last executing test programs: 30.675849124s ago: executing program 1 (id=1868): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x30}}, 0x200408d8) close(0x4) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r6, &(0x7f0000009440)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x40002143, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000080)={0x11, @multicast1, 0x4e23, 0x3, 'fo\x00', 0x2b, 0xffff, 0xd}, 0x2c) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r10, 0x40106183, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x3d, {0xa, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x3, 0x16}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x144, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000040)='ip6gre0\x00', 0x4, 0x9, 0x2}) 26.025963354s ago: executing program 1 (id=1888): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, 0x4, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6792b836}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8090}, 0x800) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], &(0x7f0000000200)=""/6, 0x6b, 0x6, 0x1, 0x4}, 0x28) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe07628b0000000000ff3f08000000480100100000000019002b000a0000000000060000090000000000000000030000", 0x39}], 0x1000000000000026) 25.833887054s ago: executing program 1 (id=1892): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), 0x0}, 0x20) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x609, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23444, 0x10008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}}, 0x20000040) 22.441453387s ago: executing program 2 (id=1908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r7) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}]}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19.903717899s ago: executing program 0 (id=1921): socketpair(0x15, 0xa, 0x5, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200020c0}, 0x48000) socket(0x2, 0x3, 0xff) (async) r1 = socket(0x2, 0x3, 0xff) r2 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r3, 0x3}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r3, 0x3}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r4, 0xd3) (async) listen(r4, 0xd3) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r6, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r5, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000025e, &(0x7f00000007c0), &(0x7f0000000dc0), 0x0, 0xca, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r5, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000025e, &(0x7f00000007c0), &(0x7f0000000dc0), 0x0, 0xca, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map=0x1, r5, 0x7, 0x34, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) shutdown(r1, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000007000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000000850000004c00000088a9040004000000bf91000000000000b702020000008500000085009500000000000076a8000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x5}, {}, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe8) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r14, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) setsockopt$inet6_buf(r14, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r14, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) (async) sendto$inet6(r14, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) sendmsg$802154_raw(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000400)={&(0x7f0000000300)="dcad37f62253e725418ad1ccb91690023f3532a76348ae4b7fe730e57f30dfeeb080c6efdfe339f67e19fdc2d55e506d19e6a222f217db61531e438774a438254163e52638c23f3a9a12aeb52a0e21a21f25f477ac290071adf2ce6d51c0f09282061c3adee16d0b1e7ff8193e3bf6c91b586bccdd7ca31c7c596f82d645844bf9ff78f7b079691cd06dad92ce", 0x8d}, 0x1, 0x0, 0x0, 0x4000}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r12}, 0x10) 19.042867737s ago: executing program 0 (id=1922): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) bind$ax25(r0, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000022000900000000000000000001000000100001800c000000bcb300000000000046b2a94e3a79e57a13650b58781c4d11683b3fe51b2554fef691463cb771f4354c5af2ed25bda6969253eac2ab21b790858dcc6eaa6dbf63096bc1697ebe636796f9566d32f1ace5deba3a8b9c22579c759e4718c2886c92ac1bc6565dc3f3b3daa6ec77063fdde80a232b13efb77cb3c70a9ae76bd32aedf28cfdaaa6d6a6e3924473cec4"], 0x24}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0xa, &(0x7f0000000200)=[{0x6, 0x3, 0x9, 0x2}, {0x800, 0x9, 0x5, 0xa}, {0xff19, 0x1, 0x3, 0x100}, {0x1, 0x6, 0x7, 0x6}, {0x1, 0x9, 0x73, 0x10000}, {0xff, 0x94, 0x7, 0x200}, {0x2, 0x5, 0x8, 0x80000001}, {0x9, 0x7, 0x8, 0x3ff}, {0x6, 0x10, 0x2, 0x7aca}, {0xdb, 0x6, 0x6, 0x5e2}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r2, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000003c0)={r5, 0x1, 0x1, 0x9}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf0b}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x11) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 18.913682194s ago: executing program 2 (id=1923): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "4f2e6ba215a4803e00197689c61d80fd77082da016ed6f57e335e66d992ecc0b", "ec2515b759b3f5332ab4b469d66cbcc85b36df0ce1b01672f2ee843e2f878f46", "f3a20e5218b94366490ccbc409a5574b309e6fb6413ddb14e88ab477c18c9dec", "4dcb3dc94ee568b0d592043ac4a986a87af55cb7f7e6f6ed4a35537a28122aba", "74a475c88c7796c5b0a2782159038caa0c0ba9cd03a86df4e81c9532e116be11", "86f56374ac0b296e321a4281", 0x3, 0x6, 0x1, 0x6, 0x7fff}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7d}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) accept4(r0, 0x0, 0x0, 0x80000) sendmmsg(0xffffffffffffffff, &(0x7f0000009d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10"], 0x20}}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r8, &(0x7f00000001c0)={0x0, 0x8, 0x0}, 0x60000121) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r5, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) gettid() pipe(&(0x7f00000001c0)) unshare(0x6020480) 18.912859002s ago: executing program 4 (id=1924): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0xd, r6, 0x1, 0x7, 0x6, @broadcast}, 0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xfff2}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 18.436973456s ago: executing program 0 (id=1926): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c00", @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x14}, 0x40080) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_delvlan={0x24, 0x71, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x4, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x4) epoll_create(0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, 0xffffffffffffffff, 0x2000000}, 0xc) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r7, &(0x7f00000001c0)=[{{&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000100)=""/141, 0x8d}, {&(0x7f0000000280)=""/159, 0x9f}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/83, 0x53}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/108, 0x6c}, {&(0x7f0000001540)=""/65, 0x41}, {&(0x7f00000015c0)=""/155, 0x9b}], 0x9}, 0xfff}], 0x1, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1a8, 0x5c, 0x160, 0x0, 0x3e0, 0x2b8, 0x228, 0x25a, 0x2b8, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0xffffff00, 0xffffffff], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0x160, 0x1a8, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh1={{0x90}, {0xff, 0x84, 0x3, 0x1, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xffffff, 0x0, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff], 0x1000, 0x4449}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0xff000000], [0xff], 'bond_slave_0\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x3c, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 18.076314152s ago: executing program 0 (id=1928): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r2, 0x4, 0x1}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="800002000a00020011"], 0x28}}, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000000)={'syzkaller0\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$caif_seqpacket(0x25, 0x5, 0x5) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000280)={0x4, 0x7, 0xa, 0x0, 0x0, [{{r10}, 0x7f}, {{r0}, 0x5}, {{r3}, 0x2}, {{r11}, 0x2}, {{r8}, 0x7}, {{r8}, 0x8000000000000001}, {{r12}, 0x2}, {{r5}, 0x50000000000000}, {{r1}, 0x705f}, {{r13}, 0x7fffffffffffffff}]}) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r9) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000000)={0x6c, r14, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7406ff4fb4d63e1e98a8e422ce5bd778"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x26}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008010) 17.940489967s ago: executing program 4 (id=1929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x802}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c274386d178550cb864bd57221bc", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r4 = socket$kcm(0x1e, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='f2fs_lookup_end\x00', r3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000018009d02000000000000000000000000000000008f330397f88c8ed1d1a2a591735a1850caee98a14ded83c3edb3c4662af906b150adc2611ea9d5e6fffcc38bba494948795aa179ff2e969113a7d81f40b38567c55cae8717f4ddf435a0574570f2aafe27303242664e469e7f0b08abfef179686988b26c92a52d3beab7d2345af2ae6f6d7bc9365055767f8dd583efa7184546bce6568a71e017beae1a8c123f8ae8f6119b5fc1cbbc1d93195af092d65aac"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000000)) 17.924860223s ago: executing program 1 (id=1930): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x6b, 0x2, "85dc47f769b1a3bc71d6347892c917a50d788a818076375d8ce68f66fd05b7114135fb238b0b02f3467d1933595b69c6331c40f412b05d38268670f2b23aa8a74b6291895f20bc407420d7fba4c8e67d6a7558fe1c65904d3233d21b88d2889ec5e02b46ca5a7a"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x44}, 0x20000040) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 17.873782455s ago: executing program 2 (id=1931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x33) sendfile(r4, r3, 0x0, 0x10000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf]}, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 17.823802844s ago: executing program 0 (id=1932): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendto(r0, &(0x7f0000000000)="2b63eea3c89580a58e27f32002cc1855bd65aa2a71aa7a8d95a49a7bf4296ce755c893c143ff15dbffb8810f6ce01c3ac7771d5665defaa2f61b9e3fe62c2fa472dead971f4a1c44a23cad4c15b041b161a5f23e746347a623ebde14782d9a270097c505c8bd6ec5ee1f06d238cd09ddd3606eef028cb7c8fc8d2719ce6dc3f294c2565b153d407fd00a80c2741407fd04790fc12c7f78c41c4674724de5e56a38384d3e063d518a5a119ccae689c10fe7e12159054954ff8eff3cd862c96b759700af8e8d3b18e135980ffeea2f804d1d80947046cbd10795ae2d8e01aece3f2616f0", 0xe3, 0x10, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, 'xfrm0\x00'}}, 0x80) r1 = socket(0x2b, 0x5, 0xa1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001000000080001001200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00d9000200002003000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x2c, 0x505, 0x0, 0x0, "", [@typed={0x4, 0x12b, 0x0, 0x0, @binary}]}, 0x5c}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000010c0)={0x40, r5, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "04720c945bd30bf141315e54b7"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x40}}, 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000001640)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)="270502001a0014000600a5cbcc19a9905c8647002fb96dbcf706013c9aa1f82fa00956725faf2f61952a03060000d4c6e9c07f0f7b68d90540739b0086ddffff", 0x40}, {&(0x7f0000000400)="f03d07bd2b9caa8fa56d73e57b9701a556e91b71349ea01541340d88cab0c43e3ee01587bfe1091346fd66f6fc52bb42e7a5cee6473547acb95eec17f64474ae3ad5e4e55c40368367fc61029eb1e0819e7cc8e7a3e95c0c597df1d1540d97c020b62844d8ef69b6321c06c8a9404e2812fc118fb28c765cebf1ec115313d5aad8fcedf0f378977c54daacfd58f565ac60fffc39d3326275a9330adf85fcafaaef5efaa7d1e3aa541439502f6990a9c4e8f0b16c98e32797d45941f3243dc930afd8e77a019d204a2fdd0a48dbabb49769c328c548fd7a68ceb8e0d132b9b0e00f47c317e384f72cfea42ac06c55c347c047e5b981e1dcfc6c99", 0xfa}, {&(0x7f0000000500)="ca22e7efc1466e70a87562de3e8767090ef904feaa12c2a6ee28f57b3095ff98ae7a6d6e9aed2862558c307c2ae68d7acbba599559c25029ec540aecf0475b1d957aa4fa2e3292f909890372", 0x4c}, {&(0x7f0000002880)="9bafab07a7b945d601a47075dda726003b71ffb105592581176f74eaf048071664f88ffd81a2dec996fcdc6c257a132c6945c88fc921814056c49d324a8e3972f5eff1b65657c9c20c0dff9faaa2d2ec527dc96d6eed0f2cba233ef9f8f8b776858489f5cd0e12ec496df5eccd1364a450c3522bedb8115a0fc579d210e1e8a831c3630d4ee4546b96a1084b479114fe74ac1b88e5cc6eb64995bd70b0a954da86cc5428f076f4ee04b693ff1169dbda669fcdec3a14adf578a45aa8301bac95151e97129a59d370dd3641cd2c6116b8c1819d637f22fefcda696a55fea829fbf63d6f96ce0b998d1be3c9e62acc1ddce40ee2dd22c10f8a3b1a2b196dab73b5002e86b041a25b7d29aac9fa9f5bf8c34619a17c5bb45106f6b7ccb54dcd10dc335878c85a46a74e931381039c7dbe640156e4a150957788a192eacd609e118f8144f1c5e7bf862ea155c0d6067cf1ae1c28f9d13c520773b26a07a7708e4d27008bcef8d7fe96d415aad5aa91db1f4e4adec67d190bd7429b21556fed6a34afd32dce9b06986da8c3d2ed3f1b0d5c5177eaa435400794357bdd64202ecb8841fc18d6dcf53a90b576907b76f19285504720076271964016d6f378da6d8112513d44dd55534423a7f9764f6c6bd60ad48b904f2d1132084dde4cd02ff58fb7a3e93dab84f0f9edb95670c32ca628947d05e32eb7f1eba113311511fb7824d6a7df56b476de1c4976de2620ab1b731a23d92c4e49820c28a8a384a28d7143da455321ce12b71950da5bc4f792d5357d51e6d22930a6a57ae54894f617d9cca86f5bc881623c2d96bdcfd6a45509923644b52fe7e240e349b430b4523273bd698d5ec830a08b8128081722dfe54f968e8998003dd352fc80ad438a94c5f299f28447dadb4820f7d56d3f788e7bea01979ef49bbd97bc88d9c36c610537ce5480514069a0fa8d09caa0427b7d0fc300b8dbbfc68645c904674ad9b58a736fa9080ad5d015d57083838a84cbdf46edd22662148f6fcb0d649f326c73495f4e547f3c98ef9e9d11669e9fefe69717c00a8d2c4f04c690505fb0364f13e173d5fa021b4a5a0b1f2de6daa6cac515226454fe3c46ad43ef8a8c11c11a39cf51c6c7092f41713fe8a2557d06dfe451cfef87fb9bc6f0854d35b6152b43c51af53aff30748e5568f73c403296c8117a21e3f7a98d7d3da5a4244cb8d1d8faf011007c4837723cdf29849c60725ef9aff28e6b81b0a6ff458b54dc881fc0e4d82db26073c1e111c9971af94b13c0c58d3142b1fef4da2c7b2cdd988077002945ee19fc9018e2e661a45642b77b192d380bb4bf029c7a3a3bdd4d947d7c0b4922ee9d1028b8678dbf5d445fd97cf5ae5f1c4f8ef852e99b4e2fe047c51fabd93bcdb12182fa90e32b76647a0d630559b2646daaa6f7263d25dfa5a69b1a7d5406c6e3494c894526e0bbcbe11527c7ca8ad3065a4b493c51bc7cb56efcb09943a082a476a53b8024029633ad330b3869a63b28d19c95c0909f511baba25b52af14475ea72ae4d972747646226f6b9c06f1c01ecf7c3658bd0c5ae3dd5364acd90df345b99e89e432b483c16dc296f7f9a50b851b9f2264c0856136ac4503f70187203568b1d4d27412fca4a5b6e3e4b777ae6230b159930a41703c95df93a7b7dc67feeb2059bc5c8eb75973554f4da47e4e8150404647cac8a287a0f6e72f6b60abc81d4c6164aadbc65f769d959fea2f72842b99c0b9a461115ac40c1c068a7452b642133f2dc4e46e27b5b505983a5525ce48bf77954d7ae7fe3e3e7ac40a9181b9edfce660c737b2e86f46dd95fa63c9c79b250c50cc6ba9bf322befdc513ef97c0e65201a52262d0039f8817b79898d55cbd9bacbf0f010fad3e09f7e81c9f48fa80d34845f2eb0b7ba4a9242eac7d452ebd379e9a002c5d6f759bf7e7d7ac7bb20ebc79064dc3a40bd831e2ac1fc714743f6e53627213f0fd22fddcfc64a6cd28f4be193a3a928b6b3b324e849d076a8300478c557c147b3b9d1faa8feadb2ad92a540affb027eb06f2ba7a522d8c05ea7789e976101b30411442e4a3db67fcbc987b28227f34c3ee81355e0de5dee1749cdf260aa3530a3e7965d797718e1d2f8ed7ad2823c7c0aa5d8cde194bbb704b436ee6ca8f1c106a72cb52ede296e215f61a25df7f2d12ab5b957a8fc154540bc8a76219ba4854765eb5127b8e801daef548d9a0f2aaf0999af219d3b6d8e8874614ebc68810775c659a45bb6473aafd7c5699df666548a0836e5f831e6369f359f3471a93ed35752d4c7e648b1ab1e9e75199fca5bcea7eb1e218908518022076a27184de192a93d6d1d61ca44a1e8ed7f760a39bd55ed43de67467502723e6e240b7232f4c4d3590f06d4fc912e1dd214deea3ace086922256d019abfcb822ac9fefdbc56e55b04d3d781b2151d7afd305cd14be5c220c6a83c27f0483b9a6aecec73078829f984ec0a5668ff9257c91e9f6672a6dad559ca7a14f1257b128351808513f27911ea398084befbb9a2240df34afb604b355cf77a5aad2caabf61a6a86c26997971219de8c208a8de638c1def20fc6103fbe4fa8a3c562a6d2d73b00e32fb20847416b5b6ab128e24d09bb48e13a0d6a8bd2acbf1dfb0dc16826e4e5bb618de6592c882fbef8ab2a0239b1cfffba95c27439e2f6ac24a12784743abc5e50b741b00d2dbfa73c702cd8f882784793f7ae1cca1bee896eb57996cc1a84b67fa49b829cde25de90f6a911b4ca3a86ba0e3ac7e1eeb51f09cd1e319f14cfe7eed00a4ffc3e1a3eb7b617bec6df15962daf696a3df22fd987e245d6170e26783f38bf59550a37703715d1bcae54c7f8f1d2f3eddada9d45427dea7c35c41e4f728ba5994a6537278c1a3d20eb7c4017c8792a3e83c92dfa25d7f5a611ac3a4554cae645c7a8a41b7102cf874471428d05f73d86284777ec720f6c028317f7e99562c04ea914174025538fd651aee82916e782b2a4ce4974a66c992d8078a20370462dd50eae0facf081ffd76e311ac52a8e9091b4b1f2bf805d0f35cad113d9aa02ea38d2ef05723ab4bec689cd045d40fbb7db4b0f37936e1558a42f0d6e4edfb46efa725461a9fde250671322a4542ce4ed4c060b2db8ed0450ac7ba801552a9733afe53e6d29aa247ef828f0aecc8dabba7901de46bac3cfc8482569509a7446c9fd310fc84c8dc1f0c4be0e7eca14049783873b8eaed05e49b89eff1beb284e10398edb37ed1e555fb7ad83a2c1ec530247cb914540d388d26fdd7b5c1bdd26deda7bb141392b87af957927795f03a0ecf2b04b6b132004cc7626033883058886c5c4e8fcee6c7b34d8946d0e5f14030025eb50c566528d04a81b79a749683e7891564cd695646206cb7e5fad51b984f973a47643aa7fcb2de5f1c8c7dd2ec225b2bb834e233a1e3337f7a9d323afca32a8788b92cae4e18786019aa0241f4942f936a669f8bc4052626f67fe985c4a3041a721625cb7bf4a775c08de15e2034e19d435ba265417069a6e4b97bbeaed1b7d82ebda91cac1a8f322d54f0f73cf5bc7a6b185833ae0a8b0caadb0f492225384192f9936f1f768ccdf32b4ee6eaf972461bd0a2fa5897ffe72c975c5e95306022833ea31aa2c86fedc6d6b9191f6930e75e5dffd06eb37994ee31189cb46810cdcab9ad91b616db6a39fafb887c30a31fcf7cba238f1b17acafe0c3a5609765190623e3f5c46e76a9cb2ac80eab99c4a9b227841809fbde0245b817fc2827cfc6a74470c6d5a182877a8a4f21c9fdac12c4891c4bd4f4272574445cdc46c485e0a236fc0329610c64fef8368867018ebcc9fcbc82e64b7e924e9b3b71b920bf7c7701b1065556dd2db017b7eee7a1f3eefb6ce62dea796a8b866ddf8a472a4f2dbd6e54a73634cd17b822541ced515ee5c885e1546898832b03732900b3b9a96c6ee44e3989384d7ce28ec80a9012cd5e88ac98729526e7bef8396e1c35bfb9d2f9f75f7240635fb96842ea06d2d02fb40956d94562924bfef8b39e93d5c7fa4dccca093cccf335cf29f8d85c09543c21ca4f8189b1c361bc52269b3cd1f46917d7ba6abf072ba5069d6d924787642f53cc84f4c94ac0e94ee4f7498d3ecf167ebd0634bda52ff8b6b80776e96916ce8bdbbbd62840cff814fe0f7b8a2f9829b1c976bb1c979c578758fc75b565b221d370711dc3b677ea5235e4ea76", 0xba1}], 0x4}, 0x8881) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, 0x0, 0x0) r10 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r12}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) ppoll(&(0x7f0000000500)=[{r11}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet_sctp(r9, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 17.796976561s ago: executing program 4 (id=1933): pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt(r7, 0x6, 0x0, 0x0, &(0x7f0000000000)) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 17.724084875s ago: executing program 3 (id=1934): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) (async, rerun: 32) pipe(0x0) (async, rerun: 32) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000008000f28, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 64) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r5) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0x5}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}}, 0x0) (async, rerun: 32) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) (async) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1, 0x4, r10, 0x3}, 0xc) (async, rerun: 64) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4010}, 0x0) 17.647181431s ago: executing program 1 (id=1935): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb0000080003"], 0x68}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001640)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)="270502001a0014000600a5cbcc19a9905c8647002fb96dbcf706013c9aa1f82fa00956725faf", 0x26}], 0x1}, 0x8881) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) 17.606445625s ago: executing program 3 (id=1936): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x15, 0x5, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x44}}, 0x0) (async) 17.161466834s ago: executing program 3 (id=1937): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x9, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe4}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250500000008000600", @ANYRES32=r6, @ANYBLOB="08002c0001000000080039000700000008000300", @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4779ced", @ANYRES16=r9, @ANYBLOB="010000000000000000000e00000018000e001c0401009d0771070102ffff000315050301463e"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xac, r9, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x4d, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @initial, {0x8, 0x5}}, 0xffff, @random=0x80, 0x8000, @void, @val={0x1, 0x5, [{0xb}, {0x41, 0x1}, {0x9, 0x1}, {0x3, 0x1}, {0x60, 0x1}]}, @val={0x3, 0x1, 0x7c}, @void, @val={0x6, 0x2, 0x6}, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xd, "be25299d196e065a20cb115c78"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x5}, @device_b}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4090) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x14, 0x14e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000580)={'ip_vti0\x00', r7, 0x40, 0x703, 0x5, 0x1, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @local, {[@end, @lsrr={0x83, 0x17, 0xc8, [@multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}, @generic={0x3, 0x6, "d82221b7"}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f00000016c0)=ANY=[@ANYBLOB="b0070000", @ANYRES16=r10, @ANYBLOB="000825bd7000ffdbdf2508000000380001801400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r7, @ANYBLOB="0893010002c48f460bfb88124b28cb7b8d1d0f0cda2301bbbc3dcba69cbaf3d68a087f2de1eb2b8c89153d8018a81c198e8fe126a3ba0b152231c9d60e7e720cd1c9f8b453ce1e8c27a5e596138db23c522a37a493e69dd08ac52f", @ANYRES32=r11, @ANYBLOB="080003000300000008000100", @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x7b0}, 0x1, 0x0, 0x0, 0xc}, 0x22004080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53ea71a76d2688ca4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r14, 0x400452c8, &(0x7f0000000100)) 17.160863252s ago: executing program 1 (id=1938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x80000000}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x54, &(0x7f0000000480)=""/84}, 0x94) syz_emit_ethernet(0x44e, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x22020600) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x7ff, 0x73, 0x11, 0x42}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xb, 0xffff}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x2, "a898c3f0949aed09183b0105e58a17c1"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4c, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x3, 0x6, 0xecac, {0x3, 0x2, 0xfff9, 0x9, 0x10}, {0x8e, 0x0, 0x100, 0xf4fb, 0x2, 0xab98}, 0xb5a, 0x4, 0x20000}}]}, @TCA_FW_CLASSID={0x8}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r9], 0x158}, 0x1, 0xba01}, 0x44) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff0000000003160000100007800c00018008000100", @ANYRES32=r11, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 17.136006801s ago: executing program 2 (id=1939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x24, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37, 0x3f}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x4904) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000000000d3770402ea2bd15dc32000000000000a20000000000a010100000000000000000a000000090001007387f195852f93ee6885797a300000000014000000020a010800000000000000000000000114000000111001000000e08b90b399b869c7b00096ace9805cc3f7ddae1182428a8333e623c1fe8d0531a6b50000f38467453726dc3fa866d95dad266ab975c843de7b7423a25841eaac717c3481396fb7d885625f4b4234b25a869c9b5f09a4e83ca53cc903f61f5445cf94e58f3b126b95ba83b975c4beae52186ae24535f01ee08bc9608e5a156df33577cf6291db3da11dd89b7b1c021cca3533773c15de59c1663dc01a09ad17454ffd5ea1a56b199d154e4090ea451e2ff09aa520c9d5ce6f15594bbc33f30c2e2686c20653fa9381468d266b2df94c2c633392784b0fc4b36398b890ec1f1cc58434476ba609ca"], 0x5c}}, 0x4040000) 17.037801591s ago: executing program 3 (id=1940): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r1}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000580)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r1, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x13, &(0x7f00000006c0)=@framed={{}, [@exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x0, 0xa, 0x0, 0x6, 0x4141eade6ec99d14, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a0001"], 0xc8}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000004) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, 0x3f7, 0x2, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x4) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000540)={0x10000042, 0x2}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000480)={0x0, @rc={0x1f, @none, 0x1}, @isdn={0x22, 0x2, 0x56, 0x81, 0x4}, @nfc={0x27, r9, 0x0, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)='gretap0\x00', 0x6, 0x5, 0x1}) 16.949664672s ago: executing program 2 (id=1941): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f\x00\x00\x00', @ANYRES32], 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffbfff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000002000000000800110001000000", 0x24) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="8ae91834b509f865917cb233e9d2f03eb6a5661ddf1b3e7e2db876ac4712c52f327ee646cb3e8cc0a4fc4b09bd6ab754e474", 0x32}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f00000002c0)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5, 0x0, 0x0, 0xf2ff}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001080)="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", 0x155}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f0000000cc0), 0x34}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000480)="7cb4ed8d75b2bf3112799fd6df65ec2e59789849019ba02cf53691cc6a3861c12a7561473f42faa934fbade4b821748f020274d96c341c767249d5c73a686846b2277104adaec1988872649bfc0b166d57f560d39595e97c35abc2e5ab6e198601eb33839b2423b4ddfda82faca046d05d68", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000480)={0x6, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x181}}}, 0x108) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000740)=ANY=[@ANYRES32=r2], 0x0, 0x2b, 0x0, 0x9}, 0x28) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@getlink={0x28, 0x12, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8580}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002380)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd1d}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000700)='mm_vmscan_wakeup_kswapd\x00', r8, 0x0, 0x5}, 0xd) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r10}, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="000000000000000000a50000009500"/32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 16.88830532s ago: executing program 0 (id=1942): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="e92497685d9a6328b317d27f2b30d1f6d7", @ANYRES16=r2, @ANYBLOB="cd3e00000000fedbdf250100000014000500fc0200000000000000000000000000fe08000700e000000214000600fc0000000000000000000000000000000800020005000000"], 0x4c}}, 0x8800) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '$\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040014}, 0x1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="faffffff0000000000000000869d6aa3c300000055c2623ed5ed2167ed6d2850711f31f7ba91a354486d16103fe7a9608165ddaecfd2cfcc12ec9b11a3bce747ef7533b9322e22affdfbaf148594985c834963f7fd3da85124ce148e77e1b1ac6bfa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000128, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4f0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x9}, @generic={0x4, 0x2, 0x3, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffff63}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0xc, 0xff5, &(0x7f0000001e00)=""/4085, 0x0, 0x60, '\x00', 0x0, 0x0, r3}, 0x94) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f00000004c0)="a4e370a2c1bef64ed0f24ae24e7c44dff415ca3ce887856285090766659feb49d84fddde0e1af38aadb7e3fda5fd697d0864060aff69cb21911b5f79c6f6d16b732a55b2858e1d2cff585bd2f38bf68a3acbe7b62be0e715", 0x58, 0x48810, &(0x7f0000000780)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x38, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x13, 0x2, 0x0, 0x0, @str='fault_injection'}]}, 0x38}}, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000b80)=0x400, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000003b1e000429bd7000fbdbdf25580000000800f3004789a77c"], 0x1c}}, 0xc814) 16.875590264s ago: executing program 2 (id=1943): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) (async) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, 0x0, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) write$nci(r10, &(0x7f0000000600)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x2, {0x1, 0x7, 0x9, 0x3}}, 0x7) r14 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r14, &(0x7f0000000100)=""/12, 0xc) 16.777627471s ago: executing program 4 (id=1944): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001e000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) listen(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="0008007111b10000d406e4a9d27db7635c56c8851000000200000071ec0d4d74f865847545709cd7f5850000002a0000", @ANYRES16=r1, @ANYBLOB="f09dce2bb52c747dd61d5435a07622703b535d1d2409984444a07bf2dc6c320c65631c8c97fe9a4c238180823a59031be3cdb4b48f43e57d66ac"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$PROG_LOAD(0x1c, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x200, 0x6, 0x7fff}}], 0x38, 0x20000800}, 0x4000041) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x18, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}]}, 0x18}], 0x1}, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r6, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000080)=0x2, 0x4) unshare(0x24020400) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, 0x0, 0x0) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x107, 0x40000000, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$rose(r5, &(0x7f0000000300)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast]}, 0x40) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e507646dc3f2ddf33c9e9", 0x0, 0x1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.696564065s ago: executing program 3 (id=1945): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000200)='./file0\x00', r0}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000200)='./file0\x00', r0}, 0x18) bind$alg(r1, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380), 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) accept$alg(r1, 0x0, 0x0) (async) r4 = accept$alg(r1, 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000440), 0x2, 0x0) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000840)}, 0xad76}], 0x1, 0x2101, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x56) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000480)=@null) 16.415435131s ago: executing program 3 (id=1946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50011}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESHEX=r9, @ANYRESOCT, @ANYBLOB="1f4083b2356fcc2f6f2d43ce58519ff5c61fc5bf4cbffa04dd97d3c302c5d516a3d48e7e2ef61ec9aaafe719bce096cb7a144f7466478e65c464022fbf1f49f24c99a078070aa8061a91a293326e65d836946f7fc17d9d0c9a7641d48763b818ca8395f7f42c56cc0c83ab341b0066c67e92a4831aac0d8e4a818417e4c8f5df6ebb85dbd7a7bfb8305a5f7f5c58b7be7e232b7a0f9fbac6726b070ec4d104506331ff5a68f036abbbe86b38a56762ba765f03df"], 0x50) (async) r11 = socket$l2tp(0x2, 0x2, 0x73) listen(r11, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0x9}}}, 0x24}}, 0x4000004) sendmsg$nl_route(r10, 0x0, 0x0) 15.793823567s ago: executing program 4 (id=1947): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x802}, @CTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x8000080) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffffffffffff9d}, 0xa77}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x11, 0x0, 0x102e2e, 0xfffffffe, 0x2, 0x0, 0xf3a8, 0x9, 0x401}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x4e22, @local}}) 15.625471853s ago: executing program 4 (id=1948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0xd0}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x200342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) unshare(0x2c020400) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x0) recvmsg(r8, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x94) 1.609259984s ago: executing program 32 (id=1942): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="e92497685d9a6328b317d27f2b30d1f6d7", @ANYRES16=r2, @ANYBLOB="cd3e00000000fedbdf250100000014000500fc0200000000000000000000000000fe08000700e000000214000600fc0000000000000000000000000000000800020005000000"], 0x4c}}, 0x8800) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '$\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040014}, 0x1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="faffffff0000000000000000869d6aa3c300000055c2623ed5ed2167ed6d2850711f31f7ba91a354486d16103fe7a9608165ddaecfd2cfcc12ec9b11a3bce747ef7533b9322e22affdfbaf148594985c834963f7fd3da85124ce148e77e1b1ac6bfa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000128, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4f0, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x9}, @generic={0x4, 0x2, 0x3, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffff63}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0xc, 0xff5, &(0x7f0000001e00)=""/4085, 0x0, 0x60, '\x00', 0x0, 0x0, r3}, 0x94) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f00000004c0)="a4e370a2c1bef64ed0f24ae24e7c44dff415ca3ce887856285090766659feb49d84fddde0e1af38aadb7e3fda5fd697d0864060aff69cb21911b5f79c6f6d16b732a55b2858e1d2cff585bd2f38bf68a3acbe7b62be0e715", 0x58, 0x48810, &(0x7f0000000780)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x38, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x13, 0x2, 0x0, 0x0, @str='fault_injection'}]}, 0x38}}, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000b80)=0x400, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000003b1e000429bd7000fbdbdf25580000000800f3004789a77c"], 0x1c}}, 0xc814) 1.57081717s ago: executing program 33 (id=1938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x80000000}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x54, &(0x7f0000000480)=""/84}, 0x94) syz_emit_ethernet(0x44e, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x22020600) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x7ff, 0x73, 0x11, 0x42}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xb, 0xffff}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x2, "a898c3f0949aed09183b0105e58a17c1"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4c, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x3, 0x6, 0xecac, {0x3, 0x2, 0xfff9, 0x9, 0x10}, {0x8e, 0x0, 0x100, 0xf4fb, 0x2, 0xab98}, 0xb5a, 0x4, 0x20000}}]}, @TCA_FW_CLASSID={0x8}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r9], 0x158}, 0x1, 0xba01}, 0x44) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ffffffff0000000003160000100007800c00018008000100", @ANYRES32=r11, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 1.512200538s ago: executing program 34 (id=1943): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) (async) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, 0x0, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r13, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) write$nci(r10, &(0x7f0000000600)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x2, {0x1, 0x7, 0x9, 0x3}}, 0x7) r14 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r14, &(0x7f0000000100)=""/12, 0xc) 1.077158907s ago: executing program 35 (id=1946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x94, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50011}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESHEX=r9, @ANYRESOCT, @ANYBLOB="1f4083b2356fcc2f6f2d43ce58519ff5c61fc5bf4cbffa04dd97d3c302c5d516a3d48e7e2ef61ec9aaafe719bce096cb7a144f7466478e65c464022fbf1f49f24c99a078070aa8061a91a293326e65d836946f7fc17d9d0c9a7641d48763b818ca8395f7f42c56cc0c83ab341b0066c67e92a4831aac0d8e4a818417e4c8f5df6ebb85dbd7a7bfb8305a5f7f5c58b7be7e232b7a0f9fbac6726b070ec4d104506331ff5a68f036abbbe86b38a56762ba765f03df"], 0x50) (async) r11 = socket$l2tp(0x2, 0x2, 0x73) listen(r11, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0x9}}}, 0x24}}, 0x4000004) sendmsg$nl_route(r10, 0x0, 0x0) 0s ago: executing program 36 (id=1948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0xd0}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x200342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) unshare(0x2c020400) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x0) recvmsg(r8, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x94) kernel console output (not intermixed with test programs): ip6gretap1): Releasing backup interface [ 181.490323][ T8591] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 52:6b:6a:18:f1:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 181.528399][ T8591] bond2: (slave veth3): Releasing backup interface [ 182.141023][ T8622] tipc: Enabled bearer , priority 0 [ 182.179644][ T8627] syzkaller0: entered promiscuous mode [ 182.200789][ T8627] syzkaller0: entered allmulticast mode [ 182.429861][ T8622] tipc: Resetting bearer [ 182.488279][ T8622] tipc: Disabling bearer [ 182.737913][ T8640] openvswitch: netlink: IP tunnel dst address not specified [ 182.787030][ T8638] sctp: [Deprecated]: syz.3.618 (pid 8638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.787030][ T8638] Use struct sctp_sack_info instead [ 183.292926][ T8657] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 183.299600][ T8657] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 183.817666][ T8667] syzkaller1: entered promiscuous mode [ 183.837962][ T8667] syzkaller1: entered allmulticast mode [ 184.021872][ T8676] netlink: 'syz.2.628': attribute type 2 has an invalid length. [ 184.029815][ T8676] __nla_validate_parse: 3 callbacks suppressed [ 184.029833][ T8676] netlink: 244 bytes leftover after parsing attributes in process `syz.2.628'. [ 184.995479][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 185.026394][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 185.154140][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 185.300949][ T8726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 185.346754][ T8719] bond4: entered promiscuous mode [ 185.353144][ T8719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.386310][ T8729] netlink: 252 bytes leftover after parsing attributes in process `syz.4.647'. [ 185.410733][ T8727] netlink: 76 bytes leftover after parsing attributes in process `syz.0.646'. [ 185.513290][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.644'. [ 185.515034][ T8721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.532063][ T8721] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.561271][ T8721] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 185.677877][ T8726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.778354][ T8732] lo speed is unknown, defaulting to 1000 [ 186.195446][ T8764] netlink: 56 bytes leftover after parsing attributes in process `syz.3.657'. [ 186.395326][ T8771] IPVS: set_ctl: invalid protocol: 48 255.255.255.255:20002 [ 186.636420][ T8777] netlink: 252 bytes leftover after parsing attributes in process `syz.3.660'. [ 187.116531][ T8795] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 187.239563][ T8779] lo speed is unknown, defaulting to 1000 [ 188.047184][ T8817] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 188.226717][ T8820] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 188.285244][ T8823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.293625][ T1022] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.346437][ T8817] veth7: entered promiscuous mode [ 188.358447][ T8817] bond1: (slave veth7): Enslaving as a backup interface with a down link [ 188.390148][ T8820] dummy0: left allmulticast mode [ 188.395755][ T8820] bridge0: port 3(dummy0) entered disabled state [ 188.410958][ T7651] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.415715][ T8820] bridge_slave_0: left allmulticast mode [ 188.426669][ T8820] bridge_slave_0: left promiscuous mode [ 188.435547][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.449113][ T8820] bond0: (slave bond_slave_0): Releasing backup interface [ 188.461216][ T8820] bond0: (slave bond_slave_1): Releasing backup interface [ 188.476353][ T8820] team0: Port device C removed [ 188.487483][ T8820] team0: Port device team_slave_1 removed [ 188.495529][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.503372][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.513467][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.521584][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.538486][ T8820] bond1: (slave ip6gretap1): Removing an active aggregator [ 188.547962][ T8820] bond1: (slave ip6gretap1): Releasing backup interface [ 188.555419][ T8820] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 66:b8:25:e5:2b:5d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 188.578060][ T8820] bond1: (slave veth7): Releasing backup interface [ 188.837217][ T978] lo speed is unknown, defaulting to 1000 [ 189.022340][ T8836] bridge4: entered promiscuous mode [ 189.041933][ T8836] macsec1: entered promiscuous mode [ 189.047530][ T8836] macsec1: entered allmulticast mode [ 189.066411][ T8836] bridge4: entered allmulticast mode [ 189.083664][ T8836] bridge4: port 1(macsec1) entered blocking state [ 189.105848][ T8836] bridge4: port 1(macsec1) entered disabled state [ 189.134358][ T8836] bridge4: left allmulticast mode [ 189.140038][ T8836] bridge4: left promiscuous mode [ 189.312183][ T8847] __nla_validate_parse: 7 callbacks suppressed [ 189.312203][ T8847] netlink: 224 bytes leftover after parsing attributes in process `syz.2.675'. [ 189.407984][ T8847] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 189.509592][ T8847] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.595891][ T8852] bond5: (slave gretap1): making interface the new active one [ 189.607751][ T8852] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 189.617454][ T8853] wg1 speed is unknown, defaulting to 1000 [ 189.669879][ T8853] wg1 speed is unknown, defaulting to 1000 [ 189.705483][ T8860] netlink: 32 bytes leftover after parsing attributes in process `syz.3.679'. [ 189.718695][ T8853] wg1 speed is unknown, defaulting to 1000 [ 190.040882][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 190.071241][ T8876] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 190.090855][ T8876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.173788][ T8884] IPv6: Can't replace route, no match found [ 190.183399][ T8884] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 190.211465][ T8879] nbd0: detected capacity change from 0 to 7 [ 190.348291][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 190.356586][ T8886] lo speed is unknown, defaulting to 1000 [ 190.458313][ T8375] Buffer I/O error on dev nbd0, logical block 3, async page read [ 190.847577][ T5159] block nbd0: Receive control failed (result -104) [ 190.864293][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 190.955559][ T8853] infiniband syz1: set active [ 190.961417][ T8853] infiniband syz1: added wg1 [ 190.967046][ T8853] syz1: rxe_create_cq: returned err = -12 [ 190.976795][ T8853] infiniband syz1: Couldn't create ib_mad CQ [ 190.983350][ T5949] wg1 speed is unknown, defaulting to 1000 [ 190.995127][ T8853] infiniband syz1: Couldn't open port 1 [ 191.047679][ T8853] RDS/IB: syz1: added [ 191.059955][ T8853] smc: adding ib device syz1 with port count 1 [ 191.068372][ T8853] smc: ib device syz1 port 1 has pnetid SYZ1 (user defined) [ 191.099550][ T5926] wg1 speed is unknown, defaulting to 1000 [ 191.106954][ T8853] wg1 speed is unknown, defaulting to 1000 [ 191.326555][ T8915] vlan2: entered promiscuous mode [ 191.337663][ T8915] vlan2: entered allmulticast mode [ 191.360927][ T8915] hsr_slave_1: entered allmulticast mode [ 191.447630][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 191.986006][ T8853] wg1 speed is unknown, defaulting to 1000 [ 192.791173][ T8941] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.979287][ T8853] wg1 speed is unknown, defaulting to 1000 [ 193.318917][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 193.409091][ T8969] netlink: 'syz.3.710': attribute type 16 has an invalid length. [ 193.417140][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 193.470090][ T8970] batman_adv: batadv0: Adding interface: ip6gretap1 [ 193.494663][ T8970] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.527214][ T8970] batman_adv: batadv0: Interface activated: ip6gretap1 [ 193.776866][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.713'. [ 193.789474][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.713'. [ 193.822980][ T8853] wg1 speed is unknown, defaulting to 1000 [ 194.468042][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.480947][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.499854][ T9010] tipc: Enabled bearer , priority 0 [ 194.526474][ T9009] tipc: Disabling bearer [ 194.601513][ T8853] wg1 speed is unknown, defaulting to 1000 [ 195.272607][ T9031] netlink: 'syz.3.726': attribute type 1 has an invalid length. [ 195.387584][ T8853] wg1 speed is unknown, defaulting to 1000 [ 195.473264][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 195.483819][ T9035] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 195.994206][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a310800: rx timeout, send abort [ 196.003903][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a310c00: rx timeout, send abort [ 196.015265][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a310800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.031074][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a310c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.217758][ T9053] netlink: 96 bytes leftover after parsing attributes in process `syz.3.735'. [ 196.571157][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.737'. [ 196.837785][ T9072] macvlan0: entered promiscuous mode [ 196.848414][ T9072] macvlan0: entered allmulticast mode [ 196.868041][ T9072] bond2: entered promiscuous mode [ 196.875725][ T9072] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 196.887163][ T9072] bond2: left promiscuous mode [ 197.834814][ T43] wg1 speed is unknown, defaulting to 1000 [ 198.022313][ T9122] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 198.178561][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.754'. [ 198.247956][ T9129] bond6: (slave geneve3): making interface the new active one [ 198.278343][ T9129] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 198.315775][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.757'. [ 198.322653][ T9130] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.337601][ T1022] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.353100][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.758'. [ 198.359271][ T1022] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.411849][ T1022] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.456202][ T1022] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.637467][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 198.782623][ T9156] tipc: Enabled bearer , priority 10 [ 199.179612][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 199.194038][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'. [ 199.205472][ T9182] netlink: 'syz.0.772': attribute type 18 has an invalid length. [ 199.236609][ T1022] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.245711][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 199.261865][ T1022] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.281037][ T9182] netlink: 'syz.0.772': attribute type 18 has an invalid length. [ 199.291248][ T1022] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.303277][ T1022] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.399254][ T9185] netem: incorrect gi model size [ 199.418348][ T9185] netem: change failed [ 199.518890][ T9192] nbd: must specify at least one socket [ 199.951537][ T9207] syzkaller0: entered promiscuous mode [ 199.991660][ T9207] syzkaller0: entered allmulticast mode [ 200.209176][ T9213] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 200.403415][ T9219] netlink: zone id is out of range [ 200.416102][ T9219] netlink: zone id is out of range [ 200.439287][ T9219] netlink: set zone limit has 4 unknown bytes [ 200.978245][ T9255] __nla_validate_parse: 3 callbacks suppressed [ 200.978267][ T9255] netlink: 100 bytes leftover after parsing attributes in process `syz.0.796'. [ 201.018098][ T9258] netlink: 368 bytes leftover after parsing attributes in process `syz.4.795'. [ 201.044438][ T9241] lo speed is unknown, defaulting to 1000 [ 202.984580][ T9241] wg1 speed is unknown, defaulting to 1000 [ 203.463134][ T9294] netlink: 88 bytes leftover after parsing attributes in process `syz.3.805'. [ 203.616917][ T9306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.108498][ T9326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.815'. [ 204.145892][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.813'. [ 204.212046][ T9330] veth7: entered promiscuous mode [ 204.217683][ T9330] bridge0: port 1(veth7) entered blocking state [ 204.224390][ T9330] bridge0: port 1(veth7) entered disabled state [ 204.237202][ T9330] veth7: entered allmulticast mode [ 204.282798][ T9332] tipc: Enabled bearer , priority 0 [ 204.315453][ T9329] tipc: Resetting bearer [ 204.418930][ T9338] netlink: 564 bytes leftover after parsing attributes in process `syz.4.818'. [ 204.456218][ T9338] netlink: 171 bytes leftover after parsing attributes in process `syz.4.818'. [ 204.497697][ T9338] netlink: 5 bytes leftover after parsing attributes in process `syz.4.818'. [ 204.528870][ T9342] sctp: [Deprecated]: syz.3.819 (pid 9342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.528870][ T9342] Use struct sctp_sack_info instead [ 204.535230][ T9338] netlink: 9 bytes leftover after parsing attributes in process `syz.4.818'. [ 204.592060][ T9338] netlink: 102 bytes leftover after parsing attributes in process `syz.4.818'. [ 205.027206][ T9323] tipc: Disabling bearer [ 205.386731][ T9361] lo speed is unknown, defaulting to 1000 [ 205.681552][ T9361] wg1 speed is unknown, defaulting to 1000 [ 205.993400][ T9380] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 206.069576][ T9380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.135812][ T9386] vlan3: entered allmulticast mode [ 206.151860][ T9387] __nla_validate_parse: 3 callbacks suppressed [ 206.151878][ T9387] netlink: 172 bytes leftover after parsing attributes in process `syz.2.831'. [ 206.163009][ T9386] veth1: entered allmulticast mode [ 206.178962][ T9386] bond3: (slave vlan3): making interface the new active one [ 206.188557][ T9386] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 206.212412][ T9387] netlink: 'syz.2.831': attribute type 3 has an invalid length. [ 206.244777][ T9385] netlink: 'syz.2.831': attribute type 3 has an invalid length. [ 206.258305][ T9387] netlink: 'syz.2.831': attribute type 15 has an invalid length. [ 206.267563][ T9385] netlink: 'syz.2.831': attribute type 15 has an invalid length. [ 207.707809][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.845'. [ 207.752889][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 208.090720][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.850'. [ 208.118994][ T9451] lo speed is unknown, defaulting to 1000 [ 208.289485][ T9456] netlink: 'syz.1.851': attribute type 21 has an invalid length. [ 208.702958][ T9451] wg1 speed is unknown, defaulting to 1000 [ 209.014136][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 209.031106][ T9478] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 209.084565][ T9457] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 209.412125][ T9492] netlink: 96 bytes leftover after parsing attributes in process `syz.3.861'. [ 209.626536][ T9499] netlink: 'syz.1.862': attribute type 13 has an invalid length. [ 209.644687][ T9499] netlink: 'syz.1.862': attribute type 17 has an invalid length. [ 210.014052][ T9517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.027176][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.867'. [ 210.043762][ T9519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.867'. [ 210.063447][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.867'. [ 210.086313][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.867'. [ 210.163925][ T9495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.183764][ T9499] dummy0: left promiscuous mode [ 210.209281][ T9499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.380836][ T5850] Bluetooth: hci0: command 0x0401 tx timeout [ 211.206579][ T9553] __nla_validate_parse: 4 callbacks suppressed [ 211.206598][ T9553] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.875'. [ 211.420931][ T9560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.428221][ T9560] IPv6: NLM_F_CREATE should be set when creating new route [ 211.435585][ T9560] IPv6: NLM_F_CREATE should be set when creating new route [ 211.442886][ T9560] IPv6: NLM_F_CREATE should be set when creating new route [ 211.457109][ T9560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.729437][ T9567] syz_tun: entered promiscuous mode [ 211.755282][ T9567] macvtap0: entered promiscuous mode [ 211.903005][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 211.903807][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 211.909181][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.987742][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 212.004386][ T9577] lo speed is unknown, defaulting to 1000 [ 212.004425][ T9576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.294711][ T9592] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 212.370616][ T9592] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.405514][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 212.437604][ T9592] netlink: 5 bytes leftover after parsing attributes in process `syz.4.888'. [ 212.460605][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 212.491525][ T9577] wg1 speed is unknown, defaulting to 1000 [ 212.498682][ T9590] netlink: 'syz.3.889': attribute type 33 has an invalid length. [ 212.510227][ T9590] netlink: 152 bytes leftover after parsing attributes in process `syz.3.889'. [ 213.606002][ T9628] ip6gretap2: entered promiscuous mode [ 213.893748][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.900'. [ 213.918698][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 213.939664][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.903'. [ 214.216700][ T9657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.906'. [ 214.314208][ T9657] netlink: 'syz.0.906': attribute type 11 has an invalid length. [ 214.329505][ T9657] netlink: 'syz.0.906': attribute type 11 has an invalid length. [ 214.360080][ T9657] netlink: 224 bytes leftover after parsing attributes in process `syz.0.906'. [ 214.362835][ T9653] lo speed is unknown, defaulting to 1000 [ 214.717880][ T9671] can: request_module (can-proto-0) failed. [ 215.433553][ T9653] wg1 speed is unknown, defaulting to 1000 [ 215.827564][ T9711] lo speed is unknown, defaulting to 1000 [ 216.216735][ T9718] __nla_validate_parse: 2 callbacks suppressed [ 216.216754][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.920'. [ 216.239958][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 216.503784][ T9727] tipc: Enabled bearer , priority 0 [ 216.535146][ T9733] syzkaller0: entered promiscuous mode [ 216.550646][ T9733] syzkaller0: entered allmulticast mode [ 216.741790][ T9737] tipc: Resetting bearer [ 216.762369][ T9711] wg1 speed is unknown, defaulting to 1000 [ 216.776643][ T9726] tipc: Resetting bearer [ 216.827579][ T9726] tipc: Disabling bearer [ 217.201568][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 217.222441][ T9758] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 217.240661][ T9759] netlink: 48 bytes leftover after parsing attributes in process `syz.0.931'. [ 217.278835][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 218.001078][ T9775] netlink: 72 bytes leftover after parsing attributes in process `syz.1.936'. [ 218.001404][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 218.689264][ T9801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.941'. [ 219.215969][ T9817] bridge5: entered promiscuous mode [ 219.221647][ T9817] bridge5: entered allmulticast mode [ 219.351007][ T9815] lo speed is unknown, defaulting to 1000 [ 219.586206][ T9828] netlink: 348 bytes leftover after parsing attributes in process `syz.4.951'. [ 220.083596][ T9821] lo speed is unknown, defaulting to 1000 [ 220.093749][ T9815] wg1 speed is unknown, defaulting to 1000 [ 220.458279][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 220.702351][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 30 seconds [ 220.707388][ T9821] wg1 speed is unknown, defaulting to 1000 [ 220.714524][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 30 seconds [ 220.730792][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 30 seconds [ 222.580882][ T9901] tipc: Enabled bearer , priority 0 [ 222.659415][ T9904] syzkaller0: entered promiscuous mode [ 222.671027][ T9904] syzkaller0: entered allmulticast mode [ 222.761173][ T9909] delete_channel: no stack [ 222.811295][ T9906] lo speed is unknown, defaulting to 1000 [ 222.837295][ T9900] tipc: Resetting bearer [ 222.922089][ T9900] tipc: Disabling bearer [ 223.054492][ T9916] tipc: New replicast peer: 255.255.255.255 [ 223.091413][ T9916] tipc: Enabled bearer , priority 10 [ 223.124420][ T9921] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 223.136367][ T9921] __nla_validate_parse: 1 callbacks suppressed [ 223.136452][ T9921] netlink: 2 bytes leftover after parsing attributes in process `syz.0.977'. [ 223.169419][ T9921] team0: entered promiscuous mode [ 223.191458][ T9921] bridge0: port 1(team0) entered blocking state [ 223.206151][ T9921] bridge0: port 1(team0) entered disabled state [ 223.221089][ T9921] team0: entered allmulticast mode [ 223.527948][ T9937] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.982'. [ 223.561317][ T9937] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.982'. [ 223.618101][ T9906] wg1 speed is unknown, defaulting to 1000 [ 223.626544][ T9937] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.982'. [ 223.661116][ T9937] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.982'. [ 223.788593][ T9937] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.982'. [ 223.835514][ T9937] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.982'. [ 223.876009][ T9956] openvswitch: netlink: Message has 24 unknown bytes. [ 223.880714][ T9937] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.982'. [ 223.904489][ T9956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.920807][ T9937] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.982'. [ 223.960900][ T9937] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.982'. [ 224.406017][ T9973] netlink: 'syz.1.990': attribute type 5 has an invalid length. [ 224.900067][ T9988] openvswitch: netlink: Missing valid actions attribute. [ 224.909878][ T9988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.871977][T10010] netlink: 'syz.3.1001': attribute type 7 has an invalid length. [ 226.098209][T10006] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 226.208603][T10002] macvlan0: entered promiscuous mode [ 226.218445][T10002] macvlan0: entered allmulticast mode [ 226.241902][T10002] bond1: entered promiscuous mode [ 226.247403][T10002] bridge3: entered promiscuous mode [ 226.259006][T10002] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 226.268408][T10002] bond1: left promiscuous mode [ 226.278389][T10002] bridge3: left promiscuous mode [ 226.495471][T10021] netlink: 'syz.3.1003': attribute type 3 has an invalid length. [ 227.328472][T10053] syzkaller0: entered promiscuous mode [ 227.339373][T10053] syzkaller0: entered allmulticast mode [ 227.399931][T10053] tipc: Enabled bearer , priority 0 [ 227.520698][T10051] tipc: Resetting bearer [ 227.553457][T10051] tipc: Disabling bearer [ 227.816836][T10075] pim6reg1: entered promiscuous mode [ 227.825378][T10075] pim6reg1: entered allmulticast mode [ 228.542330][T10105] __nla_validate_parse: 78 callbacks suppressed [ 228.542350][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 228.575178][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 228.584989][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 228.652705][T10110] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1029'. [ 228.994425][T10123] pim6reg1: entered promiscuous mode [ 229.060548][T10123] pim6reg1: entered allmulticast mode [ 229.120747][T10125] can: request_module (can-proto-0) failed. [ 229.392786][T10147] netlink: 'syz.0.1041': attribute type 11 has an invalid length. [ 229.425129][T10147] netlink: 'syz.0.1041': attribute type 11 has an invalid length. [ 229.440938][T10147] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1041'. [ 229.462619][T10149] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 229.472486][T10149] syzkaller1: linktype set to 778 [ 229.702244][T10151] lo speed is unknown, defaulting to 1000 [ 229.891635][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 230.375961][T10179] wg2: entered promiscuous mode [ 230.383720][T10179] wg2: entered allmulticast mode [ 230.556565][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 230.567450][T10186] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1050'. [ 230.573361][T10183] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 230.762126][T10157] lo speed is unknown, defaulting to 1000 [ 230.837205][T10151] wg1 speed is unknown, defaulting to 1000 [ 231.087541][T10203] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 [ 231.490553][T10157] wg1 speed is unknown, defaulting to 1000 [ 231.676629][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 231.823767][T10216] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 231.925245][T10216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.147243][T10204] delete_channel: no stack [ 234.533509][T10290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1078'. [ 234.566396][T10290] netlink: 'syz.1.1078': attribute type 4 has an invalid length. [ 234.598349][T10290] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 235.279382][T10312] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1085'. [ 235.461342][T10331] netlink: 'syz.2.1089': attribute type 10 has an invalid length. [ 235.490700][T10331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1089'. [ 235.839398][T10344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1092'. [ 235.866876][T10344] netlink: 'syz.1.1092': attribute type 1 has an invalid length. [ 237.687198][T10331] team0: Port device geneve0 added [ 237.743778][T10344] bridge0: entered promiscuous mode [ 237.768314][T10344] macsec1: entered promiscuous mode [ 237.788590][T10344] bridge0: port 1(macsec1) entered blocking state [ 237.801814][T10344] bridge0: port 1(macsec1) entered disabled state [ 237.808804][T10344] macsec1: entered allmulticast mode [ 237.815927][T10344] bridge0: entered allmulticast mode [ 237.825597][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1093'. [ 237.832838][T10344] macsec1: left allmulticast mode [ 237.843427][T10344] bridge0: left allmulticast mode [ 237.853508][T10344] bridge0: left promiscuous mode [ 237.976170][T10354] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1093'. [ 237.997762][T10338] lo speed is unknown, defaulting to 1000 [ 238.232148][T10359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.239613][T10359] IPv6: NLM_F_CREATE should be set when creating new route [ 238.247033][T10359] IPv6: NLM_F_CREATE should be set when creating new route [ 238.562046][T10372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1099'. [ 238.689085][ T7648] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 238.755277][T10371] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1100'. [ 239.015897][T10338] wg1 speed is unknown, defaulting to 1000 [ 239.023213][T10362] lo speed is unknown, defaulting to 1000 [ 239.396898][T10401] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.1105'. [ 239.422394][T10401] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 239.716446][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'. [ 239.737504][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'. [ 239.809436][T10378] lo speed is unknown, defaulting to 1000 [ 239.815768][T10362] wg1 speed is unknown, defaulting to 1000 [ 240.751985][T10431] tipc: Enabled bearer , priority 0 [ 240.785205][T10433] syzkaller0: entered promiscuous mode [ 240.801118][T10433] syzkaller0: entered allmulticast mode [ 240.856223][T10437] netlink: 'syz.0.1117': attribute type 21 has an invalid length. [ 240.885293][T10437] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1117'. [ 240.906550][T10433] tipc: Resetting bearer [ 240.952631][T10433] tipc: Disabling bearer [ 240.980999][T10437] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1117'. [ 241.045975][T10378] wg1 speed is unknown, defaulting to 1000 [ 241.373411][T10449] syz_tun: entered allmulticast mode [ 241.439209][T10449] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 241.915139][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'. [ 241.988621][T10464] vlan2: entered promiscuous mode [ 242.001886][T10464] bridge0: entered promiscuous mode [ 242.014073][T10464] vlan2: entered allmulticast mode [ 242.035199][T10464] bridge0: entered allmulticast mode [ 242.118719][T10467] netlink: 9340 bytes leftover after parsing attributes in process `syz.1.1126'. [ 242.606495][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 242.629145][T10477] tipc: Enabled bearer , priority 0 [ 242.863365][T10470] tipc: Disabling bearer [ 243.318241][T10491] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 243.407222][T10491] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 243.427137][T10491] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.1132'. [ 243.518095][T10491] netlink: del zone limit has 8 unknown bytes [ 244.012398][T10510] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1138'. [ 244.946328][T10526] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1143'. [ 244.960723][T10550] syz_tun: left promiscuous mode [ 244.978166][T10550] macvtap0: left promiscuous mode [ 244.982239][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 244.984539][T10550] macvtap0: entered allmulticast mode [ 245.009168][T10550] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 245.051574][T10557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.259369][T10559] syzkaller0: entered promiscuous mode [ 245.266418][T10567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1155'. [ 245.274565][T10559] syzkaller0: entered allmulticast mode [ 245.292622][T10568] netlink: 'syz.4.1154': attribute type 16 has an invalid length. [ 245.301696][T10568] netlink: 'syz.4.1154': attribute type 17 has an invalid length. [ 245.326204][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 245.342793][T10568] IPv6: NLM_F_REPLACE set, but no existing node found! [ 245.360421][T10567] netlink: 'syz.2.1155': attribute type 15 has an invalid length. [ 245.368444][T10567] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1155'. [ 246.355492][T10595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'. [ 246.962324][T10614] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1165'. [ 247.273133][T10622] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 247.292615][T10624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1169'. [ 247.331800][T10622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1168'. [ 247.487981][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1171'. [ 247.785468][T10644] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 247.824423][T10638] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.883755][T10644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.016895][T10647] veth9: entered promiscuous mode [ 248.028068][T10647] bond2: (slave veth9): Enslaving as an active interface with a down link [ 248.105068][T10644] erspan0: entered allmulticast mode [ 248.454621][ T5949] IPVS: starting estimator thread 0... [ 248.566299][T10672] lo speed is unknown, defaulting to 1000 [ 248.572782][T10670] IPVS: using max 23 ests per chain, 55200 per kthread [ 248.939442][T10679] tipc: Enabling of bearer rejected, failed to enable media [ 249.703936][T10692] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 249.764107][T10672] wg1 speed is unknown, defaulting to 1000 [ 250.453085][ T5209] udevd[5209]: worker [8388] terminated by signal 33 (Unknown signal 33) [ 250.470603][ T5209] udevd[5209]: worker [8388] failed while handling '/devices/virtual/block/loop2' [ 250.790011][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 60 seconds [ 250.801250][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 60 seconds [ 250.812416][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 60 seconds [ 250.887775][T10745] __nla_validate_parse: 4 callbacks suppressed [ 250.887795][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 250.914300][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 251.374538][ T5949] IPVS: starting estimator thread 0... [ 251.493346][T10758] IPVS: using max 24 ests per chain, 57600 per kthread [ 251.522822][T10749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.055925][ T3564] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.080843][ T3564] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 252.101019][ T7643] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.142700][ T7643] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 252.187098][ T7643] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.198698][ T7643] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 252.225215][T10770] lo speed is unknown, defaulting to 1000 [ 252.248686][ T7643] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.281127][ T7643] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 252.422926][T10788] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1214'. [ 252.531520][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1215'. [ 252.545588][T10793] openvswitch: netlink: Missing key (keys=40, expected=80) [ 253.547960][T10770] wg1 speed is unknown, defaulting to 1000 [ 253.601641][T10818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1221'. [ 253.730174][T10823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1222'. [ 253.760112][T10823] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 253.835314][T10823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1222'. [ 253.867385][T10823] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 254.052293][T10825] lo speed is unknown, defaulting to 1000 [ 254.326754][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 254.327357][T10842] ip6gre1: entered allmulticast mode [ 254.360015][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 254.399765][T10843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1229'. [ 254.495144][T10842] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 254.939963][T10858] netlink: 'syz.1.1233': attribute type 11 has an invalid length. [ 255.239982][T10867] netlink: 'syz.1.1235': attribute type 1 has an invalid length. [ 255.279557][T10867] netlink: 'syz.1.1235': attribute type 2 has an invalid length. [ 255.327927][T10825] wg1 speed is unknown, defaulting to 1000 [ 255.741722][ T5838] Bluetooth: hci4: command 0x0401 tx timeout [ 255.906477][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.919515][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.696148][T10900] __nla_validate_parse: 3 callbacks suppressed [ 256.696171][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'. [ 257.730034][T10916] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 257.824056][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1253'. [ 258.105238][T10931] netlink: 'syz.2.1256': attribute type 13 has an invalid length. [ 258.305150][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'. [ 258.456653][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'. [ 258.457093][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 258.484854][T10951] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 258.485161][T10956] lo speed is unknown, defaulting to 1000 [ 258.556453][T10961] netlink: 'syz.2.1265': attribute type 25 has an invalid length. [ 258.604465][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 259.015965][T10956] wg1 speed is unknown, defaulting to 1000 [ 259.168131][T10989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1270'. [ 259.240201][T10990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1269'. [ 259.277295][T10992] veth0: entered promiscuous mode [ 259.526716][T10992] lo speed is unknown, defaulting to 1000 [ 260.389258][T10991] veth0: left promiscuous mode [ 260.574518][T10992] wg1 speed is unknown, defaulting to 1000 [ 261.917986][T11052] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 261.955997][T11056] netlink: 'syz.0.1288': attribute type 1 has an invalid length. [ 261.956203][T11055] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 261.985298][T11055] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 262.148185][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 262.226315][T11056] bond4: entered promiscuous mode [ 262.237041][T11056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.379507][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 263.394699][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 263.411659][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 263.437496][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1312'. [ 263.626994][T11142] tipc: Enabled bearer , priority 0 [ 263.639696][T11142] syzkaller0: entered promiscuous mode [ 263.645785][T11142] syzkaller0: entered allmulticast mode [ 263.674056][T11142] tipc: Resetting bearer [ 263.683201][T11140] tipc: Resetting bearer [ 263.708381][T11140] tipc: Disabling bearer [ 263.721945][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 263.835799][T11155] lo speed is unknown, defaulting to 1000 [ 264.159122][T11155] wg1 speed is unknown, defaulting to 1000 [ 264.301981][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'. [ 264.315589][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'. [ 264.379580][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'. [ 264.389061][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'. [ 264.427853][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.445989][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.499243][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.546842][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.589830][T11168] syzkaller0: entered promiscuous mode [ 264.597163][T11168] syzkaller0: entered allmulticast mode [ 265.685834][T11204] bridge6: entered promiscuous mode [ 265.829468][T11208] lo speed is unknown, defaulting to 1000 [ 266.630088][T11208] wg1 speed is unknown, defaulting to 1000 [ 267.137408][T11260] veth7: left allmulticast mode [ 267.162695][T11260] bridge0: port 1(veth7) entered disabled state [ 267.287911][T11263] macsec0: entered promiscuous mode [ 267.293627][T11263] bond0: entered promiscuous mode [ 267.299049][T11263] macsec0: entered allmulticast mode [ 267.304807][T11263] bond0: entered allmulticast mode [ 267.334263][T11263] bond0: left allmulticast mode [ 267.340692][T11263] bond0: left promiscuous mode [ 267.424305][T11262] macsec0: entered promiscuous mode [ 267.429769][T11262] bond0: entered promiscuous mode [ 267.445365][T11262] macsec0: entered allmulticast mode [ 267.453093][T11262] bond0: entered allmulticast mode [ 267.464030][T11262] bond0: left allmulticast mode [ 267.469169][T11262] bond0: left promiscuous mode [ 267.507489][T11260] __nla_validate_parse: 12 callbacks suppressed [ 267.507510][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1347'. [ 267.528504][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'. [ 267.563419][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'. [ 267.717847][ T5838] Bluetooth: hci4: link tx timeout [ 267.723407][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 267.875692][T11286] netlink: 'syz.0.1353': attribute type 29 has an invalid length. [ 269.190003][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 269.233844][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 269.376809][T11348] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1370'. [ 269.404554][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'. [ 269.436424][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'. [ 269.526216][T11356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.548310][T11356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.662812][T11362] netlink: 'syz.3.1375': attribute type 12 has an invalid length. [ 269.682080][T11362] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1375'. [ 269.740823][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 270.342269][T11394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1386'. [ 270.609939][T11409] gretap2: entered promiscuous mode [ 270.745024][T11414] tipc: Enabled bearer , priority 0 [ 270.768053][T11414] syzkaller0: entered promiscuous mode [ 270.784018][T11414] syzkaller0: entered allmulticast mode [ 270.850136][T11414] tipc: Resetting bearer [ 270.865646][T11412] tipc: Resetting bearer [ 270.936226][T11412] tipc: Disabling bearer [ 271.885888][T11445] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.672663][T11482] __nla_validate_parse: 3 callbacks suppressed [ 272.672686][T11482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1412'. [ 272.717363][T11478] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 272.986093][T11498] nbd: socks must be embedded in a SOCK_ITEM attr [ 273.072922][T11496] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1415'. [ 273.246507][T11507] lo speed is unknown, defaulting to 1000 [ 273.268290][T11509] syzkaller0: entered promiscuous mode [ 273.274109][T11509] syzkaller0: entered allmulticast mode [ 273.545007][T11518] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1424'. [ 273.592443][T11518] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1424'. [ 273.925574][T11507] wg1 speed is unknown, defaulting to 1000 [ 274.095949][T11543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 274.150054][T11542] tipc: Enabled bearer , priority 10 [ 274.343203][ T7643] tipc: Resetting bearer [ 274.444717][T11550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1431'. [ 274.454451][T11534] tipc: Resetting bearer [ 274.462039][T11550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1431'. [ 275.104358][T11561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1433'. [ 276.360096][T11534] tipc: Disabling bearer [ 276.370185][T11541] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1427'. [ 276.402315][T11558] syzkaller1: entered promiscuous mode [ 276.407952][T11558] syzkaller1: entered allmulticast mode [ 276.547640][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 277.235978][T11592] netlink: 'syz.4.1441': attribute type 1 has an invalid length. [ 277.413228][T11604] IPVS: set_ctl: invalid protocol: 41 172.30.0.4:20004 [ 277.457191][T11604] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 277.938099][T11628] __nla_validate_parse: 2 callbacks suppressed [ 277.938121][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1452'. [ 278.468507][T11645] erspan1: entered promiscuous mode [ 278.482772][T11645] erspan1: entered allmulticast mode [ 279.546962][T11686] netlink: 'syz.3.1469': attribute type 2 has an invalid length. [ 279.571919][T11686] k›*·]‘: entered promiscuous mode [ 279.845479][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 280.365421][T11739] lo speed is unknown, defaulting to 1000 [ 280.866104][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 90 seconds [ 280.877357][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 90 seconds [ 280.888685][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 90 seconds [ 281.023791][T11761] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1489'. [ 281.262468][T11780] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 281.288331][T11781] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1491'. [ 281.305648][T11739] wg1 speed is unknown, defaulting to 1000 [ 281.519469][T11784] netlink: 'syz.4.1493': attribute type 11 has an invalid length. [ 281.781163][T11795] pim6reg1: entered promiscuous mode [ 281.804476][T11795] pim6reg1: entered allmulticast mode [ 282.193361][T11821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'. [ 282.596211][T11841] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1509'. [ 282.598115][T11840] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1509'. [ 282.674997][T11843] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.687167][T11841] netlink: zone id is out of range [ 282.701520][T11840] netlink: zone id is out of range [ 282.709387][T11843] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.733411][T11840] netlink: zone id is out of range [ 282.751275][T11840] netlink: zone id is out of range [ 282.752690][T11841] netlink: zone id is out of range [ 282.757546][T11840] netlink: zone id is out of range [ 282.784748][T11840] netlink: zone id is out of range [ 282.795227][T11841] netlink: zone id is out of range [ 282.802074][T11841] netlink: zone id is out of range [ 282.823516][T11840] netlink: zone id is out of range [ 282.877471][T11843] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.890460][T11843] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.992787][T11843] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.003739][T11843] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.066826][T11843] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.077778][T11843] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.209753][T11848] tipc: Enabled bearer , priority 0 [ 283.227050][T11848] syzkaller0: entered promiscuous mode [ 283.232688][T11848] syzkaller0: entered allmulticast mode [ 283.269768][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 283.316294][T11848] tipc: Resetting bearer [ 283.338132][ T3564] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.347300][ T3564] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.358792][T11847] tipc: Resetting bearer [ 283.396590][T11847] tipc: Disabling bearer [ 283.446974][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.460043][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.576743][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.609916][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.647034][ T7651] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.655831][ T7651] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.763526][T11870] lo speed is unknown, defaulting to 1000 [ 283.888685][T11876] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 284.363714][ T3564] nci: nci_rsp_packet: unknown rsp opcode 0x204 [ 284.739560][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1523'. [ 284.777482][T11900] netlink: 'syz.0.1523': attribute type 8 has an invalid length. [ 284.791340][T11901] tun0: tun_chr_ioctl cmd 2147767507 [ 284.805142][T11901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1522'. [ 284.805362][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1524'. [ 284.831654][T11904] netlink: 'syz.1.1524': attribute type 7 has an invalid length. [ 284.845144][T11904] netlink: 'syz.1.1524': attribute type 8 has an invalid length. [ 284.854467][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 284.896415][T11870] wg1 speed is unknown, defaulting to 1000 [ 284.983303][T11904] gretap0: entered promiscuous mode [ 285.013161][T11904] gretap0: left promiscuous mode [ 285.056886][T11910] netlink: 'syz.0.1523': attribute type 5 has an invalid length. [ 285.397896][T11919] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 285.724928][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 285.744554][T11931] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1532'. [ 285.914695][T11940] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1534'. [ 286.579790][ T5926] IPVS: starting estimator thread 0... [ 286.616446][T11965] syzkaller1: entered promiscuous mode [ 286.622421][T11965] syzkaller1: entered allmulticast mode [ 286.710690][T11969] IPVS: using max 23 ests per chain, 55200 per kthread [ 286.737506][T11973] tipc: Enabled bearer , priority 0 [ 286.809893][T11973] tipc: Disabling bearer [ 286.821159][T11981] netlink: 'syz.1.1545': attribute type 1 has an invalid length. [ 286.829727][T11981] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1545'. [ 287.212240][T12001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1552'. [ 289.006479][T12048] __nla_validate_parse: 2 callbacks suppressed [ 289.006500][T12048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1566'. [ 289.606154][ T1022] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.616353][ T1022] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.693671][ T2127] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.709669][ T2127] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.903402][T12057] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 289.934213][T12061] tipc: Enabled bearer , priority 0 [ 289.946703][T12061] syzkaller0: entered promiscuous mode [ 289.952829][T12061] syzkaller0: entered allmulticast mode [ 289.987214][T12069] net_ratelimit: 19 callbacks suppressed [ 289.987235][T12069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.018674][T12059] tipc: Resetting bearer [ 290.039522][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'. [ 290.123461][T12059] tipc: Disabling bearer [ 290.182464][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1573'. [ 290.822945][T12068] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.979395][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 291.123354][T12090] block nbd2: server does not support multiple connections per device. [ 291.133822][T12092] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 291.150975][T12092] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1579'. [ 291.160205][T12090] block nbd2: shutting down sockets [ 291.185569][T12094] tipc: Enabled bearer , priority 0 [ 291.193477][T12094] syzkaller0: entered promiscuous mode [ 291.199161][T12094] syzkaller0: entered allmulticast mode [ 291.208279][T12096] tipc: Enabled bearer , priority 0 [ 291.216250][T12097] syzkaller0: entered promiscuous mode [ 291.223294][T12097] syzkaller0: entered allmulticast mode [ 291.235147][T12096] tipc: Enabling of bearer rejected, already enabled [ 291.251430][T12094] tipc: Resetting bearer [ 291.268357][T12093] tipc: Resetting bearer [ 291.317197][T12093] tipc: Disabling bearer [ 291.360887][T12096] tipc: Enabling of bearer rejected, already enabled [ 291.485787][T12096] tipc: Resetting bearer [ 291.562371][T12096] tipc: Disabling bearer [ 291.675701][T12123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.754617][T12129] syzkaller0: create flow: hash 2118301076 index 1 [ 291.797132][ T12] syzkaller0: tun_net_xmit 76 [ 291.813927][ T12] syzkaller0: tun_net_xmit 48 [ 291.820984][ T5926] syzkaller0: tun_net_xmit 76 [ 291.828469][T12134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1592'. [ 291.847225][T12134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1592'. [ 291.877215][T12139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1592'. [ 292.009188][T12143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1594'. [ 292.090042][T12120] syzkaller0: delete flow: hash 2118301076 index 1 [ 292.382821][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 294.068518][T12168] lo speed is unknown, defaulting to 1000 [ 294.207479][T12180] tipc: Enabled bearer , priority 0 [ 294.216249][T12181] syzkaller0: entered promiscuous mode [ 294.226939][T12181] syzkaller0: entered allmulticast mode [ 294.234432][T12186] netlink: 'syz.3.1602': attribute type 1 has an invalid length. [ 294.259343][T12181] tipc: Resetting bearer [ 294.270435][T12177] tipc: Resetting bearer [ 294.312544][T12189] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1602'. [ 294.330023][T12177] tipc: Disabling bearer [ 294.577877][T12168] wg1 speed is unknown, defaulting to 1000 [ 294.584535][T12196] netlink: 'syz.4.1608': attribute type 13 has an invalid length. [ 294.716020][T12203] bridge0: port 2(syz_tun) entered blocking state [ 294.736487][T12203] bridge0: port 2(syz_tun) entered disabled state [ 294.754763][T12203] syz_tun: entered allmulticast mode [ 294.769625][T12203] syz_tun: left allmulticast mode [ 294.928510][T12208] lo speed is unknown, defaulting to 1000 [ 295.082057][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1612'. [ 295.141902][T12215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1612'. [ 295.165329][T12215] netlink: 'syz.0.1612': attribute type 3 has an invalid length. [ 295.222029][T12220] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 295.404139][T12208] wg1 speed is unknown, defaulting to 1000 [ 295.434813][T12223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1615'. [ 295.558489][T12227] netlink: 'syz.2.1615': attribute type 10 has an invalid length. [ 295.568519][T12227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 295.580162][T12227] veth0_vlan: left promiscuous mode [ 295.603050][T12227] veth0_vlan: entered promiscuous mode [ 295.611408][T12227] veth0_vlan: entered allmulticast mode [ 295.635707][T12227] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 296.033207][T12235] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 296.041087][T12235] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1618'. [ 296.251992][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 296.322144][T12239] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1620'. [ 296.356261][T12240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1620'. [ 297.027893][T12262] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 297.070151][T12261] netlink: 'syz.2.1625': attribute type 13 has an invalid length. [ 298.265142][T12290] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1631'. [ 298.644278][T12303] netlink: 'syz.0.1635': attribute type 1 has an invalid length. [ 298.986651][T12303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.342321][T12307] bond6: (slave veth7): Enslaving as an active interface with a down link [ 299.397474][T12308] vlan5: entered allmulticast mode [ 299.415430][T12308] veth1: entered promiscuous mode [ 299.437379][T12308] veth1: left promiscuous mode [ 299.453449][T12308] bond6: (slave vlan5): making interface the new active one [ 299.467319][T12302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.478661][T12311] __nla_validate_parse: 2 callbacks suppressed [ 299.478681][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'. [ 299.501571][T12308] veth1: entered promiscuous mode [ 299.507599][T12308] vlan5: entered promiscuous mode [ 299.561768][T12308] bond6: (slave vlan5): Enslaving as an active interface with an up link [ 299.885069][T12318] netlink: 'syz.1.1639': attribute type 9 has an invalid length. [ 299.909447][T12318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1639'. [ 300.469029][T12329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1641'. [ 300.839978][T12335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.727677][T12369] openvswitch: netlink: Key type 1799 is out of range max 32 [ 301.930416][T12374] syz_tun: entered promiscuous mode [ 301.939429][T12374] macvtap1: entered promiscuous mode [ 301.968719][T12374] syz_tun: left promiscuous mode [ 302.074566][T12382] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 302.110498][T12382] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 302.294650][T12388] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 302.361468][T12390] tipc: Enabling of bearer rejected, already enabled [ 302.505173][T12404] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1665'. [ 302.533064][T12405] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1665'. [ 302.562114][T12404] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 302.595434][T12405] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 302.610625][T12404] openvswitch: netlink: Duplicate key (type 0). [ 302.634524][T12405] openvswitch: netlink: Duplicate key (type 0). [ 302.725903][T12407] sctp: [Deprecated]: syz.0.1666 (pid 12407) Use of int in max_burst socket option. [ 302.725903][T12407] Use struct sctp_assoc_value instead [ 302.845929][T12417] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 302.900650][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 302.960192][T12415] veth0_virt_wifi: renamed from vlan0 [ 302.983797][T12416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1668'. [ 303.044288][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 303.178673][T12432] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1672'. [ 303.252224][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'. [ 303.967418][T12467] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 304.128869][T12475] bond3: (slave gretap2): making interface the new active one [ 304.141603][T12475] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 304.223868][T12483] IPVS: ip_vs_add_dest(): server weight less than zero [ 304.276349][T12473] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 304.352823][T12465] lo speed is unknown, defaulting to 1000 [ 304.634720][T12465] wg1 speed is unknown, defaulting to 1000 [ 305.858008][T12528] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 306.049835][T12543] vxcan1: entered allmulticast mode [ 306.326758][T12557] tipc: Enabled bearer , priority 0 [ 306.375691][T12552] tipc: Resetting bearer [ 306.830033][T12570] __nla_validate_parse: 3 callbacks suppressed [ 306.830057][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 306.907135][T12570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1708'. [ 306.968628][T12550] tipc: Disabling bearer [ 307.033441][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 307.241192][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 307.273408][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 307.705141][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1716'. [ 307.753290][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 307.825913][T12606] IPVS: Error connecting to the multicast addr [ 308.231562][T12620] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1721'. [ 308.702024][T12634] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 308.724994][T12634] netlink: 'syz.1.1725': attribute type 11 has an invalid length. [ 308.738489][T12634] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1725'. [ 309.242421][T12650] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1731'. [ 309.301473][T12654] tap0: tun_chr_ioctl cmd 1074025673 [ 309.307041][T12652] tap0: tun_chr_ioctl cmd 1074025680 [ 309.406736][T12660] tipc: Enabled bearer , priority 0 [ 309.858998][T12672] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 310.572103][T12701] sctp: [Deprecated]: syz.1.1741 (pid 12701) Use of int in max_burst socket option. [ 310.572103][T12701] Use struct sctp_assoc_value instead [ 310.940857][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 120 seconds [ 310.951928][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 120 seconds [ 310.966380][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 120 seconds [ 311.142918][ T7643] vlan5: left promiscuous mode [ 311.984380][T12754] __nla_validate_parse: 6 callbacks suppressed [ 311.984404][T12754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'. [ 312.009112][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 312.198691][T12754] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.459447][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 312.485599][T12770] netlink: 'syz.1.1761': attribute type 21 has an invalid length. [ 312.503102][T12774] veth0: Caught tx_queue_len zero misconfig [ 312.776063][T12781] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 312.843470][T12781] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.936329][T12784] bond9: (slave bridge8): making interface the new active one [ 312.947104][T12784] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 313.099196][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'. [ 313.122775][T12799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1769'. [ 313.145152][T12804] sctp: [Deprecated]: syz.1.1770 (pid 12804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.145152][T12804] Use struct sctp_sack_info instead [ 313.252843][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 313.254534][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 313.538774][T12819] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1773'. [ 313.552580][T12818] tipc: Enabled bearer , priority 0 [ 313.569584][T12818] syzkaller0: entered promiscuous mode [ 313.577765][T12818] syzkaller0: entered allmulticast mode [ 313.622784][T12818] tipc: Resetting bearer [ 313.687409][T12818] tipc: Disabling bearer [ 313.786252][T12831] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1776'. [ 313.956123][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 314.234530][T12842] syzkaller1: entered promiscuous mode [ 314.250541][T12842] syzkaller1: entered allmulticast mode [ 315.083568][T12867] lo speed is unknown, defaulting to 1000 [ 315.420985][T12867] wg1 speed is unknown, defaulting to 1000 [ 315.821761][T12879] ip6tnl3: entered promiscuous mode [ 315.827059][T12879] ip6tnl3: entered allmulticast mode [ 316.241540][T12894] netlink: 'syz.2.1796': attribute type 10 has an invalid length. [ 316.259296][T12894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.312283][T12894] team0: Port device bond0 added [ 316.784973][T12912] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 316.997086][T12923] netlink: 'syz.4.1804': attribute type 3 has an invalid length. [ 317.063588][T12930] siw: device registration error -23 [ 317.344887][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.351489][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.365563][T12943] __nla_validate_parse: 1 callbacks suppressed [ 317.365587][T12943] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1810'. [ 317.410481][T12936] vlan2: entered allmulticast mode [ 317.416792][T12936] veth1: entered allmulticast mode [ 317.492425][T12933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.667185][T12956] lo speed is unknown, defaulting to 1000 [ 317.866370][T12964] bridge0: port 2(erspan0) entered blocking state [ 317.885582][T12964] bridge0: port 2(erspan0) entered disabled state [ 317.907119][T12964] erspan0: entered allmulticast mode [ 317.923591][T12964] erspan0: entered promiscuous mode [ 317.942203][T12964] bridge0: port 2(erspan0) entered blocking state [ 317.949189][T12964] bridge0: port 2(erspan0) entered forwarding state [ 317.976481][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'. [ 317.988190][T12967] erspan0: left allmulticast mode [ 318.001859][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 318.013628][T12967] erspan0: left promiscuous mode [ 318.019476][T12967] bridge0: port 2(erspan0) entered disabled state [ 318.072916][T12964] batadv0: entered promiscuous mode [ 318.087335][T12964] vlan0: entered promiscuous mode [ 318.190229][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'. [ 318.576914][T12982] lo speed is unknown, defaulting to 1000 [ 318.581105][T12956] wg1 speed is unknown, defaulting to 1000 [ 319.093349][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'. [ 319.103631][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1828'. [ 319.119155][T13007] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1828'. [ 319.197139][T12982] wg1 speed is unknown, defaulting to 1000 [ 319.931812][ T30] audit: type=1800 audit(1754379385.599:5): pid=13028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1832" name=33FFFF dev="tmpfs" ino=1828 res=0 errno=0 [ 320.154663][T13036] syzkaller0: entered promiscuous mode [ 320.181740][T13036] syzkaller0: entered allmulticast mode [ 320.320619][T13044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1836'. [ 320.366983][T13044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1836'. [ 320.418568][T13044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1836'. [ 320.679952][T13039] lo speed is unknown, defaulting to 1000 [ 320.695437][T13052] wg1: entered promiscuous mode [ 320.733052][T13052] wg1: entered allmulticast mode [ 320.912078][T13056] tipc: Enabled bearer , priority 0 [ 321.054741][T13056] tipc: Disabling bearer [ 321.609160][T13039] wg1 speed is unknown, defaulting to 1000 [ 322.114844][T13086] tipc: Enabled bearer , priority 0 [ 322.134538][T13086] syzkaller0: entered promiscuous mode [ 322.141214][T13086] syzkaller0: entered allmulticast mode [ 322.256291][T13084] tipc: Resetting bearer [ 322.347102][T13084] tipc: Disabling bearer [ 322.421025][T13096] __nla_validate_parse: 11 callbacks suppressed [ 322.421048][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1853'. [ 322.637017][T13099] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1854'. [ 322.898040][T13103] netlink: 'syz.4.1855': attribute type 1 has an invalid length. [ 323.138928][T13101] lo speed is unknown, defaulting to 1000 [ 323.307608][T13120] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 323.320045][T13121] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 323.716322][T13129] IPVS: length: 148 != 24 [ 323.822311][T13101] wg1 speed is unknown, defaulting to 1000 [ 324.320075][T13137] lo speed is unknown, defaulting to 1000 [ 324.733922][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 324.898387][T13137] wg1 speed is unknown, defaulting to 1000 [ 324.905173][T13159] lo speed is unknown, defaulting to 1000 [ 325.811506][T13163] lo speed is unknown, defaulting to 1000 [ 325.918795][T13159] wg1 speed is unknown, defaulting to 1000 [ 326.714162][T13163] wg1 speed is unknown, defaulting to 1000 [ 327.587493][T13180] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1873'. [ 327.654959][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1873'. [ 327.952302][T13182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1874'. [ 327.982031][T13182] sctp: [Deprecated]: syz.2.1874 (pid 13182) Use of int in maxseg socket option. [ 327.982031][T13182] Use struct sctp_assoc_value instead [ 328.658298][T13204] tipc: Enabled bearer , priority 0 [ 328.701263][T13204] syzkaller0: entered promiscuous mode [ 328.706889][T13204] syzkaller0: entered allmulticast mode [ 328.809222][T13204] tipc: Resetting bearer [ 328.848894][T13203] tipc: Resetting bearer [ 328.908498][T13203] tipc: Disabling bearer [ 329.002328][T13208] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 329.230942][T13210] lo speed is unknown, defaulting to 1000 [ 329.654920][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1885'. [ 329.664645][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1885'. [ 330.035275][T13210] wg1 speed is unknown, defaulting to 1000 [ 330.108083][T13255] tipc: Enabled bearer , priority 0 [ 330.118293][T13253] tipc: Disabling bearer [ 330.279688][T13261] lo speed is unknown, defaulting to 1000 [ 330.544740][T13272] netlink: 'syz.0.1896': attribute type 2 has an invalid length. [ 330.617311][T13272] þ`Ì: entered promiscuous mode [ 331.008149][T13261] wg1 speed is unknown, defaulting to 1000 [ 331.837379][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'. [ 331.846954][T13297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1905'. [ 332.230845][T13305] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 333.679470][T13310] tipc: Enabled bearer , priority 0 [ 333.918253][T13310] syzkaller0: entered promiscuous mode [ 333.950532][T13310] syzkaller0: entered allmulticast mode [ 334.728215][T13340] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1917'. [ 335.959276][T13351] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 336.731437][T13310] tipc: Resetting bearer [ 336.743575][T13309] tipc: Resetting bearer [ 336.785611][T13309] tipc: Disabling bearer [ 336.918287][T13359] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 337.260461][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 337.268205][T13366] netlink: 'syz.3.1925': attribute type 1 has an invalid length. [ 337.366109][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'. [ 337.418382][T13367] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1925'. [ 337.568992][T13367] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 337.574626][T13375] syz.0.1926 uses old SIOCAX25GETINFO [ 337.643066][T13367] gretap1: entered promiscuous mode [ 337.808009][T13381] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 337.846803][T13381] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 337.888664][T13381] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 337.905941][T13381] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 337.961300][T13381] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 337.985790][T13381] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 337.999567][T13381] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 338.014279][T13381] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 338.118592][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 338.160588][T13392] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1930'. [ 338.415486][T13407] sctp: [Deprecated]: syz.1.1935 (pid 13407) Use of int in max_burst socket option. [ 338.415486][T13407] Use struct sctp_assoc_value instead [ 338.447232][T13412] vlan0: entered promiscuous mode [ 338.845647][T13427] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1938'. [ 338.859501][T13427] 8021q: VLANs not supported on ip6tnl0 [ 339.053462][T13435] lo speed is unknown, defaulting to 1000 [ 339.059805][T13435] lo speed is unknown, defaulting to 1000 [ 339.073219][T13435] lo speed is unknown, defaulting to 1000 [ 339.089103][T13435] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 339.214679][T13435] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 339.281540][T13435] lo speed is unknown, defaulting to 1000 [ 339.298606][T13435] lo speed is unknown, defaulting to 1000 [ 339.320689][T13435] lo speed is unknown, defaulting to 1000 [ 339.337461][T13435] lo speed is unknown, defaulting to 1000 [ 339.346515][T13435] lo speed is unknown, defaulting to 1000 [ 339.523565][T13463] gretap2: entered promiscuous mode [ 339.584005][T13464] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 340.374093][T13475] syzkaller0: entered promiscuous mode [ 340.389058][T13475] syzkaller0: entered allmulticast mode [ 341.026445][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 150 seconds [ 341.037365][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 150 seconds [ 341.048688][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 150 seconds [ 354.702144][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.712431][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.721113][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.729396][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.738639][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.858992][T13480] lo speed is unknown, defaulting to 1000 [ 355.004629][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.014967][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.023973][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.033730][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.051153][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.143488][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.153233][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.161759][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.170039][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.178222][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.324241][T13483] lo speed is unknown, defaulting to 1000 [ 355.331815][T13480] wg1 speed is unknown, defaulting to 1000 [ 355.504444][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 355.517275][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 355.530873][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 355.539054][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 355.548706][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 355.701416][T13480] lo speed is unknown, defaulting to 1000 [ 355.758174][T13483] wg1 speed is unknown, defaulting to 1000 [ 355.776922][T13485] lo speed is unknown, defaulting to 1000 [ 356.078932][T13480] chnl_net:caif_netlink_parms(): no params data found [ 356.394178][T13483] lo speed is unknown, defaulting to 1000 [ 356.401425][T13487] lo speed is unknown, defaulting to 1000 [ 356.411664][T13480] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.420801][T13480] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.428343][T13480] bridge_slave_0: entered allmulticast mode [ 356.452833][T13480] bridge_slave_0: entered promiscuous mode [ 356.471998][T13485] wg1 speed is unknown, defaulting to 1000 [ 356.488661][T13480] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.510531][T13480] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.517824][T13480] bridge_slave_1: entered allmulticast mode [ 356.533670][T13480] bridge_slave_1: entered promiscuous mode [ 356.560930][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 356.576641][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 356.585662][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 356.599256][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 356.607467][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 356.712258][T13480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.754566][T13480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.780649][ T51] Bluetooth: hci5: command tx timeout [ 356.918168][T13480] team0: Port device team_slave_0 added [ 356.943509][T13480] team0: Port device team_slave_1 added [ 356.949445][T13485] lo speed is unknown, defaulting to 1000 [ 357.003868][T13487] wg1 speed is unknown, defaulting to 1000 [ 357.019812][T13496] lo speed is unknown, defaulting to 1000 [ 357.050427][T13480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.057518][T13480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.084647][T13480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.098639][T13480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.105773][ T51] Bluetooth: hci6: command tx timeout [ 357.112329][T13480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.138747][T13480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.260950][ T51] Bluetooth: hci7: command tx timeout [ 357.492537][T13480] hsr_slave_0: entered promiscuous mode [ 357.498944][T13480] hsr_slave_1: entered promiscuous mode [ 357.506138][T13480] debugfs: 'hsr0' already exists in 'hsr' [ 357.512197][T13480] Cannot create hsr debugfs directory [ 357.530961][T13487] lo speed is unknown, defaulting to 1000 [ 357.545588][T13496] wg1 speed is unknown, defaulting to 1000 [ 357.588882][ T51] Bluetooth: hci8: command tx timeout [ 357.799654][T13483] chnl_net:caif_netlink_parms(): no params data found [ 357.975103][T13496] lo speed is unknown, defaulting to 1000 [ 358.175772][T13483] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.189597][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.197804][T13483] bridge_slave_0: entered allmulticast mode [ 358.206582][T13483] bridge_slave_0: entered promiscuous mode [ 358.238482][T13483] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.246141][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.253776][T13483] bridge_slave_1: entered allmulticast mode [ 358.262164][T13483] bridge_slave_1: entered promiscuous mode [ 358.307654][T13485] chnl_net:caif_netlink_parms(): no params data found [ 358.399738][T13483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.414098][T13483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.487013][T13483] team0: Port device team_slave_0 added [ 358.532568][T13483] team0: Port device team_slave_1 added [ 358.647458][T13483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.655099][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.683495][T13483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.700508][ T51] Bluetooth: hci9: command tx timeout [ 358.721553][T13485] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.728759][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.736401][T13485] bridge_slave_0: entered allmulticast mode [ 358.744024][T13485] bridge_slave_0: entered promiscuous mode [ 358.752911][T13483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.759890][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.787118][T13483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.814128][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.822150][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.829458][T13485] bridge_slave_1: entered allmulticast mode [ 358.837753][T13485] bridge_slave_1: entered promiscuous mode [ 358.860576][ T51] Bluetooth: hci5: command tx timeout [ 358.907210][T13496] chnl_net:caif_netlink_parms(): no params data found [ 358.942975][T13485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.952610][T13487] chnl_net:caif_netlink_parms(): no params data found [ 358.992828][T13485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.039884][T13483] hsr_slave_0: entered promiscuous mode [ 359.047501][T13483] hsr_slave_1: entered promiscuous mode [ 359.054396][T13483] debugfs: 'hsr0' already exists in 'hsr' [ 359.060153][T13483] Cannot create hsr debugfs directory [ 359.132213][T13485] team0: Port device team_slave_0 added [ 359.190750][ T51] Bluetooth: hci6: command tx timeout [ 359.202378][T13485] team0: Port device team_slave_1 added [ 359.340863][ T51] Bluetooth: hci7: command tx timeout [ 359.349894][T13485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.357007][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.383981][T13485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.397654][T13485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.404674][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.431595][T13485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.465379][T13496] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.473004][T13496] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.480718][T13496] bridge_slave_0: entered allmulticast mode [ 359.487920][T13496] bridge_slave_0: entered promiscuous mode [ 359.521785][T13487] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.528945][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.536547][T13487] bridge_slave_0: entered allmulticast mode [ 359.544911][T13487] bridge_slave_0: entered promiscuous mode [ 359.554090][T13496] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.564777][T13496] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.572648][T13496] bridge_slave_1: entered allmulticast mode [ 359.579898][T13496] bridge_slave_1: entered promiscuous mode [ 359.638031][T13487] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.646035][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.654081][T13487] bridge_slave_1: entered allmulticast mode [ 359.663052][T13487] bridge_slave_1: entered promiscuous mode [ 359.670672][ T51] Bluetooth: hci8: command tx timeout [ 359.694584][T13496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.762023][T13496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.802296][T13485] hsr_slave_0: entered promiscuous mode [ 359.808983][T13485] hsr_slave_1: entered promiscuous mode [ 359.815652][T13485] debugfs: 'hsr0' already exists in 'hsr' [ 359.822172][T13485] Cannot create hsr debugfs directory [ 359.859778][T13487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.877340][T13487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.927016][T13496] team0: Port device team_slave_0 added [ 359.956550][T13487] team0: Port device team_slave_0 added [ 359.965365][T13496] team0: Port device team_slave_1 added [ 360.007055][T13487] team0: Port device team_slave_1 added [ 360.137351][T13487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.144602][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.172270][T13487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.184301][T13496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.191860][T13496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.219295][T13496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.238075][T13496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.245414][T13496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.272282][T13496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.306997][T13487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.314502][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.341254][T13487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.486779][T13496] hsr_slave_0: entered promiscuous mode [ 360.494067][T13496] hsr_slave_1: entered promiscuous mode [ 360.500680][T13496] debugfs: 'hsr0' already exists in 'hsr' [ 360.506442][T13496] Cannot create hsr debugfs directory [ 360.551859][T13487] hsr_slave_0: entered promiscuous mode [ 360.559968][T13487] hsr_slave_1: entered promiscuous mode [ 360.568142][T13487] debugfs: 'hsr0' already exists in 'hsr' [ 360.574467][T13487] Cannot create hsr debugfs directory [ 360.782195][ T51] Bluetooth: hci9: command tx timeout [ 360.940539][ T51] Bluetooth: hci5: command tx timeout [ 361.270746][ T51] Bluetooth: hci6: command tx timeout [ 361.420886][ T51] Bluetooth: hci7: command tx timeout [ 361.740627][ T51] Bluetooth: hci8: command tx timeout [ 362.861197][ T51] Bluetooth: hci9: command tx timeout [ 363.020988][ T51] Bluetooth: hci5: command tx timeout [ 363.350621][ T51] Bluetooth: hci6: command tx timeout [ 363.500605][ T51] Bluetooth: hci7: command tx timeout [ 363.821256][ T51] Bluetooth: hci8: command tx timeout [ 364.940894][ T51] Bluetooth: hci9: command tx timeout [ 371.101292][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 180 seconds [ 371.113770][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 180 seconds [ 371.125006][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 180 seconds [ 378.784265][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.791144][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.181296][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 210 seconds [ 401.192386][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 210 seconds [ 401.203515][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 210 seconds [ 415.671576][ T5838] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 415.682234][ T5838] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 415.690560][ T5838] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 415.702493][ T5842] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 415.711114][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 415.731046][ T5838] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 415.738820][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 415.748960][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 415.759969][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 415.772855][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 415.793426][ T5838] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 415.812934][ T5838] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 415.821668][ T5838] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 415.830586][ T5838] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 415.838756][ T5838] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 415.899321][T13526] lo speed is unknown, defaulting to 1000 [ 415.907101][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 415.918822][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 415.927554][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 415.936819][ T5838] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 415.945810][ T5838] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 416.103730][T13530] lo speed is unknown, defaulting to 1000 [ 416.107797][T13526] wg1 speed is unknown, defaulting to 1000 [ 416.409130][T13528] lo speed is unknown, defaulting to 1000 [ 416.525191][T13530] wg1 speed is unknown, defaulting to 1000 [ 416.548664][T13526] lo speed is unknown, defaulting to 1000 [ 416.938038][T13532] lo speed is unknown, defaulting to 1000 [ 417.059352][T13526] chnl_net:caif_netlink_parms(): no params data found [ 417.227945][T13530] lo speed is unknown, defaulting to 1000 [ 417.233841][T13528] wg1 speed is unknown, defaulting to 1000 [ 417.299512][ T5159] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 417.309457][ T5159] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 417.318897][ T5159] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 417.327965][ T5159] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 417.336339][ T5159] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 417.504020][T13526] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.520703][T13526] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.528156][T13526] bridge_slave_0: entered allmulticast mode [ 417.553084][T13526] bridge_slave_0: entered promiscuous mode [ 417.573082][T13526] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.590536][T13526] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.597987][T13526] bridge_slave_1: entered allmulticast mode [ 417.607026][T13526] bridge_slave_1: entered promiscuous mode [ 417.733361][T13532] wg1 speed is unknown, defaulting to 1000 [ 417.748274][T13528] lo speed is unknown, defaulting to 1000 [ 417.754581][T13540] lo speed is unknown, defaulting to 1000 [ 417.766493][T13526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.785539][T13526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.830778][ T5159] Bluetooth: hci11: command tx timeout [ 417.837076][ T5159] Bluetooth: hci10: command tx timeout [ 417.901138][ T5159] Bluetooth: hci12: command tx timeout [ 417.980888][ T5159] Bluetooth: hci13: command tx timeout [ 418.057337][T13526] team0: Port device team_slave_0 added [ 418.142562][T13526] team0: Port device team_slave_1 added [ 418.328002][T13526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.330503][T13532] lo speed is unknown, defaulting to 1000 [ 418.342593][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.369626][T13526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.390584][T13526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.397570][T13526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.423841][T13526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.438314][T13540] wg1 speed is unknown, defaulting to 1000 [ 418.697163][T13530] chnl_net:caif_netlink_parms(): no params data found [ 418.741281][T13526] hsr_slave_0: entered promiscuous mode [ 418.748292][T13526] hsr_slave_1: entered promiscuous mode [ 418.755882][T13526] debugfs: 'hsr0' already exists in 'hsr' [ 418.764683][T13526] Cannot create hsr debugfs directory [ 418.893493][T13540] lo speed is unknown, defaulting to 1000 [ 419.055043][T13528] chnl_net:caif_netlink_parms(): no params data found [ 419.173264][T13530] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.180763][T13530] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.187967][T13530] bridge_slave_0: entered allmulticast mode [ 419.196663][T13530] bridge_slave_0: entered promiscuous mode [ 419.252706][T13530] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.259912][T13530] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.268192][T13530] bridge_slave_1: entered allmulticast mode [ 419.275831][T13530] bridge_slave_1: entered promiscuous mode [ 419.406452][T13530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.421383][ T5159] Bluetooth: hci14: command tx timeout [ 419.507557][T13530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.609089][T13528] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.616820][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.624844][T13528] bridge_slave_0: entered allmulticast mode [ 419.633465][T13528] bridge_slave_0: entered promiscuous mode [ 419.643352][T13532] chnl_net:caif_netlink_parms(): no params data found [ 419.669948][T13530] team0: Port device team_slave_0 added [ 419.677147][T13528] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.685134][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.693316][T13528] bridge_slave_1: entered allmulticast mode [ 419.701591][T13528] bridge_slave_1: entered promiscuous mode [ 419.735216][T13530] team0: Port device team_slave_1 added [ 419.890733][T13528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.902746][ T5838] Bluetooth: hci11: command tx timeout [ 419.909755][ T5159] Bluetooth: hci10: command tx timeout [ 419.922061][T13528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.932365][T13530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.939328][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.966776][T13530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.980758][ T5159] Bluetooth: hci12: command tx timeout [ 420.018062][T13530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.025392][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.053422][T13530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.064490][ T5159] Bluetooth: hci13: command tx timeout [ 420.179246][T13528] team0: Port device team_slave_0 added [ 420.207089][T13532] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.215279][T13532] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.223155][T13532] bridge_slave_0: entered allmulticast mode [ 420.231556][T13532] bridge_slave_0: entered promiscuous mode [ 420.265623][T13528] team0: Port device team_slave_1 added [ 420.324058][T13532] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.341931][T13532] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.349262][T13532] bridge_slave_1: entered allmulticast mode [ 420.358370][T13532] bridge_slave_1: entered promiscuous mode [ 420.471598][T13530] hsr_slave_0: entered promiscuous mode [ 420.478583][T13530] hsr_slave_1: entered promiscuous mode [ 420.485120][T13530] debugfs: 'hsr0' already exists in 'hsr' [ 420.491256][T13530] Cannot create hsr debugfs directory [ 420.497867][T13528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.505665][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.532573][T13528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.545931][T13528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.552991][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.580085][T13528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.593383][T13540] chnl_net:caif_netlink_parms(): no params data found [ 420.632218][T13532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.686780][T13532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.844684][T13528] hsr_slave_0: entered promiscuous mode [ 420.851495][T13528] hsr_slave_1: entered promiscuous mode [ 420.857817][T13528] debugfs: 'hsr0' already exists in 'hsr' [ 420.864133][T13528] Cannot create hsr debugfs directory [ 420.901729][T13532] team0: Port device team_slave_0 added [ 420.911815][T13532] team0: Port device team_slave_1 added [ 421.054942][T13540] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.063587][T13540] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.071462][T13540] bridge_slave_0: entered allmulticast mode [ 421.078825][T13540] bridge_slave_0: entered promiscuous mode [ 421.088888][T13532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.096509][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.123972][T13532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.137811][T13532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.145324][T13532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.173413][T13532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.211120][T13540] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.218554][T13540] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.226954][T13540] bridge_slave_1: entered allmulticast mode [ 421.234989][T13540] bridge_slave_1: entered promiscuous mode [ 421.384080][T13540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.399265][T13540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.501190][ T5159] Bluetooth: hci14: command tx timeout [ 421.555184][T13532] hsr_slave_0: entered promiscuous mode [ 421.561869][T13532] hsr_slave_1: entered promiscuous mode [ 421.568209][T13532] debugfs: 'hsr0' already exists in 'hsr' [ 421.575279][T13532] Cannot create hsr debugfs directory [ 421.612845][T13540] team0: Port device team_slave_0 added [ 421.661865][T13540] team0: Port device team_slave_1 added [ 421.763696][T13540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.771775][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.799388][T13540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.813894][T13540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.821187][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.847651][T13540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.978171][T13540] hsr_slave_0: entered promiscuous mode [ 421.985484][ T5838] Bluetooth: hci11: command tx timeout [ 421.989866][T13540] hsr_slave_1: entered promiscuous mode [ 421.992017][ T5159] Bluetooth: hci10: command tx timeout [ 422.005066][T13540] debugfs: 'hsr0' already exists in 'hsr' [ 422.011449][T13540] Cannot create hsr debugfs directory [ 422.061017][ T5159] Bluetooth: hci12: command tx timeout [ 422.140899][ T5159] Bluetooth: hci13: command tx timeout [ 423.580857][ T5159] Bluetooth: hci14: command tx timeout [ 424.060857][ T5838] Bluetooth: hci11: command tx timeout [ 424.060935][ T5159] Bluetooth: hci10: command tx timeout [ 424.151243][ T5159] Bluetooth: hci12: command tx timeout [ 424.220944][ T5159] Bluetooth: hci13: command tx timeout [ 425.660725][ T5159] Bluetooth: hci14: command tx timeout [ 431.261679][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 240 seconds [ 431.272706][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 240 seconds [ 431.284175][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 240 seconds [ 440.225213][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.236606][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.340940][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 270 seconds [ 461.351774][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 270 seconds [ 461.362944][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 270 seconds [ 476.297118][T13574] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 476.307814][T13574] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 476.316619][T13574] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 476.325699][T13574] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 476.338948][T13574] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 476.412584][T13574] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 476.425969][ T5850] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 476.435283][ T5850] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 476.435790][T13572] lo speed is unknown, defaulting to 1000 [ 476.449450][ T5850] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 476.449638][T13580] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 476.467985][T13580] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 476.469092][ T5850] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 476.486899][ T5850] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 476.486954][T13580] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 476.518037][ T5847] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 476.644652][ T5847] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 476.654091][ T5847] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 476.663462][ T5847] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 476.681085][ T5847] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 476.689092][ T5847] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 476.941743][T13572] wg1 speed is unknown, defaulting to 1000 [ 476.951036][T13575] lo speed is unknown, defaulting to 1000 [ 477.311086][ T5847] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 477.321429][ T5847] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 477.329773][ T5847] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 477.339635][ T5847] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 477.348596][ T5847] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 477.449238][T13584] lo speed is unknown, defaulting to 1000 [ 477.466443][T13575] wg1 speed is unknown, defaulting to 1000 [ 477.474270][T13572] lo speed is unknown, defaulting to 1000 [ 477.885456][T13576] lo speed is unknown, defaulting to 1000 [ 477.968142][T13572] chnl_net:caif_netlink_parms(): no params data found [ 478.052661][T13584] wg1 speed is unknown, defaulting to 1000 [ 478.061587][T13575] lo speed is unknown, defaulting to 1000 [ 478.142889][T13574] Bluetooth: hci5: command 0x0406 tx timeout [ 478.149001][T13574] Bluetooth: hci6: command 0x0406 tx timeout [ 478.156778][ T5847] Bluetooth: hci7: command 0x0406 tx timeout [ 478.156804][T13580] Bluetooth: hci8: command 0x0406 tx timeout [ 478.347228][T13581] lo speed is unknown, defaulting to 1000 [ 478.381176][ T5842] Bluetooth: hci15: command tx timeout [ 478.470682][T13572] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.478125][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.511246][T13572] bridge_slave_0: entered allmulticast mode [ 478.525904][T13572] bridge_slave_0: entered promiscuous mode [ 478.540999][ T5842] Bluetooth: hci17: command tx timeout [ 478.541901][ T5838] Bluetooth: hci16: command tx timeout [ 478.551360][T13572] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.559984][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.570772][T13572] bridge_slave_1: entered allmulticast mode [ 478.593694][T13572] bridge_slave_1: entered promiscuous mode [ 478.780497][ T5838] Bluetooth: hci18: command tx timeout [ 478.792981][T13572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.813549][T13584] lo speed is unknown, defaulting to 1000 [ 478.832034][T13576] wg1 speed is unknown, defaulting to 1000 [ 478.864944][T13572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.034020][T13572] team0: Port device team_slave_0 added [ 479.091108][T13572] team0: Port device team_slave_1 added [ 479.106233][T13575] chnl_net:caif_netlink_parms(): no params data found [ 479.245841][T13576] lo speed is unknown, defaulting to 1000 [ 479.252249][T13581] wg1 speed is unknown, defaulting to 1000 [ 479.283988][T13572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.300442][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.345793][T13572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.379759][T13572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.400664][T13572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.427424][ T5838] Bluetooth: hci19: command tx timeout [ 479.457758][T13572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.546224][T13581] lo speed is unknown, defaulting to 1000 [ 479.759178][T13572] hsr_slave_0: entered promiscuous mode [ 479.766230][T13572] hsr_slave_1: entered promiscuous mode [ 479.774180][T13572] debugfs: 'hsr0' already exists in 'hsr' [ 479.780035][T13572] Cannot create hsr debugfs directory [ 479.828518][T13575] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.836656][T13575] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.845091][T13575] bridge_slave_0: entered allmulticast mode [ 479.853587][T13575] bridge_slave_0: entered promiscuous mode [ 479.864092][T13575] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.871699][T13575] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.878956][T13575] bridge_slave_1: entered allmulticast mode [ 479.886825][T13575] bridge_slave_1: entered promiscuous mode [ 480.093182][T13575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.155482][T13575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.165852][T13584] chnl_net:caif_netlink_parms(): no params data found [ 480.336730][T13575] team0: Port device team_slave_0 added [ 480.412560][T13575] team0: Port device team_slave_1 added [ 480.462536][ T5838] Bluetooth: hci15: command tx timeout [ 480.621593][ T5838] Bluetooth: hci17: command tx timeout [ 480.621608][ T5842] Bluetooth: hci16: command tx timeout [ 480.647651][T13575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.655756][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.684281][T13575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.696748][T13576] chnl_net:caif_netlink_parms(): no params data found [ 480.711501][T13584] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.718707][T13584] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.726529][T13584] bridge_slave_0: entered allmulticast mode [ 480.735232][T13584] bridge_slave_0: entered promiscuous mode [ 480.798372][T13575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.807285][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.834038][T13575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.860600][ T5838] Bluetooth: hci18: command tx timeout [ 480.871367][T13584] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.878633][T13584] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.886179][T13584] bridge_slave_1: entered allmulticast mode [ 480.895626][T13584] bridge_slave_1: entered promiscuous mode [ 481.135442][T13584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.152815][T13575] hsr_slave_0: entered promiscuous mode [ 481.161033][T13575] hsr_slave_1: entered promiscuous mode [ 481.167714][T13575] debugfs: 'hsr0' already exists in 'hsr' [ 481.173943][T13575] Cannot create hsr debugfs directory [ 481.179878][T13581] chnl_net:caif_netlink_parms(): no params data found [ 481.221705][T13584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.387859][T13584] team0: Port device team_slave_0 added [ 481.397989][T13584] team0: Port device team_slave_1 added [ 481.501744][ T5842] Bluetooth: hci19: command tx timeout [ 481.568645][T13576] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.577213][T13576] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.585461][T13576] bridge_slave_0: entered allmulticast mode [ 481.595140][T13576] bridge_slave_0: entered promiscuous mode [ 481.625137][T13584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.632748][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.659722][T13584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.699014][T13576] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.706965][T13576] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.715818][T13576] bridge_slave_1: entered allmulticast mode [ 481.724451][T13576] bridge_slave_1: entered promiscuous mode [ 481.753731][T13584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.761019][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.787768][T13584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.818818][T13581] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.827065][T13581] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.835045][T13581] bridge_slave_0: entered allmulticast mode [ 481.843929][T13581] bridge_slave_0: entered promiscuous mode [ 481.917725][T13581] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.925604][T13581] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.934491][T13581] bridge_slave_1: entered allmulticast mode [ 481.944027][T13581] bridge_slave_1: entered promiscuous mode [ 481.974780][T13576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.989726][T13576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.139110][T13581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.155311][T13581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.193038][T13584] hsr_slave_0: entered promiscuous mode [ 482.200751][T13584] hsr_slave_1: entered promiscuous mode [ 482.207483][T13584] debugfs: 'hsr0' already exists in 'hsr' [ 482.213787][T13584] Cannot create hsr debugfs directory [ 482.252693][T13576] team0: Port device team_slave_0 added [ 482.298348][T13581] team0: Port device team_slave_0 added [ 482.329458][T13576] team0: Port device team_slave_1 added [ 482.389975][T13581] team0: Port device team_slave_1 added [ 482.497334][T13576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.505304][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.532452][T13576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.544198][ T5842] Bluetooth: hci15: command tx timeout [ 482.596037][T13576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.605064][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.632999][T13576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.655006][T13581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.663928][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.691020][T13581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.702276][ T5842] Bluetooth: hci17: command tx timeout [ 482.710811][ T5842] Bluetooth: hci16: command tx timeout [ 482.736982][T13581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.744684][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.772005][T13581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.878720][T13576] hsr_slave_0: entered promiscuous mode [ 482.893430][T13576] hsr_slave_1: entered promiscuous mode [ 482.901812][T13576] debugfs: 'hsr0' already exists in 'hsr' [ 482.907681][T13576] Cannot create hsr debugfs directory [ 482.941019][ T5842] Bluetooth: hci18: command tx timeout [ 483.033210][T13581] hsr_slave_0: entered promiscuous mode [ 483.041962][T13581] hsr_slave_1: entered promiscuous mode [ 483.048701][T13581] debugfs: 'hsr0' already exists in 'hsr' [ 483.055250][T13581] Cannot create hsr debugfs directory [ 483.278620][ T5838] Bluetooth: hci9: command 0x0406 tx timeout [ 483.581294][ T5838] Bluetooth: hci19: command tx timeout [ 484.621180][ T5838] Bluetooth: hci15: command tx timeout [ 484.790757][ T5838] Bluetooth: hci16: command tx timeout [ 484.791013][ T5842] Bluetooth: hci17: command tx timeout [ 485.030681][ T5842] Bluetooth: hci18: command tx timeout [ 485.660892][ T5842] Bluetooth: hci19: command tx timeout [ 491.421472][ T31] INFO: task syz.1.1938:13423 blocked for more than 143 seconds. [ 491.429264][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 491.438048][ T55] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 300 seconds [ 491.448986][ T55] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 300 seconds [ 491.455916][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 491.460378][ T55] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 300 seconds [ 491.481499][ T31] task:syz.1.1938 state:D stack:25896 pid:13423 tgid:13422 ppid:5835 task_flags:0x400140 flags:0x00004004 [ 491.494128][ T31] Call Trace: [ 491.497438][ T31] [ 491.501661][ T31] __schedule+0x1737/0x4d30 [ 491.506237][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.520327][ T31] ? schedule+0x165/0x360 [ 491.524719][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.529611][ T31] ? __pfx___schedule+0x10/0x10 [ 491.535166][ T31] ? schedule+0x91/0x360 [ 491.539449][ T31] schedule+0x165/0x360 [ 491.545069][ T31] schedule_preempt_disabled+0x13/0x30 [ 491.551176][ T31] __mutex_lock+0x7e3/0x1340 [ 491.555818][ T31] ? __mutex_lock+0x5b6/0x1340 [ 491.561190][ T31] ? genl_rcv_msg+0x10d/0x790 [ 491.565915][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 491.590727][ T31] ? stack_trace_save+0x9c/0xe0 [ 491.595875][ T31] ? radix_tree_lookup+0x240/0x290 [ 491.601462][ T31] genl_rcv_msg+0x10d/0x790 [ 491.606004][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.611266][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.616536][ T31] netlink_rcv_skb+0x205/0x470 [ 491.621686][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.626574][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.631905][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.637250][ T31] ? down_read+0x1ad/0x2e0 [ 491.642037][ T31] genl_rcv+0x28/0x40 [ 491.646056][ T31] netlink_unicast+0x82c/0x9e0 [ 491.651022][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 491.656348][ T31] ? netlink_sendmsg+0x642/0xb30 [ 491.661702][ T31] ? skb_put+0x11b/0x210 [ 491.665980][ T31] netlink_sendmsg+0x805/0xb30 [ 491.670888][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.676215][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 491.684223][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.689554][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.695118][ T31] __sock_sendmsg+0x219/0x270 [ 491.699838][ T31] ____sys_sendmsg+0x505/0x830 [ 491.704949][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.710437][ T31] ? import_iovec+0x74/0xa0 [ 491.716105][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 491.721427][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.726654][ T31] ? futex_wait+0x285/0x360 [ 491.731280][ T31] ? _copy_to_user+0x8a/0xb0 [ 491.735943][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 491.741410][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.746903][ T31] ? rcu_is_watching+0x15/0xb0 [ 491.751991][ T31] ? do_syscall_64+0xbe/0x3b0 [ 491.756727][ T31] do_syscall_64+0xfa/0x3b0 [ 491.761508][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.766746][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.772999][ T31] ? clear_bhb_loop+0x60/0xb0 [ 491.777707][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.783818][ T31] RIP: 0033:0x7f664d38eb69 [ 491.788388][ T31] RSP: 002b:00007f664e171038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.798297][ T31] RAX: ffffffffffffffda RBX: 00007f664d5b5fa0 RCX: 00007f664d38eb69 [ 491.806438][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 491.814834][ T31] RBP: 00007f664d411df1 R08: 0000000000000000 R09: 0000000000000000 [ 491.823879][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.832660][ T31] R13: 0000000000000000 R14: 00007f664d5b5fa0 R15: 00007ffcd96bcf88 [ 491.841107][ T31] [ 491.844162][ T31] INFO: task syz.1.1938:13427 blocked for more than 143 seconds. [ 491.852515][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 491.859904][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.869724][ T31] task:syz.1.1938 state:D stack:24808 pid:13427 tgid:13422 ppid:5835 task_flags:0x480140 flags:0x00004004 [ 491.882002][ T31] Call Trace: [ 491.885397][ T31] [ 491.888357][ T31] __schedule+0x1737/0x4d30 [ 491.893004][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.897907][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.903860][ T31] ? schedule+0x165/0x360 [ 491.908252][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.913506][ T31] ? __pfx___schedule+0x10/0x10 [ 491.918430][ T31] ? schedule+0x91/0x360 [ 491.923068][ T31] schedule+0x165/0x360 [ 491.927261][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 491.932969][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 491.939072][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 491.945749][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 491.951773][ T31] queue_limits_commit_update_frozen+0x5e/0x360 [ 491.958056][ T31] ? nbd_set_size+0x2ab/0x6a0 [ 491.963100][ T31] nbd_set_size+0x47e/0x6a0 [ 491.967646][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 491.972873][ T31] ? nla_memcpy+0x5b/0xc0 [ 491.977234][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 491.982753][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 491.988245][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 491.994410][ T31] ? bpf_lsm_capable+0x9/0x20 [ 491.999119][ T31] ? security_capable+0x7e/0x2e0 [ 492.004501][ T31] ? radix_tree_lookup+0x240/0x290 [ 492.009624][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 492.015133][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 492.021216][ T31] ? __nla_parse+0x40/0x60 [ 492.025683][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 492.032211][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 492.037930][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 492.044339][ T31] ? stack_trace_save+0x9c/0xe0 [ 492.049395][ T31] genl_rcv_msg+0x60e/0x790 [ 492.054267][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.059332][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 492.066891][ T31] netlink_rcv_skb+0x205/0x470 [ 492.071900][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.076805][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.082202][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.087537][ T31] ? down_read+0x1ad/0x2e0 [ 492.092161][ T31] genl_rcv+0x28/0x40 [ 492.096162][ T31] netlink_unicast+0x82c/0x9e0 [ 492.101400][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 492.106891][ T31] ? netlink_sendmsg+0x642/0xb30 [ 492.111978][ T31] ? skb_put+0x11b/0x210 [ 492.116271][ T31] netlink_sendmsg+0x805/0xb30 [ 492.121433][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.126757][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 492.131878][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.137195][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.142929][ T31] __sock_sendmsg+0x219/0x270 [ 492.147665][ T31] ____sys_sendmsg+0x505/0x830 [ 492.152577][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.157905][ T31] ? import_iovec+0x74/0xa0 [ 492.162972][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 492.167695][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.173080][ T31] ? __fget_files+0x2a/0x420 [ 492.177693][ T31] ? __fget_files+0x3a0/0x420 [ 492.183052][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 492.188018][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.193640][ T31] ? rcu_is_watching+0x15/0xb0 [ 492.198449][ T31] ? do_syscall_64+0xbe/0x3b0 [ 492.203373][ T31] do_syscall_64+0xfa/0x3b0 [ 492.207955][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.213287][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.219402][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.230391][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.236426][ T31] RIP: 0033:0x7f664d38eb69 [ 492.242236][ T31] RSP: 002b:00007f664e150038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.250814][ T31] RAX: ffffffffffffffda RBX: 00007f664d5b6080 RCX: 00007f664d38eb69 [ 492.258824][ T31] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 492.267175][ T31] RBP: 00007f664d411df1 R08: 0000000000000000 R09: 0000000000000000 [ 492.275586][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.283927][ T31] R13: 0000000000000000 R14: 00007f664d5b6080 R15: 00007ffcd96bcf88 [ 492.292111][ T31] [ 492.295187][ T31] INFO: task syz.2.1943:13436 blocked for more than 144 seconds. [ 492.303803][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 492.311553][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.320835][ T31] task:syz.2.1943 state:D stack:26280 pid:13436 tgid:13434 ppid:5852 task_flags:0x400140 flags:0x00004004 [ 492.333123][ T31] Call Trace: [ 492.336461][ T31] [ 492.339425][ T31] __schedule+0x1737/0x4d30 [ 492.344586][ T31] ? arch_stack_walk+0xfc/0x150 [ 492.349476][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.354770][ T31] ? schedule+0x165/0x360 [ 492.359129][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.364513][ T31] ? __pfx___schedule+0x10/0x10 [ 492.369608][ T31] ? schedule+0x91/0x360 [ 492.374198][ T31] schedule+0x165/0x360 [ 492.378385][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.385134][ T31] __mutex_lock+0x7e3/0x1340 [ 492.389769][ T31] ? __mutex_lock+0x5b6/0x1340 [ 492.394866][ T31] ? genl_rcv_msg+0x10d/0x790 [ 492.399590][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.405189][ T31] ? stack_trace_save+0x9c/0xe0 [ 492.410089][ T31] ? radix_tree_lookup+0x240/0x290 [ 492.415669][ T31] genl_rcv_msg+0x10d/0x790 [ 492.420589][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.425481][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.430681][ T31] netlink_rcv_skb+0x205/0x470 [ 492.435555][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.440753][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.445896][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.451507][ T31] ? down_read+0x1ad/0x2e0 [ 492.455953][ T31] genl_rcv+0x28/0x40 [ 492.459961][ T31] netlink_unicast+0x82c/0x9e0 [ 492.465486][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 492.471052][ T31] ? netlink_sendmsg+0x642/0xb30 [ 492.476025][ T31] ? skb_put+0x11b/0x210 [ 492.480632][ T31] netlink_sendmsg+0x805/0xb30 [ 492.485451][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.491153][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 492.496134][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.502134][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.507668][ T31] __sock_sendmsg+0x219/0x270 [ 492.512668][ T31] __sys_sendto+0x3bd/0x520 [ 492.517446][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 492.522860][ T31] ? count_memcg_event_mm+0x21/0x260 [ 492.528201][ T31] ? exc_page_fault+0x76/0xf0 [ 492.532983][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 492.538299][ T31] __x64_sys_sendto+0xde/0x100 [ 492.543815][ T31] do_syscall_64+0xfa/0x3b0 [ 492.548377][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.553727][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.559941][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.565029][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.571105][ T31] RIP: 0033:0x7f4f305909fc [ 492.575544][ T31] RSP: 002b:00007f4f314a1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 492.584305][ T31] RAX: ffffffffffffffda RBX: 00007f4f314a1fc0 RCX: 00007f4f305909fc [ 492.592417][ T31] RDX: 000000000000001c RSI: 00007f4f314a2010 RDI: 0000000000000010 [ 492.601034][ T31] RBP: 0000000000000000 R08: 00007f4f314a1f14 R09: 000000000000000c [ 492.609042][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 [ 492.617426][ T31] R13: 00007f4f314a1f68 R14: 00007f4f314a2010 R15: 0000000000000000 [ 492.625766][ T31] [ 492.628851][ T31] INFO: task syz.0.1942:13449 blocked for more than 144 seconds. [ 492.638153][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 492.646207][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.655086][ T31] task:syz.0.1942 state:D stack:28360 pid:13449 tgid:13437 ppid:5844 task_flags:0x400040 flags:0x00004004 [ 492.667549][ T31] Call Trace: [ 492.670978][ T31] [ 492.673941][ T31] __schedule+0x1737/0x4d30 [ 492.678479][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.683411][ T31] ? schedule+0x165/0x360 [ 492.687776][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.693031][ T31] ? __pfx___schedule+0x10/0x10 [ 492.697932][ T31] ? schedule+0x91/0x360 [ 492.703208][ T31] schedule+0x165/0x360 [ 492.707419][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.713968][ T31] __mutex_lock+0x7e3/0x1340 [ 492.718724][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 492.724229][ T31] ? __mutex_lock+0x5b6/0x1340 [ 492.729036][ T31] ? genl_rcv_msg+0x10d/0x790 [ 492.733931][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.738989][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 492.744659][ T31] ? radix_tree_lookup+0x240/0x290 [ 492.749803][ T31] genl_rcv_msg+0x10d/0x790 [ 492.754407][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.759454][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 492.764840][ T31] ? __asan_memcpy+0x40/0x70 [ 492.769477][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 492.775027][ T31] netlink_rcv_skb+0x205/0x470 [ 492.779915][ T31] ? __lock_acquire+0xab9/0xd20 [ 492.785251][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.790450][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.795797][ T31] ? down_read+0x1ad/0x2e0 [ 492.800600][ T31] genl_rcv+0x28/0x40 [ 492.804607][ T31] netlink_unicast+0x82c/0x9e0 [ 492.809416][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 492.814875][ T31] ? netlink_sendmsg+0x642/0xb30 [ 492.819840][ T31] ? skb_put+0x11b/0x210 [ 492.824761][ T31] netlink_sendmsg+0x805/0xb30 [ 492.829581][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.835083][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 492.840057][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.845777][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.852503][ T31] __sock_sendmsg+0x219/0x270 [ 492.857227][ T31] __sys_sendto+0x3bd/0x520 [ 492.862541][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 492.867628][ T31] ? count_memcg_event_mm+0x21/0x260 [ 492.873022][ T31] ? exc_page_fault+0x76/0xf0 [ 492.877836][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 492.883475][ T31] __x64_sys_sendto+0xde/0x100 [ 492.888274][ T31] do_syscall_64+0xfa/0x3b0 [ 492.892860][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.898703][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.904979][ T31] ? clear_bhb_loop+0x60/0xb0 [ 492.909779][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.916111][ T31] RIP: 0033:0x7fc85dd909fc [ 492.920609][ T31] RSP: 002b:00007fc85ec59ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 492.929138][ T31] RAX: ffffffffffffffda RBX: 00007fc85ec59fc0 RCX: 00007fc85dd909fc [ 492.938764][ T31] RDX: 0000000000000024 RSI: 00007fc85ec5a010 RDI: 0000000000000008 [ 492.947898][ T31] RBP: 0000000000000000 R08: 00007fc85ec59f14 R09: 000000000000000c [ 492.955956][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 492.964115][ T31] R13: 00007fc85ec59f68 R14: 00007fc85ec5a010 R15: 0000000000000000 [ 492.972471][ T31] [ 492.975542][ T31] INFO: task syz.3.1946:13463 blocked for more than 144 seconds. [ 492.983448][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 492.990832][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.999530][ T31] task:syz.3.1946 state:D stack:22792 pid:13463 tgid:13462 ppid:5843 task_flags:0x400140 flags:0x00004004 [ 493.011840][ T31] Call Trace: [ 493.015142][ T31] [ 493.018101][ T31] __schedule+0x1737/0x4d30 [ 493.023100][ T31] ? arch_stack_walk+0xfc/0x150 [ 493.028157][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.033163][ T31] ? schedule+0x165/0x360 [ 493.037532][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.044429][ T31] ? __pfx___schedule+0x10/0x10 [ 493.049340][ T31] ? schedule+0x91/0x360 [ 493.054203][ T31] schedule+0x165/0x360 [ 493.058511][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.064410][ T31] __mutex_lock+0x7e3/0x1340 [ 493.069095][ T31] ? __mutex_lock+0x5b6/0x1340 [ 493.074297][ T31] ? genl_rcv_msg+0x10d/0x790 [ 493.079275][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.084775][ T31] ? stack_trace_save+0x9c/0xe0 [ 493.089667][ T31] ? radix_tree_lookup+0x240/0x290 [ 493.094949][ T31] genl_rcv_msg+0x10d/0x790 [ 493.099480][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.105581][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.110893][ T31] netlink_rcv_skb+0x205/0x470 [ 493.115784][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.121064][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.126210][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.131840][ T31] ? down_read+0x1ad/0x2e0 [ 493.136284][ T31] genl_rcv+0x28/0x40 [ 493.140575][ T31] netlink_unicast+0x82c/0x9e0 [ 493.145391][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 493.152747][ T31] ? netlink_sendmsg+0x642/0xb30 [ 493.157743][ T31] ? skb_put+0x11b/0x210 [ 493.162445][ T31] netlink_sendmsg+0x805/0xb30 [ 493.167261][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.172835][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 493.177809][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.183491][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.188837][ T31] __sock_sendmsg+0x219/0x270 [ 493.193679][ T31] __sys_sendto+0x3bd/0x520 [ 493.198228][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 493.203791][ T31] ? count_memcg_event_mm+0x21/0x260 [ 493.209156][ T31] ? exc_page_fault+0x76/0xf0 [ 493.214111][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 493.219533][ T31] __x64_sys_sendto+0xde/0x100 [ 493.224648][ T31] do_syscall_64+0xfa/0x3b0 [ 493.229881][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.235452][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.241870][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.246588][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.252716][ T31] RIP: 0033:0x7fce9eb909fc [ 493.257240][ T31] RSP: 002b:00007fce9f91aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 493.267235][ T31] RAX: ffffffffffffffda RBX: 00007fce9f91afc0 RCX: 00007fce9eb909fc [ 493.276532][ T31] RDX: 000000000000001c RSI: 00007fce9f91b010 RDI: 0000000000000004 [ 493.284683][ T31] RBP: 0000000000000000 R08: 00007fce9f91af14 R09: 000000000000000c [ 493.293085][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 493.301509][ T31] R13: 00007fce9f91af68 R14: 00007fce9f91b010 R15: 0000000000000000 [ 493.309534][ T31] [ 493.312705][ T31] INFO: task syz.4.1948:13474 blocked for more than 145 seconds. [ 493.321196][ T31] Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 [ 493.328509][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.337558][ T31] task:syz.4.1948 state:D stack:27336 pid:13474 tgid:13473 ppid:5839 task_flags:0x400140 flags:0x00004004 [ 493.349927][ T31] Call Trace: [ 493.354210][ T31] [ 493.357266][ T31] __schedule+0x1737/0x4d30 [ 493.362352][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.367245][ T31] ? schedule+0x165/0x360 [ 493.371727][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.377245][ T31] ? __pfx___schedule+0x10/0x10 [ 493.382357][ T31] ? schedule+0x91/0x360 [ 493.386640][ T31] schedule+0x165/0x360 [ 493.391319][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.396844][ T31] __mutex_lock+0x7e3/0x1340 [ 493.401528][ T31] ? __mutex_lock+0x5b6/0x1340 [ 493.406507][ T31] ? genl_rcv_msg+0x10d/0x790 [ 493.411292][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.416364][ T31] ? stack_trace_save+0x9c/0xe0 [ 493.422561][ T31] ? radix_tree_lookup+0x240/0x290 [ 493.427724][ T31] genl_rcv_msg+0x10d/0x790 [ 493.432348][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.437365][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.442861][ T31] netlink_rcv_skb+0x205/0x470 [ 493.447744][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.452933][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.457993][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.463555][ T31] ? down_read+0x1ad/0x2e0 [ 493.468012][ T31] genl_rcv+0x28/0x40 [ 493.472094][ T31] netlink_unicast+0x82c/0x9e0 [ 493.477077][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 493.482686][ T31] ? netlink_sendmsg+0x642/0xb30 [ 493.487765][ T31] ? skb_put+0x11b/0x210 [ 493.492286][ T31] netlink_sendmsg+0x805/0xb30 [ 493.497100][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.502727][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 493.507704][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.513341][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.518670][ T31] __sock_sendmsg+0x219/0x270 [ 493.523533][ T31] __sys_sendto+0x3bd/0x520 [ 493.528093][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 493.533244][ T31] ? count_memcg_event_mm+0x21/0x260 [ 493.538773][ T31] ? exc_page_fault+0x76/0xf0 [ 493.543931][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 493.549335][ T31] __x64_sys_sendto+0xde/0x100 [ 493.554208][ T31] do_syscall_64+0xfa/0x3b0 [ 493.558741][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.564319][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.570760][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.575474][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.581697][ T31] RIP: 0033:0x7f90e5d909fc [ 493.586147][ T31] RSP: 002b:00007f90e6b33ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 493.594677][ T31] RAX: ffffffffffffffda RBX: 00007f90e6b33fc0 RCX: 00007f90e5d909fc [ 493.603099][ T31] RDX: 0000000000000020 RSI: 00007f90e6b34010 RDI: 0000000000000004 [ 493.611170][ T31] RBP: 0000000000000000 R08: 00007f90e6b33f14 R09: 000000000000000c [ 493.619159][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 493.627297][ T31] R13: 00007f90e6b33f68 R14: 00007f90e6b34010 R15: 0000000000000000 [ 493.635627][ T31] [ 493.638713][ T31] [ 493.638713][ T31] Showing all locks held in the system: [ 493.646799][ T31] 3 locks held by kworker/u8:0/12: [ 493.652062][ T31] 1 lock held by khungtaskd/31: [ 493.656925][ T31] #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 493.667454][ T31] 2 locks held by kworker/u8:3/49: [ 493.672915][ T31] 2 locks held by getty/5605: [ 493.677610][ T31] #0: ffff888030eff0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 493.687808][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 493.698658][ T31] 1 lock held by udevd/8375: [ 493.704825][ T31] #0: ffff888142fd3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 493.714787][ T31] 2 locks held by syz.1.1938/13423: [ 493.720013][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.728764][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.737939][ T31] 6 locks held by syz.1.1938/13427: [ 493.743700][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.752313][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.761419][ T31] #2: ffff888142fe0a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 493.771950][ T31] #3: ffff8880250e5f58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 493.781964][ T31] #4: ffff8880250e58f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 493.794377][ T31] #5: ffff8880250e5930 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 493.806759][ T31] 2 locks held by syz.2.1943/13436: [ 493.812534][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.820963][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.829998][ T31] 2 locks held by syz.0.1942/13449: [ 493.835514][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.844377][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.853784][ T31] 2 locks held by syz.3.1946/13463: [ 493.858998][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.867452][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.876811][ T31] 2 locks held by syz.4.1948/13474: [ 493.882101][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.890447][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.899468][ T31] 2 locks held by syz-executor/13480: [ 493.905326][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.913793][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.923090][ T31] 2 locks held by syz-executor/13483: [ 493.928688][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.937222][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.946419][ T31] 2 locks held by syz-executor/13485: [ 493.953323][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.962073][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.971330][ T31] 2 locks held by syz-executor/13487: [ 493.976716][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 493.985919][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 493.995487][ T31] 2 locks held by syz-executor/13496: [ 494.001107][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.009525][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.018663][ T31] 2 locks held by syz-executor/13526: [ 494.024469][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.032805][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.041920][ T31] 2 locks held by syz-executor/13528: [ 494.047320][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.056130][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.065827][ T31] 2 locks held by syz-executor/13530: [ 494.071869][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.080136][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.089933][ T31] 2 locks held by syz-executor/13532: [ 494.096944][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.105962][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.115715][ T31] 2 locks held by syz-executor/13540: [ 494.121289][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.129521][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.138582][ T31] 2 locks held by syz-executor/13572: [ 494.144517][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.152951][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.162073][ T31] 2 locks held by syz-executor/13575: [ 494.167516][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.176244][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.185656][ T31] 2 locks held by syz-executor/13576: [ 494.191258][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.199490][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.209004][ T31] 2 locks held by syz-executor/13581: [ 494.214447][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.223180][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.232691][ T31] 2 locks held by syz-executor/13584: [ 494.238090][ T31] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.246514][ T31] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 494.255794][ T31] [ 494.258145][ T31] ============================================= [ 494.258145][ T31] [ 494.267225][ T31] NMI backtrace for cpu 1 [ 494.267242][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 494.267266][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.267278][ T31] Call Trace: [ 494.267285][ T31] [ 494.267294][ T31] dump_stack_lvl+0x189/0x250 [ 494.267323][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.267345][ T31] ? __pfx__printk+0x10/0x10 [ 494.267383][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 494.267412][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 494.267439][ T31] ? __pfx__printk+0x10/0x10 [ 494.267468][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 494.267500][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 494.267527][ T31] watchdog+0xf93/0xfe0 [ 494.267559][ T31] ? watchdog+0x1de/0xfe0 [ 494.267591][ T31] kthread+0x70e/0x8a0 [ 494.267618][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.267643][ T31] ? __pfx_kthread+0x10/0x10 [ 494.267669][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.267692][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.267718][ T31] ? __pfx_kthread+0x10/0x10 [ 494.267741][ T31] ret_from_fork+0x3fc/0x770 [ 494.267783][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.267819][ T31] ? __switch_to_asm+0x39/0x70 [ 494.267840][ T31] ? __switch_to_asm+0x33/0x70 [ 494.267860][ T31] ? __pfx_kthread+0x10/0x10 [ 494.267885][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.267926][ T31] [ 494.267934][ T31] Sending NMI from CPU 1 to CPUs 0: [ 494.418568][ C0] NMI backtrace for cpu 0 [ 494.418588][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 494.418607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.418617][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 494.418645][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 6f 18 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 494.418660][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 494.418675][ C0] RAX: 67080192f356d900 RBX: ffffffff81969b18 RCX: 67080192f356d900 [ 494.418687][ C0] RDX: 0000000000000001 RSI: ffffffff8d9790f8 RDI: ffffffff8be30a00 [ 494.418699][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 494.418710][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa07af0 [ 494.418722][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a18 [ 494.418733][ C0] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 494.418746][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.418757][ C0] CR2: 00007fa5a22e7d60 CR3: 000000000df38000 CR4: 00000000003526f0 [ 494.418774][ C0] Call Trace: [ 494.418782][ C0] [ 494.418788][ C0] default_idle+0x13/0x20 [ 494.418803][ C0] default_idle_call+0x74/0xb0 [ 494.418819][ C0] do_idle+0x1e8/0x510 [ 494.418844][ C0] ? __pfx_do_idle+0x10/0x10 [ 494.418874][ C0] cpu_startup_entry+0x44/0x60 [ 494.418896][ C0] rest_init+0x2de/0x300 [ 494.418913][ C0] start_kernel+0x3a9/0x410 [ 494.418939][ C0] x86_64_start_reservations+0x24/0x30 [ 494.418957][ C0] x86_64_start_kernel+0x143/0x1c0 [ 494.418975][ C0] common_startup_64+0x13e/0x147 [ 494.419001][ C0] [ 494.419595][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 494.603280][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 494.614747][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.625157][ T31] Call Trace: [ 494.628529][ T31] [ 494.631464][ T31] dump_stack_lvl+0x99/0x250 [ 494.636064][ T31] ? __asan_memcpy+0x40/0x70 [ 494.640677][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.645885][ T31] ? __pfx__printk+0x10/0x10 [ 494.650499][ T31] panic+0x2db/0x790 [ 494.654405][ T31] ? __pfx_panic+0x10/0x10 [ 494.658823][ T31] ? __pfx___x2apic_send_IPI_mask+0x10/0x10 [ 494.664735][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 494.670924][ T31] watchdog+0xfd2/0xfe0 [ 494.675097][ T31] ? watchdog+0x1de/0xfe0 [ 494.679436][ T31] kthread+0x70e/0x8a0 [ 494.683513][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.688285][ T31] ? __pfx_kthread+0x10/0x10 [ 494.692884][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.698092][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.703384][ T31] ? __pfx_kthread+0x10/0x10 [ 494.707983][ T31] ret_from_fork+0x3fc/0x770 [ 494.712612][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.717826][ T31] ? __switch_to_asm+0x39/0x70 [ 494.722596][ T31] ? __switch_to_asm+0x33/0x70 [ 494.727451][ T31] ? __pfx_kthread+0x10/0x10 [ 494.732141][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.736929][ T31] [ 494.740291][ T31] Kernel Offset: disabled [ 494.744787][ T31] Rebooting in 86400 seconds..