd/0x520 [ 532.803193][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 532.808331][ T31] ? count_memcg_event_mm+0x21/0x260 [ 532.813680][ T31] ? rcu_is_watching+0x15/0xb0 [ 532.819030][ T31] __x64_sys_sendto+0xde/0x100 [ 532.824474][ T31] do_syscall_64+0xfa/0x3b0 [ 532.829177][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.834439][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.840739][ T31] ? clear_bhb_loop+0x60/0xb0 [ 532.845474][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.851690][ T31] RIP: 0033:0x7f7db6790a3c [ 532.856130][ T31] RSP: 002b:00007f7db75d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 532.864738][ T31] RAX: ffffffffffffffda RBX: 00007f7db75d3fc0 RCX: 00007f7db6790a3c [ 532.872818][ T31] RDX: 0000000000000020 RSI: 00007f7db75d4010 RDI: 0000000000000005 [ 532.881325][ T31] RBP: 0000000000000000 R08: 00007f7db75d3f14 R09: 000000000000000c [ 532.889635][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 532.897969][ T31] R13: 00007f7db75d3f68 R14: 00007f7db75d4010 R15: 0000000000000000 [ 532.906008][ T31] [ 532.909450][ T31] INFO: task syz.9.2537:15371 blocked for more than 144 seconds. [ 532.917356][ T31] Not tainted syzkaller #0 [ 532.922323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.931178][ T31] task:syz.9.2537 state:D stack:25896 pid:15371 tgid:15368 ppid:7667 task_flags:0x400140 flags:0x00004004 [ 532.943772][ T31] Call Trace: [ 532.947147][ T31] [ 532.950109][ T31] __schedule+0x1798/0x4cc0 [ 532.954655][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.959746][ T31] ? __lock_acquire+0xab9/0xd20 [ 532.964643][ T31] ? __pfx___schedule+0x10/0x10 [ 532.969893][ T31] ? schedule+0x91/0x360 [ 532.974149][ T31] schedule+0x165/0x360 [ 532.978591][ T31] schedule_preempt_disabled+0x13/0x30 [ 532.984083][ T31] __mutex_lock+0x7e6/0x1350 [ 532.989175][ T31] ? __mutex_lock+0x5bb/0x1350 [ 532.993992][ T31] ? genl_rcv_msg+0x10d/0x790 [ 532.999421][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.004511][ T31] ? stack_trace_save+0x9c/0xe0 [ 533.009495][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 533.014915][ T31] ? radix_tree_lookup+0x240/0x290 [ 533.020271][ T31] genl_rcv_msg+0x10d/0x790 [ 533.024822][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.030092][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.035165][ T31] netlink_rcv_skb+0x208/0x470 [ 533.040170][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.045077][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.050220][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.055591][ T31] ? down_read+0x1ad/0x2e0 [ 533.060703][ T31] genl_rcv+0x28/0x40 [ 533.064761][ T31] netlink_unicast+0x82f/0x9e0 [ 533.069680][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 533.075017][ T31] ? netlink_sendmsg+0x642/0xb30 [ 533.080152][ T31] ? skb_put+0x11b/0x210 [ 533.084526][ T31] netlink_sendmsg+0x805/0xb30 [ 533.089697][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.095045][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 533.100184][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.105485][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.111080][ T31] __sock_sendmsg+0x21c/0x270 [ 533.115800][ T31] __sys_sendto+0x3bd/0x520 [ 533.120811][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 533.125876][ T31] ? count_memcg_event_mm+0x21/0x260 [ 533.131235][ T31] ? exc_page_fault+0x76/0xf0 [ 533.135919][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 533.141536][ T31] __x64_sys_sendto+0xde/0x100 [ 533.146334][ T31] do_syscall_64+0xfa/0x3b0 [ 533.151339][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.156716][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.162821][ T31] ? clear_bhb_loop+0x60/0xb0 [ 533.167694][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.173823][ T31] RIP: 0033:0x7f7db6790a3c [ 533.178697][ T31] RSP: 002b:00007f7db75b2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 533.187220][ T31] RAX: ffffffffffffffda RBX: 00007f7db75b2fc0 RCX: 00007f7db6790a3c [ 533.195231][ T31] RDX: 0000000000000028 RSI: 00007f7db75b3010 RDI: 0000000000000011 [ 533.203525][ T31] RBP: 0000000000000000 R08: 00007f7db75b2f14 R09: 000000000000000c [ 533.211980][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000011 [ 533.225212][ T31] R13: 00007f7db75b2f68 R14: 00007f7db75b3010 R15: 0000000000000000 [ 533.234543][ T31] [ 533.238099][ T31] INFO: task syz.7.2538:15375 blocked for more than 144 seconds. [ 533.245842][ T31] Not tainted syzkaller #0 [ 533.250960][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.259827][ T31] task:syz.7.2538 state:D stack:27640 pid:15375 tgid:15374 ppid:7660 task_flags:0x400040 flags:0x00004004 [ 533.272204][ T31] Call Trace: [ 533.275500][ T31] [ 533.278544][ T31] __schedule+0x1798/0x4cc0 [ 533.283097][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.288115][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.293009][ T31] ? __pfx___schedule+0x10/0x10 [ 533.298296][ T31] ? schedule+0x91/0x360 [ 533.302563][ T31] schedule+0x165/0x360 [ 533.306980][ T31] schedule_preempt_disabled+0x13/0x30 [ 533.312473][ T31] __mutex_lock+0x7e6/0x1350 [ 533.317833][ T31] ? __mutex_lock+0x5bb/0x1350 [ 533.322643][ T31] ? genl_rcv_msg+0x10d/0x790 [ 533.327993][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.333040][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 533.338302][ T31] ? radix_tree_lookup+0x240/0x290 [ 533.343462][ T31] genl_rcv_msg+0x10d/0x790 [ 533.348154][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.353222][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 533.358661][ T31] ? __asan_memcpy+0x40/0x70 [ 533.363284][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 533.368879][ T31] netlink_rcv_skb+0x208/0x470 [ 533.373674][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.378737][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.383804][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.389562][ T31] ? down_read+0x1ad/0x2e0 [ 533.394453][ T31] genl_rcv+0x28/0x40 [ 533.398548][ T31] netlink_unicast+0x82f/0x9e0 [ 533.403368][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 533.408899][ T31] ? netlink_sendmsg+0x642/0xb30 [ 533.413868][ T31] ? skb_put+0x11b/0x210 [ 533.418511][ T31] netlink_sendmsg+0x805/0xb30 [ 533.423310][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.428816][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 533.433786][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.439395][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.444863][ T31] __sock_sendmsg+0x21c/0x270 [ 533.450046][ T31] __sys_sendto+0x3bd/0x520 [ 533.454593][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 533.459861][ T31] ? count_memcg_event_mm+0x21/0x260 [ 533.465443][ T31] ? exc_page_fault+0x76/0xf0 [ 533.470606][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 533.476214][ T31] __x64_sys_sendto+0xde/0x100 [ 533.481502][ T31] do_syscall_64+0xfa/0x3b0 [ 533.486572][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.491823][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.498111][ T31] ? clear_bhb_loop+0x60/0xb0 [ 533.502825][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.509201][ T31] RIP: 0033:0x7ffa2bd90a3c [ 533.513654][ T31] RSP: 002b:00007ffa2cbddec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 533.522281][ T31] RAX: ffffffffffffffda RBX: 00007ffa2cbddfc0 RCX: 00007ffa2bd90a3c [ 533.530395][ T31] RDX: 0000000000000020 RSI: 00007ffa2cbde010 RDI: 0000000000000004 [ 533.538973][ T31] RBP: 0000000000000000 R08: 00007ffa2cbddf14 R09: 000000000000000c [ 533.547827][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 533.555860][ T31] R13: 00007ffa2cbddf68 R14: 00007ffa2cbde010 R15: 0000000000000000 [ 533.564165][ T31] [ 533.567655][ T31] INFO: task syz.7.2538:15376 blocked for more than 145 seconds. [ 533.575417][ T31] Not tainted syzkaller #0 [ 533.580735][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.589598][ T31] task:syz.7.2538 state:D stack:26920 pid:15376 tgid:15374 ppid:7660 task_flags:0x400040 flags:0x00004004 [ 533.602027][ T31] Call Trace: [ 533.605333][ T31] [ 533.608429][ T31] __schedule+0x1798/0x4cc0 [ 533.612988][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.618300][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.623222][ T31] ? __pfx___schedule+0x10/0x10 [ 533.628563][ T31] ? schedule+0x91/0x360 [ 533.632854][ T31] schedule+0x165/0x360 [ 533.637133][ T31] schedule_preempt_disabled+0x13/0x30 [ 533.642636][ T31] __mutex_lock+0x7e6/0x1350 [ 533.647687][ T31] ? __mutex_lock+0x5bb/0x1350 [ 533.652511][ T31] ? genl_rcv_msg+0x10d/0x790 [ 533.657818][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.662883][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 533.668253][ T31] ? radix_tree_lookup+0x240/0x290 [ 533.673539][ T31] genl_rcv_msg+0x10d/0x790 [ 533.678200][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.683273][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 533.688902][ T31] ? __asan_memcpy+0x40/0x70 [ 533.693631][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 533.699374][ T31] netlink_rcv_skb+0x208/0x470 [ 533.704174][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.709333][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.714412][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.720385][ T31] ? down_read+0x1ad/0x2e0 [ 533.724851][ T31] genl_rcv+0x28/0x40 [ 533.729019][ T31] netlink_unicast+0x82f/0x9e0 [ 533.733929][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 533.739342][ T31] ? netlink_sendmsg+0x642/0xb30 [ 533.744306][ T31] ? skb_put+0x11b/0x210 [ 533.749068][ T31] netlink_sendmsg+0x805/0xb30 [ 533.753915][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.759489][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 533.764456][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.770059][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.775375][ T31] __sock_sendmsg+0x21c/0x270 [ 533.780518][ T31] __sys_sendto+0x3bd/0x520 [ 533.785053][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 533.790308][ T31] ? fd_install+0x97/0x540 [ 533.794768][ T31] ? fd_install+0x30d/0x540 [ 533.799409][ T31] __x64_sys_sendto+0xde/0x100 [ 533.804247][ T31] do_syscall_64+0xfa/0x3b0 [ 533.809243][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.814474][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.820650][ T31] ? clear_bhb_loop+0x60/0xb0 [ 533.825458][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.831558][ T31] RIP: 0033:0x7ffa2bd90a3c [ 533.836016][ T31] RSP: 002b:00007ffa2cbbcec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 533.844870][ T31] RAX: ffffffffffffffda RBX: 00007ffa2cbbcfc0 RCX: 00007ffa2bd90a3c [ 533.853379][ T31] RDX: 0000000000000020 RSI: 00007ffa2cbbd010 RDI: 0000000000000007 [ 533.861532][ T31] RBP: 0000000000000000 R08: 00007ffa2cbbcf14 R09: 000000000000000c [ 533.870014][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 533.878427][ T31] R13: 00007ffa2cbbcf68 R14: 00007ffa2cbbd010 R15: 0000000000000000 [ 533.886601][ T31] [ 533.889679][ T31] INFO: task syz.8.2540:15381 blocked for more than 145 seconds. [ 533.897870][ T31] Not tainted syzkaller #0 [ 533.902827][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.911627][ T31] task:syz.8.2540 state:D stack:27240 pid:15381 tgid:15380 ppid:7664 task_flags:0x400140 flags:0x00004004 [ 533.924017][ T31] Call Trace: [ 533.927736][ T31] [ 533.930697][ T31] __schedule+0x1798/0x4cc0 [ 533.935241][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.940370][ T31] ? __lock_acquire+0xab9/0xd20 [ 533.945277][ T31] ? __pfx___schedule+0x10/0x10 [ 533.950337][ T31] ? schedule+0x91/0x360 [ 533.954632][ T31] schedule+0x165/0x360 [ 533.959189][ T31] schedule_preempt_disabled+0x13/0x30 [ 533.964694][ T31] __mutex_lock+0x7e6/0x1350 [ 533.969479][ T31] ? __mutex_lock+0x5bb/0x1350 [ 533.974284][ T31] ? genl_rcv_msg+0x10d/0x790 [ 533.979163][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.984229][ T31] ? stack_trace_save+0x9c/0xe0 [ 533.989707][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 533.995119][ T31] ? radix_tree_lookup+0x240/0x290 [ 534.000363][ T31] genl_rcv_msg+0x10d/0x790 [ 534.004921][ T31] ? __lock_acquire+0xab9/0xd20 [ 534.009969][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.015054][ T31] netlink_rcv_skb+0x208/0x470 [ 534.020409][ T31] ? __lock_acquire+0xab9/0xd20 [ 534.025305][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.030662][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.036024][ T31] ? down_read+0x1ad/0x2e0 [ 534.040600][ T31] genl_rcv+0x28/0x40 [ 534.044643][ T31] netlink_unicast+0x82f/0x9e0 [ 534.049991][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 534.055464][ T31] ? netlink_sendmsg+0x642/0xb30 [ 534.060552][ T31] ? skb_put+0x11b/0x210 [ 534.064826][ T31] netlink_sendmsg+0x805/0xb30 [ 534.069790][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.075115][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 534.080476][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.085797][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.091227][ T31] __sock_sendmsg+0x21c/0x270 [ 534.095947][ T31] __sys_sendto+0x3bd/0x520 [ 534.100830][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 534.105895][ T31] ? count_memcg_event_mm+0x21/0x260 [ 534.111668][ T31] ? exc_page_fault+0x76/0xf0 [ 534.116389][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 534.121794][ T31] __x64_sys_sendto+0xde/0x100 [ 534.126726][ T31] do_syscall_64+0xfa/0x3b0 [ 534.131260][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.136918][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.143028][ T31] ? clear_bhb_loop+0x60/0xb0 [ 534.147845][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.153748][ T31] RIP: 0033:0x7f43cdd90a3c [ 534.158274][ T31] RSP: 002b:00007f43cebe0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 534.167150][ T31] RAX: ffffffffffffffda RBX: 00007f43cebe0fc0 RCX: 00007f43cdd90a3c [ 534.175356][ T31] RDX: 0000000000000020 RSI: 00007f43cebe1010 RDI: 0000000000000045 [ 534.183699][ T31] RBP: 0000000000000000 R08: 00007f43cebe0f14 R09: 000000000000000c [ 534.191891][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000045 [ 534.200424][ T31] R13: 00007f43cebe0f68 R14: 00007f43cebe1010 R15: 0000000000000000 [ 534.208776][ T31] [ 534.211906][ T31] [ 534.211906][ T31] Showing all locks held in the system: [ 534.219891][ T31] 1 lock held by khungtaskd/31: [ 534.225021][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 534.235256][ T31] 2 locks held by getty/5627: [ 534.240086][ T31] #0: ffff8880339360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 534.250119][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 534.263093][ T31] 2 locks held by kworker/0:27/6570: [ 534.269345][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 534.279741][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 534.289275][ T31] 1 lock held by udevd/6648: [ 534.293898][ T31] #0: ffff888025238358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 534.303284][ T31] 2 locks held by kworker/u8:16/8878: [ 534.308871][ T31] 2 locks held by syz.0.2532/15356: [ 534.314129][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.322806][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.332127][ T31] 6 locks held by syz.2.2535/15363: [ 534.338256][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.347366][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.356796][ T31] #2: ffff8880251f8a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 534.367312][ T31] #3: ffff888025182e48 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 534.377201][ T31] #4: ffff8880251827e8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 534.389484][ T31] #5: ffff888025182820 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 534.402089][ T31] 2 locks held by syz.9.2537/15370: [ 534.407685][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.415988][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.425371][ T31] 2 locks held by syz.9.2537/15371: [ 534.430984][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.439816][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.448948][ T31] 2 locks held by syz.7.2538/15375: [ 534.454171][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.462537][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.472146][ T31] 2 locks held by syz.7.2538/15376: [ 534.477542][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.485893][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.494937][ T31] 2 locks held by syz.8.2540/15381: [ 534.500662][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.509007][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.518224][ T31] 2 locks held by syz-executor/15388: [ 534.523972][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.532526][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.541842][ T31] 2 locks held by syz-executor/15389: [ 534.547384][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.555671][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.565172][ T31] 2 locks held by syz-executor/15392: [ 534.570625][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.579232][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.588625][ T31] 2 locks held by syz-executor/15413: [ 534.594020][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.602525][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.611649][ T31] 2 locks held by syz-executor/15416: [ 534.617513][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.626196][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.635289][ T31] 2 locks held by syz-executor/15432: [ 534.640852][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.649777][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.659112][ T31] 2 locks held by syz-executor/15433: [ 534.664517][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.672794][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.682275][ T31] 2 locks held by syz-executor/15450: [ 534.687816][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.696263][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.706093][ T31] 2 locks held by syz-executor/15456: [ 534.711764][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.720142][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.729285][ T31] 2 locks held by syz-executor/15459: [ 534.734684][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.743409][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.752585][ T31] 2 locks held by syz-executor/15478: [ 534.758311][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.766916][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.775935][ T31] 2 locks held by syz-executor/15480: [ 534.781506][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.789806][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.799407][ T31] 2 locks held by syz-executor/15489: [ 534.804804][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.813098][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.822349][ T31] 2 locks held by syz-executor/15502: [ 534.828129][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.836376][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.845610][ T31] 2 locks held by syz-executor/15506: [ 534.851051][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 534.859782][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 534.869182][ T31] [ 534.871531][ T31] ============================================= [ 534.871531][ T31] [ 534.880082][ T31] NMI backtrace for cpu 0 [ 534.880098][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 534.880114][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.880123][ T31] Call Trace: [ 534.880129][ T31] [ 534.880136][ T31] dump_stack_lvl+0x189/0x250 [ 534.880161][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.880179][ T31] ? __pfx__printk+0x10/0x10 [ 534.880210][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 534.880235][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 534.880259][ T31] ? __pfx__printk+0x10/0x10 [ 534.880311][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 534.880341][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 534.880365][ T31] watchdog+0xf93/0xfe0 [ 534.880390][ T31] ? watchdog+0x1de/0xfe0 [ 534.880415][ T31] kthread+0x70e/0x8a0 [ 534.880436][ T31] ? __pfx_watchdog+0x10/0x10 [ 534.880455][ T31] ? __pfx_kthread+0x10/0x10 [ 534.880475][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.880489][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.880503][ T31] ? __pfx_kthread+0x10/0x10 [ 534.880522][ T31] ret_from_fork+0x3fc/0x770 [ 534.880539][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 534.880559][ T31] ? __switch_to_asm+0x39/0x70 [ 534.880577][ T31] ? __switch_to_asm+0x33/0x70 [ 534.880595][ T31] ? __pfx_kthread+0x10/0x10 [ 534.880614][ T31] ret_from_fork_asm+0x1a/0x30 [ 534.880645][ T31] [ 534.880650][ T31] Sending NMI from CPU 0 to CPUs 1: [ 535.029485][ C1] NMI backtrace for cpu 1 [ 535.029505][ C1] CPU: 1 UID: 0 PID: 8878 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 535.029525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.029542][ C1] Workqueue: bat_events batadv_nc_worker [ 535.029574][ C1] RIP: 0010:mark_lock+0xa/0x190 [ 535.029592][ C1] Code: ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 <8b> 46 20 89 c1 81 e1 00 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 [ 535.029608][ C1] RSP: 0018:ffffc90003cef8b8 EFLAGS: 00000046 [ 535.029622][ C1] RAX: 00000000ffffff05 RBX: 0000000000000002 RCX: 0000000000000002 [ 535.029633][ C1] RDX: 0000000000000008 RSI: ffff88807b1c6540 RDI: ffff88807b1c5a00 [ 535.029645][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b481f02 [ 535.029656][ C1] R10: dffffc0000000000 R11: ffffffff8b481e30 R12: 00000000ffffff05 [ 535.029668][ C1] R13: 0000000000000001 R14: ffff88807b1c6540 R15: ffff88807b1c6560 [ 535.029680][ C1] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 535.029694][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 535.029706][ C1] CR2: 00007fcd0ed07d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 535.029721][ C1] Call Trace: [ 535.029728][ C1] [ 535.029738][ C1] __lock_acquire+0x6a8/0xd20 [ 535.029768][ C1] ? batadv_nc_worker+0xd2/0x610 [ 535.029793][ C1] lock_acquire+0x120/0x360 [ 535.029816][ C1] ? batadv_nc_worker+0xd2/0x610 [ 535.029845][ C1] ? batadv_nc_worker+0xd2/0x610 [ 535.029870][ C1] ? batadv_nc_worker+0xd2/0x610 [ 535.029895][ C1] batadv_nc_worker+0xef/0x610 [ 535.029919][ C1] ? batadv_nc_worker+0xd2/0x610 [ 535.029945][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 535.029963][ C1] process_scheduled_works+0xae1/0x17b0 [ 535.029993][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 535.030017][ C1] worker_thread+0x8a0/0xda0 [ 535.030047][ C1] kthread+0x70e/0x8a0 [ 535.030069][ C1] ? __pfx_worker_thread+0x10/0x10 [ 535.030086][ C1] ? __pfx_kthread+0x10/0x10 [ 535.030108][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 535.030123][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.030140][ C1] ? __pfx_kthread+0x10/0x10 [ 535.030161][ C1] ret_from_fork+0x3fc/0x770 [ 535.030180][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 535.030199][ C1] ? __switch_to_asm+0x39/0x70 [ 535.030221][ C1] ? __switch_to_asm+0x33/0x70 [ 535.030242][ C1] ? __pfx_kthread+0x10/0x10 [ 535.030263][ C1] ret_from_fork_asm+0x1a/0x30 [ 535.030294][ C1] [ 535.030594][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 535.288157][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 535.297352][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.307624][ T31] Call Trace: [ 535.310921][ T31] [ 535.313862][ T31] dump_stack_lvl+0x99/0x250 [ 535.318471][ T31] ? __asan_memcpy+0x40/0x70 [ 535.323074][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.328287][ T31] ? __pfx__printk+0x10/0x10 [ 535.332913][ T31] vpanic+0x281/0x750 [ 535.336922][ T31] ? __pfx_vpanic+0x10/0x10 [ 535.341454][ T31] ? preempt_schedule+0xae/0xc0 [ 535.346334][ T31] ? preempt_schedule_common+0x83/0xd0 [ 535.351834][ T31] panic+0xb9/0xc0 [ 535.355582][ T31] ? __pfx_panic+0x10/0x10 [ 535.360116][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 535.365598][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 535.371805][ T31] watchdog+0xfd2/0xfe0 [ 535.375992][ T31] ? watchdog+0x1de/0xfe0 [ 535.380433][ T31] kthread+0x70e/0x8a0 [ 535.384553][ T31] ? __pfx_watchdog+0x10/0x10 [ 535.389350][ T31] ? __pfx_kthread+0x10/0x10 [ 535.394011][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 535.399242][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.404458][ T31] ? __pfx_kthread+0x10/0x10 [ 535.409070][ T31] ret_from_fork+0x3fc/0x770 [ 535.413678][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 535.418820][ T31] ? __switch_to_asm+0x39/0x70 [ 535.423620][ T31] ? __switch_to_asm+0x33/0x70 [ 535.428420][ T31] ? __pfx_kthread+0x10/0x10 [ 535.433058][ T31] ret_from_fork_asm+0x1a/0x30 [ 535.437854][ T31] [ 535.441192][ T31] Kernel Offset: disabled [ 535.445530][ T31] Rebooting in 86400 seconds..