last executing test programs: 30.781201934s ago: executing program 4 (id=3609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) read(r1, &(0x7f0000000300)=""/212, 0xd4) syz_emit_ethernet(0x6a, &(0x7f0000001440)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0, @ANYBLOB="ede88f4531de0ca4d15149cdbc6ea1a2fb054df58805f625b80ad32a8f908834c20dbeb56f06efc4b52011e3c6411aaef73d97e26270459b36cd947b6a9c1638b5bbe1799a715791ee551bbc2c3771fc54717197741a0afb1508f5e70cfb639452459b1a54cb16187fb11292ee631f6c29cad129feb1d1db12", @ANYRES8=r0], 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="91a3fc97e483042217b1dda2e6cb46b61540f531167f04fb29bc7bbc28751747dbf3861692c4c03cf0234cbfbc45413f30a07e6bd626249b466c939a284854586ee0f6343b3275", @ANYBLOB="410000000000000d01000603000013000300060a0004090300f006e8ffff00000000080007003a3a09f8130002"], 0x44}, 0x1, 0x1000000}, 0x4000844) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0100001000010000003800fddbdf94d325fea23b000000000000000000000000aaffffffff8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000020000000000002000700af000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0010000"], 0x13c}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001500)={&(0x7f0000000280)='f2fs_lookup_extent_tree_start\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x1000, @empty, 0x8}}, 0x5, 0x6, 0xa, 0x4, 0x2}, &(0x7f0000000040)=0x98) socket(0x1e, 0x5, 0x0) 29.911656955s ago: executing program 4 (id=3622): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311850100df24cd0002000000b7000000000000120077703a000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x0, 0x9, 0x64}, 0x2c) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff64, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x100, 0x1, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 29.855596869s ago: executing program 4 (id=3624): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x1, 0x6, 0x0, 0x5, 0x5, 0x79, 0x3}, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000000) syz_emit_ethernet(0x42e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "a3fc00", 0x3f8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0x4, 0xc18, 0xa000010, [{0x3, 0x14, "e71f8e70c28ec69e8ebe36aca03a343cbfbd82c7b4788d9f5e26ff1ff40a4572988b545c2c7f46e027f5f058d3a20bd75b518999f69f73fd43b26b59422724c3d26b021d0f215b77f276fd8c09b9a8f636fc53b62f654bd7ea12660d45d8af19e9cc6eb5a024f086e9c8dfef81a25cc6361c3f1ff0e6738d612ce2fcfc864eb187d7f93a550397138b8b35aa4ff465f56ff147340b0dc170df0000000000"}, {0x3, 0xd, "ad76198c18d1313cc877cfdffd832556357f0d4509e2a7b895c47fe891c2c7407af9c873a3595d3c015c06028675b479c67091ecb309bc3612cc4f731686381c2ab65ec1db6441cddf9cc3010837d0bc576b97ca438056094843b67304db01ef535eb34d1bd7"}, {0x3, 0x13, "c5af417b80835fbcc25455b7e13aad37405651c6bc79fd506803586fdfaa7747c039c5f8471e3deb6f39743e6b08724cad55b642e6024a4ed07ac03bcaba137d397beca669c6d7d4bfe5ed62c49c92d41259b28d0bef013c2fbf0c26bca3404ffdc21f8bfa5706dbaf65c0de91bddd85a60cc0bd9b7145c12eaae3e1731ec2994d77412405d8f8c6157663aa5b2e2d45f3e3561a70d1ee9a70"}, {0x2, 0x48, "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"}]}}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb00"/229], 0x23c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000000)={{}, 0xd, 0x9, 0x7fff}) 28.849502401s ago: executing program 4 (id=3636): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x15, 0x4006}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000949f6e570000000000030014000000040400a873f10280"], 0x18}, 0x1, 0x0, 0x0, 0xdf505db1a3d84e25}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r10, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffed0) 27.86541539s ago: executing program 4 (id=3645): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async) recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000031cd73c8e1130fe360a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c0000000637f107f995feb1c0bf0a010400000000120000000100000008000b40000000003400048014000180090001007866726d00000000040002801c00018008000100636d7000100002800400038008004ed2349f11beef2040c5efb9111a07014000000009090001007379"], 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x200) socket$netlink(0x10, 0x3, 0x15) (async) socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_MASK={0x0, 0x4, 0x1, 0x0, 0x33}]}, 0x73}, 0x1, 0x0, 0x0, 0x40}, 0x43044) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5000847377317e64e8e0ffffffffffff020000052400048020000180084000000000000000000280080006400000001108000540000000050900010073797a30000000000900020073797a32f2ff00001400000011000100010000000000000022510000000a"], 0x37}}, 0x0) 18.983519772s ago: executing program 3 (id=3704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x800) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r0}) 18.677439694s ago: executing program 3 (id=3706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000700)=""/216, 0xd8}], 0x2}, 0x3}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x4f7}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) recvmmsg(r4, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/186, 0xba}, {&(0x7f0000000740)=""/98, 0x62}, {&(0x7f0000000a00)=""/237, 0xed}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/185, 0xb9}], 0x7}, 0x6}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a00010021bd7009000000250a00001200000000080001"], 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept4(r1, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000700)=""/216, 0xd8}], 0x2}, 0x3}], 0x1, 0x40000021, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) accept$alg(r3, 0x0, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="f12468c6c394472c8eb4d933949b4e7ce34f7e40ba3f0e7faf4c451550fa3e23ce5eff4f94c1d6a8d70a2bac4a61a80878383b7e9b4949e5e1806334e9b2b38c36b1ae9cacf90d28c44777d394f9c35db1f99c67e2e8be7b18eb08f008d897c6f47e09251280c7f663bd27785705ece8f16d41629358dd8090186bbd46a69fb5727ba3e1d26a5489ee962100f4600a24873520bd6266c7d27e2c0645cdc1c5b6e0787b5a9e9a98358e557344f0d8190df4e39a0ae6a3c77022d5bfe6326c9f151c760d16864288295be04e9f6454cafc19431c2f99322dd409b56268d8e40d80ca98b6f6331f06ef5a28ed1b092e16558d33177d4ab70db6768e06f59cf9c9d0382a2d59fcad38fbeded381b74acb93bd915ae6898f8ba1587e780205ad4cbf31186fe3913dcdb2527af89b3f431029416fcf0aa6a5e81d935d7e37e932a4e8cec21daf2eff568ca97132e6c3e659d0332cbdac7111ac4edbad69c5b67e11ebecc863a58ad7264385e8520d3d3f27fa565bfd90907e66b0a6c692f6fa9b666cb3a1e4c341c7fe0235bbd1bcb657637c2c784c874a7d083f80644b6a6e68983f769e5b90a06b30f0418addd80ed03722a9360bd640acc28f89bef7d20a4b9384ade774b1e461be1a926c9753e561cfd4de1e15177008c1b1e88b267457f697f4ada22ee0198a644a76ab3eecc263e61bc09f1455888f768a15a3213b9981b2863c3505317e4e363a0cbebaad423cae3df0ee901ae7dc4c80ea672932d92cb206e57f931f31482b30caec2926b277f2b45c3f12d6e243ae7a75191480771f6da4798045e9f024cde0045013c6c5dac160a908c1a8f19bfb2a2c49dfd138fcae28f289a929e5c584652a1930930f7b55d010d4ac7f497bcf21484a39b71ce12164d03650f6dcbde8e4315981579d151bedf03769de77d6664c2a3bff1047d19026d747520756eb4f9473f7e174aa0a9e635f0054c9cf2c52f28ef209ee55985c966a89c86cfe4d1c38bb5c367d42590a12ab71fd9df77239b71c29286bce4f5d270c885c223e2541609b5a9b25ca5898e077ffbe051686079c3d371f8bb8decf44234844ce4f3202cf6f7ce760492b2291d465d5a3abbab5486758bd2dd41c3dfff561bff88f105ed23eef411f8815dc739b17329ca264156bdc1112b6a4f3500f5dd79e8608e2b2941d03fac5136874c687bb082a9571002548f4cf6d966267c4e35bde6163d52bba090fdb972bf4905bca4d6032a96166ecd3922b46404c2a96f880c83dad173e119c30e568fa2d1a62c4af40f79cc4db7c41af817a9a41fddab00de688ddde530fbd5d22c30691b1c34394e3d329032a2b31ddbda7f2cbe68b2bb2a5efa0f57fd8dae10f472d8d82a2f2681a68eb54fdc2ff4e532118a8c5bdc490353f65f5747f72edd5dec321bb799f490fa69f4654c1c4d6c4f99e52880f7ec3905e60578649171b0f1e6bf001688a3f1e856b01b19c8e674ee1abecbfc0795927ca1559c557a4febc928f93f10c1e0a793ff140d2475d5563a916101a7a15ca075c1716be9c170b0dd52a8b0f109e722d27057f6cc8474e3f9456d5eeb10b8cfc8668cbab0ce4039211aa349058a38376c63da06616112242b4b3ddfb75cb5d5ca18ad4a231d90cb8ddbe430076c60b57ba814b81a32aa0c16c8867d193f31a89311c6aa4dfdc557657456ba2a6e381a6e824c8f88f599d2e5bbfa4caa45cfcbed998ad6844446270cd1348ac075fd831ff6b6016b82314a82c284ee252e9435ef726c4492f2c80a5f0462496b5f53e6ebd15dc419", 0x4f7}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) (async) recvmmsg(r4, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/186, 0xba}, {&(0x7f0000000740)=""/98, 0x62}, {&(0x7f0000000a00)=""/237, 0xed}, {&(0x7f0000000b00)=""/115, 0x73}, {&(0x7f0000000b80)=""/185, 0xb9}], 0x7}, 0x6}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a00010021bd7009000000250a00001200000000080001"], 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) (async) 18.671723307s ago: executing program 1 (id=3707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000001c0)=""/206, 0xce}], 0x2}, 0x65}], 0x1, 0x10000, 0x0) (async) recvmmsg(r3, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000001c0)=""/206, 0xce}], 0x2}, 0x65}], 0x1, 0x10000, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) (async) close(r8) socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r12, 0x0, 0x0}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r12, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r13, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.396622449s ago: executing program 3 (id=3710): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) 18.228238575s ago: executing program 1 (id=3713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088a8", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x23, 0x0, &(0x7f00000001c0)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) writev(r10, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}], 0x1) socket$inet(0x2, 0x800, 0x84) ioctl$PPPIOCSDEBUG(r9, 0x40047440, &(0x7f0000000080)=0x9) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000000)=0x6, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbdfec6d04adb00000000001190e000000100e44d20000890780000000000"], 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001700010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a01040fdb43267300000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000023c0000000e0a01020000000000000000010000000900020073797a3200000000100003800c00008008000180040002800900010073797a3000000000140000001000010000000000000000000000000a"], 0xc0}}, 0x0) 18.108575895s ago: executing program 2 (id=3714): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000040)) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) unshare(0x2c020680) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000cccc410e6419be1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000f600000018121000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000240)={0x3, [0xe9f, 0xc, 0x2]}, &(0x7f00000002c0)=0xa) (async) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendto$inet6(r1, &(0x7f0000000080)="00a0d0dceef39979e4998e5b5f6dfadc37511e5ff78f5cb6e73822fb23393a4d85203602d835f9c16abe601c20ec4e379e", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0xfe2a) unshare(0x6020400) unshare(0x2e000400) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async, rerun: 32) unshare(0x44000000) (rerun: 32) 17.965420871s ago: executing program 3 (id=3715): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x40, 0x10, 0xc52, 0x9, {{0x26, 0x4, 0x1, 0x6, 0x98, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x1a, 0x1, [{0x7, 0x4, "3091"}, {0x1, 0x10, "a7a2efabba644e56727e1d373abd"}]}, @end, @timestamp={0x44, 0x14, 0xca, 0x0, 0x4, [0x6, 0x3, 0x5, 0x2]}, @timestamp_addr={0x44, 0x1c, 0xb3, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@loopback, 0x401}, {@rand_addr=0x64010101, 0x8}]}, @lsrr={0x83, 0x17, 0x95, [@dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @rand_addr=0x64010101, @broadcast]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x1a, 0x0, 0xe, [0x6, 0x0, 0x5, 0x7, 0xe, 0x3]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@private1, r3}, 0x14) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r5 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000001240)={0x1, 0x64}, 0xc) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000001240)={0x1, 0x64}, 0xc) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000004c0)={0xe0000012}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xd4}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r7, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 17.604633324s ago: executing program 2 (id=3716): ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f00000000c0)={0x3, 0xfb}) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x1ff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) pipe(&(0x7f0000000680)={0xffffffffffffffff}) readv(r1, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x23372d40cbb90e0, 0x0, &(0x7f00000002c0)=[{0x3, 0x0, 0x1, 0x8}, {0x2, 0x1, 0xfff7fefc, 0x9}, {0x0, 0x5, 0x4, 0xa}, {0x4, 0x3, 0x8, 0x5977f287cfb23ef4}, {0x4, 0x5, 0x5, 0x1}, {0x4, 0x1, 0x6, 0xc}, {0x5, 0x4, 0x1, 0x6}, {0x0, 0x2, 0x4}], 0x10, 0xfffffffe}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000059db7659f710e293d8859d99858c14c83c1f925a39d300000000358f000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xb}, 0x10}, 0x94) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0xfffffffd, @mcast2, 0x8000}}}, 0x32) 17.594804516s ago: executing program 1 (id=3717): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 17.52173313s ago: executing program 3 (id=3718): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x400, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x4, 0x6, 0xfffff014}, {0x6, 0x9, 0x0, 0x80}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x400, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x4, 0x6, 0xfffff014}, {0x6, 0x9, 0x0, 0x80}]}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) 17.446945813s ago: executing program 1 (id=3719): socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) 17.40967333s ago: executing program 3 (id=3720): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='svc_alloc_arg_err\x00'}, 0x18) r9 = epoll_create1(0x0) r10 = socket(0x1, 0x80802, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r11, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r11) shutdown(r10, 0x0) close(r2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ffffffff000000007400c89568a427e10c0001800800d7cac06572f090e617501391e9cf7759c91e07de4b25c2fce9b7f094068ab9e98750c7dcf85e7341baf183d70941ecc4cfe6eef0fb9ac4c022c380c364f28ede0ae3b31796b096464a1f1f85728eaf9c3a7d345246a0914c36d649ff84e80c9067f038fda4cd1d9893711bc007c19c94a030240d5d1efe06ccf6ba05cf6e93f6103b4c6fb711bdf01205b0f825f051c2a6443046b944e7e92aa4953f63f3c9a95dbe843e5c70", @ANYRES32=r8, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf25020000000800010000000000675d67e020911d0ac6c6e6e7d4f7f935d653103b71cd9be12e8ff1b1020522aba7048f86c6199224b3f28ff1a04720fd78a5dd4535bc3de2e9970fa9a0db3a74f7bb6412a2957073f389967ae9c15d561277701caade3bfe0a39c7802492ebfab111633067807795d2dcee068cb7be7e61a892fe"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x17, 0x3, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) close(0x4) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf250b000000180005"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 17.285331133s ago: executing program 0 (id=3721): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x10000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2a, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x681c2897a14fa832, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x3, 0x4, 0x1, 0xd, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x813, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x11, &(0x7f0000000180)=""/17, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x0, 0x5, 0xe34}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r1, r1, r1, r0, r1, r1, r1], &(0x7f0000000500)=[{0x1, 0x5, 0x0, 0x8}, {0x5, 0x4, 0xb, 0x5}, {0x0, 0x3, 0x4, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r6, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r5, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map=0x1, r5, 0x7, 0x34, 0x0, @void, @void, @void, @value=r8, r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r3, r4, 0x25, 0x3, @val=@netkit={@void, @value=r2, @void, @void, r7}}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.211771943s ago: executing program 0 (id=3722): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c000780080085000200000008000600000004"], 0xe0}}, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f000000b989f900000400"/21, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) socketpair(0x3, 0x6, 0x9, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x40) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018480000000000000000000000000000180000000188d36e17b20d0b17eb07bd6c1d9d53dad4e3a9f6621c62638d4c2d2014cc14112f47951a010eacb35c3a78d83b522722d0488725a6cc03ae3e63044a175922a1e76066d1707d78608e4c2d10772432b5a29d4770de3bed7679f906ec119e37ed2a4badfccf0bb55c1f83abaf1b4c3410fa40055df122fe19650992b0136b1a98a81ae3bae658c978d137648170c9a29ce84748ab7e2f9a82a58af0472bde2485aa418c251d8476dcfa585582d2fe2717", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x22, 0xffffffffffffff83, 0x0, 0x0, 0xffffffffffffffc0, 0xba, 0x8, 0x2c, &(0x7f0000001380)}}, 0x10) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r5, &(0x7f0000001440)={&(0x7f0000000f40)=@caif=@rfm={0x25, 0xffffffa5, "3fe186535a40b5f740ed759cd38e2d33"}, 0x80, &(0x7f00000013c0), 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"/8776], 0x2248}, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r6, @ANYBLOB="00042dbd7000fdfbdb251300000008000300", @ANYRES32=0x0, @ANYBLOB="1000118004000500040007fbd2058f39ba07f401340004000300060012000600000044008100050001000d00000005000100060000000500010005000000050001000700000005000100040000000500010009000000050001000200000005000100070000000500e400010000000a00060008021100000100000c0020aa000000000000000300000005007400030000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000041) (async) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e0101000000000000000000000000ac1414aa00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000003c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000500000000"], 0x138}}, 0x80) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r7) (async) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2dbd7000fbdbdf2501000000080002000200000008000100031497621f60c200000008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf00004c000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040) (async) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000280)={r5, 0x3, 0x14b, 0x1}) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000200000f03f1ffff040000000000000002000000010000001200000803f1ffff4d3655100000000000000f01000000b5005fc2a57883eb96fb45699e2f231e6cc904f5f859a3c351ac7fd98f77495149"], 0x0, 0x4f, 0x1d, 0x1, 0x85, 0x10000}, 0x28) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000005291043f520c6343ae29fa29e531a41b57ba1b2f8ad74e8290c8b08965f911f82aac4057210bd1c17404b410485e2fc52837df", @ANYRES32=r9, @ANYBLOB="ffffff7f000100"/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02000000040000000500"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{r9, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)=r9}, 0x20) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000000001b4493f8a0749e0b000000c873356ef4ba148d52b2d50759d7f7aac5e060491f368a3d28ff96c95cd178dd9be7552cce41168e5082d800bfbcc4fd1989ff65e33433b47837c2ebe935802b34cc85a7ea1ab82878a724e9bba5ecbafe25bf75dd814b6a3030e9edefb51f466aa780649bbc09eb6470fb46c22bc87c218a42f1b5459593d1d10b2bb3f5263b667a793e3a10a7295ebca79d682b53cd01409a092256dba3972bd2933e7392452c5314bf9f225cf82ff23aac5917d2540302aa7ba3", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r3, @ANYRES32=r9, @ANYBLOB="04000000020000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000037c0)={0x19, 0x6, &(0x7f0000001500)=ANY=[@ANYBLOB="1858000010080000000000000000000018000000570b0000000000008906000018140000", @ANYRES32=r11, @ANYBLOB="0000000000000f00"], &(0x7f0000001540)='GPL\x00', 0xa5ff, 0x0, 0x0, 0x40f00, 0x44, '\x00', r3, @fallback=0x32, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001580)={0x5, 0xc, 0x8000, 0x6}, 0x10, r4, r9, 0x3, &(0x7f0000001700)=[r9, r9, r9, r9, r12, r13], &(0x7f0000001740)=[{0x3, 0x2, 0x6}, {0x5, 0x5, 0x2, 0x2}, {0x1, 0x1, 0xa, 0xb}], 0x10, 0xd7d}, 0x94) (async) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000080)=ANY=[], 0x190) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) recvmsg$unix(r9, 0x0, 0x1) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1a00", @ANYRES32, @ANYRES32, @ANYRESDEC=0x0, @ANYRESHEX=r8], 0x10) 17.106837289s ago: executing program 1 (id=3723): r0 = socket(0x8, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000140)="482b11195f5b3ae9", 0x0, 0x0, 0x0, 0xe}, 0x38) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x40000000}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, 'S'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x842, 0x1}, 0x10) close(r1) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtaction={0x1ac, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x198, 0x1, [@m_csum={0x194, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2782, 0x7, 0x8, 0x3}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x7, 0x10000, 0x8}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x10000000, 0x3, 0x9}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x4401, 0x20000000, 0x4, 0x5}, 0x77}}]}, {0xf7, 0x6, "c68161507a4b0055c5e9b059675650cc6d52b5c7959d9a0100873f2145b0dc9299c936f7df025683e796895ab7fd731f7088cd95b008b5883d65caecb5a0c841cb1ed1cd31573c5018f24f37622a4d1273775ed26e015870f7a1e12463dc84400c1b93a564b7cc24894f023b6817f1e441ab7d87bd90740f75f2e3d44555bb6a4f00d48ac4d2b5931a9b858857eec84ede87424c85ae1626ebd2ff626db8810aa1d980d9e421192980d49832a3da6a239e74c1b2a5aa075e1bd6a3b84393011e693bfac346ccfa84a91114aae9b7a635e795fb7ae375e71db4adeb5731e3477077ddf3177e351892c1eb4c93e4b6b32f5fa122"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x0) 17.036424093s ago: executing program 0 (id=3724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="271f5b010600000000cc9a3a8339227f9fbb394e3ec5aa56fc8be3331044ead0860ab225e1495372c3966f09db9747fad58da1610d17ac51d8c8d341f326418019106a7fbec1f3030bbd4eefee4ce202a39325f8b91334b6c52764a56f6deab6f4c8600bec5b52318c8724ef026c79955858ece9fa078fcfa696c886dd96d82101269ec4ed9d9f0e3281f4de358c4218335341e7f92d0a1163b49424f96a86a1429c4b45ee3ded4e6b0625001bdbad96b0000000"], 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x40c4854) 16.91320097s ago: executing program 0 (id=3725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r0, 0x41f70000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001140)={'ip_vti0\x00', &(0x7f00000010c0)={'tunl0\x00', 0x0, 0x700, 0x20, 0xa, 0x200, {{0xc, 0x4, 0x1, 0x8, 0x30, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x1b, 0x87, [@rand_addr=0x64010101, @empty, @rand_addr=0x64010100, @empty, @loopback, @remote]}, @end]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={0xffffffffffffffff, 0x401}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)='%pK \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) accept4$llc(r10, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10, 0x80800) ioctl$int_out(r10, 0x5460, &(0x7f0000000080)) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r11, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000100)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @exit, @generic={0xf2, 0x0, 0x7, 0x4, 0x33fc}], &(0x7f0000000f80)='GPL\x00', 0x3c5, 0xfe, &(0x7f0000000fc0)=""/254, 0x40f00, 0x2, '\x00', r2, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000011c0)={0x5, 0x9, 0x0, 0x6f}, 0x10, 0x1f88, 0xffffffffffffffff, 0x2, &(0x7f0000001300)=[r3, 0xffffffffffffffff, r8, r9, r10, r11, 0x1], &(0x7f0000001340)=[{0x1, 0x3, 0xd, 0x1}, {0x1, 0x4, 0x5, 0x5}], 0x10, 0xfff00000}, 0x94) 16.665649304s ago: executing program 2 (id=3726): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000005d10000000000000630af4ff0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="8deaf6ac42aa0060f7f1aea864085cfa190b8876517752d29c0759918f74a9488226", 0x22}, {&(0x7f00000000c0)="b36bab5df1e184d0ff934cfc11e62c698600d3b19bc03625169dde106c239c239d2d70d89e2aa6ad0c0fd8f1168ea237ece5134d396a85ca7f0f77f46d9f0b8f5e082d3b342eda7a14a751b130ec274c998c4c21aa5202fd39d51a079b7f92b61adee9f60882811282ff30763221b752d01c138d", 0x74}, {&(0x7f0000000140)="b77d85ad4f93b99552ade3d7d712766b3944cad53d44d6f2094b737b89dd5cabdaeedafc9457956a8d3de3b506ad0e45f79b7276e9825c5d", 0x38}, {&(0x7f0000000180)="720f56663f528fc0662425e7dfa4a031d50f805802729b509b8f5c247cc5a86c4ba066eaa84a2b9299122b1c6f750cdbaf7016d3a38464443a273a1b59cec559418607380037d3298d52d34b13245222c70486edc3c91f201645d362270f002e14c5a6205e16c7c037b258cbfcf706a6fbe0", 0x72}, {&(0x7f0000000200)="8b4def95ca9eac3f4805678c8b916c7fb1820b", 0x13}], 0x5) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) (async) connect$llc(r1, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) (async) r2 = socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet6_buf(r2, 0x29, 0x32, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x4}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={r3, 0x68, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x400000}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x3}]}, &(0x7f00000004c0)=0x10) 16.601575433s ago: executing program 1 (id=3727): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) unshare(0x60480) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, 0x0, 0x20000000, 0x4}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent-generic)\x00'}, 0x58) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="eb", 0x1}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devpts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000081) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c000100000000000000000014000300ff"], 0x114}], 0x1}, 0x0) 16.563202589s ago: executing program 0 (id=3728): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0xa, [@struct={0xf, 0x4, 0x0, 0x4, 0x0, 0x10000, [{0xc, 0x0, 0x4b1}, {0x6, 0x2, 0x7}, {0x8, 0x0, 0x7fff}, {0x1, 0x3, 0x15c5}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x2}, @ptr={0x8}, @volatile={0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x61, 0x2e, 0x61, 0x61, 0x4f, 0x30, 0x61]}}, &(0x7f00000000c0)=""/54, 0xa6, 0x36, 0x1, 0x737, 0x10000}, 0x28) (async) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0x180}, {r1, 0x200}, {r2, 0x1024}, {r3, 0x459}, {r4, 0x47a}], 0x5, &(0x7f00000002c0)={r5, r6+10000000}, &(0x7f0000000300)={[0xe90b]}, 0x8) (async) r7 = socket$unix(0x1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000006280)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000006000)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/40, 0x28}], 0x1}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000002980)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/148, 0x94}, {&(0x7f0000002580)=""/47, 0x2f}, {&(0x7f00000025c0)=""/136, 0x88}, {&(0x7f0000002680)=""/123, 0x7b}, {&(0x7f0000002700)=""/121, 0x79}, {&(0x7f0000002780)=""/219, 0xdb}, {&(0x7f0000002880)=""/253, 0xfd}], 0x9, &(0x7f0000002a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000002b80), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002c00)=""/61, 0x3d}, {&(0x7f0000002c40)=""/29, 0x1d}], 0x2, &(0x7f0000002cc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000002e80)=""/16, 0x10}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000003f00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003f40)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003fc0)=""/122, 0x7a}], 0x1}}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/216, 0xd8}, {&(0x7f0000005180)=""/83, 0x53}, {&(0x7f0000005200)=""/63, 0x3f}], 0x4, &(0x7f0000005280)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x78}}, {{&(0x7f0000005300), 0x6e, &(0x7f0000005400)=[{&(0x7f0000005380)=""/17, 0x11}, {&(0x7f00000053c0)=""/45, 0x2d}], 0x2}}, {{&(0x7f0000005440), 0x6e, &(0x7f0000005780)=[{&(0x7f00000054c0)=""/105, 0x69}, {&(0x7f0000005540)=""/253, 0xfd}, {&(0x7f0000005640)=""/6, 0x6}, {&(0x7f0000005680)=""/216, 0xd8}], 0x4, &(0x7f00000057c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005840), 0x6e, &(0x7f0000005a00)=[{&(0x7f00000058c0)=""/196, 0xc4}, {&(0x7f00000059c0)=""/11, 0xb}], 0x2, &(0x7f0000005a40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000005ac0)=@abs, 0x6e, &(0x7f0000005f00)=[{&(0x7f0000005b40)=""/30, 0x1e}, {&(0x7f0000005b80)=""/217, 0xd9}, {&(0x7f0000005c80)=""/12, 0xc}, {&(0x7f0000005cc0)=""/216, 0xd8}, {&(0x7f0000005dc0)=""/35, 0x23}, {&(0x7f0000005e00)=""/113, 0x71}, {&(0x7f0000005e80)=""/96, 0x60}], 0x7, &(0x7f0000005f80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0xa, 0x10000, &(0x7f00000062c0)={r8, r9+60000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006300)) (async) syz_open_procfs$namespace(r19, &(0x7f0000006340)='ns/time_for_children\x00') (async) sendmsg$nl_route_sched(r21, &(0x7f0000006440)={&(0x7f0000006380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006400)={&(0x7f00000063c0)=@deltclass={0x34, 0x29, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x7}, {0x2, 0x5}, {0x0, 0x6}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x1) ioctl$sock_netdev_private(r25, 0x89ff, &(0x7f0000006480)="e2d09ea9939e62614d44") ioctl$TUNGETDEVNETNS(r20, 0x54e3, 0x0) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f00000064c0), r14) connect$l2tp(r16, &(0x7f0000006500)={0x2, 0x0, @loopback, 0x4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000006800)={r23, 0xe0, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000006540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000006580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000065c0)=[0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000006600)=[{}, {}], 0x10, 0x10, &(0x7f0000006640), &(0x7f0000006680), 0x8, 0x4c, 0x8, 0x8, &(0x7f00000066c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000006840)=r28, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000006980)={r22, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000006a80)={0xf, 0x13, &(0x7f0000006880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r26}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r13}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000006940)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x61, '\x00', r27, @cgroup_device=0x6, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r28, r15, 0x6, &(0x7f00000069c0)=[r29, r11], &(0x7f0000006a00)=[{0x4, 0x5, 0xa, 0xc}, {0x0, 0x1, 0x10, 0x6}, {0x3, 0x2, 0x4, 0x7}, {0x5, 0x4, 0x5, 0x3}, {0x2, 0x4, 0x10, 0xa}, {0x2, 0x3, 0x3, 0x8}], 0x10, 0x6}, 0x94) ioctl$sock_inet_SIOCGIFPFLAGS(r24, 0x8935, &(0x7f0000006b40)={'veth1_virt_wifi\x00'}) (async) recvmmsg$unix(r12, &(0x7f0000007180)=[{{&(0x7f0000006b80), 0x6e, &(0x7f0000007080)=[{&(0x7f0000006c00)=""/183, 0xb7}, {&(0x7f0000006cc0)=""/17, 0x11}, {&(0x7f0000006d00)=""/201, 0xc9}, {&(0x7f0000006e00)=""/250, 0xfa}, {&(0x7f0000006f00)=""/247, 0xf7}, {&(0x7f0000007000)=""/84, 0x54}], 0x6, &(0x7f0000007100)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x1, 0x0, &(0x7f00000071c0)) (async) r30 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r30, &(0x7f0000007300)={&(0x7f0000007200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000072c0)={&(0x7f0000007240)=@ipv6_newroute={0x54, 0x18, 0x20, 0x70bd27, 0x25dfdbfb, {0xa, 0x80, 0x10, 0xd, 0xff, 0x1, 0xc8, 0x7, 0x1100}, [@RTA_OIF={0x8, 0x4, r27}, @RTA_IIF={0x8, 0x3, r27}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @loopback}}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @RTA_PRIORITY={0x8, 0x6, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x800) (async) r31 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007380), r18) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000073c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r10, &(0x7f0000007480)={&(0x7f0000007340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007440)={&(0x7f0000007400)={0x1c, r31, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r32}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000081) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000008680)={&(0x7f00000074c0)="590d8f99a0709878048a0ccf06916df4f80e15363c9779a5d03e34aa18e8b7e7c5417030899781ecf9db85d081aac1d18f4d066d07c939fe1c5d2e40a20d98c93b2cdd1f3bc5a7998c59324c046e03e592ba357930ed1cec10da36cc47f3d76ed48be435ccfb131b77e73d27d06b0e5e8c46aedb028e41985be9fb2218cdb3e7b44b27b66b8eb6c0a282fc268feb1f0b77816948f27d156015170f4b", &(0x7f0000007580)=""/140, &(0x7f0000007640)="7637f55de46f088143e7c9530e28bacc6d542a39ff422b16c4954a6370ecfa5ea992ae11b2b26953d9a106d8b9e87c93251ff6723fb7fc18be74ec82e50d1670e540ed84ec34ad55db72dce4507c04f74ecc1163615933c12ef7d388e2638f17767188cb2adfe98e5f9d7249b9c9c29d9ba60928da0e8a51829a3624a7e638689b9e384ece895c03cf1128d5c3a2c379bf79d67a0a58980af2d9675f2a0aeb4ab65722e44e5acb4ede919c7296bb4c0893673ae4d8f14a26804be439d71ec5b909afb520cf80a928ae78a1792808f22a3ec9d82464bf362255ae7e396822ce20c2b34ffd247768b7ed66d9211474b903c4f8d438fa76686752d4f625268066117ec039af01038a6316ace2bf7c6353c652bc6a866899523f77d5e527c5ab1f714cb4cfce6a84e4a39f6fa572c471cb94ed5885d60c49533ac666efa758d92b1a94f8a9cfefed4127ebb58ef6505e3c790cdf33531768ecc7628c8137841945d91f8e5898b8704583acada050253677824517073a328432c40a0f1eadac69554d1c96a2227a4e7da014da7ab583eadc677715c2bac62a2146e82b495008e8d61cb6ab3d6ebc50111bcb914e42789252f2afb82089104c9b677866d2360eefc9dba133d8d25ddc7c56f586dc522dcf2ddbf046462ec59fbfded2c6615960ee4a635ac8605a105e9bbbf2d759400af76fd58dca7c89fb41d497f8907472eb4fa09623ffbe7bd286d09ab35643f90bb83b9c8baead569b12dec02f5e9fb92e51ef37fb1eb87ea1e0808f674841f38551f2ce4c4f431066c66ddfc6b83d585979bdf34a58e63c96afcb506056520eb3d05b95628776be3005055172d81e1ae827b4b2b1013d18c220ea2fae2cdf905f3ee6b22e4ac857dae3860a19f610113c20942114f328baec9cd70c6611e8d79529fd7b6d1209e1d977663c14015c60c29a5bc1a76599afef7480fcb9c50f9acc0ddf24e8c70f9fc7ef113f129e1931a508aac86337844a68fadbfb05eaaf8c00d18d6482ab5cb3e1e72dfff02cab83396537c87a289515b821a28eeffb9c25fc23670adc31426bb2a8688d955a37834af642262cb0afcbe3c78fb22994020a2d375834fe5de4966d1cad50e6978f1a18d172454b40cf7cd6443a8c39d1d7c8c2217b2e01d4421c3dd702d63ee682a9165472b4819c4c6787ce7e5b469fda52cd127c81ec1f91e1b3ff161d25577b798f19e1d9569b3678c2ba681cfd55989b7e3bed076f1c88a5b1145f62049453a53b7faf3366fd1832dbbf872679be69d58308b4817a9ac9350340d69e7355b841b1c143917417e2f8ce1b9f51f1a2f8adbeff1467a0dbb8b018dc3be3893bfd94b411e6ffb2415fc70f0c73bdedb3ef3e671d8aefe06b71b6cf9bbee50b23975cf5561fa9fa24ced7015f8842da6ae12f6e15ccaede3ce35b3fd9688bb9394ba40dd2401eb61a9ffebcc3c4341ee39daf169ce8f1de4d3abf187f2e0719fbcb11faf713fa67d62f4173ea72a3d7c2eabce945ac628b916f941c95220d529b2b38b60d84d6f6622e537ad893f5ae97278da18629007ffe2548a95b6676ecba11c5a26ea99f80aa9a6368839aca7468508731cab56c8803f2d18ba07b987a9c0fc6ec6e73e925279a298532a4c7ab4688d9f62d4dfc82aa0e7ff9499f4ddfb717c34f40fbffda61d760e5cf9137f4c5646b120c57a619ebd512fdd46c112a10bde0d573b1c569ddf37bd0030cea0f69cb5dd29ac415497a983aab96168cb4fec42b5ffb3f9ee208265e52a7a824f7f4fa2d85f2d18cbb0406a84e679b9d4337caa4c9c9d7731477ebd3d0bfd62151c8d318b1edf628e5c5b966eece03d7d3371542b7c0654c296398a2b9f37b34f1c887cbe2875b96a5c3891129a1ea62cf82462321210d268b20a627b5be241108eec0275c1e17610738cde1fce3662950e51a7184e3ac56b02eca090f380e8f0aeec53ffdfaa2a7fd6440087f15d4806104836858a40f00ad5780c916c62cb56a5264d1e8689c75be6844d7018809e2ad2eef9e2d69e2cf98ce12964d77a5e5ecb909e4d5ccc1e71e6b428a5ffcedb78e703ef385f3e6ad42506498cc66f06a67c2ab3b1cc27a21e2f183a5903065107f630e07dd82ce2b1362ad74f932bd904b1dd44833137db939ac3e299f29461b7aaf35aceec98446a49dfcd5c3eeb98d3f3be489a3dd31784fcc2804af0ba35f5c4f5c882998eca969458cc973618cf08ac2767c6041af45b79b19673e77d8865789247c21013156bb739b8b70b1e3c4cdb1b1b439eed0eb636e7ce6011e4add4a5393cdf99c3ccd7ba7378aa5c018850ded94310e6cd58ba3eaede2883e40288ad5ffc03610f40a7e2ca6b3f3f1b8ab424cc06dad05069b921cec9c5f39d37f50958b1bde6c3f93d7edbbbfb0957db779d4bb9025566962cebd16bbf2b4ed91a0fe7eab537f6c4292b9cfaa0ef9c6611fdef870be3a606eb13422ef3948ff6b07768998aa90aca0497c1b08d834f71157083c05352a7f50d521e1a6bd99809c4863e123882f13581a100c23f931603be1de1b47b846709d3279b0f9a93000e39dfd1cb9fc55a39b564348f807bbf6b2c928ac2f23eead3624028038608aee40ee4fedd6789fe0924eddfa6c0fe69cd07a52b6aa6ff38eec5ac11ce9f20c4e27fb98557a7e1062e4634f414ca6d73f9ca61e6b44baf0c42293340e2658a897ebbc22304cf174b9feee3b8da6d5037232f012a1e24791a699cd083dcf54dd54882d896fe28ebb2c92bc3944a25b834adb6e10bde739f6cd47cca5ceb7a316becd9c94464074d1ac1a9198c726f30143f87f663e7ba6f52769a7d2c24ec0e2792865a3475014ce3b0dc631fd38b566fd69be6c48710047056a088d531d91e217a54046a7696e18fa171fe7b82f1e627e6d555248b6f0491731c45c9b6b1fe6e8eeab20d1a03b9ef3b2ed96127d609a9b67a64939387c7676858cd9e9d8296ccc7616d72f89b2f119c098d176796b1d1b3a5ec29721eaf6581a3e8c0799965502167fb0fea574f33a328a5696dfd7ac998e63df21f858b089b1b08b53f15849379ceb03a695dda7992e671ffe8188e49822ad339e908ea1ba709a08a3cb1eae8acabb148fc2e479e8620d6893ae8138a12239df3ea9d15ea78f01381f45c0a660952f01deb68376c448ee032f7378bb9bcbba31c555ac495c4f047e7a50643429cece7f26748c9affa5964d85b540788dbc742610f5551b69cd2ab3ce5c7189e54dff498726de40dadc57c44d03b20e99917afcd7ccbfd87ac8d536a2aae30cf41f6bd3fd9b365c8ca9eb9306aa65e64808cda39090db9b0da4e60f854bc55f05a2de2fe1e3c82816bf02a8e2c20d217e237e52dd64b43142eee279783412ebb9639d3fe62050fd4e732a4baf00cbf690e3f59bf8b6ebe4906cac3a504010d78f378b7f991d4dfc4bdff5f8845aac4ffc00c49832ca838addbd30e7585e0c762587729b0916306f34084e9475b2b2bb7e041c72bffeb672654223295286bacf5f9dba8f5abdba33420adf4385c51d004206b49b4698a74898577dfc2a881b0fa658eeea7eb7ca65484a8b92254f53d76619e16f626e063334cdadd41dda939501bb46e4099eb181ae25076e5529dfbc65545ebc30c11dac87a681257cf11a71dc3625c13c4c9d6cf20b619c5d96ab27047385a94fa3905dc5337bade2c68cde0eaeab15f4a55e16a8d4d6e3483bb1c3c9c40e26a1e22ace931f4d56c573a424c7be6a25bc4c7caf4862d69aa9979691580eb5e5f6d66a672f13cfc6b7cfe7b3e53c03c73c3355df967e02bfb7b1dbab3f3680c5b81694c482d8b8ded1adc778c512d8f422e5bb9c4b768fa661c37b27b1844a0abcf30d89897395562e0b08b4d2feb41b1733f1f0a5f099ba092a32545ec27ddc88b36e43e4f3963234de0f549d2e0a5b3123404077ff777b7eb26db432548b8c7b0c5984d6e3532e5e43fedea2212e703246e7ee95423641829e1235b83b9b848ddafc5811af5e26b416d0405294563c73b437e1f576aab199f4acb53d9767eb17e895fabcf78adbecc2cad5f5d2f3ac1edb3e90035c810162233f1a9b82d4bb0b4ac0c7e4d287a440bac49711c90d964c802204aaeae49b5978813db541ba41f17b25f7771e9878458ca38ab1c4e2b3802d33f6111aa7d6701cb52fbbb3e0945717cf62837c8e880a7d10e14e1d6562a8803eab8484809aa0dece469c4464b659d616fe8b2df008da74ae358a4ec3302a0df15cfcb4be4557f9029997c799acd20317825c522aeafb1a02c18bea4116fad6afb922daeb1a8de02e0b5562c63c25b4ae1efea7e7cfda8a29923ca5ef95a3ab7c8d8d2577c8e110ff7ce2bf93ee6ee8b94d31b96c89c73d6e71d273caf541470d3e63f0f2e4ecd217134606309dd51afccf387273d43ab504530d2b82e5a2e14ede454789af2b409931eed642551a250e725db1309fdcf5b941d6e166de59bccb6eeceb41ddce1f762aeb6f853d576a2caaab2c10608c74ea5e73db03f68d8fe81702d8baf60ff1b3a7fe376e3257118bf82a8cc78a9dfdfbc3de67c9d439b52d77375960d7c4bc40daa55c430744d34fd1cad2da460d4403960406692002d5865f6062c8999f710607444033ba079575206fcc7b75143eade8d59b8ed5e027e2ae015f11e29bd6c642f70baff92c8e9a3192dab8bdc85459f31d2e56e821e051f9948d4e499256b2da1686afab89b0340501227ba5d3e9c5d17a97daab2160d85e3dcb7375b4f991cd344f4f52a8af8af232fa2327c2fb27b441506161c1155b73cfafeef186a76a37a799b8fdf2fc6525c19876e8f3291e3b521d47749c0214a4b494f2b33dee2a717d7166f3b85615dd1e4b12f6f49e5fc9bf41abf9f28e4b212055dea955392927f5dac61adf2389a40f8cb4a7b8dac6a97af2e38d0d95a18e55ab8e2aaddd189646b222d41ffa7d124abffda091895351a3b2f3908767d8f9bcae6e34be8f81b9d7bf485b9c27ccfd7df9db0d2542fcb8cc26f3b4e83a8b863a16a2ec92ca6e699cb62fe6edaf8a662b8fe71b60acb7145f5d6e587a6b391fb61375589c979bf63882e4afbf38dfdd27859629bd418b3d29dab7dab87a0c31bac068d39fd6825d981444acaf39e234b168b56e90b6bb1db7756649295769accc1d14b007f1077c16088d86166f34591bb67ec97cb039a6dc972f5ba96e8af34b396058f8f2a501fae60bb55c554f455d201dbaf0ac60fde44766a83bc69579ce102ffec80bb1a6cfefde8013ee5d83939329185f5a8d375377c069fb2e02ceec993cdfe7510bb580bc48feb21c08ff40854a6a20661fee78ac917c91ea696afd8c9dcbc008b33fc129f04afab3128326cc0ffaa8a8eef594dbb6d6ea843fcfd637efeafed9eafbef3a594bc57333b51302a040e98d8d4cd0658b689c1a27c1bf8b66abd8a1865c71a365b22cc93d04f29059839d9f2d9ffca1a3e68545973f3ff01e359bc449cf7d5d95bf6f2e9a7cfd35367c124dbe58f827ea24d392e7e393c24a504556f9b329676f92d8c389fc8785dbdd0561e424ab6df0af676869c9e76a00111f2e8a502d8c43b80cde748b16c7df3442bec42098d5922d1535b48c10d196d1b48279944c349a0f57c5b9c773f137f1faefc0f2f730519f966e622d328285b0bfc99134d10b75b3656154c46663813009068d5dd2c731e400c6c1bd94323888594bd89c60dea04ad3a6c887b50f83916a1fd172806c22e2d845d432d905766534d2d0e3d05bf595fa73294e5c8bdfa7c4c58264eed3c866e067018861a1", &(0x7f0000008640)="0224d4fff33aaa62192d7280bd2cf7342bf22a0f6434ec1a04c3f9b360c5", 0x0, r17, 0x4}, 0x38) (rerun: 32) 16.503037599s ago: executing program 2 (id=3729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='contention_end\x00', r2, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 16.291222126s ago: executing program 0 (id=3730): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELFLOWTABLE={0x1c0, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xed}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x180c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1ff}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x17e8, 0x3, 0x0, 0x1, [{0x14e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x48, 0x1, "9ecd8d96b55e43bafac510a95b5fae94a720498306036c3891bd058d6d51268fb862b6baf9fe979dba10cf4e9c696fb7993bf7cdf86ba3dfd0ba2a99085193900742c5d8"}, @NFTA_DATA_VALUE={0x78, 0x1, "e1679227a2a989ac12e9cfd7b7036046a56a982097db8245c4b275dbde274e5f9bd91ce9e14dfa2058448018110a3e768cd2ceaaef062918dc0dbb9d3c3501fbdcfc6b2e229d8e92ee01ce6da69cc42fd448e2fc5c5a8015c21f71f2f18a6a1547da669b1607e8c1c77bb6fac5876b36aed3b8d8"}, @NFTA_DATA_VALUE={0x89, 0x1, "8e9c665c57f731192db2fe675358193ac6d8b5554aefaa2c0b185eb39cada629479d0ea85b38ad63aef8fc0a2b897f659e866658b229c725bd169e8f3dcb4e9f847ddb5af6341ad95972688fd717225b0a4a0ba138a57be10dc82c2caa48549a530b5062e8611af9eaf2cffe352649a7000c1123f0259e0fa57a9f121ecf3538431a8c57ab"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x130c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "3b5a4b24413f57303a3e4247de88116784ec57a11496458792c61b6c27caf7e0d852b27436922cd5b38ed1889024ac7ad1"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "559b1f914a918aa47b43e5fb114aa66ef3fecd1c031c479f5880b6a9b46dac92fce4e3665f00cb92bef7f373900e426c3ab2b20597d671520d0207d3e73404cab31436e41f5c3e"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "1bc193cf0f96c5d25d39498afbdf65776cd35a86b4885937abcc742b8813f8ae36cce1f57d2b812240b1a30916d8e7278fba041e3783e15354a3063eebea5083a70ca969104ceb056974c4ab56d0437929c8a89ec865ece7b29f3e23c0c03eb9bf0915b853e155031df20f1c06d57cb0dbc4d67cca97821f0a1ed8c846f162be392c2e1a69c0b6b818a914f5e6b0ca2ee70a9a59ff65de3b2356d125d0a36e5668c51a90c307a143c877234b285d72911d7fbcae6955a4a5f6364e203068e3b7ea350f5440e26f74ad6c92c4f835f0fdd248be28ae67a71459e7611f503329c3effedb9241864147b645ee97c25ce0f2f3d38a6ba15366e712a4b00774b1434fdc3c0b33a1bc2f9d14df615896cba691148a454a17a603fe84035aece3021f47ec710f1813b02a65002947918d2ed56e6225fac58aaf699240b13ef944ffe8e77592552fce767867d84ea8c8b0b224044e4aef94e78e0ed142a30dbab0b3432ce1e07efbd1b669b74fcd0461f6d0e765201573226b40e9c38d99b03c2f128e3ccee789f26f4e506320d209990e59553910ccdf01a338f4fdbe516077dd667403120b47b23578fcaff42f183a8bbe767d160867ea4437137804a32d6ba0c37d04dbaf096129ad3b9fb641ddbc132f3500bb067dafadc09819291b1924c1dc19565dd31450e6a55b1ba56829ce5903e62f5bc66f2e9f448d142eea4ab84ad792c5125011d723f09d32fd42d128ca93ad545d668d26fb3069963aa123882b179a7f17fe577c9e0ce4997ed3b723eb75b7c3d75a7156022a2c31114f0e1c61199dbca12cb2b8e5eb2f4727dbfe2545b303d14134fd7f3296d7c9f6a85350c2c7f440c6e119fe2bac606c0b8c2e0999152ab0003c6732842aee1583c4f98c74ee7f1e32020bf14ded622a7430a2c714173a1ef7d306c07650a2a5062711f5845edcfc45b936ef4e8e3e5e7182fdb74820df9dccbaaa1017215faf4e3252d8fac97735862bc1bacc993b306b13c034401c7458c8b12bd4f9accd46be8f0923ad76ed6e2de921e66f6378b1c23d10ffd48c0b0061f72d13b6c5e07f71778dfa72c85a4ff4755633354087568c52367216bd68b044cffe7b2dc89594684c630290ae4a98896dbbce086aa51602cd651bbe1b146dc7d52605e346213d81dff308571539a6c1b3ecb3dc4372e277ffe7d178420c908f2c97530b4cd342ebd8e272d78903df0d4d689f3c6134eca85801ea1c685808cb0b2c30a52eabe56f6578110cb95d17210f557ae2ae90ef3ecb5687bb4a5ce1432dc896a0b680a2dbb329e7c6fdfeafb04c03d536eeb77bf3aeefc1a7a9622a47344e1d7e5d5f81017f3dad6b8c4dc17e4ab67bc780d9af7c539449a9e22f984bfa4d2dfab65cc8ca1b4fef47cf59434052a39a23490fed18c828177c02affd3b0cebc41f6461370223b5ed6548901d0ca8aa628bb274d5ae89b119b9e84670575b609a6a48b98cf9babdd63694c2445f4e30272869684cd545087731c5af059e071c688fa183ce311cf127f7d7727140db260dab3f61c7a6aaae4d0b3d44946c31e18bf86958a1cdc1b731a80b071ee0a004bb43a87ed084bd00ad0585dd60459b7363cfa5f76f8dcce02c01b7e76f062287ca3d89c829b826886387c37d3571936558a50edfa13e4ce7b7a05806fe0df5e5ad82cffea87edad86f9ac9ce40e4aecb356b0eb7ae2447ffb2889be9290c603379cadfc96a0d2f88d7c3953c4dfee57c3aa5b6965d7476df09372900619b57eb9b1a5de0d1f86de3640681ed5116471219ebc5ef15142abdac7559fff5b772fb39525dc2d3baffdbfd0e45e65cd8b6b9c184eb62c3080162ace3311dcc9c19162c33a579249fb9eefef3abed8af58b2229d3f5af27dbde68b6ed1f34dcefbfed8ccb0752460c421cc6b303d7d3696defdcd28cbed33e34a52016658c3909c26416cc80bfe4f30334ceef11bb4bedde1c3183d93ce71de7c0905c501d67ce00697bce75bcfa3cf3e79e481624af452d286b115ec74909ab2edf79c06a3fe85d47419b17f156a0261d60faace8952ba549f0fa5511e980614cb0f89da8dc8d4d4d0897a0fa600725311b1be1a4b4343891d9a875c438d08541959020ad5e5d54605fe835a5d429cafd9a53940a438e63ee8b529bffbc842254a96205319e9d191c4908a340e3c404eb6456d884472a058f7a96b2dec452f8ac46895b0765a68e3180425d9bde169c4a0c8e12c969c6e94611e3906d4340efa935ce4cee2edd99264573e2e3c8ef03f6e5b99c1d70e8da840df02d3f5569c12f820f4321e37c14d07b8f47616c5df04d5e085cd6e4956a5dcf5f860cb89eb1d96a62b1561b9a1d06449beb25122d255ef1560b56bc6eea69f81c5243ed172e1adf76ba88658a6b3bd3ab72266ef4b7f93a1dbd54d770c9e93fabf4b8be175757c66b01cac9362f608c98792695a7800e5235d5feee7700b11cad8f0f882ce75133d20351abd7bc03cf63709e7d5f59e9c8580e551ef1c2ac056dc8d6e42111829df3599318387311705a50437d965d92ee733045154c694e8857bf52642ac3b67400400190a75e7e5a595f1debf3dbcf6fdbc6a8064a23c9d736d8bb0f55f6a582358e7465c1b185616ec36266b02354afb7bc9d0475efb3110a62f7f8f2adb06c3fb891d4e2e413d76bb300fa5444bf3ec8f5a0f99a35d55466f10b696dbf9d318f262872feab979174d8aaac728db0cc164f3c4ca6bc47d93a4a1200f096db4b118ae7457b5c7735006f98502f33f4cde24e8df1d27a470e5f694564a299d80fa0a9f65e99d5e0b6bf6ad8acc24c2647d8274db8a75261e366d560437d67116aa3533cccefe17b7f9269894c7b14869949f7b296d9ff28152d2ab9a7288d396289c24d3d7c3804481c5f1e760a3f717c4adbeebebd82640cc56c3ac3dee20d8a8c1c0dd2629a71e528522059895cdfd255a5f536c9393726d01d98ed71357060908924065aaa82b10ddbade4d95291f81640d203c9af3dd7fc6d7fe68904cdb6b5e85a3b1d9138bbb54b46bcfcdd120745c4ffbcd9725eaa89497752f2018a4999d05a4688ccb517b201d02205b8cc2b435990ee5c44bc7a21e21bea9b1cc37f19047d19e5cc02babc1e120204e77c94e82efbd0200069686240c402115fb6031104310905a3f5d655c1d6a255f0f8e06b768e8bc9f7a43f3ccb23775d9bb688f82e42e7d6ad97fccf8be78d68db596776f90fabb758da98d2d557a17a95f3fc53d15c3d0115d3d3875398ae5f21c85620dd99be076678af3cd51e36ce6206dd7e15a425ed1e0ffd85eb01e144ed3542608a0a85d213b71f7538da4c41db90b2d5a651ccf3cd089a976f9af7465bfec86ee5a815c807b0f079e3c0cff55cf08451aa580b76da1f982740eb15431bf340e7fafea7a46c1a907b07af707fb35112474755a71a58cdb809a7356b2ec271660f42d6a56951a3ecf06e112518aa3a02bab8bf51a0e1a62a3d8348cb0ef0cb7a3bb709f30999de0c1db41604afb553bb4d7a02ddb433d7d41b633a1947d19d7ef9b1fdcc3edbf85cc7612a4462f221880793e98c3660881817e67896040e68cdd8357ae8a41d87d246e28cd82444276af25d3f8a072f8eda076a2587d56f63d64be1c32fb84923333dcdb83b4737306900163c3393e71c371a1581e082f5a9de04cbcd4c774f0275d2e52e7f495658d8959d57fa664e934989fe845560c775d9a9883d2acc1be236c55117c3857fbd878bbc23244ecd4fcd4f985aca0e67d93b604068168ddbe6e5046104caf851a57f5cf4cc6141165242e29b6139cd5f85a7b83c7d1ee1517f9dd6a195a7a19e2201f033483150eb03b0c89d52eb77aaa350428dbb8801deb8a398bd6ad1d0dba6816296f2278442559358637013e2c1bc997f4d36dc5013de611e93b62d1ad11a374e54f88698f4f3aa5e98832ffc2f1e64e2988245d1f3daaafa33d113b2c78d82d1564f60b4a6d744f059e490c0a0d90f99ed2e5f8b7197f01bcb6d37e78b7274da7ceac9d2ad2079f413700d2b40189cdf8ea2052b372758033d8cdf7c397da20d46b3a3fa0f4bd100ba73975aa3bdced2a4480f5240e7651ee1a0feeb54c4c8ab05c63f3f9fef6a8a5eff76e54dd6de65257a2a8bc67d8ba26dcf292d15445750056656349cd86cd0064348b82d94060a67799f75f835c77bbce8a2145d115b4e090971eceaeb160c7099dc029f6791e79848113800dc7d94886c4847682ef5fa9a9831632176e0e384d2aeecc31c8e7b613d97939ed2d19b07d4f0c634d403e0d5f550341dcce70954ffe4ef8c38297a25f961d73be0e3186fbd9cda3631d81ca1e92326781e182e43ffe0047e42c839db4958fa92b3f4f8065d9345145b278a9bcbe3936245b35455e4b409850a6c26d84929a4ca09e8da1e57d2004cc8202fc91bd965b3503f3f7bd390eee40656d7882e57c082e192b38d9397db810eb02c112f4f3ee11beed04468756e4e2a0faa6e347e8863d32c37429947ae16b6d6f4a1590d12a7fe97a0244e521ed6f449231e51dda53711ab52ff858c9e100629a36261e0ee0841bfc6ff12486a8937bae38b34d58dcf20b16824341e5cc026f24d0abd97df87cd2b16ee527baf20a38e3663b1260c4a067b41e74fcbff9243798348c27fade6e1b46dfc41a24f4cdb8c405ef4d7a2b4bba2899efba082118e285cc256494ddbeca8816b5a35467e877365d82aeb01df1bb6d59815cfbbaaffa55e2c02ce9a4f260b576919405402addb75c1771cf671c464460a82ff8623bc59c01e5ee11e977568805e4e54011eb1aab8b20eeccc405e4b72108f85587b66d8ad27e9e3fd98c6d1ec981d5338b591a79e5a71bbc1d5d237ba3e7c5000e0c3058c9537072ba9dcc740a850c587c6b2966597a784443a0002d42d03ca8c9c79018fd6c24cedf1091265c696e02f5cdfd9ceec71b421d56e60a066fefd9c2e52e2c0aacb74757c3aaa0f679a1a6b329e8b18c735485e5c137099e5187f90f477f4949cb9e6c2e5b6d782843007f993994ee0fde83777e3ad5c71559f55ff60a82a9649cfe0c18ecbc813227afe3fe9a275c0a5d48e4a2a588031eeb4a29d7573820efe098d0c78bfff3aa8470293d8397a069cc3966d6d20c1132c59e07429058db06a11ac3ac359cdb845ee718bbe4d367eba80361dff7b8ed73dfa298a33f7ce4ca2d63564ea598c8e72f193049a44a0b4f77fe376b08dbfd84a2b636794dc1c436a3d051d0688268c9ff286d50b4de9ded5bedcd23591b6e6987a511150e6e25f80700d3894793f7ea8bdf1af93f2518abe2e83cece84bd9ff95e72623d0c0bebfe3cb0953dc43fa508db6c4cc73efc50f52854d748a972eda9ae49302209932d72d548ef5cf4b494e8383656843d9b12e57a5f1dd49008d60811cf18ffbd3cb041ddd63fb9a2745c839d09df371b8cb6ca1f5cb0e13f33ec4741d6be66dcf0807e3cb41517556e6f846964c24004a9e5bf2416d812f401e78a744695d751bcc3c81b717c4f228dbe54cea82d50b546eba441b461f565e36cb3e6708319e7a9f9d404ce1109a8fcfa327241a711a65ca6768dd81480a12f25a341ac3e033fa3ccb6c51a329cbce428f28a8065156f52ddba863477e26acf300f9f79a991640e083cb7dd73489d111434ec7c6fc3fa9e956d6c3c4d97e0ec500d2d166d166ba07873a22b1b95a07055bd4c9628f3e4aa655cbafd8667747e7e2259dc4d0fcccb9188fd53fdb310e91a3e6e3610e3b86e2ad4f61a82ef5ec9e198b2c4d3cf86cd71d43267"}, @NFTA_DATA_VALUE={0x71, 0x1, "e9402cf7d88c2922f6ffacae1a42da5b813a38321adc36813e94d8eb8c4e9a8762ac095df2f4b8b5c69b102988ef548703fa583a3498469fa5e7fc8ee9778518916dd92e2531b9abff93542aac93e35eaace09d57a4c8fbb8502422cbe7906e6b2255a268fa84fce634ef86989"}, @NFTA_DATA_VALUE={0xba, 0x1, "1b93b55bb0039950d37fdcd86ca5d585777e453f8f4d3387535ecf1182d3fea96ba220bcef67c0f7d0b022151e812b37f7c8e2c88873d4dceed6754f0f5e76af669246406ba2d127a7236e5e41a132b0b1b62097f75618dca85479ba8120b42a05102714a362d7030f8d011e70a82ee79af9aaa05064cf898e6af681958f7f86f6c618ef9ae22faffc2fdd719f8a6257c620108c9f580036d5e386ef2de04b7d3803c48b65d28b3d70eebf4bb6c8cd01772e6ad25ed5"}]}]}, {0x300, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4c}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff8ef}]}}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "a0bc1f0198b25643f02171d0fa3223f4c7ce7e2bcec5ec2793a2ee3e2c81614e6bd186530b181a67c36a95bd5b7ff8b98c69d108eded0def56f42f3dc37bcfad34d5c9ac40494b01e5f575d6ba028921e92bd4c6f0901a1b4fee675dd67f7cd207211c0b1ee9c067948bd1a5aeb5b8757357b4359412249099dc14699eff3f44abf16cbb14dc4a5cceaa6a91f3db92e82149882f718a5a2c0ac7ee9cef8e89e5c265d5c7d6c6282dffd7eafd47c08cd165a92ee3fd90db47a81de9"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x80, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2e, 0x3, "72940db4554ca509aff9caf5d49fdc2785302c65bc18eb8ad3f6886c20727febc84403b6c3dabe9e915c"}, @NFTA_TARGET_INFO={0xf, 0x3, "16b93fbbcd02a7cdd1cb17"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1a30}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.events.local\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000580)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000030000004d6d000000000000", @ANYRES64=0x0, @ANYRES64], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24002544c759d9603b3f30b66201b20e5b1f4729876d9725cc8d0654e566541ede1337656cbee49a1fb2e946346c066eaf5715f3b8300f2af45c23e7868f49092ac342438b5aac7da2a95a350ddef7a42ec4e42c4a5bd993ef03434775673fc0a00ad1e6d266eeea81f367c7c7d36983a6c9", @ANYRES16=r1, @ANYBLOB="a1ab000000000200000032000000080001006000000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbd7000ffdbdf256b00000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021103000000000a001a0008021100000100000a00060008021100000100000a000600ffffffffffff00000a0006000802110000010000"], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbd7000ffdbdf256b00000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021103000000000a001a0008021100000100000a00060008021100000100000a000600ffffffffffff00000a0006000802110000010000"], 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x3f7, 0x1, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4400c}, 0x8000041) 16.290683513s ago: executing program 2 (id=3731): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x4}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x7, 0x0, 0x9, 0x2d}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16.158404978s ago: executing program 2 (id=3732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x3a, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x30, 0x511, 0xfffffffc, 0x1, {0xd}}, 0x14}}, 0x804) 15.757166184s ago: executing program 4 (id=3733): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) listen(r0, 0x80000000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000200070000000900010073797a3000000000240002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 1.666476954s ago: executing program 32 (id=3720): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r5) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='svc_alloc_arg_err\x00'}, 0x18) r9 = epoll_create1(0x0) r10 = socket(0x1, 0x80802, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r11, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r11) shutdown(r10, 0x0) close(r2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ffffffff000000007400c89568a427e10c0001800800d7cac06572f090e617501391e9cf7759c91e07de4b25c2fce9b7f094068ab9e98750c7dcf85e7341baf183d70941ecc4cfe6eef0fb9ac4c022c380c364f28ede0ae3b31796b096464a1f1f85728eaf9c3a7d345246a0914c36d649ff84e80c9067f038fda4cd1d9893711bc007c19c94a030240d5d1efe06ccf6ba05cf6e93f6103b4c6fb711bdf01205b0f825f051c2a6443046b944e7e92aa4953f63f3c9a95dbe843e5c70", @ANYRES32=r8, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf25020000000800010000000000675d67e020911d0ac6c6e6e7d4f7f935d653103b71cd9be12e8ff1b1020522aba7048f86c6199224b3f28ff1a04720fd78a5dd4535bc3de2e9970fa9a0db3a74f7bb6412a2957073f389967ae9c15d561277701caade3bfe0a39c7802492ebfab111633067807795d2dcee068cb7be7e61a892fe"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x17, 0x3, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) close(0x4) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf250b000000180005"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.144522423s ago: executing program 33 (id=3730): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELFLOWTABLE={0x1c0, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xed}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x180c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1ff}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x17e8, 0x3, 0x0, 0x1, [{0x14e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x48, 0x1, "9ecd8d96b55e43bafac510a95b5fae94a720498306036c3891bd058d6d51268fb862b6baf9fe979dba10cf4e9c696fb7993bf7cdf86ba3dfd0ba2a99085193900742c5d8"}, @NFTA_DATA_VALUE={0x78, 0x1, "e1679227a2a989ac12e9cfd7b7036046a56a982097db8245c4b275dbde274e5f9bd91ce9e14dfa2058448018110a3e768cd2ceaaef062918dc0dbb9d3c3501fbdcfc6b2e229d8e92ee01ce6da69cc42fd448e2fc5c5a8015c21f71f2f18a6a1547da669b1607e8c1c77bb6fac5876b36aed3b8d8"}, @NFTA_DATA_VALUE={0x89, 0x1, "8e9c665c57f731192db2fe675358193ac6d8b5554aefaa2c0b185eb39cada629479d0ea85b38ad63aef8fc0a2b897f659e866658b229c725bd169e8f3dcb4e9f847ddb5af6341ad95972688fd717225b0a4a0ba138a57be10dc82c2caa48549a530b5062e8611af9eaf2cffe352649a7000c1123f0259e0fa57a9f121ecf3538431a8c57ab"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x130c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "3b5a4b24413f57303a3e4247de88116784ec57a11496458792c61b6c27caf7e0d852b27436922cd5b38ed1889024ac7ad1"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "559b1f914a918aa47b43e5fb114aa66ef3fecd1c031c479f5880b6a9b46dac92fce4e3665f00cb92bef7f373900e426c3ab2b20597d671520d0207d3e73404cab31436e41f5c3e"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x71, 0x1, "e9402cf7d88c2922f6ffacae1a42da5b813a38321adc36813e94d8eb8c4e9a8762ac095df2f4b8b5c69b102988ef548703fa583a3498469fa5e7fc8ee9778518916dd92e2531b9abff93542aac93e35eaace09d57a4c8fbb8502422cbe7906e6b2255a268fa84fce634ef86989"}, @NFTA_DATA_VALUE={0xba, 0x1, "1b93b55bb0039950d37fdcd86ca5d585777e453f8f4d3387535ecf1182d3fea96ba220bcef67c0f7d0b022151e812b37f7c8e2c88873d4dceed6754f0f5e76af669246406ba2d127a7236e5e41a132b0b1b62097f75618dca85479ba8120b42a05102714a362d7030f8d011e70a82ee79af9aaa05064cf898e6af681958f7f86f6c618ef9ae22faffc2fdd719f8a6257c620108c9f580036d5e386ef2de04b7d3803c48b65d28b3d70eebf4bb6c8cd01772e6ad25ed5"}]}]}, {0x300, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4c}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff8ef}]}}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0xdc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "a0bc1f0198b25643f02171d0fa3223f4c7ce7e2bcec5ec2793a2ee3e2c81614e6bd186530b181a67c36a95bd5b7ff8b98c69d108eded0def56f42f3dc37bcfad34d5c9ac40494b01e5f575d6ba028921e92bd4c6f0901a1b4fee675dd67f7cd207211c0b1ee9c067948bd1a5aeb5b8757357b4359412249099dc14699eff3f44abf16cbb14dc4a5cceaa6a91f3db92e82149882f718a5a2c0ac7ee9cef8e89e5c265d5c7d6c6282dffd7eafd47c08cd165a92ee3fd90db47a81de9"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x80, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2e, 0x3, "72940db4554ca509aff9caf5d49fdc2785302c65bc18eb8ad3f6886c20727febc84403b6c3dabe9e915c"}, @NFTA_TARGET_INFO={0xf, 0x3, "16b93fbbcd02a7cdd1cb17"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1a30}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.events.local\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000580)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000030000004d6d000000000000", @ANYRES64=0x0, @ANYRES64], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24002544c759d9603b3f30b66201b20e5b1f4729876d9725cc8d0654e566541ede1337656cbee49a1fb2e946346c066eaf5715f3b8300f2af45c23e7868f49092ac342438b5aac7da2a95a350ddef7a42ec4e42c4a5bd993ef03434775673fc0a00ad1e6d266eeea81f367c7c7d36983a6c9", @ANYRES16=r1, @ANYBLOB="a1ab000000000200000032000000080001006000000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbd7000ffdbdf256b00000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021103000000000a001a0008021100000100000a00060008021100000100000a000600ffffffffffff00000a0006000802110000010000"], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082dbd7000ffdbdf256b00000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021103000000000a001a0008021100000100000a00060008021100000100000a000600ffffffffffff00000a0006000802110000010000"], 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x3f7, 0x1, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4400c}, 0x8000041) 1.099979115s ago: executing program 34 (id=3727): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) unshare(0x60480) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, 0x0, 0x20000000, 0x4}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent-generic)\x00'}, 0x58) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="eb", 0x1}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devpts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000081) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c000100000000000000000014000300ff"], 0x114}], 0x1}, 0x0) 48.75912ms ago: executing program 35 (id=3732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x3a, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x30, 0x511, 0xfffffffc, 0x1, {0xd}}, 0x14}}, 0x804) 0s ago: executing program 36 (id=3733): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) listen(r0, 0x80000000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000200070000000900010073797a3000000000240002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ][ T5879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.306284][ T5862] Bluetooth: hci5: command tx timeout [ 419.278615][T17458] __nla_validate_parse: 10 callbacks suppressed [ 419.278634][T17458] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2916'. [ 419.522656][T15068] IPVS: starting estimator thread 0... [ 419.625888][T17465] IPVS: using max 24 ests per chain, 57600 per kthread [ 419.987631][T17407] chnl_net:caif_netlink_parms(): no params data found [ 420.080259][T17481] netlink: 'syz.2.2919': attribute type 13 has an invalid length. [ 420.092279][T17481] netlink: 'syz.2.2919': attribute type 17 has an invalid length. [ 420.210617][T17481] gretap0: refused to change device tx_queue_len [ 420.224760][T17481] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 420.287334][T17485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.368946][T17407] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.376654][T17407] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.383974][T17407] bridge_slave_0: entered allmulticast mode [ 420.386102][ T5862] Bluetooth: hci5: command tx timeout [ 420.393138][T17407] bridge_slave_0: entered promiscuous mode [ 420.423726][T17407] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.451793][T17407] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.489706][T17407] bridge_slave_1: entered allmulticast mode [ 420.551208][T17407] bridge_slave_1: entered promiscuous mode [ 420.750852][T17407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.836197][T17498] rdma_op ffff888070dbd1f0 conn xmit_rdma 0000000000000000 [ 420.861109][T17498] netlink: 'syz.3.2923': attribute type 10 has an invalid length. [ 420.879283][T17497] bond7: (slave ip6gretap2): Removing an active aggregator [ 420.907665][T17497] bond7: (slave ip6gretap2): Releasing backup interface [ 420.966682][T17407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.056257][T17498] bond0: (slave wlan1): refused to change device type [ 421.106673][T17407] team0: Port device team_slave_0 added [ 421.133616][T17407] team0: Port device team_slave_1 added [ 421.275088][T17407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.295885][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.329724][T17407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.370479][T17407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.378082][T17407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.418687][T17407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.546338][T17407] hsr_slave_0: entered promiscuous mode [ 421.553689][T17407] hsr_slave_1: entered promiscuous mode [ 421.561548][T17407] debugfs: 'hsr0' already exists in 'hsr' [ 421.568248][T17407] Cannot create hsr debugfs directory [ 421.969356][T17522] netlink: 'syz.0.2930': attribute type 9 has an invalid length. [ 421.980760][T17522] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2930'. [ 422.160684][T17407] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.222786][T17407] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.253553][T17407] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 422.280597][T17527] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2932'. [ 422.373404][T17407] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.392692][T17407] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.403339][T17407] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 422.467521][ T5862] Bluetooth: hci5: command tx timeout [ 422.480253][T17407] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.491949][T17407] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.502279][T17407] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 422.575895][T17407] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.585901][T17407] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 422.596640][T17407] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 422.822171][T17407] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.848492][T17407] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.891473][T17407] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.926972][T17407] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 423.216047][T17407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.303496][T17407] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.351101][T16833] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.358413][T16833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.431399][T16833] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.438680][T16833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.657081][T17407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.763820][T17407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.546191][ T5862] Bluetooth: hci5: command tx timeout [ 424.632603][T17583] netlink: 'syz.0.2943': attribute type 1 has an invalid length. [ 424.659514][T17407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.848735][T17583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 424.916968][T17590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2944'. [ 425.568240][T17621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2949'. [ 425.613177][T17407] veth0_vlan: entered promiscuous mode [ 425.633789][T17610] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2949'. [ 425.638781][T17620] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 425.723749][T17407] veth1_vlan: entered promiscuous mode [ 425.832194][T17407] veth0_macvtap: entered promiscuous mode [ 425.922676][T17407] veth1_macvtap: entered promiscuous mode [ 425.999544][T17638] netlink: 'syz.2.2954': attribute type 13 has an invalid length. [ 426.014770][T17407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.141209][T17407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.188648][T17641] openvswitch: netlink: Key type 251 is out of range max 32 [ 426.199436][T16833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.210058][T17638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2954'. [ 426.248647][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2957'. [ 426.276868][T16833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.328733][T16827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.373064][T16827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.744753][ T8110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.779685][ T8110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.863642][T16833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.892630][T16833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.167192][T17665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2963'. [ 427.598209][T17678] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 427.872241][T17684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 428.335894][T17689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2969'. [ 428.763227][T17702] netlink: 'syz.3.2972': attribute type 2 has an invalid length. [ 428.853972][T17708] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 428.902620][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.912444][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.926726][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.936943][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.938954][T17710] tipc: Started in network mode [ 428.956572][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.967314][T17710] tipc: Node identity a6c3c6a42fa5, cluster identity 4711 [ 428.979220][T17710] tipc: Enabled bearer , priority 0 [ 429.008947][T17709] syzkaller0: entered promiscuous mode [ 429.014496][T17709] syzkaller0: entered allmulticast mode [ 429.031664][T17714] netlink: 'syz.3.2975': attribute type 10 has an invalid length. [ 429.036198][T17707] tipc: Resetting bearer [ 429.060064][T17706] tipc: Resetting bearer [ 429.093591][T17706] tipc: Disabling bearer [ 429.316096][T17720] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2977'. [ 429.329504][T17714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.340771][T17714] team0: Device bond0 failed to register rx_handler [ 430.157306][T17743] ip6tnl1: entered promiscuous mode [ 430.162690][T17743] ip6tnl1: entered allmulticast mode [ 430.464595][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 430.476291][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 430.498973][T17751] ip6tnl3: entered promiscuous mode [ 430.504249][T17751] ip6tnl3: entered allmulticast mode [ 430.543955][T17756] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 430.553094][T17756] netlink: 'syz.1.2988': attribute type 46 has an invalid length. [ 430.741139][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2990'. [ 430.772443][T17765] netlink: 'syz.3.2990': attribute type 1 has an invalid length. [ 430.791460][T17765] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2990'. [ 430.821471][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2990'. [ 430.861377][T17711] chnl_net:caif_netlink_parms(): no params data found [ 431.027096][ T5879] Bluetooth: hci0: command tx timeout [ 431.941564][T17711] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.951040][T17711] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.959065][T17711] bridge_slave_0: entered allmulticast mode [ 431.969327][T17711] bridge_slave_0: entered promiscuous mode [ 431.998446][T17711] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.008553][T17711] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.016364][T17711] bridge_slave_1: entered allmulticast mode [ 432.024904][T17711] bridge_slave_1: entered promiscuous mode [ 432.311437][T17802] netlink: 'syz.1.2997': attribute type 11 has an invalid length. [ 432.428313][T17711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.476012][T17711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.743560][T17711] team0: Port device team_slave_0 added [ 432.762414][T17711] team0: Port device team_slave_1 added [ 432.812952][T17812] sctp: [Deprecated]: syz.1.3002 (pid 17812) Use of int in maxseg socket option. [ 432.812952][T17812] Use struct sctp_assoc_value instead [ 432.845448][T17711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.862908][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.906790][T17711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.929374][T17711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.936578][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.996146][T17711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.105404][ T5879] Bluetooth: hci0: command tx timeout [ 433.160039][T17711] hsr_slave_0: entered promiscuous mode [ 433.169288][T17711] hsr_slave_1: entered promiscuous mode [ 433.176063][T17711] debugfs: 'hsr0' already exists in 'hsr' [ 433.181991][T17711] Cannot create hsr debugfs directory [ 433.213754][T17822] netlink: 'syz.2.3005': attribute type 1 has an invalid length. [ 433.220929][T17825] netlink: 'syz.3.3007': attribute type 1 has an invalid length. [ 433.222353][T17827] netlink: 'syz.3.3007': attribute type 3 has an invalid length. [ 433.241205][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3007'. [ 433.257081][T17825] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3007'. [ 433.424085][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 433.465651][T17837] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.518787][T17822] gretap3: entered allmulticast mode [ 433.528287][T17822] bond10: (slave gretap3): making interface the new active one [ 433.537292][T17822] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 433.632047][T17837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.980053][T17837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.409089][T17837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.808223][ T8087] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.859176][ T8087] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.912106][ T8087] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.932361][ T8087] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.020003][ T8087] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.046387][ T8087] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.092436][ T8087] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.112993][ T8087] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.186680][ T5879] Bluetooth: hci0: command tx timeout [ 435.563163][T17876] syzkaller1: entered promiscuous mode [ 435.589026][T17876] syzkaller1: entered allmulticast mode [ 435.879244][T17897] sit0: entered promiscuous mode [ 435.926924][T17897] netlink: 'syz.3.3023': attribute type 1 has an invalid length. [ 435.943809][T17897] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3023'. [ 435.997191][T17711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 436.034891][T17711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 436.066525][T17711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 436.090726][T17711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 436.455020][T17711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.525005][T17711] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.587241][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.594534][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.658260][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.665532][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.255680][T17929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3029'. [ 437.268494][ T5879] Bluetooth: hci0: command tx timeout [ 437.280788][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'. [ 437.454396][T17940] tipc: Enabling of bearer rejected, already enabled [ 437.474770][T17939] lo speed is unknown, defaulting to 1000 [ 437.532570][T17939] lo speed is unknown, defaulting to 1000 [ 437.559867][T17939] lo speed is unknown, defaulting to 1000 [ 437.571812][T17711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.614800][T17939] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 437.744850][T17939] lo speed is unknown, defaulting to 1000 [ 437.757150][T17945] netlink: 'syz.0.3032': attribute type 4 has an invalid length. [ 437.818983][T17939] lo speed is unknown, defaulting to 1000 [ 437.857779][T17939] lo speed is unknown, defaulting to 1000 [ 437.891342][T17939] lo speed is unknown, defaulting to 1000 [ 437.917990][T17939] lo speed is unknown, defaulting to 1000 [ 437.936073][T17939] lo speed is unknown, defaulting to 1000 [ 437.959925][T17939] lo speed is unknown, defaulting to 1000 [ 438.122861][ T30] audit: type=1800 audit(1756722362.878:12): pid=17966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3037" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3061 res=0 errno=0 [ 438.124279][T17966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3037'. [ 438.172984][T17966] bridge0: entered promiscuous mode [ 438.182079][T17966] bridge0: port 1(macvlan2) entered blocking state [ 438.190748][T17966] bridge0: port 1(macvlan2) entered disabled state [ 438.197991][T17966] macvlan2: entered allmulticast mode [ 438.205808][T17966] bridge0: entered allmulticast mode [ 438.222971][T17966] macvlan2: left allmulticast mode [ 438.243338][T17966] bridge0: left allmulticast mode [ 438.262448][T17966] bridge0: left promiscuous mode [ 438.555501][T17711] veth0_vlan: entered promiscuous mode [ 438.592569][T17711] veth1_vlan: entered promiscuous mode [ 438.692686][T17711] veth0_macvtap: entered promiscuous mode [ 438.724171][T17711] veth1_macvtap: entered promiscuous mode [ 438.789819][T17711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.814566][T17711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.844972][T16831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.871904][T16831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.904615][T16831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.935817][T16831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.991745][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 439.034731][T17988] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3043'. [ 439.098626][T17970] lo speed is unknown, defaulting to 1000 [ 439.154766][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.179078][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.329229][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3046'. [ 439.371980][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.393114][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.559751][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'. [ 439.615650][T18002] openvswitch: netlink: nsh attr 2560 is out of range max 3 [ 439.623137][T18002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.752819][T18009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3047'. [ 439.807412][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 439.832078][T18008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 439.840668][T18008] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 440.385917][T18019] !: renamed from lo (while UP) [ 441.220720][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.231378][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.245644][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.254353][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.266343][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.574514][T18049] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3055'. [ 442.168523][ T1045] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.191433][ T1045] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.370926][T18062] tipc: Enabling of bearer rejected, already enabled [ 442.392031][T18063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3059'. [ 442.411862][T18022] lo speed is unknown, defaulting to 1000 [ 442.439290][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 442.468102][ T1045] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.480435][ T1045] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.618448][T18066] tipc: Enabled bearer , priority 0 [ 442.638568][T18066] veth0_to_bridge: entered promiscuous mode [ 442.644535][T18066] veth0_to_bridge: entered allmulticast mode [ 442.793977][T18034] lo speed is unknown, defaulting to 1000 [ 442.926599][T18061] tipc: Disabling bearer [ 443.134887][T18044] lo speed is unknown, defaulting to 1000 [ 443.142416][T18073] siw: device registration error -23 [ 443.369524][ T5862] Bluetooth: hci3: command tx timeout [ 443.458979][ T1045] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.484146][ T1045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.602732][ T1045] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.614225][ T1045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.891920][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3067'. [ 443.901405][T18099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3067'. [ 444.388578][T18104] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3068'. [ 444.438744][T18104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.504047][T18044] chnl_net:caif_netlink_parms(): no params data found [ 444.654543][ T1045] tipc: Resetting bearer [ 444.689890][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'. [ 445.367133][ T1045] tipc: Disabling bearer [ 445.437080][ T5862] Bluetooth: hci3: command tx timeout [ 445.632902][ T1045] bond0 (unregistering): left promiscuous mode [ 445.641113][ T1045] bond0 (unregistering): Released all slaves [ 445.661269][ T1045] bond1 (unregistering): Released all slaves [ 445.681980][ T1045] bond2 (unregistering): Released all slaves [ 445.832828][ T1045] bond3 (unregistering): Released all slaves [ 445.850226][ T1045] bond4 (unregistering): Released all slaves [ 445.864359][ T1045] bond5 (unregistering): Released all slaves [ 445.882463][ T1045] bond6 (unregistering): Released all slaves [ 446.030058][ T1045] bond7 (unregistering): Released all slaves [ 446.170541][ T1045] bond8 (unregistering): Released all slaves [ 446.185907][ T1045] bond9 (unregistering): Released all slaves [ 446.551259][ T1045] tipc: Left network mode [ 446.863211][ T1045] IPVS: stopping backup sync thread 9168 ... [ 446.869829][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'. [ 447.002699][T18044] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.044269][T18044] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.053312][T18044] bridge_slave_0: entered allmulticast mode [ 447.071664][T18044] bridge_slave_0: entered promiscuous mode [ 447.242232][T18044] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.251989][T18044] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.260873][T18044] bridge_slave_1: entered allmulticast mode [ 447.273786][T18044] bridge_slave_1: entered promiscuous mode [ 447.319298][T18115] lo speed is unknown, defaulting to 1000 [ 447.447353][T18044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.505592][ T5862] Bluetooth: hci3: command tx timeout [ 447.521360][T18170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3082'. [ 447.527800][T18044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.558853][T18170] netlink: 'syz.1.3082': attribute type 2 has an invalid length. [ 447.863442][T18044] team0: Port device team_slave_0 added [ 447.913277][T18044] team0: Port device team_slave_1 added [ 448.032533][T18110] lo speed is unknown, defaulting to 1000 [ 448.209163][T18044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.225436][T18044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.282437][T18044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.327743][T18044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.334736][T18044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.392161][T18044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.724730][T18167] lo speed is unknown, defaulting to 1000 [ 449.019583][T18044] hsr_slave_0: entered promiscuous mode [ 449.027019][T18044] hsr_slave_1: entered promiscuous mode [ 449.033335][T18044] debugfs: 'hsr0' already exists in 'hsr' [ 449.044764][T18044] Cannot create hsr debugfs directory [ 449.178662][T18195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3088'. [ 449.596154][ T5862] Bluetooth: hci3: command tx timeout [ 449.767095][ T1045] mac80211_hwsim hwsim8 wlan0 (unregistering): left allmulticast mode [ 450.131919][T18206] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 450.142755][T18206] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 450.558914][T18223] ip6gretap2: entered allmulticast mode [ 450.650237][ T1045] !: left promiscuous mode [ 450.696851][ T1045] hsr_slave_0: left promiscuous mode [ 450.717502][ T1045] hsr_slave_1: left promiscuous mode [ 450.787724][ T1045] veth1_macvtap: left promiscuous mode [ 450.804523][ T1045] veth0_macvtap: left promiscuous mode [ 450.826633][ T1045] veth1_vlan: left promiscuous mode [ 450.845596][ T1045] veth0_vlan: left promiscuous mode [ 450.918362][T18243] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3100'. [ 452.531599][T18261] Can't find ip_set type hash:ip$mec [ 452.578572][T18044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 452.631726][T18044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 452.673352][T18044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 452.726650][T18044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 452.830537][ T1045] IPVS: stop unused estimator thread 0... [ 454.347631][ T1045] bond0 (unregistering): Released all slaves [ 454.483939][ T1045] bond1 (unregistering): Released all slaves [ 454.630609][ T1045] bond2 (unregistering): Released all slaves [ 454.758057][ T1045] bond3 (unregistering): Released all slaves [ 454.882588][ T1045] bond4 (unregistering): Released all slaves [ 457.021645][T18274] lo speed is unknown, defaulting to 1000 [ 457.056241][ T1045] tipc: Left network mode [ 457.109347][ T1045] IPVS: stopping backup sync thread 10563 ... [ 457.215880][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3117'. [ 457.299856][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'. [ 457.309903][T18324] openvswitch: netlink: Missing key (keys=40, expected=100) [ 457.533412][T18337] netlink: 'syz.1.3124': attribute type 1 has an invalid length. [ 457.550636][T18044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.573891][T18337] netlink: 'syz.1.3124': attribute type 1 has an invalid length. [ 457.600626][T18337] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3124'. [ 457.664732][T18337] netlink: 'syz.1.3124': attribute type 1 has an invalid length. [ 457.670649][T18044] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.679721][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 457.806649][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.813860][ T8087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.852536][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.859788][ T8087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.971088][T18352] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 458.369568][T18363] netlink: 'syz.1.3132': attribute type 10 has an invalid length. [ 458.881384][ T1045] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode [ 459.053749][T18363] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 459.369312][T18393] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 459.433101][T18399] netlink: 'syz.0.3137': attribute type 12 has an invalid length. [ 459.442051][T18398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3139'. [ 459.471893][T18397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.565964][T18400] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3139'. [ 459.582049][T18403] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3139'. [ 459.636470][ T1045] hsr_slave_0: left promiscuous mode [ 459.652621][ T1045] hsr_slave_1: left promiscuous mode [ 459.686304][ T1045] veth1_macvtap: left promiscuous mode [ 459.692051][ T1045] veth0_macvtap: left promiscuous mode [ 459.699858][ T1045] veth1_vlan: left promiscuous mode [ 459.706051][ T1045] veth0_vlan: left promiscuous mode [ 460.831591][T18044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.073210][T18425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'. [ 461.100363][T18044] veth0_vlan: entered promiscuous mode [ 461.150018][T18044] veth1_vlan: entered promiscuous mode [ 461.202878][T18425] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3144'. [ 461.316904][T18044] veth0_macvtap: entered promiscuous mode [ 461.358344][T18044] veth1_macvtap: entered promiscuous mode [ 461.458464][T18044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.494165][T18431] tipc: Started in network mode [ 461.509546][T18431] tipc: Node identity 865a73151778, cluster identity 4711 [ 461.525983][T18431] tipc: Enabled bearer , priority 0 [ 461.536532][T18044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.556323][T18433] syzkaller0: entered promiscuous mode [ 461.571147][T18433] syzkaller0: entered allmulticast mode [ 461.614189][T16827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.643223][T16827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.658847][T18433] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3146'. [ 461.695419][T16827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.744431][T16827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.761869][T18431] tipc: Resetting bearer [ 461.776126][T18430] tipc: Resetting bearer [ 461.808684][T18430] tipc: Disabling bearer [ 462.041579][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.075796][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.132091][T18457] tipc: Trying to set illegal importance in message [ 462.178230][T18453] syzkaller0: entered promiscuous mode [ 462.184977][T18453] syzkaller0: entered allmulticast mode [ 462.216142][T18452] bridge0: port 3(erspan0) entered blocking state [ 462.222730][T18452] bridge0: port 3(erspan0) entered disabled state [ 462.265459][T18452] erspan0: entered allmulticast mode [ 462.279672][T18452] erspan0: entered promiscuous mode [ 462.317071][T18452] bridge0: port 3(erspan0) entered blocking state [ 462.324072][T18452] bridge0: port 3(erspan0) entered forwarding state [ 462.468320][T18475] __nla_validate_parse: 2 callbacks suppressed [ 462.468340][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 462.491914][T18461] erspan0: left allmulticast mode [ 462.497541][T18461] erspan0: left promiscuous mode [ 462.512151][T18461] bridge0: port 3(erspan0) entered disabled state [ 462.558386][T16827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.567999][T16827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.601592][T18482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3158'. [ 462.610789][T18482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3158'. [ 462.677997][T18482] tipc: Enabled bearer , priority 10 [ 462.773101][T18490] netlink: 'syz.3.3049': attribute type 13 has an invalid length. [ 462.835538][T18490] netlink: 'syz.3.3049': attribute type 17 has an invalid length. [ 462.898377][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'. [ 463.487865][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 463.503297][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 463.516163][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 463.527725][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 463.560544][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 463.675386][T18490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.963401][T18524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3165'. [ 463.981743][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3163'. [ 464.445503][T18534] syzkaller1: entered promiscuous mode [ 464.462966][T18534] syzkaller1: entered allmulticast mode [ 464.532118][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3170'. [ 464.562080][T18542] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 464.622217][T18542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3170'. [ 464.656296][T18498] lo speed is unknown, defaulting to 1000 [ 464.808865][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3172'. [ 464.835326][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3172'. [ 465.123075][T18514] lo speed is unknown, defaulting to 1000 [ 465.593588][ T5862] Bluetooth: hci2: command tx timeout [ 466.390092][ T8087] bond1 (unregistering): Released all slaves [ 466.537870][ T8087] bond2 (unregistering): Released all slaves [ 466.668368][ T8087] smc: removing net device bond0 with user defined pnetid SYZ2 [ 466.678112][ T8087] bond0 (unregistering): Released all slaves [ 466.693450][ T8087] bond3 (unregistering): Released all slaves [ 466.835821][ T8087] bond4 (unregistering): Released all slaves [ 466.964675][ T8087] bond5 (unregistering): Released all slaves [ 466.994008][T18562] gretap0: entered promiscuous mode [ 467.151059][ T8087] : left promiscuous mode [ 467.218243][T18565] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 467.227392][T18565] macvtap1: entered promiscuous mode [ 467.277700][T18565] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 467.364977][ T8087] þ: left promiscuous mode [ 467.482044][ T8087] tipc: Disabling bearer [ 467.665732][ T5862] Bluetooth: hci2: command tx timeout [ 467.971466][ T8087] tipc: Left network mode [ 468.059702][T18579] tipc: Enabled bearer , priority 0 [ 468.081844][T18581] syzkaller0: entered promiscuous mode [ 468.091993][T18581] syzkaller0: entered allmulticast mode [ 468.204186][T18597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.217962][T18590] tipc: Resetting bearer [ 468.255485][T18590] tipc: Disabling bearer [ 468.489522][T18598] syzkaller1: entered promiscuous mode [ 468.515510][T18598] syzkaller1: entered allmulticast mode [ 468.594806][T18610] __nla_validate_parse: 2 callbacks suppressed [ 468.594828][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 468.875599][T18514] chnl_net:caif_netlink_parms(): no params data found [ 469.626858][T18636] tipc: Enabled bearer , priority 0 [ 469.745189][ T5862] Bluetooth: hci2: command tx timeout [ 469.787158][T18635] syzkaller0: entered promiscuous mode [ 469.818520][T18635] syzkaller0: entered allmulticast mode [ 470.106072][T18635] tipc: Resetting bearer [ 470.630655][T18629] tipc: Resetting bearer [ 470.687530][T18629] tipc: Disabling bearer [ 470.716649][T18514] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.723859][T18514] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.763630][T18514] bridge_slave_0: entered allmulticast mode [ 470.783779][T18514] bridge_slave_0: entered promiscuous mode [ 470.867667][T18514] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.891937][T18514] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.905357][T18514] bridge_slave_1: entered allmulticast mode [ 470.916375][T18661] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 470.918760][T18514] bridge_slave_1: entered promiscuous mode [ 471.131054][T18670] syzkaller0: entered promiscuous mode [ 471.136891][T18670] syzkaller0: entered allmulticast mode [ 471.163730][T18514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.231532][T18514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.362017][T18514] team0: Port device team_slave_0 added [ 471.379964][T18514] team0: Port device team_slave_1 added [ 471.542268][T18657] lo speed is unknown, defaulting to 1000 [ 471.577837][T18514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.590543][T18514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.623588][T18514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.726940][T18514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.733944][T18514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.825836][ T5862] Bluetooth: hci2: command tx timeout [ 471.851874][T18514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.054414][ T8087] hsr_slave_0: left promiscuous mode [ 472.063723][ T8087] hsr_slave_1: left promiscuous mode [ 472.142671][T18687] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3201'. [ 473.487660][T18666] lo speed is unknown, defaulting to 1000 [ 473.708979][T18514] hsr_slave_0: entered promiscuous mode [ 473.720739][T18514] hsr_slave_1: entered promiscuous mode [ 473.903961][T18683] lo speed is unknown, defaulting to 1000 [ 473.915944][T16827] smc: removing ib device syz1 [ 474.690061][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 474.822678][T18719] netlink: 163952 bytes leftover after parsing attributes in process `syz.2.3209'. [ 474.952945][T18719] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.3209'. [ 475.264403][T18724] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 476.104735][T18729] tipc: Enabled bearer , priority 0 [ 476.147721][T18729] syzkaller0: entered promiscuous mode [ 476.153252][T18729] syzkaller0: entered allmulticast mode [ 476.173074][T18514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.226740][T18729] tipc: Resetting bearer [ 476.249417][T18514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.268172][T18514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.344134][T18730] tipc: Resetting bearer [ 476.381724][T18730] tipc: Disabling bearer [ 476.402210][ T8087] IPVS: stop unused estimator thread 0... [ 476.410865][T18514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.761449][T18514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.857781][T18514] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.921936][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.929733][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.058579][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.065851][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.994203][T18774] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 478.032643][T18514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.136698][T18776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3221'. [ 478.232284][T18786] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.261497][T18514] veth0_vlan: entered promiscuous mode [ 478.303074][T18514] veth1_vlan: entered promiscuous mode [ 478.436188][T18514] veth0_macvtap: entered promiscuous mode [ 478.475937][T18514] veth1_macvtap: entered promiscuous mode [ 478.533264][T18514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.637400][T18514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.671395][ T74] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.737467][ T74] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.788835][T18800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3229'. [ 478.809263][ T74] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.823233][T18800] netlink: 'syz.1.3229': attribute type 4 has an invalid length. [ 478.845369][ T74] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.069992][T16831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.100774][T16831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.199796][T16831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.229918][T16831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.788475][T18819] macsec1: entered allmulticast mode [ 479.798516][T18819] macvlan1: entered allmulticast mode [ 479.808671][T18819] veth1_vlan: entered allmulticast mode [ 479.858461][T18819] macvlan1: left allmulticast mode [ 479.863659][T18819] veth1_vlan: left allmulticast mode [ 480.121411][T15049] IPVS: starting estimator thread 0... [ 480.225543][T18836] IPVS: using max 27 ests per chain, 64800 per kthread [ 480.332179][T18842] Bluetooth: MGMT ver 1.23 [ 480.399037][T18846] sch_tbf: burst 1240 is lower than device team_slave_0 mtu (1514) ! [ 480.600871][T18846] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 480.685543][T18846] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 481.333041][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.343387][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.352263][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.367308][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.375859][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.454531][T16831] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.604840][T16831] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.611617][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 481.697971][T18885] veth1: entered promiscuous mode [ 481.709414][T18885] veth1: left promiscuous mode [ 481.764965][T16831] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.886358][T16831] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.268152][T18905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3254'. [ 482.493107][T18917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3256'. [ 482.831742][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 483.049522][T18877] chnl_net:caif_netlink_parms(): no params data found [ 483.094793][T18917] veth1_macvtap: left promiscuous mode [ 483.332564][T18925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3255'. [ 483.408415][T18926] netlink: 'syz.0.3255': attribute type 13 has an invalid length. [ 483.422812][T16831] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 483.433705][ T5862] Bluetooth: hci1: command tx timeout [ 483.443801][T18926] netlink: 'syz.0.3255': attribute type 17 has an invalid length. [ 483.451694][T16831] bond9 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - fa:29:6a:7c:5f:20 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 483.690172][T16831] gretap0 (unregistering): left promiscuous mode [ 483.746184][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 483.784606][T16831] bond10 (unregistering): (slave gretap3): Releasing active interface [ 484.188415][T16831] bond6 (unregistering): (slave bridge4): Releasing active interface [ 484.802951][T16831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.827269][T16831] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 484.843263][T16831] bond0 (unregistering): Released all slaves [ 485.092912][T16831] bond1 (unregistering): (slave bond2): Releasing backup interface [ 485.102949][T16831] bond1 (unregistering): Released all slaves [ 485.344863][T16831] bond2 (unregistering): Released all slaves [ 485.380489][T16831] bond3 (unregistering): Released all slaves [ 485.400995][T16831] bond4 (unregistering): Released all slaves [ 485.505608][ T5862] Bluetooth: hci1: command tx timeout [ 485.632299][T16831] bond5 (unregistering): Released all slaves [ 485.659194][T16831] bond6 (unregistering): Released all slaves [ 485.678749][T16831] bond7 (unregistering): Released all slaves [ 485.817609][T18935] netlink: 'syz.3.3259': attribute type 9 has an invalid length. [ 485.826269][T18935] netlink: 'syz.3.3259': attribute type 11 has an invalid length. [ 485.834608][T18935] netlink: 147436 bytes leftover after parsing attributes in process `syz.3.3259'. [ 485.847103][T18935] netlink: 'syz.3.3259': attribute type 9 has an invalid length. [ 485.854886][T18935] netlink: 'syz.3.3259': attribute type 11 has an invalid length. [ 485.862993][T18935] netlink: 147436 bytes leftover after parsing attributes in process `syz.3.3259'. [ 485.919188][T16831] bond8 (unregistering): Released all slaves [ 486.089238][T16831] bond9 (unregistering): (slave veth5): Releasing active interface [ 486.099129][T16831] bond9 (unregistering): Released all slaves [ 486.119430][T16831] bond10 (unregistering): Released all slaves [ 486.364426][T18943] IPVS: persistence engine module ip_vs_pe_ not found [ 486.390320][T18926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.394402][T18943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.434699][T16831] tipc: Disabling bearer [ 486.445870][T16831] tipc: Disabling bearer [ 486.472252][T16831] tipc: Left network mode [ 486.710627][T18950] syzkaller1: entered promiscuous mode [ 486.717279][T18950] syzkaller1: entered allmulticast mode [ 486.791255][T18956] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 486.929899][T18877] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.938040][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.949601][T18877] bridge_slave_0: entered allmulticast mode [ 486.962748][T18877] bridge_slave_0: entered promiscuous mode [ 486.973674][T18877] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.981069][T18877] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.988454][T18877] bridge_slave_1: entered allmulticast mode [ 486.997211][T18877] bridge_slave_1: entered promiscuous mode [ 487.024173][T18960] pim6reg: entered allmulticast mode [ 487.067343][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3267'. [ 487.121653][T18877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.137253][T18877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.156931][T18960] pim6reg: left allmulticast mode [ 487.336969][T18877] team0: Port device team_slave_0 added [ 487.358506][T18877] team0: Port device team_slave_1 added [ 487.518002][T18974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3270'. [ 487.589722][ T5862] Bluetooth: hci1: command tx timeout [ 487.607796][T18974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3270'. [ 487.647732][T18877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.670046][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.761828][T18877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.807504][T18981] netlink: 'syz.1.3272': attribute type 1 has an invalid length. [ 487.831276][T18877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.843543][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.874893][T18877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.935980][T18981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.000870][T18990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3273'. [ 488.003416][T18985] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 488.046833][T18987] vlan2: entered allmulticast mode [ 488.052169][T18987] veth1: entered allmulticast mode [ 488.247484][T16831] mac80211_hwsim hwsim5 wlan0 (unregistering): left allmulticast mode [ 488.270277][T16831] mac80211_hwsim hwsim5 wlan0 (unregistering): left promiscuous mode [ 488.622968][T18993] batadv_slave_1: entered promiscuous mode [ 488.651561][T19000] !: renamed from dummy0 (while UP) [ 488.662381][T19007] pim6reg1: entered promiscuous mode [ 488.668922][T19007] pim6reg1: entered allmulticast mode [ 488.683897][T18877] hsr_slave_0: entered promiscuous mode [ 488.714261][T18877] hsr_slave_1: entered promiscuous mode [ 488.722188][T18877] debugfs: 'hsr0' already exists in 'hsr' [ 488.728256][T18877] Cannot create hsr debugfs directory [ 488.779812][T16831] hsr_slave_0: left promiscuous mode [ 488.795496][T16831] hsr_slave_1: left promiscuous mode [ 489.388395][T16831] team0 (unregistering): Port device team_slave_1 removed [ 489.441398][T16831] team0 (unregistering): Port device team_slave_0 removed [ 489.665453][ T5862] Bluetooth: hci1: command tx timeout [ 489.983363][T19018] netlink: 'syz.0.3278': attribute type 1 has an invalid length. [ 489.997087][T18992] batadv_slave_1: left promiscuous mode [ 490.290349][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'. [ 490.291732][T19029] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.952082][ T5954] IPVS: starting estimator thread 0... [ 490.999884][T19049] netlink: 'syz.4.3288': attribute type 4 has an invalid length. [ 491.045292][T19051] IPVS: using max 28 ests per chain, 67200 per kthread [ 491.175757][T16831] IPVS: stop unused estimator thread 0... [ 491.581390][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'. [ 492.040684][T19086] wireguard0: entered promiscuous mode [ 492.064958][T19086] wireguard0: entered allmulticast mode [ 492.128788][T18877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 492.154363][T19087] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 492.184605][T18877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 492.254243][T19086] gretap1: entered allmulticast mode [ 492.264907][T18877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 492.282885][T18877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 492.327639][T19090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3300'. [ 492.480056][T19094] pimreg: entered allmulticast mode [ 492.584239][T19111] netlink: 'syz.1.3304': attribute type 13 has an invalid length. [ 492.666354][T19111] gretap0: refused to change device tx_queue_len [ 492.673783][T19111] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 492.733472][T19114] dvmrp8: entered allmulticast mode [ 492.909831][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'. [ 492.920326][T19122] netlink: 'syz.1.3306': attribute type 14 has an invalid length. [ 492.973389][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'. [ 492.985961][T19122] netlink: 'syz.1.3306': attribute type 14 has an invalid length. [ 493.018970][ T1045] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.055285][ T1045] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.064035][ T1045] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.089511][ T1045] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.299655][T19093] pimreg: left allmulticast mode [ 493.311475][T19093] dvmrp8: left allmulticast mode [ 493.441696][T19127] tipc: Enabled bearer , priority 0 [ 493.450176][T19140] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 493.459899][T19135] syzkaller0: entered promiscuous mode [ 493.469161][T19135] syzkaller0: entered allmulticast mode [ 493.561257][T19127] syzkaller0: mtu less than device minimum [ 493.569674][T19126] tipc: Resetting bearer [ 493.570052][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 493.588351][T19144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3312'. [ 493.640657][T19126] tipc: Disabling bearer [ 493.662428][T19146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3313'. [ 493.717405][T18877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.792541][T18877] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.837924][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.845217][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.888888][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 493.939451][T19165] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 494.151610][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.158858][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.264394][T19180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3319'. [ 494.379457][T19180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3319'. [ 494.568838][T19191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3322'. [ 495.340138][T19228] tipc: Started in network mode [ 495.348782][T19228] tipc: Node identity ced08bdaff93, cluster identity 4711 [ 495.366810][T19228] tipc: Enabled bearer , priority 0 [ 495.408644][T19231] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.533705][T19228] tipc: Disabling bearer [ 495.724045][T19244] netlink: 'syz.3.3336': attribute type 4 has an invalid length. [ 495.748681][T19244] netlink: 'syz.3.3336': attribute type 4 has an invalid length. [ 495.783283][T18877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.613638][T18877] veth0_vlan: entered promiscuous mode [ 496.859511][T18877] veth1_vlan: entered promiscuous mode [ 496.967554][T18877] veth0_macvtap: entered promiscuous mode [ 496.978121][T18877] veth1_macvtap: entered promiscuous mode [ 497.002026][T19280] netlink: 'syz.1.3344': attribute type 10 has an invalid length. [ 497.018723][T19279] bond0: (slave bond_slave_1): Releasing backup interface [ 497.373753][T19280] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 497.375054][T19294] sctp: [Deprecated]: syz.0.3349 (pid 19294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.375054][T19294] Use struct sctp_sack_info instead [ 497.463927][T19293] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 497.482194][T19293] syzkaller1: linktype set to 804 [ 497.547680][T18877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.583948][T18877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.704269][T16827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.735769][T16827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.769046][T16827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.795840][T16827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.874997][T19302] __nla_validate_parse: 2 callbacks suppressed [ 497.875019][T19302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3351'. [ 497.903063][T19302] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3351'. [ 497.922558][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 497.936275][T19307] netlink: 'syz.1.3352': attribute type 1 has an invalid length. [ 497.944355][T19307] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3352'. [ 498.246218][ T8087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.262999][ T8087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.286758][T19320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.750522][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.779974][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.079602][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e0c0c00: rx timeout, send abort [ 499.270225][T19356] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 499.579730][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055015000: rx timeout, send abort [ 499.591154][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e0c0c00: abort rx timeout. Force session deactivation [ 500.088142][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055015000: abort rx timeout. Force session deactivation [ 500.146947][T19391] netlink: 'syz.3.3372': attribute type 3 has an invalid length. [ 500.208574][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 500.224664][T19396] netlink: 'syz.4.3374': attribute type 30 has an invalid length. [ 500.258081][ T8110] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.270516][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 500.289783][ T8110] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.302063][T19396] netlink: 'syz.4.3374': attribute type 30 has an invalid length. [ 500.312175][ T8110] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.322125][ T8110] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.414939][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 500.431048][T19406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3376'. [ 500.470081][ T8110] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.480292][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 500.490315][ T8110] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.496165][T19406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3376'. [ 500.500476][ T8110] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.517127][ T8110] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.064832][T19487] openvswitch: netlink: Flow actions attr not present in new flow. [ 502.099809][T19487] tipc: Started in network mode [ 502.109574][T19487] tipc: Node identity e2481d1b4742, cluster identity 4711 [ 502.119967][T19487] tipc: Enabled bearer , priority 0 [ 502.134267][T19487] syzkaller0: entered promiscuous mode [ 502.151775][T19487] syzkaller0: entered allmulticast mode [ 502.471965][T19487] tipc: Resetting bearer [ 502.492855][T19487] tipc: Disabling bearer [ 502.505259][T19494] bridge_slave_1: left allmulticast mode [ 502.524677][T19494] bridge_slave_1: left promiscuous mode [ 502.534548][T19494] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.574498][T19494] bridge_slave_0: left allmulticast mode [ 502.594225][T19494] bridge_slave_0: left promiscuous mode [ 502.626058][T19494] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.937747][T19514] __nla_validate_parse: 8 callbacks suppressed [ 502.937767][T19514] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3406'. [ 502.992503][T19518] batadv1: entered promiscuous mode [ 503.005979][T19516] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3407'. [ 503.100231][T19523] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3407'. [ 503.122586][ T5954] IPVS: starting estimator thread 0... [ 503.122903][T19521] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 503.223970][T19526] IPVS: using max 25 ests per chain, 60000 per kthread [ 503.413186][T19534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3411'. [ 503.735466][T19548] netlink: 'syz.0.3414': attribute type 5 has an invalid length. [ 504.384585][T19569] syzkaller0: entered allmulticast mode [ 504.416537][T19569] syzkaller0 (unregistering): left allmulticast mode [ 505.047696][T19590] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3425'. [ 505.070942][T19591] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3425'. [ 505.563987][T19620] netlink: 'syz.0.3433': attribute type 2 has an invalid length. [ 505.644993][T19624] netlink: 'syz.4.3432': attribute type 1 has an invalid length. [ 505.677755][T19624] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3432'. [ 507.171770][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'. [ 507.196273][T19702] netlink: 'syz.4.3448': attribute type 16 has an invalid length. [ 507.204184][T19702] netlink: 'syz.4.3448': attribute type 17 has an invalid length. [ 507.331591][T19702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.414751][T19711] netlink: 'syz.0.3453': attribute type 3 has an invalid length. [ 507.424126][T19711] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3453'. [ 507.460572][T19712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.793520][T19731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3458'. [ 507.820347][T19730] netlink: 'syz.0.3460': attribute type 4 has an invalid length. [ 507.880454][T19737] netlink: 'syz.0.3460': attribute type 4 has an invalid length. [ 508.063725][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3463'. [ 508.133321][T19745] IPVS: length: 24 != 55320 [ 508.362079][T19756] netlink: 'syz.0.3469': attribute type 10 has an invalid length. [ 508.373851][T19756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3469'. [ 508.384938][T19756] veth0_vlan: entered allmulticast mode [ 508.402583][T19756] bridge0: port 3(veth0_vlan) entered blocking state [ 508.411039][T19756] bridge0: port 3(veth0_vlan) entered disabled state [ 508.429932][T19756] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 508.620009][T19763] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 508.815936][T19774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'. [ 508.862822][T19774] xfrm1: entered promiscuous mode [ 508.885622][T19774] xfrm1: entered allmulticast mode [ 508.954177][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3474'. [ 509.281219][T19789] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3476'. [ 509.295385][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'. [ 509.304441][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'. [ 509.470137][T19792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3477'. [ 509.803604][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 509.851799][T19808] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3480'. [ 509.870493][T19808] tipc: Enabled bearer , priority 0 [ 509.878544][T19808] syzkaller0: entered promiscuous mode [ 509.884065][T19808] syzkaller0: entered allmulticast mode [ 509.960845][T19808] tipc: Resetting bearer [ 509.977619][T19806] tipc: Resetting bearer [ 510.036801][T19806] tipc: Disabling bearer [ 511.531084][T19869] netlink: 'syz.2.3494': attribute type 8 has an invalid length. [ 511.900553][T19883] netlink: 'syz.2.3498': attribute type 4 has an invalid length. [ 512.513703][T19911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.528726][T19911] bond0: (slave bond2): Enslaving as an active interface with an up link [ 512.883499][ T30] audit: type=1800 audit(1756722437.638:13): pid=19928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3512" name="blkio.bfq.time_recursive" dev="tmpfs" ino=571 res=0 errno=0 [ 513.080847][T19933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.131165][T19943] __nla_validate_parse: 5 callbacks suppressed [ 513.131189][T19943] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3518'. [ 513.406601][T19965] netlink: 'syz.2.3521': attribute type 7 has an invalid length. [ 513.421344][T19965] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3521'. [ 513.650072][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3524'. [ 513.790044][T19991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3531'. [ 513.807816][T19992] netlink: 'syz.1.3529': attribute type 6 has an invalid length. [ 513.834304][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 513.849098][T19991] netlink: 'syz.4.3531': attribute type 1 has an invalid length. [ 513.899137][T19991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.941855][T19991] bond3: (slave ip6gretap1): making interface the new active one [ 513.951510][T19991] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 514.023113][T19998] veth3: entered promiscuous mode [ 514.041104][T19998] bond3: (slave veth3): Enslaving as an active interface with a down link [ 514.066745][T19991] erspan0: entered allmulticast mode [ 514.112274][T19991] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 514.235579][T20004] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 514.283826][T20004] netlink: 'syz.4.3534': attribute type 10 has an invalid length. [ 514.319598][T20004] mac80211_hwsim hwsim40 wlan1: left allmulticast mode [ 514.372646][T20004] bond0: (slave wlan1): Opening slave failed [ 514.770271][T20024] netlink: 'syz.4.3540': attribute type 3 has an invalid length. [ 514.824926][T20024] syz_tun: entered allmulticast mode [ 514.963068][T20024] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 515.040403][T20023] syz_tun: left allmulticast mode [ 515.199546][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'. [ 515.241990][T20045] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 515.275603][T20045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.641274][T20069] lo speed is unknown, defaulting to 1000 [ 515.650683][T20069] lo speed is unknown, defaulting to 1000 [ 515.707867][T20069] lo speed is unknown, defaulting to 1000 [ 515.748688][T20082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3552'. [ 515.764947][T20069] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 515.810460][T20069] lo speed is unknown, defaulting to 1000 [ 515.839042][T20069] lo speed is unknown, defaulting to 1000 [ 515.849422][T20069] lo speed is unknown, defaulting to 1000 [ 515.869801][T20069] lo speed is unknown, defaulting to 1000 [ 515.878244][T20069] lo speed is unknown, defaulting to 1000 [ 515.886730][T20069] lo speed is unknown, defaulting to 1000 [ 515.950058][T20087] netlink: 'syz.1.3554': attribute type 3 has an invalid length. [ 516.196983][T20101] IPv6: sit1: Disabled Multicast RS [ 516.315241][T20110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3561'. [ 516.473483][T20120] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3564'. [ 516.484942][T20120] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3564'. [ 517.376358][T20150] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 517.384158][T20150] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 517.888275][T20169] lo speed is unknown, defaulting to 1000 [ 517.930287][T20170] netlink: 'syz.1.3577': attribute type 3 has an invalid length. [ 518.352873][T20180] __nla_validate_parse: 7 callbacks suppressed [ 518.352895][T20180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3580'. [ 518.475622][ T5879] Bluetooth: hci1: command 0x0405 tx timeout [ 518.580270][T20187] syzkaller1: entered promiscuous mode [ 518.586305][T20187] syzkaller1: entered allmulticast mode [ 518.744639][T20185] tc_dump_action: action bad kind [ 518.786672][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3585'. [ 518.893814][T20199] netlink: 'syz.0.3587': attribute type 1 has an invalid length. [ 518.930537][T20184] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.938466][T20184] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.147561][T20184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.163201][T20184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.438538][T20213] bond1: (slave bridge1): making interface the new active one [ 519.446988][T20213] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 519.456520][T16827] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.474971][T16827] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.540709][T16827] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.556252][T16827] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.582020][T20206] lo speed is unknown, defaulting to 1000 [ 519.594595][T20219] netlink: 'syz.2.3590': attribute type 1 has an invalid length. [ 519.636352][T20219] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3590'. [ 519.651615][T20207] lo speed is unknown, defaulting to 1000 [ 519.761675][T20230] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 519.977129][T20226] lo speed is unknown, defaulting to 1000 [ 520.018574][T20239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3594'. [ 520.505432][T20258] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3599'. [ 520.561716][T20262] netlink: 'syz.3.3599': attribute type 1 has an invalid length. [ 520.570420][T20255] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3599'. [ 520.582017][T20262] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3599'. [ 520.629603][T20255] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3599'. [ 520.698890][T20257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3600'. [ 521.003385][T20268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.019389][T20268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.182583][T20285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3605'. [ 521.192700][T20268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.213521][T20268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.413509][T20289] xt_l2tp: unknown flags: 51 [ 521.442831][T20268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.513853][T20268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.555699][ T9] hid-generic 0005:04F3:0009.0002: unknown main item tag 0x0 [ 521.573071][ T9] hid-generic 0005:04F3:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 521.584261][T20294] syz_tun: entered allmulticast mode [ 521.618997][T20294] dvmrp8: entered allmulticast mode [ 521.641156][T20294] tipc: Enabling of bearer rejected, failed to enable media [ 521.653610][T20297] netlink: 'syz.3.3608': attribute type 3 has an invalid length. [ 521.662584][T20297] team0: No ports can be present during mode change [ 521.729981][T20268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.745893][T20268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.780893][T20294] syz_tun: left allmulticast mode [ 521.786778][T20294] dvmrp8: left allmulticast mode [ 521.987159][T16831] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.005262][T16831] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.024249][T16831] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.039117][T16831] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.082517][T16827] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.101398][T16827] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.174772][ T1045] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.193654][ T1045] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.883364][T20352] lo speed is unknown, defaulting to 1000 [ 523.054015][T20373] netlink: 'syz.2.3627': attribute type 21 has an invalid length. [ 523.672509][T20404] tipc: Enabled bearer , priority 0 [ 523.723956][T20352] netlink: 'syz.3.3621': attribute type 11 has an invalid length. [ 523.736000][T20405] syzkaller0: entered promiscuous mode [ 523.772001][T20405] syzkaller0: entered allmulticast mode [ 523.893523][T20405] tipc: Resetting bearer [ 523.981893][T20405] tipc: Disabling bearer [ 524.119785][T20421] __nla_validate_parse: 4 callbacks suppressed [ 524.119808][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3638'. [ 524.208834][T20424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3639'. [ 524.219936][T20423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3639'. [ 524.428386][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3642'. [ 524.489343][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3642'. [ 524.524827][T20433] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3642'. [ 524.535911][T20433] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3642'. [ 524.685904][T20441] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 525.368128][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 525.527942][T20478] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 525.568190][T20478] Bluetooth: MGMT ver 1.23 [ 525.600531][T20478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3651'. [ 525.636695][T20478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3651'. [ 526.090097][T20492] lo speed is unknown, defaulting to 1000 [ 527.056381][T20530] nft_compat: unsupported protocol 64 [ 527.067521][T20530] Bluetooth: MGMT ver 1.23 [ 527.279433][T20540] syzkaller1: entered promiscuous mode [ 527.306736][T20540] syzkaller1: entered allmulticast mode [ 527.493799][T20545] lo speed is unknown, defaulting to 1000 [ 527.666141][ T5862] Bluetooth: hci2: command 0x0401 tx timeout [ 527.668950][ T5879] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 527.811847][T20550] syz_tun: entered promiscuous mode [ 527.847095][T20550] batadv_slave_0: entered promiscuous mode [ 527.881448][T20550] hsr1: entered allmulticast mode [ 527.912566][T20550] syz_tun: entered allmulticast mode [ 527.933448][T20550] batadv_slave_0: entered allmulticast mode [ 527.991328][T20553] team0: entered promiscuous mode [ 528.026653][T20553] team_slave_0: entered promiscuous mode [ 528.047634][T20553] team_slave_1: entered promiscuous mode [ 528.058752][T20553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 528.118622][T20553] team0: left promiscuous mode [ 528.123467][T20553] team_slave_0: left promiscuous mode [ 528.186725][T20553] team_slave_1: left promiscuous mode [ 530.290316][T20572] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 530.645853][T20584] __nla_validate_parse: 3 callbacks suppressed [ 530.645876][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3679'. [ 531.289743][T20608] pim6reg1: entered promiscuous mode [ 531.314014][T20608] pim6reg1: entered allmulticast mode [ 531.584198][T20612] tipc: Enabled bearer , priority 0 [ 531.594793][T20612] syzkaller0: entered promiscuous mode [ 531.601304][T20612] syzkaller0: entered allmulticast mode [ 531.678983][T20610] tipc: Resetting bearer [ 531.689842][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3687'. [ 531.808531][T20610] lo speed is unknown, defaulting to 1000 [ 531.948640][T20616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3688'. [ 532.157872][T20609] tipc: Resetting bearer [ 532.267722][T20609] tipc: Disabling bearer [ 532.573869][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3693'. [ 532.837594][T20645] tap0: tun_chr_ioctl cmd 1074025677 [ 532.847610][T20645] tap0: linktype set to 774 [ 532.906979][T20648] netlink: 'syz.0.3696': attribute type 5 has an invalid length. [ 533.093752][T20651] netlink: 'syz.1.3697': attribute type 4 has an invalid length. [ 533.239388][T20654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3699'. [ 533.499545][T20658] lo speed is unknown, defaulting to 1000 [ 533.550414][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3701'. [ 533.731688][T20669] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 533.748297][T20666] netlink: 'syz.3.3704': attribute type 4 has an invalid length. [ 535.067060][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3716'. [ 535.265769][ T5879] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 535.272518][ T5879] Bluetooth: hci2: command 0x0401 tx timeout [ 535.452788][T20735] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3722'. [ 535.466819][T20729] block nbd0: NBD_DISCONNECT [ 535.471703][T20729] block nbd0: Send disconnect failed -22 [ 535.496487][T20729] block nbd0: Disconnected due to user request. [ 535.514569][T20729] block nbd0: shutting down sockets [ 536.202168][T20763] netlink: 'syz.1.3727': attribute type 3 has an invalid length. [ 536.221424][T20763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3727'. [ 536.372159][T20766] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3731'. [ 547.748311][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 551.195271][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.203547][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.213124][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.227357][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.236721][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 551.274779][T20777] lo speed is unknown, defaulting to 1000 [ 551.438143][T20777] chnl_net:caif_netlink_parms(): no params data found [ 551.672657][T20777] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.696071][T20777] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.703371][T20777] bridge_slave_0: entered allmulticast mode [ 551.737659][T20777] bridge_slave_0: entered promiscuous mode [ 551.776188][T20777] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.783589][T20777] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.812357][T20777] bridge_slave_1: entered allmulticast mode [ 551.825742][T20777] bridge_slave_1: entered promiscuous mode [ 551.873184][ T5879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 551.886073][ T5879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 551.894447][ T5879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 551.903197][ T5879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 551.911639][ T5879] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 551.979932][T20777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.014913][T20777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.056643][ T5879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 552.091889][ T5879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 552.096471][T20777] team0: Port device team_slave_0 added [ 552.104787][ T5879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 552.111730][T20787] lo speed is unknown, defaulting to 1000 [ 552.115995][T20777] team0: Port device team_slave_1 added [ 552.123937][ T5879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 552.136823][ T5879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 552.184151][T20777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.191293][T20777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.218358][T20777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.246278][T20777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.253310][T20777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.279926][T20777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.361722][T20777] hsr_slave_0: entered promiscuous mode [ 552.368388][T20777] hsr_slave_1: entered promiscuous mode [ 552.374712][T20777] debugfs: 'hsr0' already exists in 'hsr' [ 552.380605][T20777] Cannot create hsr debugfs directory [ 552.407999][T20789] lo speed is unknown, defaulting to 1000 [ 552.905887][T20787] chnl_net:caif_netlink_parms(): no params data found [ 553.057579][ T5866] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 553.068390][ T5866] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 553.076853][ T5866] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 553.084974][ T5866] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 553.093171][ T5866] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 553.231679][ T5862] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 553.242145][ T5862] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 553.250586][ T5862] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 553.261062][ T5862] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 553.269410][ T5862] Bluetooth: hci4: command tx timeout [ 553.277111][ T5862] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 553.334889][T20797] lo speed is unknown, defaulting to 1000 [ 553.403647][T20787] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.411360][T20787] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.418835][T20787] bridge_slave_0: entered allmulticast mode [ 553.428868][T20787] bridge_slave_0: entered promiscuous mode [ 553.441348][T20787] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.448915][T20787] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.456459][T20787] bridge_slave_1: entered allmulticast mode [ 553.464517][T20787] bridge_slave_1: entered promiscuous mode [ 553.589970][T20787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.612225][T20787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.652262][T20789] chnl_net:caif_netlink_parms(): no params data found [ 553.700910][T20802] lo speed is unknown, defaulting to 1000 [ 553.729170][T20787] team0: Port device team_slave_0 added [ 553.770088][T20787] team0: Port device team_slave_1 added [ 553.873562][T20787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.881385][T20787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.907870][T20787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.921536][T20787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.928664][T20787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.954770][T20787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.985722][ T5866] Bluetooth: hci6: command tx timeout [ 554.042811][T20789] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.050645][T20789] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.058416][T20789] bridge_slave_0: entered allmulticast mode [ 554.066934][T20789] bridge_slave_0: entered promiscuous mode [ 554.091332][T20789] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.099263][T20789] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.107469][T20789] bridge_slave_1: entered allmulticast mode [ 554.115575][T20789] bridge_slave_1: entered promiscuous mode [ 554.226272][ T5866] Bluetooth: hci7: command tx timeout [ 554.263139][T20789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.282815][T20787] hsr_slave_0: entered promiscuous mode [ 554.289931][T20787] hsr_slave_1: entered promiscuous mode [ 554.296477][T20787] debugfs: 'hsr0' already exists in 'hsr' [ 554.302242][T20787] Cannot create hsr debugfs directory [ 554.321541][T20789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.338153][T20797] chnl_net:caif_netlink_parms(): no params data found [ 554.485455][T20789] team0: Port device team_slave_0 added [ 554.523487][T20789] team0: Port device team_slave_1 added [ 554.636870][T20789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.643866][T20789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.673652][T20789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.687627][T20789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.694613][T20789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.722351][T20789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.757044][T20802] chnl_net:caif_netlink_parms(): no params data found [ 554.839423][T20797] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.846990][T20797] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.854317][T20797] bridge_slave_0: entered allmulticast mode [ 554.862459][T20797] bridge_slave_0: entered promiscuous mode [ 554.899650][T20797] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.907119][T20797] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.914365][T20797] bridge_slave_1: entered allmulticast mode [ 554.921987][T20797] bridge_slave_1: entered promiscuous mode [ 554.945298][ T5866] Bluetooth: hci5: command 0x0406 tx timeout [ 555.027623][T20789] hsr_slave_0: entered promiscuous mode [ 555.034216][T20789] hsr_slave_1: entered promiscuous mode [ 555.040674][T20789] debugfs: 'hsr0' already exists in 'hsr' [ 555.048211][T20789] Cannot create hsr debugfs directory [ 555.063419][T20797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.086041][T20797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.185556][ T5879] Bluetooth: hci8: command tx timeout [ 555.200317][T20797] team0: Port device team_slave_0 added [ 555.209535][T20797] team0: Port device team_slave_1 added [ 555.231938][T20802] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.239293][T20802] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.246954][T20802] bridge_slave_0: entered allmulticast mode [ 555.254955][T20802] bridge_slave_0: entered promiscuous mode [ 555.314693][T20802] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.322693][T20802] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.331640][T20802] bridge_slave_1: entered allmulticast mode [ 555.339805][T20802] bridge_slave_1: entered promiscuous mode [ 555.346023][ T5879] Bluetooth: hci4: command tx timeout [ 555.371205][T20797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.378869][T20797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.405707][T20797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.419465][T20797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.427495][ T5879] Bluetooth: hci9: command tx timeout [ 555.430633][T20797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.460858][T20797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.546647][T20802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.560072][T20802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.695812][T20802] team0: Port device team_slave_0 added [ 555.724933][T20797] hsr_slave_0: entered promiscuous mode [ 555.732518][T20797] hsr_slave_1: entered promiscuous mode [ 555.739733][T20797] debugfs: 'hsr0' already exists in 'hsr' [ 555.746001][T20797] Cannot create hsr debugfs directory [ 555.769523][T20802] team0: Port device team_slave_1 added [ 555.837695][T20802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.844700][T20802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.872746][T20802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.898696][T20802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.906317][T20802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.932539][T20802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.068875][ T5879] Bluetooth: hci6: command tx timeout [ 556.084672][T20802] hsr_slave_0: entered promiscuous mode [ 556.093485][T20802] hsr_slave_1: entered promiscuous mode [ 556.100217][T20802] debugfs: 'hsr0' already exists in 'hsr' [ 556.107939][T20802] Cannot create hsr debugfs directory [ 556.306182][ T5866] Bluetooth: hci7: command tx timeout [ 557.265848][ T5879] Bluetooth: hci8: command tx timeout [ 557.425519][ T5879] Bluetooth: hci4: command tx timeout [ 557.505466][ T5879] Bluetooth: hci9: command tx timeout [ 558.145421][ T5879] Bluetooth: hci6: command tx timeout [ 558.385578][ T5879] Bluetooth: hci7: command tx timeout [ 559.345999][ T5879] Bluetooth: hci8: command tx timeout [ 559.505447][ T5879] Bluetooth: hci4: command tx timeout [ 559.586282][ T5879] Bluetooth: hci9: command tx timeout [ 560.226486][ T5879] Bluetooth: hci6: command tx timeout [ 560.465309][ T5879] Bluetooth: hci7: command tx timeout [ 561.425269][ T5879] Bluetooth: hci8: command tx timeout [ 561.665416][ T5879] Bluetooth: hci9: command tx timeout [ 570.305359][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 585.665267][ T5879] Bluetooth: hci2: command 0x0401 tx timeout [ 612.066440][ T5879] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 612.078970][ T5879] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 612.087929][ T5879] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 612.115352][ T5879] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 612.124520][ T5879] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 612.210833][T20826] lo speed is unknown, defaulting to 1000 [ 612.295943][T20805] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 612.301069][ T5862] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 612.314261][ T5862] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 612.324953][ T5862] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 612.332818][ T5862] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 612.343044][T20805] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 612.351020][ T5862] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 612.360577][ T5862] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 612.372045][ T5879] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 612.390704][ T5862] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 612.520298][T20829] lo speed is unknown, defaulting to 1000 [ 612.558439][T20828] lo speed is unknown, defaulting to 1000 [ 612.613700][T20826] chnl_net:caif_netlink_parms(): no params data found [ 613.012260][T20826] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.019822][T20826] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.055640][T20826] bridge_slave_0: entered allmulticast mode [ 613.063759][T20826] bridge_slave_0: entered promiscuous mode [ 613.108662][T20826] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.116347][T20826] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.123753][T20826] bridge_slave_1: entered allmulticast mode [ 613.147689][T20826] bridge_slave_1: entered promiscuous mode [ 613.309590][ T5862] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 613.327037][ T5862] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 613.337547][ T5862] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 613.351099][ T5879] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 613.351247][T20805] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 613.359788][ T5879] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 613.374931][ T5866] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 613.387232][ T5879] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 613.407551][ T5866] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 613.422171][ T5866] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 613.439659][T20826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.498719][T20826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.621104][T20826] team0: Port device team_slave_0 added [ 613.632249][T20829] chnl_net:caif_netlink_parms(): no params data found [ 613.670041][T20826] team0: Port device team_slave_1 added [ 613.725480][T20826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.732483][T20826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.759195][T20826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.773138][T20843] lo speed is unknown, defaulting to 1000 [ 613.779687][T20828] chnl_net:caif_netlink_parms(): no params data found [ 613.817657][T20826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.824660][T20826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.851145][T20826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.890244][T20845] lo speed is unknown, defaulting to 1000 [ 614.079237][T20826] hsr_slave_0: entered promiscuous mode [ 614.086759][T20826] hsr_slave_1: entered promiscuous mode [ 614.093570][T20826] debugfs: 'hsr0' already exists in 'hsr' [ 614.099480][T20826] Cannot create hsr debugfs directory [ 614.153414][T20829] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.160829][T20829] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.168957][T20829] bridge_slave_0: entered allmulticast mode [ 614.177370][T20829] bridge_slave_0: entered promiscuous mode [ 614.226129][ T5862] Bluetooth: hci10: command tx timeout [ 614.234295][T20829] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.241829][T20829] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.250246][T20829] bridge_slave_1: entered allmulticast mode [ 614.258355][T20829] bridge_slave_1: entered promiscuous mode [ 614.280278][T20828] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.287761][T20828] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.295062][T20828] bridge_slave_0: entered allmulticast mode [ 614.303095][T20828] bridge_slave_0: entered promiscuous mode [ 614.363246][T20828] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.371536][T20828] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.379355][T20828] bridge_slave_1: entered allmulticast mode [ 614.387674][T20828] bridge_slave_1: entered promiscuous mode [ 614.449247][T20829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.466763][ T5866] Bluetooth: hci11: command tx timeout [ 614.473911][ T5862] Bluetooth: hci12: command tx timeout [ 614.497250][T20828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.510788][T20828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.540659][T20829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.616639][T20828] team0: Port device team_slave_0 added [ 614.667987][T20828] team0: Port device team_slave_1 added [ 614.676257][T20829] team0: Port device team_slave_0 added [ 614.736327][T20829] team0: Port device team_slave_1 added [ 614.851467][T20828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.858968][T20828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.886967][T20828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.900805][T20828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.908023][T20828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.934294][T20828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.013452][T20829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.035899][T20829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.063331][T20829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.138770][T20829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.147340][T20829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.174088][T20829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.242351][T20828] hsr_slave_0: entered promiscuous mode [ 615.250061][T20828] hsr_slave_1: entered promiscuous mode [ 615.257852][T20828] debugfs: 'hsr0' already exists in 'hsr' [ 615.263603][T20828] Cannot create hsr debugfs directory [ 615.304418][T20843] chnl_net:caif_netlink_parms(): no params data found [ 615.425531][ T5862] Bluetooth: hci13: command tx timeout [ 615.453762][T20845] chnl_net:caif_netlink_parms(): no params data found [ 615.483833][T20829] hsr_slave_0: entered promiscuous mode [ 615.490620][T20829] hsr_slave_1: entered promiscuous mode [ 615.497465][T20829] debugfs: 'hsr0' already exists in 'hsr' [ 615.503223][T20829] Cannot create hsr debugfs directory [ 615.515213][ T5862] Bluetooth: hci14: command tx timeout [ 615.804496][T20843] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.812063][T20843] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.820686][T20843] bridge_slave_0: entered allmulticast mode [ 615.829375][T20843] bridge_slave_0: entered promiscuous mode [ 615.838574][T20843] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.845901][T20843] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.853169][T20843] bridge_slave_1: entered allmulticast mode [ 615.861548][T20843] bridge_slave_1: entered promiscuous mode [ 615.981876][T20843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.023055][T20845] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.031032][T20845] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.039324][T20845] bridge_slave_0: entered allmulticast mode [ 616.048966][T20845] bridge_slave_0: entered promiscuous mode [ 616.061068][T20843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.103244][T20845] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.111414][T20845] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.119020][T20845] bridge_slave_1: entered allmulticast mode [ 616.127858][T20845] bridge_slave_1: entered promiscuous mode [ 616.261858][T20843] team0: Port device team_slave_0 added [ 616.271899][T20843] team0: Port device team_slave_1 added [ 616.296879][T20845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.315283][ T5862] Bluetooth: hci10: command tx timeout [ 616.324679][T20845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.408162][T20845] team0: Port device team_slave_0 added [ 616.414935][T20843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.422478][T20843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.449587][T20843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.463615][T20843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.471121][T20843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.497615][T20843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.511159][T20845] team0: Port device team_slave_1 added [ 616.545710][ T5866] Bluetooth: hci11: command tx timeout [ 616.545710][ T5862] Bluetooth: hci12: command tx timeout [ 616.586716][T20845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.593971][T20845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.621157][T20845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.669524][T20845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.677264][T20845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.703657][T20845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.742263][T20843] hsr_slave_0: entered promiscuous mode [ 616.750377][T20843] hsr_slave_1: entered promiscuous mode [ 616.757047][T20843] debugfs: 'hsr0' already exists in 'hsr' [ 616.762791][T20843] Cannot create hsr debugfs directory [ 616.863518][T20845] hsr_slave_0: entered promiscuous mode [ 616.871440][T20845] hsr_slave_1: entered promiscuous mode [ 616.878655][T20845] debugfs: 'hsr0' already exists in 'hsr' [ 616.884435][T20845] Cannot create hsr debugfs directory [ 617.505375][ T5866] Bluetooth: hci13: command tx timeout [ 617.585901][ T5866] Bluetooth: hci14: command tx timeout [ 618.385369][ T5866] Bluetooth: hci10: command tx timeout [ 618.625444][ T5866] Bluetooth: hci12: command tx timeout [ 618.625691][ T5862] Bluetooth: hci11: command tx timeout [ 619.595841][ T5862] Bluetooth: hci13: command tx timeout [ 619.665466][ T5862] Bluetooth: hci14: command tx timeout [ 620.465485][ T5862] Bluetooth: hci10: command tx timeout [ 620.705473][ T5862] Bluetooth: hci12: command tx timeout [ 620.711042][ T5862] Bluetooth: hci11: command tx timeout [ 621.675579][ T5862] Bluetooth: hci13: command tx timeout [ 621.745325][ T5862] Bluetooth: hci14: command tx timeout [ 671.453557][ T1045] bond11 (unregistering): (slave bridge6): Releasing active interface [ 671.515526][ T1045] bond0 (unregistering): Released all slaves [ 671.673455][ T1045] bond1 (unregistering): Released all slaves [ 671.846596][ T1045] bond2 (unregistering): Released all slaves [ 672.023581][ T1045] bond3 (unregistering): Released all slaves [ 672.265599][ T1045] bond5 (unregistering): Released all slaves [ 672.772123][ T5866] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 672.788568][ T5866] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 672.805612][ T5866] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 672.846842][ T5866] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 672.856409][ T5866] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 672.916255][ T1045] bond4 (unregistering): Released all slaves [ 672.993464][ T5866] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 673.016269][ T5866] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 673.024885][ T5866] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 673.038378][ T5866] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 673.058387][ T5866] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 673.117124][ T5866] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 673.127925][ T5866] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 673.148939][ T5866] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 673.171677][ T5866] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 673.194773][ T5866] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 673.236299][ T1045] bond6 (unregistering): Released all slaves [ 673.698746][ T1045] bond7 (unregistering): Released all slaves [ 673.727256][ T1045] bond8 (unregistering): Released all slaves [ 673.994451][ T5866] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 674.030346][T20805] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 674.032373][ T5879] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 674.048278][ T5879] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 674.057176][ T5879] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 674.058203][T20805] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 674.068736][ T5879] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 674.085479][ T5879] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 674.095992][ T5879] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 674.104277][T20805] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 674.178102][ T1045] bond9 (unregistering): Released all slaves [ 674.339709][ T1045] bond10 (unregistering): Released all slaves [ 674.502504][ T1045] bond11 (unregistering): Released all slaves [ 674.594889][T20875] lo speed is unknown, defaulting to 1000 [ 674.654289][T20881] lo speed is unknown, defaulting to 1000 [ 674.720789][ T1045] : left promiscuous mode [ 674.752913][T20879] lo speed is unknown, defaulting to 1000 [ 674.779461][T20873] lo speed is unknown, defaulting to 1000 [ 674.786015][ T1045] : left promiscuous mode [ 674.841556][ T1045] tipc: Disabling bearer [ 674.857253][ T1045] tipc: Disabling bearer [ 674.863586][ T1045] tipc: Disabling bearer [ 674.870735][T20871] lo speed is unknown, defaulting to 1000 [ 674.885582][ T1045] tipc: Left network mode [ 674.945724][ T5866] Bluetooth: hci15: command tx timeout [ 675.108459][ T5866] Bluetooth: hci16: command tx timeout [ 675.265776][ T5866] Bluetooth: hci17: command tx timeout [ 675.523464][ T1045] hsr_slave_0: left promiscuous mode [ 675.666232][ T1045] pimreg (unregistering): left allmulticast mode [ 675.754221][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 676.154008][T20890] Bluetooth: hci19: command tx timeout [ 676.232806][T20890] Bluetooth: hci18: command tx timeout [ 676.871056][T20881] chnl_net:caif_netlink_parms(): no params data found [ 677.027399][T20890] Bluetooth: hci15: command tx timeout [ 677.171420][T20879] chnl_net:caif_netlink_parms(): no params data found [ 677.196383][T20890] Bluetooth: hci16: command tx timeout [ 677.237735][T20875] chnl_net:caif_netlink_parms(): no params data found [ 677.300968][T20871] chnl_net:caif_netlink_parms(): no params data found [ 677.347403][T20890] Bluetooth: hci17: command tx timeout [ 677.430760][T20881] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.438503][T20881] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.446020][T20881] bridge_slave_0: entered allmulticast mode [ 677.454168][T20881] bridge_slave_0: entered promiscuous mode [ 677.504143][T20881] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.512155][T20881] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.521284][T20881] bridge_slave_1: entered allmulticast mode [ 677.530267][T20881] bridge_slave_1: entered promiscuous mode [ 677.537536][T20873] chnl_net:caif_netlink_parms(): no params data found [ 677.596826][ T1045] IPVS: stop unused estimator thread 0... [ 677.719670][T20881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.733869][T20881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.788820][T20879] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.796746][T20879] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.804053][T20879] bridge_slave_0: entered allmulticast mode [ 677.812368][T20879] bridge_slave_0: entered promiscuous mode [ 677.828889][T20890] Bluetooth: hci4: command 0x0406 tx timeout [ 677.836208][T20890] Bluetooth: hci6: command 0x0406 tx timeout [ 677.841304][T20889] Bluetooth: hci8: command 0x0406 tx timeout [ 677.842289][T20890] Bluetooth: hci7: command 0x0406 tx timeout [ 677.850327][T20889] Bluetooth: hci9: command 0x0406 tx timeout [ 677.944370][T20879] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.952001][T20879] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.959873][T20879] bridge_slave_1: entered allmulticast mode [ 677.968131][T20879] bridge_slave_1: entered promiscuous mode [ 677.980428][T20875] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.988235][T20875] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.995803][T20875] bridge_slave_0: entered allmulticast mode [ 678.003840][T20875] bridge_slave_0: entered promiscuous mode [ 678.057700][T20871] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.066151][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.073503][T20871] bridge_slave_0: entered allmulticast mode [ 678.081161][T20871] bridge_slave_0: entered promiscuous mode [ 678.109669][T20875] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.117075][T20875] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.124360][T20875] bridge_slave_1: entered allmulticast mode [ 678.133102][T20875] bridge_slave_1: entered promiscuous mode [ 678.142735][T20881] team0: Port device team_slave_0 added [ 678.184661][T20871] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.193001][T20871] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.201663][T20871] bridge_slave_1: entered allmulticast mode [ 678.210059][T20871] bridge_slave_1: entered promiscuous mode [ 678.225522][ T5866] Bluetooth: hci19: command tx timeout [ 678.255995][T20881] team0: Port device team_slave_1 added [ 678.279402][T20873] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.287601][T20873] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.294973][T20873] bridge_slave_0: entered allmulticast mode [ 678.303435][T20873] bridge_slave_0: entered promiscuous mode [ 678.315174][ T5866] Bluetooth: hci18: command tx timeout [ 678.352931][T20879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.402533][T20873] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.410065][T20873] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.418025][T20873] bridge_slave_1: entered allmulticast mode [ 678.427408][T20873] bridge_slave_1: entered promiscuous mode [ 678.454108][T20871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.469059][T20879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.501815][T20875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.512402][T20881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.519817][T20881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.546214][T20881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.559253][T20881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.567056][T20881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.594451][T20881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.626532][T20873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.639496][T20871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.687500][T20879] team0: Port device team_slave_0 added [ 678.698637][T20875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.718521][T20873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.763673][T20879] team0: Port device team_slave_1 added [ 678.844377][T20871] team0: Port device team_slave_0 added [ 678.914627][T20881] hsr_slave_0: entered promiscuous mode [ 678.922424][T20881] hsr_slave_1: entered promiscuous mode [ 678.929635][T20881] debugfs: 'hsr0' already exists in 'hsr' [ 678.935851][T20881] Cannot create hsr debugfs directory [ 678.943611][T20873] team0: Port device team_slave_0 added [ 678.953403][T20871] team0: Port device team_slave_1 added [ 678.961550][T20879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.969113][T20879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.996544][T20879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.009702][T20879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.017096][T20879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.044432][T20879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.058424][T20875] team0: Port device team_slave_0 added [ 679.095853][T20873] team0: Port device team_slave_1 added [ 679.106959][ T5866] Bluetooth: hci15: command tx timeout [ 679.164278][T20875] team0: Port device team_slave_1 added [ 679.216694][T20871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.223685][T20871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.251665][T20871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.265294][ T5866] Bluetooth: hci16: command tx timeout [ 679.265697][T20871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.278236][T20871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.304837][T20871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.396379][T20875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.403416][T20875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.430916][ T5866] Bluetooth: hci17: command tx timeout [ 679.437387][T20875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.481589][T20879] hsr_slave_0: entered promiscuous mode [ 679.489658][T20879] hsr_slave_1: entered promiscuous mode [ 679.496550][T20879] debugfs: 'hsr0' already exists in 'hsr' [ 679.502354][T20879] Cannot create hsr debugfs directory [ 679.509953][T20873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.517422][T20873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.544034][T20873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.557666][T20873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.564644][T20873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.598141][T20873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.611893][T20875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.619425][T20875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.646575][T20875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.799772][T20875] hsr_slave_0: entered promiscuous mode [ 679.808501][T20875] hsr_slave_1: entered promiscuous mode [ 679.814885][T20875] debugfs: 'hsr0' already exists in 'hsr' [ 679.821438][T20875] Cannot create hsr debugfs directory [ 679.917076][T20871] hsr_slave_0: entered promiscuous mode [ 679.924191][T20871] hsr_slave_1: entered promiscuous mode [ 679.931844][T20871] debugfs: 'hsr0' already exists in 'hsr' [ 679.938269][T20871] Cannot create hsr debugfs directory [ 680.011832][T20873] hsr_slave_0: entered promiscuous mode [ 680.020593][T20873] hsr_slave_1: entered promiscuous mode [ 680.028419][T20873] debugfs: 'hsr0' already exists in 'hsr' [ 680.034201][T20873] Cannot create hsr debugfs directory [ 680.307192][ T5866] Bluetooth: hci19: command tx timeout [ 680.385903][ T5866] Bluetooth: hci18: command tx timeout [ 681.185421][ T5866] Bluetooth: hci15: command tx timeout [ 681.345516][ T5866] Bluetooth: hci16: command tx timeout [ 681.505489][ T5866] Bluetooth: hci17: command tx timeout [ 682.385681][ T5866] Bluetooth: hci19: command tx timeout [ 682.465406][ T5866] Bluetooth: hci18: command tx timeout [ 698.145915][ T31] INFO: task syz.3.3720:20729 blocked for more than 143 seconds. [ 698.153960][ T31] Not tainted syzkaller #0 [ 698.159313][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.168193][ T31] task:syz.3.3720 state:D stack:24352 pid:20729 tgid:20727 ppid:18044 task_flags:0x400140 flags:0x00004004 [ 698.180413][ T31] Call Trace: [ 698.183726][ T31] [ 698.187004][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 698.191577][ T31] ? validate_chain+0x897/0x2140 [ 698.204509][ T31] ? __lock_acquire+0xab9/0xd20 [ 698.215347][ T31] ? __pfx___schedule+0x10/0x10 [ 698.220311][ T31] ? schedule+0x91/0x360 [ 698.224601][ T31] schedule+0x165/0x360 [ 698.244298][ T31] schedule_timeout+0x9a/0x270 [ 698.255819][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 698.261290][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 698.305567][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.310838][ T31] ? wait_for_completion+0x267/0x5d0 [ 698.352170][ T31] wait_for_completion+0x2bf/0x5d0 [ 698.357933][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 698.363722][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 698.369890][ T31] ? check_flush_dependency+0x88/0x400 [ 698.375780][ T31] __flush_workqueue+0x6f7/0x14b0 [ 698.381606][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 698.388045][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.393378][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 698.398959][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 698.404903][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 698.410849][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 698.416250][ T31] nbd_genl_disconnect+0x485/0x570 [ 698.421913][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 698.427799][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 698.434363][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 698.440424][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 698.446727][ T31] ? stack_trace_save+0x9c/0xe0 [ 698.451634][ T31] genl_rcv_msg+0x60e/0x790 [ 698.456270][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.461421][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 698.467997][ T31] netlink_rcv_skb+0x208/0x470 [ 698.472908][ T31] ? __lock_acquire+0xab9/0xd20 [ 698.478094][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.483469][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.489164][ T31] ? down_read+0x1ad/0x2e0 [ 698.493719][ T31] genl_rcv+0x28/0x40 [ 698.498122][ T31] netlink_unicast+0x82c/0x9e0 [ 698.502943][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 698.508538][ T31] ? netlink_sendmsg+0x642/0xb30 [ 698.513792][ T31] ? skb_put+0x11b/0x210 [ 698.518175][ T31] netlink_sendmsg+0x805/0xb30 [ 698.523025][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.528649][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 698.533670][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.539086][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.544414][ T31] __sock_sendmsg+0x21c/0x270 [ 698.549701][ T31] ____sys_sendmsg+0x505/0x830 [ 698.554604][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.560359][ T31] ? import_iovec+0x74/0xa0 [ 698.564917][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 698.569826][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.575180][ T31] ? __fget_files+0x2a/0x420 [ 698.579811][ T31] ? __fget_files+0x3a0/0x420 [ 698.584529][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 698.590565][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.596450][ T31] ? rcu_is_watching+0x15/0xb0 [ 698.601274][ T31] ? do_syscall_64+0xbe/0x3b0 [ 698.606172][ T31] do_syscall_64+0xfa/0x3b0 [ 698.610712][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.616324][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.622592][ T31] ? clear_bhb_loop+0x60/0xb0 [ 698.627786][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.633746][ T31] RIP: 0033:0x7fc24498ebe9 [ 698.638296][ T31] RSP: 002b:00007fc2458b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.647212][ T31] RAX: ffffffffffffffda RBX: 00007fc244bc5fa0 RCX: 00007fc24498ebe9 [ 698.655318][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 698.663648][ T31] RBP: 00007fc244a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 698.671778][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.680338][ T31] R13: 00007fc244bc6038 R14: 00007fc244bc5fa0 R15: 00007ffe05601708 [ 698.688485][ T31] [ 698.691603][ T31] INFO: task syz.3.3720:20737 blocked for more than 143 seconds. [ 698.699974][ T31] Not tainted syzkaller #0 [ 698.704945][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.714466][ T31] task:syz.3.3720 state:D stack:26400 pid:20737 tgid:20727 ppid:18044 task_flags:0x400040 flags:0x00004004 [ 698.726973][ T31] Call Trace: [ 698.730283][ T31] [ 698.733344][ T31] __schedule+0x1798/0x4cc0 [ 698.738322][ T31] ? __lock_acquire+0xab9/0xd20 [ 698.743233][ T31] ? __lock_acquire+0xab9/0xd20 [ 698.748365][ T31] ? __pfx___schedule+0x10/0x10 [ 698.753281][ T31] ? schedule+0x91/0x360 [ 698.757735][ T31] schedule+0x165/0x360 [ 698.761939][ T31] schedule_preempt_disabled+0x13/0x30 [ 698.767828][ T31] __mutex_lock+0x7e6/0x1350 [ 698.773003][ T31] ? __mutex_lock+0x5bb/0x1350 [ 698.778081][ T31] ? genl_rcv_msg+0x10d/0x790 [ 698.782816][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 698.788298][ T31] ? stack_trace_save+0x9c/0xe0 [ 698.793212][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 698.799078][ T31] ? radix_tree_lookup+0x240/0x290 [ 698.804262][ T31] genl_rcv_msg+0x10d/0x790 [ 698.809115][ T31] ? __lock_acquire+0xab9/0xd20 [ 698.814024][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.819377][ T31] netlink_rcv_skb+0x208/0x470 [ 698.824504][ T31] ? __lock_acquire+0xab9/0xd20 [ 698.829888][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.835246][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.840613][ T31] ? down_read+0x1ad/0x2e0 [ 698.845270][ T31] genl_rcv+0x28/0x40 [ 698.849296][ T31] netlink_unicast+0x82c/0x9e0 [ 698.854105][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 698.859920][ T31] ? netlink_sendmsg+0x642/0xb30 [ 698.864900][ T31] ? skb_put+0x11b/0x210 [ 698.869578][ T31] netlink_sendmsg+0x805/0xb30 [ 698.874409][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.879915][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 698.885350][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.890702][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.896184][ T31] __sock_sendmsg+0x21c/0x270 [ 698.900913][ T31] ____sys_sendmsg+0x505/0x830 [ 698.905802][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.911150][ T31] ? import_iovec+0x74/0xa0 [ 698.916238][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 698.920965][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.926325][ T31] ? __fget_files+0x2a/0x420 [ 698.930964][ T31] ? __fget_files+0x3a0/0x420 [ 698.935752][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 698.940739][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.947228][ T31] ? rcu_is_watching+0x15/0xb0 [ 698.952033][ T31] ? do_syscall_64+0xbe/0x3b0 [ 698.956835][ T31] do_syscall_64+0xfa/0x3b0 [ 698.961373][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.966750][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.972868][ T31] ? clear_bhb_loop+0x60/0xb0 [ 698.977957][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.984064][ T31] RIP: 0033:0x7fc24498ebe9 [ 698.988605][ T31] RSP: 002b:00007fc245892038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.997215][ T31] RAX: ffffffffffffffda RBX: 00007fc244bc6090 RCX: 00007fc24498ebe9 [ 699.005612][ T31] RDX: 0000000000004000 RSI: 00002000000007c0 RDI: 0000000000000005 [ 699.013623][ T31] RBP: 00007fc244a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 699.021707][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.030083][ T31] R13: 00007fc244bc6128 R14: 00007fc244bc6090 R15: 00007ffe05601708 [ 699.038515][ T31] [ 699.041649][ T31] INFO: task syz.3.3720:20743 blocked for more than 144 seconds. [ 699.049600][ T31] Not tainted syzkaller #0 [ 699.054715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.063590][ T31] task:syz.3.3720 state:D stack:27072 pid:20743 tgid:20727 ppid:18044 task_flags:0x400040 flags:0x00004004 [ 699.076007][ T31] Call Trace: [ 699.079314][ T31] [ 699.082254][ T31] __schedule+0x1798/0x4cc0 [ 699.086864][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.091777][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.096804][ T31] ? __pfx___schedule+0x10/0x10 [ 699.101748][ T31] ? schedule+0x91/0x360 [ 699.106660][ T31] schedule+0x165/0x360 [ 699.110893][ T31] schedule_preempt_disabled+0x13/0x30 [ 699.116463][ T31] __mutex_lock+0x7e6/0x1350 [ 699.121177][ T31] ? __mutex_lock+0x5bb/0x1350 [ 699.126149][ T31] ? genl_rcv_msg+0x10d/0x790 [ 699.130875][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 699.136549][ T31] ? stack_trace_save+0x9c/0xe0 [ 699.141449][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 699.146916][ T31] ? radix_tree_lookup+0x240/0x290 [ 699.152251][ T31] genl_rcv_msg+0x10d/0x790 [ 699.156850][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.161745][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.167289][ T31] netlink_rcv_skb+0x208/0x470 [ 699.172101][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.177165][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.182234][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.188073][ T31] ? down_read+0x1ad/0x2e0 [ 699.192543][ T31] genl_rcv+0x28/0x40 [ 699.196956][ T31] netlink_unicast+0x82c/0x9e0 [ 699.201797][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 699.207178][ T31] ? netlink_sendmsg+0x642/0xb30 [ 699.212155][ T31] ? skb_put+0x11b/0x210 [ 699.216500][ T31] netlink_sendmsg+0x805/0xb30 [ 699.221300][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.226995][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 699.231973][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 699.237723][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.243310][ T31] __sock_sendmsg+0x21c/0x270 [ 699.248716][ T31] __sys_sendto+0x3bd/0x520 [ 699.253445][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 699.259162][ T31] ? fd_install+0x97/0x540 [ 699.263631][ T31] ? fd_install+0x30d/0x540 [ 699.268479][ T31] __x64_sys_sendto+0xde/0x100 [ 699.273293][ T31] do_syscall_64+0xfa/0x3b0 [ 699.277954][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.283184][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.289723][ T31] ? clear_bhb_loop+0x60/0xb0 [ 699.294446][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.300447][ T31] RIP: 0033:0x7fc244990a7c [ 699.304897][ T31] RSP: 002b:00007fc24586fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 699.313540][ T31] RAX: ffffffffffffffda RBX: 00007fc24586ffc0 RCX: 00007fc244990a7c [ 699.321933][ T31] RDX: 0000000000000024 RSI: 00007fc245870010 RDI: 000000000000000c [ 699.333497][ T31] RBP: 0000000000000000 R08: 00007fc24586ff14 R09: 000000000000000c [ 699.341615][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 699.350451][ T31] R13: 00007fc24586ff68 R14: 00007fc245870010 R15: 0000000000000000 [ 699.358828][ T31] [ 699.361891][ T31] INFO: task syz.1.3727:20753 blocked for more than 144 seconds. [ 699.375611][ T31] Not tainted syzkaller #0 [ 699.380807][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.389561][ T31] task:syz.1.3727 state:D stack:26560 pid:20753 tgid:20750 ppid:17407 task_flags:0x400140 flags:0x00004004 [ 699.401692][ T31] Call Trace: [ 699.405368][ T31] [ 699.408337][ T31] __schedule+0x1798/0x4cc0 [ 699.412900][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.417867][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.422761][ T31] ? __pfx___schedule+0x10/0x10 [ 699.427762][ T31] ? schedule+0x91/0x360 [ 699.432047][ T31] schedule+0x165/0x360 [ 699.436590][ T31] schedule_preempt_disabled+0x13/0x30 [ 699.442100][ T31] __mutex_lock+0x7e6/0x1350 [ 699.446802][ T31] ? __mutex_lock+0x5bb/0x1350 [ 699.451606][ T31] ? genl_rcv_msg+0x10d/0x790 [ 699.456433][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 699.461503][ T31] ? stack_trace_save+0x9c/0xe0 [ 699.466781][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 699.472166][ T31] ? radix_tree_lookup+0x240/0x290 [ 699.477394][ T31] genl_rcv_msg+0x10d/0x790 [ 699.481944][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.486912][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.491990][ T31] netlink_rcv_skb+0x208/0x470 [ 699.497052][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.501918][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.507237][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.512581][ T31] ? down_read+0x1ad/0x2e0 [ 699.517157][ T31] genl_rcv+0x28/0x40 [ 699.521180][ T31] netlink_unicast+0x82c/0x9e0 [ 699.526399][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 699.531744][ T31] ? netlink_sendmsg+0x642/0xb30 [ 699.536778][ T31] ? skb_put+0x11b/0x210 [ 699.541057][ T31] netlink_sendmsg+0x805/0xb30 [ 699.545924][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.551259][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 699.556690][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 699.562039][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.567449][ T31] __sock_sendmsg+0x21c/0x270 [ 699.572181][ T31] __sys_sendto+0x3bd/0x520 [ 699.577006][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 699.582097][ T31] ? count_memcg_event_mm+0x21/0x260 [ 699.588168][ T31] ? exc_page_fault+0x76/0xf0 [ 699.592910][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 699.598330][ T31] __x64_sys_sendto+0xde/0x100 [ 699.603152][ T31] do_syscall_64+0xfa/0x3b0 [ 699.607741][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.613077][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.619549][ T31] ? clear_bhb_loop+0x60/0xb0 [ 699.624291][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.630286][ T31] RIP: 0033:0x7f2d4b590a7c [ 699.634736][ T31] RSP: 002b:00007f2d4c447ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 699.643363][ T31] RAX: ffffffffffffffda RBX: 00007f2d4c447fc0 RCX: 00007f2d4b590a7c [ 699.651764][ T31] RDX: 000000000000001c RSI: 00007f2d4c448010 RDI: 0000000000000005 [ 699.659884][ T31] RBP: 0000000000000000 R08: 00007f2d4c447f14 R09: 000000000000000c [ 699.668281][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 699.676732][ T31] R13: 00007f2d4c447f68 R14: 00007f2d4c448010 R15: 0000000000000000 [ 699.684779][ T31] [ 699.688109][ T31] INFO: task syz.1.3727:20757 blocked for more than 144 seconds. [ 699.695979][ T31] Not tainted syzkaller #0 [ 699.700947][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.710493][ T31] task:syz.1.3727 state:D stack:26400 pid:20757 tgid:20750 ppid:17407 task_flags:0x400140 flags:0x00004004 [ 699.722727][ T31] Call Trace: [ 699.726367][ T31] [ 699.729435][ T31] __schedule+0x1798/0x4cc0 [ 699.734043][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.739458][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.744378][ T31] ? __pfx___schedule+0x10/0x10 [ 699.749662][ T31] ? schedule+0x91/0x360 [ 699.753948][ T31] schedule+0x165/0x360 [ 699.758266][ T31] schedule_preempt_disabled+0x13/0x30 [ 699.763924][ T31] __mutex_lock+0x7e6/0x1350 [ 699.768968][ T31] ? __mutex_lock+0x5bb/0x1350 [ 699.773869][ T31] ? genl_rcv_msg+0x10d/0x790 [ 699.779004][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 699.784050][ T31] ? stack_trace_save+0x9c/0xe0 [ 699.789004][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 699.794497][ T31] ? radix_tree_lookup+0x240/0x290 [ 699.800265][ T31] genl_rcv_msg+0x10d/0x790 [ 699.804830][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.809890][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.815186][ T31] netlink_rcv_skb+0x208/0x470 [ 699.820225][ T31] ? __lock_acquire+0xab9/0xd20 [ 699.825920][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.831018][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.836456][ T31] ? down_read+0x1ad/0x2e0 [ 699.840922][ T31] genl_rcv+0x28/0x40 [ 699.844941][ T31] netlink_unicast+0x82c/0x9e0 [ 699.849859][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 699.855580][ T31] ? netlink_sendmsg+0x642/0xb30 [ 699.860586][ T31] ? skb_put+0x11b/0x210 [ 699.864866][ T31] netlink_sendmsg+0x805/0xb30 [ 699.869726][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.875133][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 699.880196][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 699.885919][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.891288][ T31] __sock_sendmsg+0x21c/0x270 [ 699.896336][ T31] ____sys_sendmsg+0x505/0x830 [ 699.901118][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.906743][ T31] ? import_iovec+0x74/0xa0 [ 699.911305][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 699.916472][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.922051][ T31] ? futex_wait+0x285/0x360 [ 699.926789][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 699.931764][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 699.937381][ T31] ? rcu_is_watching+0x15/0xb0 [ 699.942192][ T31] ? do_syscall_64+0xbe/0x3b0 [ 699.947302][ T31] do_syscall_64+0xfa/0x3b0 [ 699.951848][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.957307][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.963408][ T31] ? clear_bhb_loop+0x60/0xb0 [ 699.968193][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.974122][ T31] RIP: 0033:0x7f2d4b58ebe9 [ 699.978964][ T31] RSP: 002b:00007f2d4c428038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.987787][ T31] RAX: ffffffffffffffda RBX: 00007f2d4b7c6090 RCX: 00007f2d4b58ebe9 [ 699.996405][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 700.004602][ T31] RBP: 00007f2d4b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 700.013936][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.022179][ T31] R13: 00007f2d4b7c6128 R14: 00007f2d4b7c6090 R15: 00007ffdd50fcb38 [ 700.031736][ T31] [ 700.034834][ T31] INFO: task syz.0.3730:20767 blocked for more than 145 seconds. [ 700.044097][ T31] Not tainted syzkaller #0 [ 700.049414][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.058368][ T31] task:syz.0.3730 state:D stack:27072 pid:20767 tgid:20765 ppid:18514 task_flags:0x400040 flags:0x00004004 [ 700.070751][ T31] Call Trace: [ 700.074079][ T31] [ 700.077249][ T31] __schedule+0x1798/0x4cc0 [ 700.081895][ T31] ? __lock_acquire+0xab9/0xd20 [ 700.086874][ T31] ? __lock_acquire+0xab9/0xd20 [ 700.091768][ T31] ? __pfx___schedule+0x10/0x10 [ 700.097059][ T31] ? schedule+0x91/0x360 [ 700.101350][ T31] schedule+0x165/0x360 [ 700.105604][ T31] schedule_preempt_disabled+0x13/0x30 [ 700.111090][ T31] __mutex_lock+0x7e6/0x1350 [ 700.115770][ T31] ? __mutex_lock+0x5bb/0x1350 [ 700.120569][ T31] ? genl_rcv_msg+0x10d/0x790 [ 700.125853][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 700.130918][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 700.136150][ T31] ? radix_tree_lookup+0x240/0x290 [ 700.141281][ T31] genl_rcv_msg+0x10d/0x790 [ 700.146017][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.151078][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 700.156543][ T31] ? __asan_memcpy+0x40/0x70 [ 700.161182][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 700.166764][ T31] netlink_rcv_skb+0x208/0x470 [ 700.171564][ T31] ? __lock_acquire+0xab9/0xd20 [ 700.176753][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.181910][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 700.187654][ T31] ? down_read+0x1ad/0x2e0 [ 700.192291][ T31] genl_rcv+0x28/0x40 [ 700.196390][ T31] netlink_unicast+0x82c/0x9e0 [ 700.201214][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 700.206890][ T31] ? netlink_sendmsg+0x642/0xb30 [ 700.211866][ T31] ? skb_put+0x11b/0x210 [ 700.216570][ T31] netlink_sendmsg+0x805/0xb30 [ 700.221379][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.227342][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 700.232403][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.238058][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.243388][ T31] __sock_sendmsg+0x21c/0x270 [ 700.248859][ T31] __sys_sendto+0x3bd/0x520 [ 700.253409][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 700.258618][ T31] ? count_memcg_event_mm+0x21/0x260 [ 700.263927][ T31] ? exc_page_fault+0x76/0xf0 [ 700.268713][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 700.274054][ T31] __x64_sys_sendto+0xde/0x100 [ 700.279246][ T31] do_syscall_64+0xfa/0x3b0 [ 700.283786][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.289071][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.295217][ T31] ? clear_bhb_loop+0x60/0xb0 [ 700.299956][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.306475][ T31] RIP: 0033:0x7f5248590a7c [ 700.310924][ T31] RSP: 002b:00007f5249454ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 700.319514][ T31] RAX: ffffffffffffffda RBX: 00007f5249454fc0 RCX: 00007f5248590a7c [ 700.327607][ T31] RDX: 0000000000000020 RSI: 00007f5249455010 RDI: 0000000000000003 [ 700.336100][ T31] RBP: 0000000000000000 R08: 00007f5249454f14 R09: 000000000000000c [ 700.344112][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 700.352314][ T31] R13: 00007f5249454f68 R14: 00007f5249455010 R15: 0000000000000000 [ 700.360423][ T31] [ 700.363663][ T31] INFO: task syz.0.3730:20768 blocked for more than 145 seconds. [ 700.371997][ T31] Not tainted syzkaller #0 [ 700.377846][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.386653][ T31] task:syz.0.3730 state:D stack:26920 pid:20768 tgid:20765 ppid:18514 task_flags:0x400040 flags:0x00004004 [ 700.399335][ T31] Call Trace: [ 700.402725][ T31] [ 700.405778][ T31] __schedule+0x1798/0x4cc0 [ 700.410524][ T31] ? __lock_acquire+0xab9/0xd20 [ 700.416027][ T31] ? __lock_acquire+0xab9/0xd20 [ 700.420924][ T31] ? __pfx___schedule+0x10/0x10 [ 700.426300][ T31] ? schedule+0x91/0x360 [ 700.430587][ T31] schedule+0x165/0x360 [ 700.434774][ T31] schedule_preempt_disabled+0x13/0x30 [ 700.440462][ T31] __mutex_lock+0x7e6/0x1350 [ 700.445149][ T31] ? __mutex_lock+0x5bb/0x1350 [ 700.449955][ T31] ? genl_rcv_msg+0x10d/0x790 [ 700.454675][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 700.460364][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 700.465592][ T31] ? radix_tree_lookup+0x240/0x290 [ 700.470825][ T31] genl_rcv_msg+0x10d/0x790 [ 700.475426][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.480490][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 700.485949][ T31] ? __asan_memcpy+0x40/0x70 [ 700.490609][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 700.496115][ T31] netlink_rcv_skb+0x208/0x470 [ 700.500934][ T31] ? __lock_acquire+0xab9/0xd20 [ 700.505989][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.511061][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 700.516809][ T31] ? down_read+0x1ad/0x2e0 [ 700.521272][ T31] genl_rcv+0x28/0x40 [ 700.525452][ T31] netlink_unicast+0x82c/0x9e0 [ 700.530261][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 700.535730][ T31] ? netlink_sendmsg+0x642/0xb30 [ 700.540697][ T31] ? skb_put+0x11b/0x210 [ 700.545680][ T31] netlink_sendmsg+0x805/0xb30 [ 700.550506][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.555934][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 700.560930][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.566570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.571917][ T31] __sock_sendmsg+0x21c/0x270 [ 700.577043][ T31] __sys_sendto+0x3bd/0x520 [ 700.581585][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 700.586795][ T31] ? fd_install+0x97/0x540 [ 700.591255][ T31] ? fd_install+0x30d/0x540 [ 700.595943][ T31] __x64_sys_sendto+0xde/0x100 [ 700.600746][ T31] do_syscall_64+0xfa/0x3b0 [ 700.605793][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.611027][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.617191][ T31] ? clear_bhb_loop+0x60/0xb0 [ 700.621991][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.629112][ T31] RIP: 0033:0x7f5248590a7c [ 700.634005][ T31] RSP: 002b:00007f5249433ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 700.642983][ T31] RAX: ffffffffffffffda RBX: 00007f5249433fc0 RCX: 00007f5248590a7c [ 700.651129][ T31] RDX: 0000000000000020 RSI: 00007f5249434010 RDI: 0000000000000004 [ 700.659393][ T31] RBP: 0000000000000000 R08: 00007f5249433f14 R09: 000000000000000c [ 700.668205][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 700.676534][ T31] R13: 00007f5249433f68 R14: 00007f5249434010 R15: 0000000000000000 [ 700.685108][ T31] [ 700.688214][ T31] INFO: task syz.0.3730:20769 blocked for more than 145 seconds. [ 700.696368][ T31] Not tainted syzkaller #0 [ 700.701331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.710197][ T31] task:syz.0.3730 state:D stack:27072 pid:20769 tgid:20765 ppid:18514 task_flags:0x400040 flags:0x00004004 [ 700.722257][ T31] Call Trace: [ 700.725972][ T31] [ 700.728950][ T31] __schedule+0x1798/0x4cc0 [ 700.733511][ T31] ? __lock_acquire+0xab9/0xd20 [ 700.738525][ T31] ? __lock_acquire+0xab9/0xd20 [ 700.743858][ T31] ? __pfx___schedule+0x10/0x10 [ 700.748849][ T31] ? schedule+0x91/0x360 [ 700.753147][ T31] schedule+0x165/0x360 [ 700.757790][ T31] schedule_preempt_disabled+0x13/0x30 [ 700.763308][ T31] __mutex_lock+0x7e6/0x1350 [ 700.768032][ T31] ? __mutex_lock+0x5bb/0x1350 [ 700.772841][ T31] ? genl_rcv_msg+0x10d/0x790 [ 700.777662][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 700.782742][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 700.788554][ T31] ? radix_tree_lookup+0x240/0x290 [ 700.793737][ T31] genl_rcv_msg+0x10d/0x790 [ 700.798515][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.803606][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 700.808873][ T31] ? __asan_memcpy+0x40/0x70 [ 700.813503][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 700.819356][ T31] netlink_rcv_skb+0x208/0x470 [ 700.824366][ T31] ? __lock_acquire+0xab9/0xd20 [ 700.829485][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.834635][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 700.840109][ T31] ? down_read+0x1ad/0x2e0 [ 700.844552][ T31] genl_rcv+0x28/0x40 [ 700.848945][ T31] netlink_unicast+0x82c/0x9e0 [ 700.853775][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 700.859648][ T31] ? netlink_sendmsg+0x642/0xb30 [ 700.864674][ T31] ? skb_put+0x11b/0x210 [ 700.869389][ T31] netlink_sendmsg+0x805/0xb30 [ 700.874289][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.880202][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 700.885269][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.890608][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.896255][ T31] __sock_sendmsg+0x21c/0x270 [ 700.900988][ T31] __sys_sendto+0x3bd/0x520 [ 700.905901][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 700.910986][ T31] ? fd_install+0x97/0x540 [ 700.915530][ T31] ? fd_install+0x30d/0x540 [ 700.920275][ T31] __x64_sys_sendto+0xde/0x100 [ 700.925666][ T31] do_syscall_64+0xfa/0x3b0 [ 700.930225][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.935898][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.942138][ T31] ? clear_bhb_loop+0x60/0xb0 [ 700.947077][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.953014][ T31] RIP: 0033:0x7f5248590a7c [ 700.957742][ T31] RSP: 002b:00007f5249412ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 700.966683][ T31] RAX: ffffffffffffffda RBX: 00007f5249412fc0 RCX: 00007f5248590a7c [ 700.974752][ T31] RDX: 0000000000000020 RSI: 00007f5249413010 RDI: 0000000000000005 [ 700.982828][ T31] RBP: 0000000000000000 R08: 00007f5249412f14 R09: 000000000000000c [ 700.991001][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 700.999464][ T31] R13: 00007f5249412f68 R14: 00007f5249413010 R15: 0000000000000000 [ 701.007791][ T31] [ 701.010872][ T31] INFO: task syz.2.3732:20772 blocked for more than 146 seconds. [ 701.019382][ T31] Not tainted syzkaller #0 [ 701.024385][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 701.033682][ T31] task:syz.2.3732 state:D stack:26400 pid:20772 tgid:20771 ppid:18877 task_flags:0x400040 flags:0x00004004 [ 701.045777][ T31] Call Trace: [ 701.049108][ T31] [ 701.052257][ T31] __schedule+0x1798/0x4cc0 [ 701.057233][ T31] ? __lock_acquire+0xab9/0xd20 [ 701.062150][ T31] ? __lock_acquire+0xab9/0xd20 [ 701.067159][ T31] ? __pfx___schedule+0x10/0x10 [ 701.072081][ T31] ? schedule+0x91/0x360 [ 701.076460][ T31] schedule+0x165/0x360 [ 701.080775][ T31] schedule_preempt_disabled+0x13/0x30 [ 701.086690][ T31] __mutex_lock+0x7e6/0x1350 [ 701.091338][ T31] ? __mutex_lock+0x5bb/0x1350 [ 701.096400][ T31] ? genl_rcv_msg+0x10d/0x790 [ 701.101143][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 701.106421][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 701.111572][ T31] ? radix_tree_lookup+0x240/0x290 [ 701.117326][ T31] genl_rcv_msg+0x10d/0x790 [ 701.121915][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 701.127090][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 701.132309][ T31] ? __asan_memcpy+0x40/0x70 [ 701.137153][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 701.142673][ T31] netlink_rcv_skb+0x208/0x470 [ 701.147840][ T31] ? __lock_acquire+0xab9/0xd20 [ 701.152871][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 701.158017][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 701.163374][ T31] ? down_read+0x1ad/0x2e0 [ 701.168041][ T31] genl_rcv+0x28/0x40 [ 701.172105][ T31] netlink_unicast+0x82c/0x9e0 [ 701.177293][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 701.182637][ T31] ? netlink_sendmsg+0x642/0xb30 [ 701.187807][ T31] ? skb_put+0x11b/0x210 [ 701.192213][ T31] netlink_sendmsg+0x805/0xb30 [ 701.197085][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.202502][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 701.207943][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 701.213275][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.218851][ T31] __sock_sendmsg+0x21c/0x270 [ 701.223583][ T31] ____sys_sendmsg+0x505/0x830 [ 701.228624][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.234024][ T31] ? import_iovec+0x74/0xa0 [ 701.238971][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 701.243687][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.249039][ T31] ? __fget_files+0x2a/0x420 [ 701.253676][ T31] ? __fget_files+0x3a0/0x420 [ 701.258519][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 701.263823][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.270050][ T31] ? rcu_is_watching+0x15/0xb0 [ 701.274861][ T31] ? do_syscall_64+0xbe/0x3b0 [ 701.279686][ T31] do_syscall_64+0xfa/0x3b0 [ 701.284232][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 701.289587][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.296045][ T31] ? clear_bhb_loop+0x60/0xb0 [ 701.300819][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.306955][ T31] RIP: 0033:0x7f028998ebe9 [ 701.311498][ T31] RSP: 002b:00007f028a87d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.320020][ T31] RAX: ffffffffffffffda RBX: 00007f0289bc5fa0 RCX: 00007f028998ebe9 [ 701.328390][ T31] RDX: 0000000000000804 RSI: 00002000000001c0 RDI: 0000000000000003 [ 701.336709][ T31] RBP: 00007f0289a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 701.344825][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.354583][ T31] R13: 00007f0289bc6038 R14: 00007f0289bc5fa0 R15: 00007fff191b7ef8 [ 701.363712][ T31] [ 701.367111][ T31] INFO: task syz.4.3733:20774 blocked for more than 146 seconds. [ 701.375083][ T31] Not tainted syzkaller #0 [ 701.380372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 701.390519][ T31] task:syz.4.3733 state:D stack:27496 pid:20774 tgid:20773 ppid:17711 task_flags:0x400140 flags:0x00004004 [ 701.403720][ T31] Call Trace: [ 701.407682][ T31] [ 701.413523][ T31] __schedule+0x1798/0x4cc0 [ 701.419431][ T31] ? __lock_acquire+0xab9/0xd20 [ 701.424743][ T31] ? __lock_acquire+0xab9/0xd20 [ 701.429868][ T31] ? __pfx___schedule+0x10/0x10 [ 701.434796][ T31] ? schedule+0x91/0x360 [ 701.439380][ T31] schedule+0x165/0x360 [ 701.443855][ T31] schedule_preempt_disabled+0x13/0x30 [ 701.450167][ T31] __mutex_lock+0x7e6/0x1350 [ 701.455098][ T31] ? __mutex_lock+0x5bb/0x1350 [ 701.459937][ T31] ? genl_rcv_msg+0x10d/0x790 [ 701.464948][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 701.470213][ T31] ? stack_trace_save+0x9c/0xe0 [ 701.475755][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 701.481169][ T31] ? radix_tree_lookup+0x240/0x290 [ 701.486493][ T31] genl_rcv_msg+0x10d/0x790 [ 701.491085][ T31] ? __lock_acquire+0xab9/0xd20 [ 701.496060][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 701.501154][ T31] netlink_rcv_skb+0x208/0x470 [ 701.506478][ T31] ? __lock_acquire+0xab9/0xd20 [ 701.511402][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 701.516593][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 701.521954][ T31] ? down_read+0x1ad/0x2e0 [ 701.526489][ T31] genl_rcv+0x28/0x40 [ 701.530511][ T31] netlink_unicast+0x82c/0x9e0 [ 701.535738][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 701.541080][ T31] ? netlink_sendmsg+0x642/0xb30 [ 701.555246][ T31] ? skb_put+0x11b/0x210 [ 701.559577][ T31] netlink_sendmsg+0x805/0xb30 [ 701.564401][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.584932][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 701.590308][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 701.605083][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.610544][ T31] __sock_sendmsg+0x21c/0x270 [ 701.625387][ T31] ____sys_sendmsg+0x505/0x830 [ 701.630234][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.645097][ T31] ? import_iovec+0x74/0xa0 [ 701.649690][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 701.654616][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.675366][ T31] ? __fget_files+0x2a/0x420 [ 701.680040][ T31] ? __fget_files+0x3a0/0x420 [ 701.684759][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 701.709980][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.716226][ T31] ? rcu_is_watching+0x15/0xb0 [ 701.721038][ T31] ? do_syscall_64+0xbe/0x3b0 [ 701.741061][ T31] do_syscall_64+0xfa/0x3b0 [ 701.746404][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 701.751751][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.774756][ T31] ? clear_bhb_loop+0x60/0xb0 [ 701.780431][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.795167][ T31] RIP: 0033:0x7fe195b8ebe9 [ 701.799649][ T31] RSP: 002b:00007fe196ab0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.813446][ T31] RAX: ffffffffffffffda RBX: 00007fe195dc5fa0 RCX: 00007fe195b8ebe9 [ 701.822067][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 701.845257][ T31] RBP: 00007fe195c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 701.853411][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.875230][ T31] R13: 00007fe195dc6038 R14: 00007fe195dc5fa0 R15: 00007ffd526aeb58 [ 701.883692][ T31] [ 701.889712][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 701.900536][ T31] INFO: task syz-executor:20777 blocked for more than 147 seconds. [ 701.909833][ T31] Not tainted syzkaller #0 [ 701.914828][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 701.924927][ T31] task:syz-executor state:D stack:22632 pid:20777 tgid:20777 ppid:1 task_flags:0x400140 flags:0x00004004 [ 701.939034][ T31] Call Trace: [ 701.942360][ T31] [ 701.945417][ T31] __schedule+0x1798/0x4cc0 [ 701.949979][ T31] ? __lock_acquire+0xab9/0xd20 [ 701.954854][ T31] ? __lock_acquire+0xab9/0xd20 [ 701.960206][ T31] ? __pfx___schedule+0x10/0x10 [ 701.965247][ T31] ? schedule+0x91/0x360 [ 701.969544][ T31] schedule+0x165/0x360 [ 701.973926][ T31] schedule_preempt_disabled+0x13/0x30 [ 701.979552][ T31] __mutex_lock+0x7e6/0x1350 [ 701.984181][ T31] ? __mutex_lock+0x5bb/0x1350 [ 701.989523][ T31] ? genl_rcv_msg+0x10d/0x790 [ 701.994262][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 701.999713][ T31] ? stack_trace_save+0x9c/0xe0 [ 702.004768][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 702.010271][ T31] ? radix_tree_lookup+0x240/0x290 [ 702.016033][ T31] genl_rcv_msg+0x10d/0x790 [ 702.020681][ T31] ? __lock_acquire+0xab9/0xd20 [ 702.025841][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 702.030949][ T31] netlink_rcv_skb+0x208/0x470 [ 702.035838][ T31] ? __lock_acquire+0xab9/0xd20 [ 702.040935][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 702.046337][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 702.051698][ T31] ? down_read+0x1ad/0x2e0 [ 702.056198][ T31] genl_rcv+0x28/0x40 [ 702.060215][ T31] netlink_unicast+0x82c/0x9e0 [ 702.065466][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 702.070813][ T31] ? netlink_sendmsg+0x642/0xb30 [ 702.076506][ T31] ? skb_put+0x11b/0x210 [ 702.080782][ T31] netlink_sendmsg+0x805/0xb30 [ 702.085796][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.091834][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 702.097341][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 702.102719][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.108734][ T31] __sock_sendmsg+0x21c/0x270 [ 702.113560][ T31] __sys_sendto+0x3bd/0x520 [ 702.118233][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 702.123330][ T31] ? fd_install+0x97/0x540 [ 702.127886][ T31] ? fd_install+0x30d/0x540 [ 702.132492][ T31] __x64_sys_sendto+0xde/0x100 [ 702.137693][ T31] do_syscall_64+0xfa/0x3b0 [ 702.142234][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.147571][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.153683][ T31] ? clear_bhb_loop+0x60/0xb0 [ 702.158494][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.164519][ T31] RIP: 0033:0x7f2a29d90a7c [ 702.169330][ T31] RSP: 002b:00007fff7df37ba0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 702.177975][ T31] RAX: ffffffffffffffda RBX: 00007f2a2aaf4620 RCX: 00007f2a29d90a7c [ 702.186065][ T31] RDX: 0000000000000020 RSI: 00007f2a2aaf4670 RDI: 0000000000000005 [ 702.194503][ T31] RBP: 0000000000000000 R08: 00007fff7df37bf4 R09: 000000000000000c [ 702.202804][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 702.210906][ T31] R13: 00007fff7df37c48 R14: 00007f2a2aaf4670 R15: 0000000000000000 [ 702.219217][ T31] [ 702.222269][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 702.231915][ T31] [ 702.231915][ T31] Showing all locks held in the system: [ 702.241141][ T31] 1 lock held by khungtaskd/31: [ 702.249061][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 702.259146][ T31] 2 locks held by getty/5620: [ 702.263856][ T31] #0: ffff88814dda20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 702.274096][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 702.284471][ T31] 2 locks held by kworker/u9:5/5872: [ 702.290458][ T31] #0: ffff888024d8b148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 702.302024][ T31] #1: ffffc9000416fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 702.314387][ T31] 3 locks held by syz.3.3720/20729: [ 702.320079][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.328942][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.338125][ T31] #2: ffff888143b80a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 702.348980][ T31] 2 locks held by syz.3.3720/20737: [ 702.354549][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.362854][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.372047][ T31] 2 locks held by syz.3.3720/20743: [ 702.377859][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.386779][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.396075][ T31] 2 locks held by syz.1.3727/20753: [ 702.401311][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.409963][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.419099][ T31] 2 locks held by syz.1.3727/20757: [ 702.424318][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.432586][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.442419][ T31] 2 locks held by syz.0.3730/20767: [ 702.448140][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.456463][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.465984][ T31] 2 locks held by syz.0.3730/20768: [ 702.471644][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.479942][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.489045][ T31] 2 locks held by syz.0.3730/20769: [ 702.494271][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.502917][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.511985][ T31] 2 locks held by syz.2.3732/20772: [ 702.517324][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.526062][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.535138][ T31] 2 locks held by syz.4.3733/20774: [ 702.540443][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.549074][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.558607][ T31] 2 locks held by syz-executor/20777: [ 702.564192][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.572628][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.581748][ T31] 2 locks held by syz-executor/20787: [ 702.587542][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.596003][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.605135][ T31] 2 locks held by syz-executor/20789: [ 702.610533][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.619057][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.628789][ T31] 2 locks held by syz-executor/20797: [ 702.634455][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.642817][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.652248][ T31] 2 locks held by syz-executor/20802: [ 702.658067][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.666532][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.675971][ T31] 2 locks held by syz-executor/20826: [ 702.681371][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.689683][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.698850][ T31] 2 locks held by syz-executor/20828: [ 702.704330][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.713406][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.723026][ T31] 2 locks held by syz-executor/20829: [ 702.729057][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.737838][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.746962][ T31] 2 locks held by syz-executor/20843: [ 702.752350][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.760766][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.770590][ T31] 2 locks held by syz-executor/20845: [ 702.777366][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.785927][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.795366][ T31] 2 locks held by syz-executor/20871: [ 702.800778][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.809493][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.819171][ T31] 2 locks held by syz-executor/20873: [ 702.824566][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.833176][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.842680][ T31] 2 locks held by syz-executor/20875: [ 702.848163][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.856793][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.866130][ T31] 2 locks held by syz-executor/20879: [ 702.871936][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.881401][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.891659][ T31] 2 locks held by syz-executor/20881: [ 702.897175][ T31] #0: ffffffff8f59e530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 702.905505][ T31] #1: ffffffff8f59e348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 702.914594][ T31] [ 702.917765][ T31] ============================================= [ 702.917765][ T31] [ 702.926301][ T31] NMI backtrace for cpu 0 [ 702.926329][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 702.926351][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 702.926364][ T31] Call Trace: [ 702.926372][ T31] [ 702.926382][ T31] dump_stack_lvl+0x189/0x250 [ 702.926414][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.926439][ T31] ? __pfx__printk+0x10/0x10 [ 702.926481][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 702.926514][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 702.926545][ T31] ? __pfx__printk+0x10/0x10 [ 702.926578][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 702.926620][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 702.926652][ T31] watchdog+0xf93/0xfe0 [ 702.926686][ T31] ? watchdog+0x1de/0xfe0 [ 702.926720][ T31] kthread+0x70e/0x8a0 [ 702.926749][ T31] ? __pfx_watchdog+0x10/0x10 [ 702.926775][ T31] ? __pfx_kthread+0x10/0x10 [ 702.926802][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 702.926833][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.926850][ T31] ? __pfx_kthread+0x10/0x10 [ 702.926876][ T31] ret_from_fork+0x3f9/0x770 [ 702.926901][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 702.926927][ T31] ? __switch_to_asm+0x39/0x70 [ 702.926953][ T31] ? __switch_to_asm+0x33/0x70 [ 702.926977][ T31] ? __pfx_kthread+0x10/0x10 [ 702.927003][ T31] ret_from_fork_asm+0x1a/0x30 [ 702.927046][ T31] [ 702.927053][ T31] Sending NMI from CPU 0 to CPUs 1: [ 703.076208][ C1] NMI backtrace for cpu 1 [ 703.076226][ C1] CPU: 1 UID: 0 PID: 3518 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 703.076246][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 703.076258][ C1] Workqueue: bat_events batadv_mcast_mla_update [ 703.076287][ C1] RIP: 0010:debug_object_assert_init+0x1fb/0x380 [ 703.076312][ C1] Code: 42 80 3c 38 00 74 08 48 89 ef e8 20 c7 52 fd 48 8b 55 00 48 39 d3 0f 92 c0 48 8d 8a 00 80 00 00 48 39 cb 0f 93 c1 08 c1 74 50 <4c> 8b 34 24 48 8b 7c 24 10 48 8b 74 24 08 e8 32 78 ac 06 4d 85 ed [ 703.076327][ C1] RSP: 0018:ffffc9000b6a7660 EFLAGS: 00000046 [ 703.076341][ C1] RAX: 1ffff1101122500a RBX: ffff888026a51778 RCX: dffffc0000000000 [ 703.076355][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc9000b6a7540 [ 703.076366][ C1] RBP: ffffffff99d51a78 R08: 0000000000000003 R09: 0000000000000004 [ 703.076377][ C1] R10: dffffc0000000000 R11: fffff520016d4ea8 R12: ffff888089128050 [ 703.076390][ C1] R13: ffff888089128038 R14: 0000000000000000 R15: dffffc0000000000 [ 703.076402][ C1] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 703.076416][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 703.076428][ C1] CR2: 00005654413e9000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 703.076444][ C1] Call Trace: [ 703.076451][ C1] [ 703.076465][ C1] __mod_timer+0x4a/0xf30 [ 703.076487][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 703.076519][ C1] queue_delayed_work_on+0x18b/0x280 [ 703.076542][ C1] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 703.076560][ C1] ? kfence_guarded_free+0x38f/0x4c0 [ 703.076585][ C1] ? batadv_mcast_mla_update+0x3398/0x3640 [ 703.076606][ C1] ? kfree+0x23e/0x440 [ 703.076625][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 703.076654][ C1] batadv_mcast_mla_update+0x33da/0x3640 [ 703.076689][ C1] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 703.076712][ C1] ? __lock_acquire+0xab9/0xd20 [ 703.076748][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 703.076772][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 703.076788][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 703.076805][ C1] process_scheduled_works+0xae1/0x17b0 [ 703.076841][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 703.076867][ C1] worker_thread+0x8a0/0xda0 [ 703.076886][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 703.076916][ C1] ? __kthread_parkme+0x7b/0x200 [ 703.076939][ C1] kthread+0x70e/0x8a0 [ 703.076961][ C1] ? __pfx_worker_thread+0x10/0x10 [ 703.076977][ C1] ? __pfx_kthread+0x10/0x10 [ 703.076998][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 703.077022][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.077038][ C1] ? __pfx_kthread+0x10/0x10 [ 703.077058][ C1] ret_from_fork+0x3f9/0x770 [ 703.077077][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 703.077097][ C1] ? __switch_to_asm+0x39/0x70 [ 703.077119][ C1] ? __switch_to_asm+0x33/0x70 [ 703.077139][ C1] ? __pfx_kthread+0x10/0x10 [ 703.077160][ C1] ret_from_fork_asm+0x1a/0x30 [ 703.077190][ C1] [ 703.077343][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 703.380707][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 703.390004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 703.400081][ T31] Call Trace: [ 703.403376][ T31] [ 703.406329][ T31] dump_stack_lvl+0x99/0x250 [ 703.411635][ T31] ? __asan_memcpy+0x40/0x70 [ 703.416244][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.421553][ T31] ? __pfx__printk+0x10/0x10 [ 703.426172][ T31] vpanic+0x281/0x750 [ 703.430169][ T31] ? __pfx_vpanic+0x10/0x10 [ 703.434966][ T31] ? preempt_schedule+0xae/0xc0 [ 703.439959][ T31] ? preempt_schedule_common+0x83/0xd0 [ 703.445501][ T31] panic+0xb9/0xc0 [ 703.449252][ T31] ? __pfx_panic+0x10/0x10 [ 703.453688][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 703.459282][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 703.465566][ T31] watchdog+0xfd2/0xfe0 [ 703.469748][ T31] ? watchdog+0x1de/0xfe0 [ 703.474109][ T31] kthread+0x70e/0x8a0 [ 703.478193][ T31] ? __pfx_watchdog+0x10/0x10 [ 703.482900][ T31] ? __pfx_kthread+0x10/0x10 [ 703.487536][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 703.492767][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.497980][ T31] ? __pfx_kthread+0x10/0x10 [ 703.502974][ T31] ret_from_fork+0x3f9/0x770 [ 703.507718][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 703.513196][ T31] ? __switch_to_asm+0x39/0x70 [ 703.517976][ T31] ? __switch_to_asm+0x33/0x70 [ 703.522754][ T31] ? __pfx_kthread+0x10/0x10 [ 703.527542][ T31] ret_from_fork_asm+0x1a/0x30 [ 703.532425][ T31] [ 703.535837][ T31] Kernel Offset: disabled [ 703.540902][ T31] Rebooting in 86400 seconds..