last executing test programs: 25.40075781s ago: executing program 2 (id=935): r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0xbe57, {{0xa, 0x4e22, 0x200, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}}, {{0xa, 0x4e24, 0x797, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x108) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x38, r3, 0x1, 0x270bd2c, 0x2, {0x5}, [@L2TP_ATTR_PW_TYPE={0xffffffffffffff9e, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 25.167802354s ago: executing program 2 (id=938): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01050000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c0002800800014000000003080002400000000b0800f3ffffffff220900010073797a300000"], 0xcc}}, 0x0) (async) unshare(0x6a040000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) r2 = socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0xfc}, 0xa) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x40014) connect$bt_rfcomm(r6, &(0x7f00000000c0)={0x1f, @any, 0x9}, 0xa) (async) shutdown(r5, 0x1) 23.766721874s ago: executing program 4 (id=946): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async) unshare(0x68040200) (async) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) epoll_create1(0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) (async) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 32) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) (async) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 23.018686886s ago: executing program 1 (id=950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x67, 0x29, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x0, 0xffffff4c, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0xf, 0x29, 0x0, @local, @local}}}}) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) close(0x4) 22.067601336s ago: executing program 1 (id=953): r0 = accept4(0xffffffffffffffff, &(0x7f00000006c0)=@x25={0x9, @remote}, &(0x7f00000007c0)=0x80, 0x80000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="82ab90", 0x3}], 0x1}}], 0x1, 0x4404c880) (async) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB="34d8287fb302060800000000000000000eb95036f7010718b854a609400002000008000544000000060e0006000000618b43b29753e177190e2474dcb299eb32fa357718ce9c012b2dedb7d96fc39f00"/89], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) (async) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) bind(r3, &(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x80) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/182, 0x1b7, 0xb6, 0x1, 0x5}, 0x28) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r6, 0x3, 0x1) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x2}, 0xe) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000400)=0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000081000000040000000080000016000000", @ANYRES32, @ANYBLOB="0200000000000000000007009f873a7187000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x34, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="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", @ANYRES32=r10, @ANYRES64=0x0], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={0xffffffffffffffff, r9, 0x25, 0x10, @val=@tcx={@void, @value=r5}}, 0x1c) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r11, 0x84, 0x4, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000c80)=[@in6={0xa, 0x4e21, 0xff, @local, 0x6}]}, &(0x7f0000000140)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) 21.90096395s ago: executing program 1 (id=955): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x3, 0xfffffff7}, &(0x7f0000000380)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x62040200) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x6, 0x4, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8f02}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x400, 0x452c}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000033c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000780)={0xe0, r8, 0x1, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0xb8, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x79ec}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x54c3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xef}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0xe0}}, 0x40090) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796129bd7000000000007e0000000c0099006d910000150000006a941b5e1089278c0d1c9ab378b1"], 0x20}}, 0x4000054) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 19.799979885s ago: executing program 2 (id=969): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r5, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200040d0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18001e00000000020000000000000000a81927cc", @ANYRES32=r6, @ANYRES8=r1, @ANYRESHEX=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r9}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) 19.764621618s ago: executing program 2 (id=971): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f00000008c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r5 = accept4$llc(0xffffffffffffffff, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000500)=0x10, 0x80000) ppoll(&(0x7f0000000540)=[{r1, 0x3}, {r1}, {r2, 0x2}, {r3, 0xd2}, {r4, 0x2}, {r3, 0x1300}, {r5, 0x2424}, {r3, 0x704}, {r0, 0x140}], 0x9, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x4]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="0ad444d9b2e4ec549d470c6116aae2e58448fd8d83b38c8e4532d3740c1449f8be1e9fd374d660eb479e82117760f093a4df5b6d02fc02e23c5ab65fb84603fa80d93a3b7264c19a9fe50cdaa06695deabc4b7b2bc5746f4c8e86b4337c30d417a1aa1dfb55ce68d408225e5", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100030000000800020002000000"], 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x188, r7, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x110, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ebe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bdb1bf8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbcc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9130}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x828e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x436808c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6994}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5644600b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7f6}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x946f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39be497}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x782d2be8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x90c6a6b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f42bda5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14ea}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf371eea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2628b1ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23824c73}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x93bfdc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x341}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x628d53d3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33dc1a9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10d52437}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48acde79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ddd03e7}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x24040008) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x340}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.396387s ago: executing program 3 (id=979): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020094000000080006400000000208000440000000140900010073797a30000000000900020073797a32"], 0x94}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000090560000280012800b000100697036746e6c0000180002801400020000000000000000000000ffffac14142a080004"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 18.266116779s ago: executing program 0 (id=980): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f0000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r0, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f00000002c0)=0x6, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="0010b6c5820fae9d6dcd3292ea54c7beef915dfb4c90c200", 0x18) getsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x5}) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x5, 0x2000000000010000}) 18.261231661s ago: executing program 3 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20000804) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10}}]}}]}, 0x4c}}, 0x20004804) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000000)=0x4, 0x4) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048001}, 0x20000000) 18.160111464s ago: executing program 0 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x84}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x7, 0x0, &(0x7f00000003c0)="c274386d178550", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0xf8, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004041}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000020000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) close(0x3) 17.725788582s ago: executing program 3 (id=983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) recvmmsg$unix(r3, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x101204, 0x4) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x101204, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x48) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) epoll_create1(0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000004}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) bind$tipc(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a200000000001d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a200000000001d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) 17.642326865s ago: executing program 0 (id=984): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f000000d540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f00000121c0)={0x0, 0x0, &(0x7f0000012180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2415f9483560ddd054d4902afb1098c6170000", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf250b00000006000a00a0aa000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) recvmmsg(r2, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async, rerun: 32) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 32) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="ee080000020020000000000000000000"], 0x10}}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}}]}, 0x50}}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x736, 0x8, 0x3d, 0xfd2}, {0x8f0e, 0x9, 0x7, 0x7}, {0x2, 0x3, 0x9, 0x6}]}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200000c1, 0x0, 0x0) 17.484312665s ago: executing program 0 (id=985): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000002030300000000000000000002000001fc000540bd0f22ce0800047163bc4000cf742f2676124ac4beddcb72c7ca"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000008000000000080000000000000d124de8e8f4396d851ea7cc307c9dd957dd04df18a926058f97d4fe3873cdbfef8cc68ee08000000d1ab7212e9452b01d77a37c2ff6035d4405ff9963e477d49043e67b9675f78ea27e54536bd4b7b5da830ce3341b20f814f71021971e06f248a22e7704645967c68f6990a9076ace0bc45d6f9a7ec63db218411f84a6d1f258228ada63af9065dcd486aa6820e7c358ff17b3c07c20dbe83b65d6d9203aee634681429115c467f46a4c434f595c9f7484c8490040400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) r9 = getpid() (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r11, 0x72b}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) (async) sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async, rerun: 32) write$cgroup_pid(r4, &(0x7f00000006c0)=r9, 0x12) (rerun: 32) 17.478488295s ago: executing program 4 (id=986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x400) poll(&(0x7f0000000600)=[{r1, 0x1000}], 0x1, 0x9) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0xcc, 0x6, 0x8000, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x10, 0x700, 0x8, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) splice(r5, &(0x7f0000000000)=0x800000f, r4, &(0x7f0000000040), 0xffffffffffffffff, 0xd101a85a0fd9ace5) 17.451008378s ago: executing program 3 (id=987): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6", 0x38, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0xb, 0x10001, 0x9, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x33, 0x1, 0x70bd2a, 0x25dbdbfe, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x100, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @empty, [0x0, 0xff0000ff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xffffff00], 'veth1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1e, 0xff, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6e, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x5, 0x3}, {0x1, 0x2, 0x3}, {0xffffffffffffffff, 0x2, 0x1}, 0x12c104ff, 0xffffffff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) (async) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = epoll_create(0x7b6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x10}) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x58, &(0x7f0000000c40)}, 0x10) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970007b83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 17.370813248s ago: executing program 0 (id=988): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r4}, &(0x7f0000000100)=0x8) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34ab1e000800", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000014000200776731000000000000000000000000000800070000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x24004890) r5 = epoll_create(0x1) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) write$nci(r6, &(0x7f00000004c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x1, @v={0x6, 0x3, 0x1, 0x6, 0x9, 0x3, 0xd1, {0xb, 0x3, "459112cef22f0d08"}, 0x6, 0x81, 0x4, 0x2, 0x5, "229ebd1a32"}}, 0x1e) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000001c0)={0x20000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x7, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x10}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1b}]}, 0x38}}, 0x4040880) 17.16420628s ago: executing program 4 (id=989): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) shutdown(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34110000320008002dbd7000fcdbdf25020000001e112880603cee447f8a8becb183f9c7f47047caade80c372c7b7ee07ef6ea622e465fdf4dc4d6100670deff05941f3f4cb402bfd70afc173326e3897e476e2adddf0be189096f358878309b81b60ad40b7913d95732ad1eddf701709e4231d7049465f888e3d504aa3bf1fdd4b0290fb9cc97d02f9a68789c2bfd3c070f00ae77aed7ebd6543082bf4faf665211aa2577ba510d27297459f2fc402e22960c31b082d21c4fef918ec2918c0361c795eff1d65210ae22f9b093524b44f3c2bbbd5e021716a38656cc270b6ddb540dbcbe938c3215016c05d79d37f2d3e8c8998838c0574979ad58253a0aaeb2ef4fb918f4be4450b954fa08df70cb427e850fc0b8389e5784d024aca1f86a5937e844beb4cad7657b98685a55a71cd7467655d1d964a9ccbad7709da0f37afdf9b7551194f5d5e226ec12055c9266c4b1debf32ebc5e86cb828718b214debaa5e8919e9e5c8ebc8f09ed27c6a10e217a74ecb35558839dbde6905edce13b87a57edaf22c3632a9368ad9daa9f7b1ec0df3dfcac553a2bb84fa59d627d0dec090f2e85e7bb305058d4008f5e8b04ce4860e70ee591ac98775171c0081b3b6a41f20a4ff13a8ef9902d3ddb3e5a3b2af208a88ac419cd255baee3a480e59e00e70492b8e651d465cffa437efb0da979a88ea4cf5cbf2a10fdfd4bb529ce4ff48c778fe3f31f950c7c84b52c9c6fd69f1b44b4b0078e235f15e01df7e457352185f87f777733be6ef4b4fac8b86f1b6a41b686acd51bb426252e8291f497ab0b1cb7b042b3cc867a78eb9fed2a4064a2b1ed3e4eeffca8bae4f677714cdf0a73008ad56a67c15495ec3d26f6b9bef8dc21561e8f61679c024c04dee35107f5fc939aa116bfa59d53e7c4eba132684d9801b6db4fde68234278583fbea41a7d7a2354ff7c496058f903c24bbdd08861966b507e5863c6c611da61433518d7bb9f50fe6abc195fa586efa9fe8f9d001cac098423e153869f868273024286794c38ffa231b74391b09e55f6175c40abe2db07f60440309429c03c242ac63e4bbd0fccb938ca47161038382671a4a8260e7d172384c19476f2b25b6b1644ef2dfcda00e2d9a3a1dde1340d37dacd8b37a37a1548b33dd67a4ad5117b0bc7f0c3ddf7bf4e72443f624eca279133592e2b897ff4e551397b7324cff42643c42835ef169200a75742ad40f97438f17f51bcaa4df1859995239f5fab19bd62d398b1285214099adc442b3e027ee46c3939f923cd420af072f0244f690dbe34884125e24a91b90bede4d33e0569646a441a3781412b021431680e48c4b22c34d6de1d740bf4f569673d2cb18e027834c09f28b9d3479fc99f11a298806459afeb5e5583dd9df63445a5b6b032ee3011ace201970c183c9fdd0c7dbd69edfa9379d94e98eceb357cecfb60e581943cb4885242190570b4c71e5bf3ae888aa9e77abfe3915070217275fc227082df9946549e2b58eee2a86c9ebd6e033ce2f1dc5bb32a378a7ea7009a8faae01acf55fa07d5993c8585631ece046a734bc873465d277e2016f684c945581080a054a953df33fed40b5b46b0aee5660d56da9130d5d786de304571fd11c9e10e546014861a43b41c6a089ab670f7f9526431007661d0e4044085f24ca33f769ec855acac5ec9a6c89437d007fbe98c8d22fce0d5b62324aa82cb016d7cf2bca33502d922ed94d7f995621284cbceda2efd93e05c86c795254d6de9b58945aff57f4450fae254abed8593794612aec8f9288b2eeeb6c75f7bbb6118b9e83e6577c02b38b863023ae4043c698edfb2c172c0e3d871cd5f0ee26904da70e17d007a9e328939857bdc909ad59403c5fb9ca9f3f6e2dccdcdeb6457911360b0306e0d5832f94d1c0695063e8083e8302fb86a1c3ff91b385292a9093ebe2e65e515a3ac723a17ef8436fc38397a455dbc4ac3db0c6bee430d2fd9d5ee35ea528cc69a1b8eb55ebb0d7a01f379f9aed48c14b620cf6bdb77de20abdcb97adff6d246c37af5645aa58c5a63f825d72cc717634692ee9870d493b9bd5b94df2749a82a86025bed602773ce729c086597901c5268bdf364adbb9fbd290d9ffcefc9f70ddcade2001a957feb6367585d5ba6ad9418023d78d93c0837f57f3e9f662ae6ecce638cf57209ed48a1a7bd764921f7862a2aec600f96817646d9f9a5d0cc0c64507439179811f619e12908cd7a81841581def7e17597dafeb92e9109daa87caccf9824078ebece65f77c9431f16d2eedd7fa53c672266b9f82f174fd6fe3911539ff59f3826d7a6c9819bd06dc8959939d2d5559b5d6d215866c59acf042802ccda37553bf8d6e651ebb7e5bd4a7c190037d0c6a1011e644057f9b79943d7e6c2e8575c973b1101aa63140d749e36046918cee3cc28223ad715a7dee1c84d897049b3c4278a4d368c419a1458e0cb0b68060938bc337ae51ffb80d067760712aa6c8d1797ff06fbc2731a8566ce7c24a720dae5961ea79842be85aa5009b1d4b5c6eafead7a2e2d1cb2d50459a50b7740fca4362ab962e97cb6da82af23cdd9bbc2c030f4ea36e7a0ca8ec7e719fa63a62e455959e60a71b674e12be57c0317994c52ff2c4c943c8844da7d81c897175d55ac613be561e4a2159954d1a2fd2a5ae03330b29756150a4be5a03dd22a504d51dd7cbc0e27b5cd69cf42de85a8ad332cfb68fdf30b363b05b015d72ebde2920c38551208d78d3bdb0cfde0b0416cee83676598717a7ec83860383aac3f5e9886d7f9001c644ba23e4ef6e3d2ff904f204c6052b46b81fe5aad5c24cd8cf9c7310062a8586d4ad3eb24e8b981ad34ad10f15f147d0b2af4578b1bcda0375274a7534adf15d111a98e0ac874c3f2d86c5687208feee45dd7d50bf866d17ff64de4b061fbf6b5ca02c5f0c778f437a3e766ab8a48a1e65a034d3d33fba0e8f4658b091b0cbed609788aca4db4768ad83e845e46f2a1d4b0a82bfac6e650454497cd23e082ecc003848c3ec0d0303753fd9624f391cab9fc0f2decfde6e11b5fccf9b6442a2abeba7299d642bcfe987f6790f356fdcb6fb5c86df6a6faf6c6f0bb22ab12b27b92f6c914265db06ee98aec144cb1410eff2705051e1c04b39f2eec93bfce980f2b629def78372673cd82fe8e26102fe7c32dcd4e1ebccf797c39731475e7bdcfe5c3f8c3f57c505cc059c3fe863c5b8f4ebf268bc0d223359abd6c7dd7925032d14b82fe0f246f95970a3adbf3fa75e0178b74bd9b8f66bad85bf12b3a4358b229bb638fa3fdc0b46af03ff1a8d7fc493d320b9cea59a843ff9fb9f0af57bdc3870645842da4ba02c38350e2a2910a13aaa88c9310211c30ab21f91969e465aa4a176f3dd64ad098250b1b82bbd15ab119dcb669809865ebb78840a1cc4fbcf4a436a2d9a09c11b4cac7228d3abb2e61025f750161cd5cb7524e9dacea4d3d084d162ab999ec12fe0e504d1e21c75f56a82b3b9381b826477646d088857896a2f3a14c9e59ffbef1edfa0f1fc47265ee2425be738fa60950d40ae4dc0ad21e47ad90978c90ed327826af566e8d73dac8f610d9b8d9cc9b1e4f52660c43a845330c8a9a2389b19274927930d3e37013caa19983e32649c09ef43f8112d50406da2bc9c9c3b47f52564b177c3d9b8d07c434180610dbd8bb5dbe2221405451305984011d308593db5578acb0ab4fb3c4c8ee7b5dd0afeb44e155483ab42d81a6db255436876b84f50f0917887049f9d34a0821fc7b364d2c408e62efcbf4b7c8107b1ca2b721098cad8f9eeeec2c14f1935ea773e01dac4d0aa920522b98376a047a8aea4f5f2643e78f90c2fbf3dcff11c8e5422580803c6842a61d70fea4b42f5a3ca76a6461e85dab63dcf58c174340aef2cf298c30e0ca51aae3c553ee9d14a8a6cf94c64ca491c03b9bd823089d8dfd760e8e338be40968d1d1f1814fef7dbfcf3500068a2b74992b76a2bd94b7346a018fa83f8e6521a37f0cf0927b8f4f3d3f88fc1a4cbd9e21f2cdb732f4ebda07f917d87083f8ce8fbe3bf215594cfd983cdbfb8d2c257bb78220b77cbfd08f18aa9cee12a8d96602e52a884dafe6a61461696cf50f80dbeb90242eae9361ce669a11c216d24fcd5afa32b2c392abfcf56ba1906907018740ce6498a3e0f0f54286b98d00d94d8c3d498f8e43e9d87899943b9184c7af109dfa12f4cca24b14acf72dfa606b56ef1988aa2ce05987392938232870512861636e28d9425965de0c109637f2da4d9fd5fc05a945391be78741cc7fc5adf5ab9184382e70824f9f741da8215212f406d06dd886256000daa4282f987a4689e269b5eff3c8e0968798eb62b6b82cd1a1cb69a3fc2b4437aad5a6afd997fe80532ba29ed172f869a364ebb308a223ad81a906cec889513c996a9f85a8c5b2fc1f7de62cb965e012431e61e5a5c8183a64de1d8e646fc1e2ed09a2de169fa52d7bef43b90e08517a984f98549fa6c59e850b7cb2f932b57d9d98206dd64169288ad4c727de3fdb56e014fb8c7d691454bfa9720eb8e9e44a75066fc73f20ec3ec638ede4df4208a2c6f3f774db8cd9a8f458c8be3076738d7078d38e898f557a6ff69208e416b3938f6b25a359659ca1a6d4532a1d811a69d0faaec7c7318f77dd2ec4e831ce36cc6a9f0b31ea1c12a89edbe3afd065da86ba2a5e6cf757960a83979359cc631471c9cff64da028a6aedc988726eea88d0ff0c44055c728908a7d05a85f30036e94d69da4d02c0a88c8d20e1f77f2b0001d024a3470895546b56dcd44def1c126df3a0f792db934a9cc64f14fe7be09555dc2024371fc3fe39cc39044c04c0916f64cfe895b1d9504d6c0eafc445b899790b7d7c8946edc6453b077d923e5fe2e8f7586a008ee6a3a37b84900c93d278cc8ef1ce0f709a99e901c31ca298b78ca63532f935dd9e7fa5241bb5376328f38aeb7286d5469db0da594847cf76cd3e841e41a9aa5955bcf22c56a3944cc86c2b098eb0cb61c506713e27538ebde0e720fbc67a42bd8a07f1bb516ae532c1b96bf660ecaacb6a1cb233698fed87c82b0ff23b14858cd62ae85140c41c03a25ea5d9b01e31ebe014118123ab15079380e5b1c015a7858a1663050791b5194692f562c286a14a5c9f0345a56363de8750faf812ff255d2ac595d95cb95caf451d20183522f0197ffce9c261ad143a09eafdcf6bd74fa2a190185683d4430fb9040b1dbf39e52f30c2557f27389cdc753e34b05a38ac1368289f5fcc74691bd372ab7fa050c48cea15659a59e75ca2f2d49dfd750f286bf21e3f36e29c03e994d5ba77d05fda9ed8f0576319574618e93f9c0ee4f7cfd0b3f7982b11137762a124175da147860e6fe8459f79c82178497dda2c594777a2f30b516cd5473e1d5b248f7062c2ed35cb4d0fad4a30b8d9534be5db35d739629805abf8bff472f5ee0002168073fc1d822dd0e8ba60535e6fdb969b8c0a54c845aa2f7ec6564ded183a1ef45bad921a9e829436f25514d1fdb3589e5275a4430b8729f003e061693c2fbc9d9ef8cf9ad78a6dce53925622e18c3abc179afdf3a4eae9b24ad41bfec3dae90a137134c22ca938e9b008c74445a35175f70c3ba6d7bc4f75601eb7c8dd760e5853a2414268d47e7b331a64852d41664b76322c58d786dcb4af57633c3748b0be21ac2fec6a2ceb793a2fa0c37a043a89606510b4ee265d6513dd9cfeb1624b198b6d3ebd96f833a0a8a452d6448a1b70c8a2d66cb21363ca30855cf4f1150ccbfb68b7123bdc0c158878e0f5a9015ac16a97a08bb470710f098293e0cdde1e108813e26f5e64b8dde63e7e568233732f65d65e590963c07e97af39505f72e565650e1350853a8ac621b3c382d690b12728b56905152170f3d39b7dfe82e0392316ad15cf1ee416baa3c4af36f045499bb51601a6dd0fa575ff02b507f689ef87ccd209223dc3d58fcce4197cdd86e6e1bc07f0951503dcdecfc14904276753ba952bf37d77da0400000089ac2f5da32871969b2393a6a1c8a3216810b92e2118d6a80ec94077fbd2e2676152b09de57bec1c2eadd4d4848382327b85a2cb31eb2417abd94033731f43bf2acc529a745a268b4ead1bca9ae5254b576c1aceb6e956d155132ed53935e46e9e6a1c228f3ee5a1d787d58a69a9b98afc410e5fbeba927ff16729944b21f7b12484a5c5bfdbae926f95f8818666000007fdaddb3590c9a9a34d5a9b6e674cac54c0483d62c3926c2635171c95714fd07c83826e4d7e3e5ac78621f9c34694417644a6859eb0b9113de513a6523781a7e63658ff1512bf2649f00abcc18d2ec08217adbdb18c284fc88e1382db23d4aa307b12efb28c6174cb63792a214435787c0bd48a664f9b7c2069ed"], 0x1134}, 0x1, 0x0, 0x0, 0x40010}, 0x20044010) 17.163238837s ago: executing program 0 (id=990): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 17.113931612s ago: executing program 4 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_EXPR={0x68, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x398}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 16.971038489s ago: executing program 3 (id=992): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @private=0xa010101}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 16.924188617s ago: executing program 4 (id=993): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000100)={0xa, 0xfffe, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xffffff80}, 0xffffffffffffff84, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x40}, 0x4110890c9b2b4218) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r4, &(0x7f0000000040)={'c', ' *:* ', 'w\x00'}, 0x8) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0x24}], 0x1, 0xf) r5 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) splice(r3, 0x0, r5, 0x0, 0x10d00, 0xf) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffffffffffd9a, &(0x7f00000000c0)=ANY=[], 0x20, 0x2400e044}, 0x4041014) 16.822737306s ago: executing program 4 (id=994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000f8ac00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x218, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "047e5b954555be3df259b0e9caf818b2897ba8d814552b26ba614968"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x34, 0x3, "362035bd935a82532f0bdafc41c8c4faf78465193adbcbe1cff47b0289be52630640e47373de996695ddd01367ab2d72"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x25}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd94}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "ba34dec2003631b709abfbf08b602a55a964dcd03660d5e7"}}, @TIPC_NLA_NODE_ID={0x7d, 0x3, "b74fba36efa7aaffc0cdd9b954a87db738c880776e17a82c126e6fa0e92f00b4b26efcd12804df549109a0d8b10dec8de71b6ec40b899c970ea4077eb3c358cc9af46c6c3935c7466d39622b51c1d7d4b6bc1680f81723f46ce030d025b2009f98adacb0d58c6e8b5d53dd949e5682737b59671c10388b2c6e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40800}, 0x54) 16.811821356s ago: executing program 3 (id=995): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "ac83c76aa3dbe09c", "73063141659c21fb7d16eee688ca46a5", "f0f30500", "fb577343645483a4"}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c001580050001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008"], 0x34}}, 0x4008000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x85}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x34c, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0411c587da2bd5fae7c63648456c75d2"}]}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fbc446ba9dd232c83c90ce43211acea92cdf412961e46e2d8e74302868c6021b"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x120, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "79d33c6b98bab3e9590e1d711227b3d180e0e919e0f6590221df17bd1ed10305"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xa197479586f01d6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e2f161d103af83c65f4e54d4686feedd"}]}, @NL802154_ATTR_SEC_KEY={0x1a0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000001}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "719cbaa56b101da63581b9abe0a987bb"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "03f8daca1be6634bcf1138cc934929e8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0xf0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1d978a9fcd39c59e}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x340c}]}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 16.388383653s ago: executing program 1 (id=996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r2, 0x20}, 0x38) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="000088a8010019000700010103006234086500140600fe80000000000000000000000000001dfe80000000000000000000000000002d4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5140000290780003"], 0x4a) r5 = socket$netlink(0x10, 0x3, 0xc) splice(r3, 0x0, r5, 0x0, 0x10d00, 0xf) 16.268550432s ago: executing program 1 (id=997): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) (async) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="98c6a53744c9fe0cd9bb35bcdf", 0xd}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}, 0x1c) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}, 0x1c) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000040000000000000e03000000000000000100000000000011048000000a000000000000000000000202000000002e00006100"], 0x0, 0x4a}, 0x28) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) (async) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) poll(&(0x7f0000000340)=[{r0, 0x3028}, {r7, 0x1000}, {r4, 0x11c}, {r1}, {r5, 0x200}, {r3, 0x42}, {r0, 0x80}, {0xffffffffffffffff, 0x3400}, {r1, 0x401}, {r1, 0x501a}], 0xa, 0x6) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x5) (async) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x5) socket(0x10, 0x80000, 0xfffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x200000b, 0x40010, r8, 0xc6e9c000) 16.199800642s ago: executing program 1 (id=998): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80402100c300010008042bb700000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001022010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b0200000000001c0012800b00010067656e65766500000c000280060005004e1f0000"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x3, 0x4, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000000c0), 0x12) pread64(r12, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.94843136s ago: executing program 2 (id=999): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x2a, 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tmr'], 0xa) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x110, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xea, 0x7, 0x1, 0x0, "e1cd9789766dc7ccadeb22e4db9021cc4bf6f91bb8081c998744d43c75921ab77d8e89f9bc1b3fc42645da04afcbd376ab738e498e01606bb5e00abbf73533d21009617eb4395a5780b363e4492c14c3bfd8684dc18dda514de273d38466e97c820d5daf6fc991521ba8d0f7b0ba6752abf8619da94d5333040995d1c1559dcd532e82a8e886812cae31ae5fb95d31b0c0eaf46e7d7303c05cc832b8a54b8d316d31295bf6dc5d5ac45f4a31e19006ce596ad5d105ddc8ecd781bcf565b9efa8df175afaf438f3c18dab832d072fc61f91addfb4c04dfcfa5ab47860edfbe68c4eaba3b994e8"}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x138}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x41, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000580)={'dvmrp1\x00', 0x1}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}]}, 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x4001) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000100)=0x7, 0x4) syz_emit_ethernet(0x97, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58f00610600fe8000000000000000000000000000aafe8000000000000000000000000000aa4e244001", @ANYRES32=0x41424344, @ANYBLOB="6002fffd907800"], 0x0) 15.917320549s ago: executing program 2 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa0}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24044021}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.61297101s ago: executing program 32 (id=990): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@private2, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 1.582621436s ago: executing program 33 (id=995): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "ac83c76aa3dbe09c", "73063141659c21fb7d16eee688ca46a5", "f0f30500", "fb577343645483a4"}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c001580050001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008"], 0x34}}, 0x4008000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x40, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x85}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x34c, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0411c587da2bd5fae7c63648456c75d2"}]}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fbc446ba9dd232c83c90ce43211acea92cdf412961e46e2d8e74302868c6021b"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x120, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "79d33c6b98bab3e9590e1d711227b3d180e0e919e0f6590221df17bd1ed10305"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xa197479586f01d6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e2f161d103af83c65f4e54d4686feedd"}]}, @NL802154_ATTR_SEC_KEY={0x1a0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000001}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "719cbaa56b101da63581b9abe0a987bb"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "03f8daca1be6634bcf1138cc934929e8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0xf0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1d978a9fcd39c59e}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x340c}]}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 1.532677754s ago: executing program 34 (id=994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000f8ac00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x218, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "047e5b954555be3df259b0e9caf818b2897ba8d814552b26ba614968"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x34, 0x3, "362035bd935a82532f0bdafc41c8c4faf78465193adbcbe1cff47b0289be52630640e47373de996695ddd01367ab2d72"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x25}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd94}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "ba34dec2003631b709abfbf08b602a55a964dcd03660d5e7"}}, @TIPC_NLA_NODE_ID={0x7d, 0x3, "b74fba36efa7aaffc0cdd9b954a87db738c880776e17a82c126e6fa0e92f00b4b26efcd12804df549109a0d8b10dec8de71b6ec40b899c970ea4077eb3c358cc9af46c6c3935c7466d39622b51c1d7d4b6bc1680f81723f46ce030d025b2009f98adacb0d58c6e8b5d53dd949e5682737b59671c10388b2c6e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40800}, 0x54) 1.067361387s ago: executing program 35 (id=998): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80402100c300010008042bb700000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001022010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b0200000000001c0012800b00010067656e65766500000c000280060005004e1f0000"], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x3, 0x4, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000000c0), 0x12) pread64(r12, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 36 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x9c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa0}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24044021}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): 584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.035299][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.066634][ T5853] veth0_vlan: entered promiscuous mode [ 78.073260][ T5866] Bluetooth: hci3: command tx timeout [ 78.078970][ T5860] Bluetooth: hci1: command tx timeout [ 78.091941][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.115698][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.139315][ T5977] IPVS: set_ctl: invalid protocol: 135 172.30.0.3:20002 [ 78.145126][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.155797][ T5866] Bluetooth: hci4: command tx timeout [ 78.156114][ T5860] Bluetooth: hci2: command tx timeout [ 78.184067][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.240715][ T73] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.249752][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.251135][ T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.271182][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.282472][ T5853] veth1_vlan: entered promiscuous mode [ 78.302354][ T73] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.314387][ T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.513661][ T5983] "syz.3.4" (5983) uses obsolete ecb(arc4) skcipher [ 78.530891][ T5853] veth0_macvtap: entered promiscuous mode [ 78.543473][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.551949][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.637963][ T5853] veth1_macvtap: entered promiscuous mode [ 78.681339][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.698088][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.720692][ T1164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.730148][ T1164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.743861][ T1164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.753742][ T1164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.307756][ T5983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.314428][ T5983] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 79.327930][ T5983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.334303][ T5983] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 79.346019][ T5983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.354011][ T5983] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 79.365870][ T5983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.372347][ T5983] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 79.384131][ T5983] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.391900][ T5983] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 79.496482][ T4584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.508039][ T4584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.538721][ T5981] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 79.546618][ T5981] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8'. [ 79.563294][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.599446][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.692055][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.701331][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.785893][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.795604][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.815684][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.848893][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.865449][ T6004] tipc: Started in network mode [ 79.875407][ T6004] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 79.896358][ T6004] tipc: Enabling of bearer rejected, failed to enable media [ 79.966604][ T6010] tipc: Started in network mode [ 79.977145][ T6010] tipc: Node identity b6d81c9deb5a, cluster identity 4711 [ 79.986809][ T6010] tipc: Enabled bearer , priority 0 [ 80.013052][ T6010] syzkaller0: entered promiscuous mode [ 80.029943][ T6010] syzkaller0: entered allmulticast mode [ 80.076571][ T6012] tipc: Started in network mode [ 80.082891][ T6012] tipc: Node identity 6aaf73fa15fb, cluster identity 4711 [ 80.109472][ T6012] tipc: Enabled bearer , priority 0 [ 80.159789][ T6012] syzkaller0: entered promiscuous mode [ 80.165410][ T6012] syzkaller0: entered allmulticast mode [ 80.176004][ T6023] netlink: 240 bytes leftover after parsing attributes in process `syz.0.15'. [ 80.203833][ T6014] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 80.220530][ T6010] tipc: Resetting bearer [ 80.243002][ T6009] tipc: Resetting bearer [ 80.273855][ T6009] tipc: Disabling bearer [ 80.317321][ T6012] syzkaller0: mtu less than device minimum [ 80.350898][ T6011] tipc: Resetting bearer [ 80.370302][ T6011] tipc: Disabling bearer [ 80.426016][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.473629][ T6033] vxcan3: entered allmulticast mode [ 80.563882][ T6042] netlink: 'syz.4.20': attribute type 1 has an invalid length. [ 80.810190][ T6035] syz_tun: entered allmulticast mode [ 80.862636][ T6050] dvmrp8: entered allmulticast mode [ 80.964972][ T6034] syz_tun: left allmulticast mode [ 81.031115][ T6034] dvmrp8: left allmulticast mode [ 81.116198][ T6061] pim6reg1: entered promiscuous mode [ 81.125332][ T6061] pim6reg1: entered allmulticast mode [ 81.173474][ T6062] Zero length message leads to an empty skb [ 81.260312][ T6064] netlink: 'syz.2.25': attribute type 13 has an invalid length. [ 81.272307][ T6066] netlink: 'syz.0.26': attribute type 21 has an invalid length. [ 81.324017][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26'. [ 81.459559][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 81.492333][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.500649][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.651175][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.667378][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.842098][ T6066] netlink: 132 bytes leftover after parsing attributes in process `syz.0.26'. [ 81.874681][ T6070] bridge0: entered promiscuous mode [ 81.895456][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.904950][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.974698][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.001191][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.193571][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 82.239229][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 82.241143][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 82.255527][ T6088] chnl_net:caif_netlink_parms(): no params data found [ 82.283007][ T6085] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 82.291023][ T6085] netlink: 10 bytes leftover after parsing attributes in process `syz.0.29'. [ 82.335140][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 82.352812][ T6094] bridge_slave_1: left allmulticast mode [ 82.359578][ T6094] bridge_slave_1: left promiscuous mode [ 82.366401][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.380681][ T6094] bridge_slave_0: left allmulticast mode [ 82.390219][ T6094] bridge_slave_0: left promiscuous mode [ 82.396294][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.538969][ T1164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.551148][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.568915][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.596545][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.011269][ T6113] netlink: 'syz.2.37': attribute type 4 has an invalid length. [ 83.044078][ T6112] netlink: 'syz.2.37': attribute type 4 has an invalid length. [ 83.397817][ T6131] dvmrp8: entered allmulticast mode [ 83.567341][ T6141] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 83.735240][ T6156] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.014311][ T6168] geneve2: entered promiscuous mode [ 84.030276][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.051764][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.090271][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.121128][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.232273][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.258463][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.277638][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.293523][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.307043][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.354002][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.377772][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.387204][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.730606][ T6198] __nla_validate_parse: 7 callbacks suppressed [ 84.730622][ T6198] netlink: 596 bytes leftover after parsing attributes in process `syz.4.61'. [ 84.733441][ T6193] bridge1: entered promiscuous mode [ 84.760251][ T6193] bridge1: entered allmulticast mode [ 85.442729][ T6222] netlink: 'syz.0.66': attribute type 13 has an invalid length. [ 85.462933][ T6222] netlink: 'syz.0.66': attribute type 17 has an invalid length. [ 85.613952][ T6231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.675738][ T6222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.698103][ T6232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.966923][ T6252] batadv_slave_1: entered promiscuous mode [ 86.083854][ T6256] veth0: entered promiscuous mode [ 86.090214][ T6252] batadv_slave_1: left promiscuous mode [ 86.214052][ T6248] netlink: 'syz.3.72': attribute type 16 has an invalid length. [ 86.223918][ T6248] netlink: 'syz.3.72': attribute type 17 has an invalid length. [ 86.256884][ T6248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.296979][ T6264] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967272. macoff=96 [ 86.327929][ T6256] veth0: left promiscuous mode [ 86.646660][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 86.747665][ T6283] vlan2: entered allmulticast mode [ 86.753019][ T6283] dummy0: entered allmulticast mode [ 86.796207][ T6284] Illegal XDP return value 66 on prog (id 62) dev syz_tun, expect packet loss! [ 86.872650][ T982] cfg80211: failed to load regulatory.db [ 87.005298][ T6292] netlink: 72 bytes leftover after parsing attributes in process `syz.3.85'. [ 87.113908][ T6298] bond0: Unable to set down delay as MII monitoring is disabled [ 87.387544][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 87.535955][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 87.731503][ T6340] netlink: 'syz.2.99': attribute type 27 has an invalid length. [ 87.739787][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'. [ 87.751898][ T6340] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 88.577009][ T6379] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 88.651453][ T6379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.723793][ T6381] ipvlan2: entered allmulticast mode [ 88.733661][ T6381] bond1: entered allmulticast mode [ 88.772236][ T6379] bond1: (slave gretap1): making interface the new active one [ 88.780103][ T6379] gretap1: entered allmulticast mode [ 88.786809][ T6379] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 89.002164][ T6391] veth3: entered promiscuous mode [ 89.007554][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 89.330045][ T6395] infiniband syz!: set active [ 89.334895][ T6395] infiniband syz!: added team_slave_0 [ 89.396935][ T6395] RDS/IB: syz!: added [ 89.404413][ T6395] smc: adding ib device syz! with port count 1 [ 89.414867][ T6395] smc: ib device syz! port 1 has no pnetid [ 89.465538][ T6405] syzkaller1: entered promiscuous mode [ 89.483916][ T6405] syzkaller1: entered allmulticast mode [ 89.992984][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 90.012631][ T6430] geneve3: entered promiscuous mode [ 90.017954][ T6430] geneve3: entered allmulticast mode [ 90.025986][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 43387 - 0 [ 90.041442][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 43387 - 0 [ 90.058970][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 43387 - 0 [ 90.077958][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 43387 - 0 [ 90.329789][ T6437] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 90.338694][ T6437] netlink: 144 bytes leftover after parsing attributes in process `syz.2.128'. [ 90.355320][ T6437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.128'. [ 90.721124][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 90.998204][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.133'. [ 91.676695][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 91.715197][ T6470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'. [ 91.842883][ T6470] bond2: entered promiscuous mode [ 91.849137][ T6470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.202613][ T6487] netlink: 164548 bytes leftover after parsing attributes in process `syz.3.142'. [ 93.254692][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 93.265053][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 94.142168][ T6524] IPVS: Error joining to the multicast group [ 94.734352][ T6553] syzkaller1: entered promiscuous mode [ 94.740241][ T6553] syzkaller1: entered allmulticast mode [ 95.042254][ T6544] __nla_validate_parse: 6 callbacks suppressed [ 95.042272][ T6544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.158'. [ 95.162595][ T6544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.158'. [ 95.250259][ T6544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.158'. [ 95.360047][ T6544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.158'. [ 95.784604][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 95.813260][ T6564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.953528][ T6564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.988701][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 96.065808][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 96.115337][ T6564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.163913][ T5954] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.175438][ T5954] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.239044][ T5954] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.281246][ T5954] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.359921][ T6564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.386365][ T6588] nbd: socks must be embedded in a SOCK_ITEM attr [ 96.415851][ T6586] pimreg: entered allmulticast mode [ 96.431866][ T6588] netlink: 348 bytes leftover after parsing attributes in process `syz.2.169'. [ 96.436948][ T6586] dvmrp8: entered allmulticast mode [ 96.566091][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 96.607771][ T4584] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.729004][ T4584] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.737505][ T4584] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.786165][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.083850][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'. [ 97.519563][ T6616] bridge_slave_1: left allmulticast mode [ 97.529684][ T6616] bridge_slave_1: left promiscuous mode [ 97.535501][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.546562][ T6616] bridge_slave_0: left allmulticast mode [ 97.552622][ T6616] bridge_slave_0: left promiscuous mode [ 97.559619][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.682949][ T6622] tipc: Enabled bearer , priority 0 [ 97.724943][ T6618] syzkaller0: entered promiscuous mode [ 97.731301][ T6618] syzkaller0: entered allmulticast mode [ 97.806313][ T6618] tipc: Resetting bearer [ 97.922519][ T6617] tipc: Resetting bearer [ 97.959320][ T6617] tipc: Disabling bearer [ 98.373493][ T6646] tipc: Enabled bearer , priority 14 [ 98.453050][ T6655] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 98.503080][ T6655] team0: Port device geneve0 added [ 98.605982][ T6662] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20002 [ 99.479814][ T5919] tipc: Node number set to 4227858433 [ 100.365557][ T6748] __nla_validate_parse: 5 callbacks suppressed [ 100.365573][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 100.732736][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 100.765035][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 101.957438][ T6803] netlink: 152 bytes leftover after parsing attributes in process `syz.4.212'. [ 101.982100][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.212'. [ 101.994800][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.212'. [ 102.278541][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 102.746133][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.220'. [ 104.450983][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 104.467718][ T6889] bridge_slave_1: left allmulticast mode [ 104.484701][ T6889] bridge_slave_1: left promiscuous mode [ 104.490908][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.519704][ T6889] bridge_slave_0: left allmulticast mode [ 104.525558][ T6889] bridge_slave_0: left promiscuous mode [ 104.562801][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.921395][ T6907] netlink: 'syz.4.237': attribute type 13 has an invalid length. [ 104.931065][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 104.996375][ T6907] netlink: 'syz.4.237': attribute type 13 has an invalid length. [ 104.996418][ T1164] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.025236][ T1164] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.053079][ T1164] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.066118][ T1164] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.076959][ T6907] tipc: Enabling of bearer rejected, failed to enable media [ 105.129778][ T6914] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 105.201906][ T6919] warning: `syz.2.241' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.385445][ T6928] __nla_validate_parse: 2 callbacks suppressed [ 105.385464][ T6928] netlink: 56 bytes leftover after parsing attributes in process `syz.2.245'. [ 105.505360][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 106.550600][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 106.976863][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.255'. [ 106.999389][ T6967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.255'. [ 107.059439][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.073812][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.255'. [ 107.137164][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.241235][ T6970] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 107.269710][ T6971] vxcan1 speed is unknown, defaulting to 1000 [ 107.288070][ T6971] vxcan1 speed is unknown, defaulting to 1000 [ 107.299350][ T6971] vxcan1 speed is unknown, defaulting to 1000 [ 107.537850][ T6971] infiniband syz2: set down [ 107.542535][ T6971] infiniband syz2: added vxcan1 [ 107.554582][ T5958] vxcan1 speed is unknown, defaulting to 1000 [ 107.597205][ T6971] RDS/IB: syz2: added [ 107.601401][ T6971] smc: adding ib device syz2 with port count 1 [ 107.607688][ T6971] smc: ib device syz2 port 1 has no pnetid [ 107.615099][ T6971] vxcan1 speed is unknown, defaulting to 1000 [ 107.788461][ T982] vxcan1 speed is unknown, defaulting to 1000 [ 107.941001][ T6971] vxcan1 speed is unknown, defaulting to 1000 [ 108.172719][ T6984] tipc: Started in network mode [ 108.177647][ T6984] tipc: Node identity 56b2a518946d, cluster identity 4711 [ 108.198664][ T6984] tipc: Enabled bearer , priority 0 [ 108.301125][ T6994] netlink: 264 bytes leftover after parsing attributes in process `syz.3.264'. [ 108.315689][ T6990] syzkaller0: entered promiscuous mode [ 108.328477][ T6990] syzkaller0: entered allmulticast mode [ 108.334202][ T6994] openvswitch: netlink: Flow key attr not present in new flow. [ 108.343156][ T6990] tipc: Resetting bearer [ 108.362018][ T6994] netlink: 264 bytes leftover after parsing attributes in process `syz.3.264'. [ 108.372398][ T6994] openvswitch: netlink: Flow key attr not present in new flow. [ 108.379584][ T6971] vxcan1 speed is unknown, defaulting to 1000 [ 108.410943][ T6983] tipc: Resetting bearer [ 109.248494][ T5912] tipc: Node number set to 3269436696 [ 109.544950][ T6983] tipc: Disabling bearer [ 109.571925][ T6971] vxcan1 speed is unknown, defaulting to 1000 [ 109.687637][ T7010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.821198][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 109.956982][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'. [ 110.178980][ T6971] vxcan1 speed is unknown, defaulting to 1000 [ 110.454393][ T7032] netlink: 'syz.3.274': attribute type 3 has an invalid length. [ 110.462406][ T7032] __nla_validate_parse: 66 callbacks suppressed [ 110.462422][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 110.747209][ T7023] syz.4.269 (7023) used greatest stack depth: 17864 bytes left [ 110.891768][ T7049] nbd: must specify at least one socket [ 110.899273][ T7049] nbd: must specify at least one socket [ 111.120736][ T7065] trusted_key: syz.2.283 sent an empty control message without MSG_MORE. [ 111.189695][ T7069] netlink: 'syz.2.283': attribute type 3 has an invalid length. [ 111.472055][ T982] IPVS: starting estimator thread 0... [ 111.481582][ T7078] netlink: 'syz.0.287': attribute type 30 has an invalid length. [ 111.590704][ T7079] IPVS: using max 27 ests per chain, 64800 per kthread [ 111.605529][ T7067] vxcan1 speed is unknown, defaulting to 1000 [ 111.761191][ T7085] tipc: Enabled bearer , priority 0 [ 111.991399][ T7093] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 112.018769][ T7093] team0: Cannot enslave team device to itself [ 112.070685][ T7095] vlan2: entered allmulticast mode [ 112.319272][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 113.021963][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 113.048697][ T30] audit: type=1804 audit(1758439665.710:2): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.296" name="/newroot/57/cgroup.controllers" dev="tmpfs" ino=310 res=1 errno=0 [ 113.140079][ T30] audit: type=1800 audit(1758439665.710:3): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.296" name="cgroup.controllers" dev="tmpfs" ino=310 res=0 errno=0 [ 113.718048][ T7129] vxcan1 speed is unknown, defaulting to 1000 [ 113.950015][ T7170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.308'. [ 114.162272][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 114.202779][ T7177] bond3: entered promiscuous mode [ 114.209533][ T7177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.221931][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 114.268900][ T7141] vxcan1 speed is unknown, defaulting to 1000 [ 114.350397][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 114.352289][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'. [ 115.417755][ T7199] netlink: 'syz.0.315': attribute type 8 has an invalid length. [ 115.452798][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 115.475059][ T7199] bond0: entered promiscuous mode [ 115.482632][ T7199] bond_slave_0: entered promiscuous mode [ 115.490281][ T7199] bond_slave_1: entered promiscuous mode [ 115.521945][ T7199] bond0: left promiscuous mode [ 115.526865][ T7199] bond_slave_0: left promiscuous mode [ 115.528658][ T7207] netlink: 'syz.0.315': attribute type 8 has an invalid length. [ 115.534717][ T7199] bond_slave_1: left promiscuous mode [ 115.554449][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 115.573772][ T7207] bond0: entered promiscuous mode [ 115.579034][ T7207] bond_slave_0: entered promiscuous mode [ 115.586826][ T7207] bond_slave_1: entered promiscuous mode [ 115.603773][ T7207] bond0: left promiscuous mode [ 115.613800][ T7207] bond_slave_0: left promiscuous mode [ 115.623073][ T7207] bond_slave_1: left promiscuous mode [ 116.004055][ T7236] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 116.009574][ T7242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.325'. [ 116.173833][ T7252] tipc: Enabled bearer , priority 0 [ 116.193095][ T7252] syzkaller0: entered promiscuous mode [ 116.199135][ T7252] syzkaller0: entered allmulticast mode [ 116.237985][ T7254] netlink: 168 bytes leftover after parsing attributes in process `syz.0.330'. [ 116.251437][ T7252] tipc: Resetting bearer [ 116.277826][ T7251] tipc: Resetting bearer [ 116.316395][ T7251] tipc: Disabling bearer [ 116.383782][ T7263] netlink: 'syz.4.331': attribute type 13 has an invalid length. [ 116.429627][ T7263] netlink: 'syz.4.331': attribute type 17 has an invalid length. [ 116.597518][ T7263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.717768][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.126205][ T7290] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 117.169894][ T7268] vxcan1 speed is unknown, defaulting to 1000 [ 117.181746][ T7296] Bluetooth: MGMT ver 1.23 [ 117.727708][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 117.737150][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.346'. [ 117.754705][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 117.764432][ T7321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.346'. [ 117.774960][ T7321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.346'. [ 117.795746][ T7321] netlink: 32 bytes leftover after parsing attributes in process `syz.4.346'. [ 117.826346][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 118.024147][ T7334] block nbd0: must specify backend [ 118.041606][ T7334] block nbd4: not configured, cannot reconfigure [ 118.096313][ T7339] netlink: 'syz.0.350': attribute type 21 has an invalid length. [ 118.520124][ T7352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.104724][ T7374] netlink: 'syz.4.360': attribute type 10 has an invalid length. [ 119.134808][ T7374] team0: Port device dummy0 added [ 119.547736][ T7383] vxcan1 speed is unknown, defaulting to 1000 [ 119.765271][ T7393] netlink: 'syz.0.365': attribute type 5 has an invalid length. [ 120.156121][ T7404] netlink: 'syz.4.369': attribute type 13 has an invalid length. [ 120.165118][ T7404] netlink: 'syz.4.369': attribute type 11 has an invalid length. [ 120.392063][ T7409] syzkaller1: entered promiscuous mode [ 120.397606][ T7409] syzkaller1: entered allmulticast mode [ 120.693720][ T7423] __nla_validate_parse: 14 callbacks suppressed [ 120.693738][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.374'. [ 120.731806][ T7423] netlink: 48 bytes leftover after parsing attributes in process `syz.2.374'. [ 120.999931][ T7445] syzkaller1: entered promiscuous mode [ 121.010225][ T7445] syzkaller1: entered allmulticast mode [ 121.103093][ T7456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.245475][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.386'. [ 121.264867][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.386'. [ 121.320536][ T7466] netlink: 'syz.2.388': attribute type 10 has an invalid length. [ 121.392646][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'. [ 121.393277][ T7473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.388'. [ 121.433368][ T7473] netlink: 'syz.2.388': attribute type 12 has an invalid length. [ 121.590549][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 122.002077][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 122.401956][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 122.413987][ T7506] netlink: 'syz.0.397': attribute type 5 has an invalid length. [ 122.422867][ T7507] netlink: 'syz.0.397': attribute type 5 has an invalid length. [ 122.439105][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 122.612073][ T7522] netlink: 96 bytes leftover after parsing attributes in process `syz.0.400'. [ 123.004350][ T7530] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.220404][ T7530] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.312161][ T7530] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.441075][ T7530] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.488268][ T7547] netlink: 'syz.3.408': attribute type 7 has an invalid length. [ 123.500299][ T7547] netlink: 'syz.3.408': attribute type 8 has an invalid length. [ 123.573739][ T73] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.600498][ T73] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.632707][ T73] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.660374][ T73] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.827566][ T7559] netlink: 'syz.3.412': attribute type 1 has an invalid length. [ 124.098068][ T5954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.118151][ T5954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.445583][ T7565] vxcan1 speed is unknown, defaulting to 1000 [ 124.966602][ T7582] vxcan1 speed is unknown, defaulting to 1000 [ 125.490499][ T7606] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 125.785679][ T7621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.805497][ T7621] __nla_validate_parse: 5 callbacks suppressed [ 125.805516][ T7621] netlink: 11 bytes leftover after parsing attributes in process `syz.3.430'. [ 126.332352][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 126.352020][ T7637] veth1: entered promiscuous mode [ 126.381626][ T7637] netlink: 'syz.3.436': attribute type 8 has an invalid length. [ 126.418754][ T7637] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 126.949661][ T7638] vxcan1 speed is unknown, defaulting to 1000 [ 126.967218][ T7656] netlink: 165 bytes leftover after parsing attributes in process `syz.0.440'. [ 127.218081][ T7665] netlink: 3 bytes leftover after parsing attributes in process `syz.0.442'. [ 127.573146][ T7649] vxcan1 speed is unknown, defaulting to 1000 [ 127.615640][ T7671] netlink: 76 bytes leftover after parsing attributes in process `syz.0.444'. [ 127.907271][ T7675] sctp: [Deprecated]: syz.0.446 (pid 7675) Use of int in max_burst socket option deprecated. [ 127.907271][ T7675] Use struct sctp_assoc_value instead [ 128.051424][ T7677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.190977][ T7653] vxcan1 speed is unknown, defaulting to 1000 [ 128.770317][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 130.221539][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 130.242952][ T7734] netlink: 'syz.0.461': attribute type 21 has an invalid length. [ 130.263803][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 130.287430][ T7737] netlink: 'syz.0.461': attribute type 21 has an invalid length. [ 130.304013][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 130.360894][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 130.537157][ T7744] tipc: Enabled bearer , priority 0 [ 130.572935][ T7744] syzkaller0: entered promiscuous mode [ 130.578747][ T7744] syzkaller0: entered allmulticast mode [ 130.671393][ T7744] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 130.690923][ T7752] veth0: entered promiscuous mode [ 130.700227][ T7744] tipc: Resetting bearer [ 130.811867][ T7733] __nla_validate_parse: 20 callbacks suppressed [ 130.811884][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 130.828175][ T7755] tipc: Resetting bearer [ 130.853757][ T7755] tipc: Disabling bearer [ 130.895442][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 130.961564][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 131.003334][ T7765] netlink: 'syz.2.469': attribute type 12 has an invalid length. [ 131.010129][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 131.027653][ T7765] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.469'. [ 131.304533][ T7784] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.471'. [ 131.328424][ T7784] openvswitch: netlink: Flow key attr not present in new flow. [ 131.589158][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 131.611215][ T7798] netlink: del zone limit has 8 unknown bytes [ 131.632678][ T7797] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.477'. [ 131.679520][ T7797] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.477'. [ 131.692350][ T7797] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.477'. [ 131.844767][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.856286][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.871406][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.879856][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.889833][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.031287][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.181523][ T7820] delete_channel: no stack [ 132.200182][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.343863][ T7804] vxcan1 speed is unknown, defaulting to 1000 [ 132.490980][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.691405][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.807922][ T7852] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.820565][ T7852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.963255][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.010842][ T1164] bridge_slave_1: left allmulticast mode [ 133.025750][ T1164] bridge_slave_1: left promiscuous mode [ 133.040555][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.053487][ T30] audit: type=1800 audit(1758439685.720:4): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.490" name="memory.events" dev="tmpfs" ino=565 res=0 errno=0 [ 133.081330][ T1164] bridge_slave_0: left allmulticast mode [ 133.089364][ T1164] bridge_slave_0: left promiscuous mode [ 133.097982][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.542724][ T7863] block nbd4: not configured, cannot reconfigure [ 133.639264][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.651196][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.665277][ T1164] bond0 (unregistering): Released all slaves [ 133.681517][ T7809] vxcan1 speed is unknown, defaulting to 1000 [ 134.018518][ T5866] Bluetooth: hci1: command tx timeout [ 134.141196][ T7849] lo speed is unknown, defaulting to 1000 [ 134.207844][ T7849] lo speed is unknown, defaulting to 1000 [ 134.290690][ T7849] lo speed is unknown, defaulting to 1000 [ 134.440305][ T5951] IPVS: starting estimator thread 0... [ 134.550920][ T7884] IPVS: using max 28 ests per chain, 67200 per kthread [ 134.740924][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 134.848722][ T7849] infiniband syz0: set active [ 134.854543][ T7849] infiniband syz0: added lo [ 134.883133][ T7849] syz0: rxe_create_cq: returned err = -12 [ 134.893123][ T982] lo speed is unknown, defaulting to 1000 [ 134.904764][ T7849] infiniband syz0: Couldn't create ib_mad CQ [ 134.978645][ T7849] infiniband syz0: Couldn't open port 1 [ 135.149646][ T7849] RDS/IB: syz0: added [ 135.160429][ T7849] smc: adding ib device syz0 with port count 1 [ 135.180765][ T7849] smc: ib device syz0 port 1 has no pnetid [ 135.299534][ T982] lo speed is unknown, defaulting to 1000 [ 135.343984][ T7896] veth0_macvtap: left promiscuous mode [ 135.425452][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.434251][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.441800][ T7809] bridge_slave_0: entered allmulticast mode [ 135.451153][ T7809] bridge_slave_0: entered promiscuous mode [ 135.458678][ T7849] lo speed is unknown, defaulting to 1000 [ 135.460534][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.471888][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.479358][ T7809] bridge_slave_1: entered allmulticast mode [ 135.487721][ T7809] bridge_slave_1: entered promiscuous mode [ 135.655407][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.676828][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.767108][ T7809] team0: Port device team_slave_0 added [ 135.796123][ T7809] team0: Port device team_slave_1 added [ 135.891539][ T7849] lo speed is unknown, defaulting to 1000 [ 135.892221][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.904983][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.933420][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.002664][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.020969][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.047796][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.070542][ T5866] Bluetooth: hci1: command tx timeout [ 136.196702][ T7809] hsr_slave_0: entered promiscuous mode [ 136.215573][ T7809] hsr_slave_1: entered promiscuous mode [ 136.222552][ T7809] debugfs: 'hsr0' already exists in 'hsr' [ 136.228615][ T7809] Cannot create hsr debugfs directory [ 136.241952][ T7849] lo speed is unknown, defaulting to 1000 [ 136.547114][ T7913] vlan1: entered allmulticast mode [ 136.573255][ T7913] batadv0: entered allmulticast mode [ 136.610910][ T7913] bond_slave_0: entered promiscuous mode [ 136.616823][ T7913] bond_slave_1: entered promiscuous mode [ 136.622924][ T7913] macvlan0: entered promiscuous mode [ 136.628252][ T7913] bond0: entered promiscuous mode [ 136.634250][ T7913] macvlan0: entered allmulticast mode [ 136.640062][ T7913] bond0: entered allmulticast mode [ 136.645299][ T7913] bond_slave_0: entered allmulticast mode [ 136.651191][ T7913] bond_slave_1: entered allmulticast mode [ 136.658214][ T7913] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 136.666539][ T7913] bond0: left allmulticast mode [ 136.671492][ T7913] bond_slave_0: left allmulticast mode [ 136.676960][ T7913] bond_slave_1: left allmulticast mode [ 136.682699][ T7913] bond0: left promiscuous mode [ 136.688030][ T7913] bond_slave_0: left promiscuous mode [ 136.693509][ T7913] bond_slave_1: left promiscuous mode [ 136.717092][ T7849] lo speed is unknown, defaulting to 1000 [ 136.957033][ T7926] __nla_validate_parse: 71 callbacks suppressed [ 136.957051][ T7926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.509'. [ 136.977049][ T7923] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 137.093534][ T7923] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 137.102677][ T7849] lo speed is unknown, defaulting to 1000 [ 137.340469][ T7809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.362323][ T7809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.420124][ T7809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.461679][ T7809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.555067][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'. [ 137.612192][ T7849] lo speed is unknown, defaulting to 1000 [ 137.647413][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.699435][ T7809] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.723857][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.731198][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.772956][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.780221][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.844914][ T7809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.073605][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 138.161163][ T5866] Bluetooth: hci1: command tx timeout [ 138.163321][ T7849] lo speed is unknown, defaulting to 1000 [ 138.333111][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.368980][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'. [ 138.406191][ T7979] bond0: entered promiscuous mode [ 138.418499][ T7979] bond_slave_0: entered promiscuous mode [ 138.424403][ T7979] bond_slave_1: entered promiscuous mode [ 138.450145][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'. [ 138.469522][ T7979] bond0: left promiscuous mode [ 138.478440][ T7979] bond_slave_0: left promiscuous mode [ 138.484077][ T7979] bond_slave_1: left promiscuous mode [ 138.566204][ T7978] bond0: entered promiscuous mode [ 138.571743][ T7978] bond_slave_0: entered promiscuous mode [ 138.577647][ T7978] bond_slave_1: entered promiscuous mode [ 138.592905][ T7978] bond0: left promiscuous mode [ 138.597805][ T7978] bond_slave_0: left promiscuous mode [ 138.626553][ T7978] bond_slave_1: left promiscuous mode [ 138.671320][ T7889] vxcan1 speed is unknown, defaulting to 1000 [ 138.872571][ T7989] syzkaller0: entered promiscuous mode [ 138.908698][ T7989] syzkaller0: entered allmulticast mode [ 140.231750][ T5866] Bluetooth: hci1: command tx timeout [ 140.447549][ T7809] veth0_vlan: entered promiscuous mode [ 140.539168][ T7999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.551084][ T7999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.561143][ T7999] bond0 (unregistering): Released all slaves [ 140.617020][ T1164] hsr_slave_0: left promiscuous mode [ 140.626881][ T1164] hsr_slave_1: left promiscuous mode [ 140.635496][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.643843][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.655406][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.663198][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.735477][ T1164] veth1_macvtap: left promiscuous mode [ 140.765236][ T1164] veth0_macvtap: left promiscuous mode [ 140.771388][ T8013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.532'. [ 140.783530][ T1164] veth1_vlan: left promiscuous mode [ 140.799940][ T1164] veth0_vlan: left promiscuous mode [ 140.913076][ T8020] netlink: 224 bytes leftover after parsing attributes in process `syz.0.532'. [ 141.543673][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 141.576788][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 141.956831][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'. [ 141.965991][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'. [ 141.975623][ T8018] netlink: 'syz.0.532': attribute type 4 has an invalid length. [ 142.067419][ T7809] veth1_vlan: entered promiscuous mode [ 142.308424][ T5866] Bluetooth: hci1: command tx timeout [ 142.468346][ T7809] veth0_macvtap: entered promiscuous mode [ 142.501576][ T7809] veth1_macvtap: entered promiscuous mode [ 142.505245][ T8056] openvswitch: netlink: IP tunnel dst address not specified [ 142.635452][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.676082][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.702647][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.722713][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.778286][ T8070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.545'. [ 142.831956][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.845330][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.027655][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.040811][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.173473][ T5954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.228625][ T5954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.365010][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 143.647218][ T8052] vxcan1 speed is unknown, defaulting to 1000 [ 143.667468][ T8090] Bluetooth: MGMT ver 1.23 [ 143.752488][ T8090] geneve0: entered promiscuous mode [ 143.778520][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 143.786956][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 143.811785][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 143.829036][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.112110][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 144.132993][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 144.253561][ T8052] lo speed is unknown, defaulting to 1000 [ 144.351757][ T8099] vxcan1 speed is unknown, defaulting to 1000 [ 144.643489][ T8099] lo speed is unknown, defaulting to 1000 [ 145.001555][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.560'. [ 145.035659][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 145.864555][ T8141] openvswitch: netlink: IPv6 tunnel dst address is zero [ 145.896822][ T8141] netlink: 104 bytes leftover after parsing attributes in process `syz.2.564'. [ 146.602267][ T8172] tun0: tun_chr_ioctl cmd 1074025675 [ 146.609116][ T8170] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 146.633727][ T8172] tun0: persist enabled [ 146.637931][ T8174] tun0: tun_chr_ioctl cmd 1074025675 [ 146.644371][ T8174] tun0: persist disabled [ 146.653830][ T8177] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 146.798759][ T8179] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 146.817213][ T8179] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 146.965157][ T8170] gretap1: entered promiscuous mode [ 146.993152][ T8189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.574'. [ 147.136272][ T8193] pim6reg1: entered promiscuous mode [ 147.141993][ T8193] pim6reg1: entered allmulticast mode [ 147.590348][ T8231] netlink: 'syz.0.585': attribute type 3 has an invalid length. [ 147.598028][ T8231] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 147.625780][ T8231] netlink: 64 bytes leftover after parsing attributes in process `syz.0.585'. [ 147.635713][ T8231] NCSI netlink: No device for ifindex 0 [ 147.703115][ T8239] openvswitch: netlink: Flow key attr not present in new flow. [ 147.890293][ T8233] vxcan1 speed is unknown, defaulting to 1000 [ 148.216998][ T8265] tipc: Enabling of bearer rejected, already enabled [ 148.311215][ T8233] lo speed is unknown, defaulting to 1000 [ 148.319740][ T8269] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 149.456782][ T8284] vxcan1 speed is unknown, defaulting to 1000 [ 150.106547][ T8284] lo speed is unknown, defaulting to 1000 [ 151.094864][ T8321] vxcan1 speed is unknown, defaulting to 1000 [ 151.806540][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 151.940080][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 152.031311][ T8328] vxcan1 speed is unknown, defaulting to 1000 [ 152.311415][ T8328] lo speed is unknown, defaulting to 1000 [ 152.318417][ T8319] vxcan1 speed is unknown, defaulting to 1000 [ 152.809989][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.615'. [ 152.860482][ T8370] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 152.884346][ T8370] netlink: 'syz.3.615': attribute type 2 has an invalid length. [ 152.944306][ T8321] lo speed is unknown, defaulting to 1000 [ 153.071660][ T8383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.619'. [ 153.174752][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 153.385272][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 153.411066][ T8319] lo speed is unknown, defaulting to 1000 [ 155.203546][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'. [ 155.215333][ T8422] netlink: 76 bytes leftover after parsing attributes in process `syz.3.630'. [ 155.226675][ T8420] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 155.237287][ T8420] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 155.323369][ T8422] bond0: (slave bond_slave_0): Releasing backup interface [ 155.359600][ T8422] bond0: (slave bond_slave_1): Releasing backup interface [ 155.401702][ T8422] team0: Port device team_slave_0 removed [ 155.467134][ T8422] team0: Port device team_slave_1 removed [ 155.506797][ T8422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.538970][ T8422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.563276][ T8422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.574295][ T8422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.592324][ T8422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.626644][ T8442] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 155.670660][ T5951] syz!: Port: 1 Link DOWN [ 155.841385][ T8447] bridge0: port 3(syz_tun) entered blocking state [ 155.849943][ T8447] bridge0: port 3(syz_tun) entered disabled state [ 155.857775][ T8447] syz_tun: entered allmulticast mode [ 155.869475][ T8447] syz_tun: entered promiscuous mode [ 155.926978][ T8450] tipc: Enabling of bearer rejected, failed to enable media [ 156.309023][ T8470] bridge0: port 3(syz_tun) entered blocking state [ 156.315663][ T8470] bridge0: port 3(syz_tun) entered forwarding state [ 156.354439][ T8470] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.371097][ T8470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.464454][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.644'. [ 156.474587][ T8478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.486546][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 156.499324][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 156.570258][ T8484] delete_channel: no stack [ 156.572322][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 156.693906][ T8488] ip6gretap0: entered promiscuous mode [ 156.704244][ T8488] macsec1: entered promiscuous mode [ 156.715141][ T8488] macsec1: entered allmulticast mode [ 156.721471][ T8488] ip6gretap0: entered allmulticast mode [ 156.781234][ T8494] sctp: [Deprecated]: syz.2.649 (pid 8494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.781234][ T8494] Use struct sctp_sack_info instead [ 157.148019][ T8527] netlink: 'syz.1.659': attribute type 13 has an invalid length. [ 157.157495][ T8525] netlink: 'syz.0.658': attribute type 5 has an invalid length. [ 157.166330][ T8527] netlink: 'syz.1.659': attribute type 17 has an invalid length. [ 157.227125][ T8527] gretap0: refused to change device tx_queue_len [ 157.239249][ T8527] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 157.420253][ T8546] bridge0: entered promiscuous mode [ 157.435911][ T8546] macvtap1: entered allmulticast mode [ 157.454290][ T8546] bridge0: entered allmulticast mode [ 157.920467][ T8561] hsr_slave_1 (unregistering): left promiscuous mode [ 157.994739][ T8575] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 158.201975][ T8582] __nla_validate_parse: 8 callbacks suppressed [ 158.201994][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 158.307236][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.675'. [ 158.478161][ T8600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.522185][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 158.536112][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 158.545909][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 158.593931][ T8610] netlink: 136 bytes leftover after parsing attributes in process `syz.3.681'. [ 158.930187][ T8634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.937957][ T8634] IPv6: NLM_F_CREATE should be set when creating new route [ 158.945263][ T8634] IPv6: NLM_F_CREATE should be set when creating new route [ 158.956968][ T8634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.973876][ T8623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.019575][ T8633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.688'. [ 159.114943][ T8643] netlink: 'syz.3.690': attribute type 21 has an invalid length. [ 159.123128][ T8643] netlink: 128 bytes leftover after parsing attributes in process `syz.3.690'. [ 159.132719][ T8643] netlink: 'syz.3.690': attribute type 4 has an invalid length. [ 159.140837][ T8643] netlink: 'syz.3.690': attribute type 5 has an invalid length. [ 159.148973][ T8643] netlink: 3 bytes leftover after parsing attributes in process `syz.3.690'. [ 159.201359][ T8646] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 159.255913][ T8652] netlink: 124 bytes leftover after parsing attributes in process `syz.3.694'. [ 159.273253][ T8653] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 159.292402][ T4584] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 159.293777][ T8646] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.339640][ T8652] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 159.420045][ T5954] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 159.478602][ T8652] nbd3: detected capacity change from 0 to 63 [ 159.496190][ T8662] block nbd3: NBD_DISCONNECT [ 159.527599][ T8662] block nbd3: Disconnected due to user request. [ 159.544107][ T8662] block nbd3: shutting down sockets [ 159.697068][ T8650] vxcan1 speed is unknown, defaulting to 1000 [ 159.894299][ T8677] netlink: 'syz.1.700': attribute type 74 has an invalid length. [ 159.904444][ T8650] lo speed is unknown, defaulting to 1000 [ 160.611041][ T8723] netlink: 'syz.1.709': attribute type 10 has an invalid length. [ 160.720339][ T8728] netlink: 'syz.4.711': attribute type 7 has an invalid length. [ 160.778969][ T8732] openvswitch: netlink: nsh attr 7 is out of range max 3 [ 160.787281][ T8732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.877168][ T8727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.987691][ T8741] netlink: 'syz.1.716': attribute type 21 has an invalid length. [ 161.037584][ T8741] netlink: 'syz.1.716': attribute type 21 has an invalid length. [ 161.059915][ T8746] netlink: 'syz.3.714': attribute type 12 has an invalid length. [ 161.952854][ T8754] vxcan1 speed is unknown, defaulting to 1000 [ 162.123382][ T8792] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 162.159259][ T8792] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 162.173655][ T8796] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 162.173963][ T8792] tipc: Resetting bearer [ 162.241554][ T8800] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 162.264030][ T8802] pimreg: entered allmulticast mode [ 162.460474][ T8754] lo speed is unknown, defaulting to 1000 [ 162.497499][ T8815] tipc: Enabled bearer , priority 0 [ 162.511346][ T8815] syzkaller0: entered promiscuous mode [ 162.517097][ T8815] syzkaller0: entered allmulticast mode [ 162.657254][ T8821] tipc: Resetting bearer [ 162.684550][ T8814] tipc: Resetting bearer [ 162.713101][ T8814] tipc: Disabling bearer [ 163.070703][ T8797] pimreg: left allmulticast mode [ 163.221401][ T1164] tipc: Resetting bearer [ 163.415511][ T8843] tipc: Started in network mode [ 163.422644][ T8845] __nla_validate_parse: 41 callbacks suppressed [ 163.422660][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 163.463446][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 163.475649][ T8843] tipc: Node identity 1a715c1ac5e7, cluster identity 4711 [ 163.516829][ T8843] tipc: Enabled bearer , priority 0 [ 163.531649][ T8846] syzkaller0: entered promiscuous mode [ 163.537733][ T8845] netlink: 184 bytes leftover after parsing attributes in process `syz.0.746'. [ 163.547327][ T8846] syzkaller0: entered allmulticast mode [ 163.584912][ T8843] tipc: Resetting bearer [ 163.611152][ T8842] tipc: Resetting bearer [ 163.652243][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.747'. [ 163.674417][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 163.687910][ T8842] tipc: Disabling bearer [ 163.746496][ T8854] batadv_slave_1: entered promiscuous mode [ 163.779415][ T8854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'. [ 163.817119][ T8854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.868576][ T5863] lo speed is unknown, defaulting to 1000 [ 164.120965][ T8850] vxcan1 speed is unknown, defaulting to 1000 [ 164.313167][ T8871] netlink: 256 bytes leftover after parsing attributes in process `syz.3.753'. [ 164.405394][ T8873] sctp: [Deprecated]: syz.3.754 (pid 8873) Use of int in max_burst socket option deprecated. [ 164.405394][ T8873] Use struct sctp_assoc_value instead [ 164.469040][ T8853] vxcan1 speed is unknown, defaulting to 1000 [ 164.469142][ T8850] lo speed is unknown, defaulting to 1000 [ 164.573648][ T8852] batadv_slave_1: left promiscuous mode [ 164.764020][ T8853] lo speed is unknown, defaulting to 1000 [ 164.884750][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.755'. [ 165.196617][ T8890] validate_nla: 1 callbacks suppressed [ 165.196638][ T8890] netlink: 'syz.4.758': attribute type 1 has an invalid length. [ 165.245409][ T8890] netlink: 224 bytes leftover after parsing attributes in process `syz.4.758'. [ 165.306546][ T8890] netlink: 48 bytes leftover after parsing attributes in process `syz.4.758'. [ 165.947717][ T8912] geneve2: entered promiscuous mode [ 166.109568][ T8917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 166.192573][ T8918] block nbd3: server does not support multiple connections per device. [ 166.267961][ T8918] block nbd3: shutting down sockets [ 166.505501][ T8927] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.723562][ T8927] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.952936][ T8927] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.145778][ T8927] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.480071][ T8921] vxcan1 speed is unknown, defaulting to 1000 [ 167.480644][ T73] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.548878][ T73] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.596316][ T73] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.647063][ T5954] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.787615][ T8971] geneve2: entered promiscuous mode [ 167.795113][ T8971] geneve2: entered allmulticast mode [ 168.119657][ T8921] lo speed is unknown, defaulting to 1000 [ 168.151223][ T8975] netlink: 'syz.3.780': attribute type 13 has an invalid length. [ 168.298593][ T8953] vxcan1 speed is unknown, defaulting to 1000 [ 168.441459][ T8999] dvmrp8: entered allmulticast mode [ 168.499733][ T8998] dvmrp8: left allmulticast mode [ 168.596214][ T9009] __nla_validate_parse: 6 callbacks suppressed [ 168.596231][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 168.625082][ T9009] dummy0: entered promiscuous mode [ 168.633940][ T9009] macsec1: entered promiscuous mode [ 168.640651][ T9009] macsec1: entered allmulticast mode [ 168.646220][ T9009] dummy0: entered allmulticast mode [ 168.667190][ T9009] dummy0: left allmulticast mode [ 168.686853][ T9009] dummy0: left promiscuous mode [ 168.702962][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 168.747813][ T8953] lo speed is unknown, defaulting to 1000 [ 169.359406][ T9017] vxcan1 speed is unknown, defaulting to 1000 [ 169.689917][ T9017] lo speed is unknown, defaulting to 1000 [ 169.961905][ T9030] Bluetooth: MGMT ver 1.23 [ 170.452956][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 170.590678][ T9039] netlink: 'syz.4.795': attribute type 13 has an invalid length. [ 170.599928][ T9039] netlink: 'syz.4.795': attribute type 17 has an invalid length. [ 170.639410][ T9039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.841380][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.797'. [ 171.064467][ T9045] netlink: 284 bytes leftover after parsing attributes in process `syz.3.798'. [ 171.499905][ T9055] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 171.634957][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 171.644713][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 171.666307][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 171.666811][ T4584] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.678217][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 171.700126][ T4584] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.709584][ T4584] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.719634][ T4584] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.768185][ T9039] vxcan1 speed is unknown, defaulting to 1000 [ 171.858093][ T9062] netlink: 'syz.1.804': attribute type 3 has an invalid length. [ 171.866326][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 172.233211][ T9076] tipc: Enabling of bearer rejected, failed to enable media [ 172.340317][ T9039] lo speed is unknown, defaulting to 1000 [ 172.349422][ T9047] vxcan1 speed is unknown, defaulting to 1000 [ 172.859865][ T9086] tc_dump_action: action bad kind [ 172.878383][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.903816][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.919997][ T9047] lo speed is unknown, defaulting to 1000 [ 172.967694][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.984804][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.004284][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.025292][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.038822][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.048150][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.370700][ T9118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.997109][ T9135] tap0: tun_chr_ioctl cmd 35108 [ 174.190999][ T9143] __nla_validate_parse: 2 callbacks suppressed [ 174.191016][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.828'. [ 174.235425][ T9112] vxcan1 speed is unknown, defaulting to 1000 [ 174.560320][ T9146] veth1_to_bond: entered allmulticast mode [ 174.569234][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 174.578481][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 174.581974][ T9112] lo speed is unknown, defaulting to 1000 [ 174.685731][ T9147] bond0: (slave bond_slave_1): Releasing backup interface [ 174.762754][ T9147] veth1_to_bond (unregistering): left allmulticast mode [ 176.038512][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.833'. [ 176.083231][ T9156] vxcan1 speed is unknown, defaulting to 1000 [ 176.253974][ T9172] tipc: Enabled bearer , priority 0 [ 176.284419][ T9172] syzkaller0: entered promiscuous mode [ 176.299534][ T9172] syzkaller0: entered allmulticast mode [ 176.397577][ T9172] tipc: Resetting bearer [ 176.417372][ T9177] tipc: Enabling of bearer rejected, already enabled [ 176.491014][ T9181] tipc: Resetting bearer [ 176.540966][ T9181] tipc: Disabling bearer [ 176.767465][ T9156] lo speed is unknown, defaulting to 1000 [ 176.901884][ T9202] syzkaller1: entered promiscuous mode [ 176.907415][ T9202] syzkaller1: entered allmulticast mode [ 177.545312][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.849'. [ 177.640358][ T30] audit: type=1800 audit(1758439730.320:5): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.847" name="memory.events" dev="tmpfs" ino=894 res=0 errno=0 [ 177.698535][ T9223] TCP: TCP_TX_DELAY enabled [ 177.995842][ T9228] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 178.051623][ T9228] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.559110][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.858'. [ 178.569701][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.858'. [ 178.711642][ T9259] tipc: Invalid UDP bearer configuration [ 178.711695][ T9259] tipc: Enabling of bearer rejected, failed to enable media [ 178.923200][ T9259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.860'. [ 178.973577][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 179.577621][ T9259] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 179.624551][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 179.656632][ T9241] vxcan1 speed is unknown, defaulting to 1000 [ 179.687859][ T9285] vlan2: entered allmulticast mode [ 179.694621][ T9285] bridge0: entered allmulticast mode [ 179.711482][ T9285] bridge1: port 1(vlan2) entered blocking state [ 179.731034][ T9285] bridge1: port 1(vlan2) entered disabled state [ 179.751237][ T9285] vlan2: entered promiscuous mode [ 179.756486][ T9285] bridge0: entered promiscuous mode [ 179.817528][ T9287] netlink: 'syz.1.866': attribute type 11 has an invalid length. [ 179.973312][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 180.083407][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'. [ 180.110737][ T9299] pim6reg: entered allmulticast mode [ 180.149944][ T9241] lo speed is unknown, defaulting to 1000 [ 180.189319][ T9268] vxcan1 speed is unknown, defaulting to 1000 [ 180.331210][ T9306] Bluetooth: MGMT ver 1.23 [ 180.400308][ T9306] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 180.418709][ T9305] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 180.451036][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.870'. [ 180.649475][ T9313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.785910][ T9322] tipc: Enabled bearer , priority 0 [ 180.797455][ T9322] syzkaller0: entered promiscuous mode [ 180.803988][ T9322] syzkaller0: entered allmulticast mode [ 180.815832][ T9268] lo speed is unknown, defaulting to 1000 [ 180.830663][ T9274] vxcan1 speed is unknown, defaulting to 1000 [ 181.041645][ T9322] tipc: Resetting bearer [ 181.176410][ T9322] tipc: Resetting bearer [ 181.219196][ T9322] tipc: Disabling bearer [ 181.362636][ T9274] lo speed is unknown, defaulting to 1000 [ 181.645271][ T9315] vxcan1 speed is unknown, defaulting to 1000 [ 182.059104][ T9315] lo speed is unknown, defaulting to 1000 [ 182.437087][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'. [ 182.691038][ T9363] syz_tun: entered allmulticast mode [ 182.717662][ T9363] syz_tun: left allmulticast mode [ 183.223696][ T9373] netlink: 'syz.4.886': attribute type 4 has an invalid length. [ 183.701517][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.889'. [ 183.796024][ T5958] IPVS: starting estimator thread 0... [ 183.910633][ T9391] IPVS: using max 26 ests per chain, 62400 per kthread [ 183.919010][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'. [ 183.940998][ T9394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.892'. [ 183.954376][ T9393] netem: change failed [ 183.994932][ T12] wlan0: Trigger new scan to find an IBSS to join [ 184.173505][ T9407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.894'. [ 184.190053][ T9407] netlink: 34 bytes leftover after parsing attributes in process `syz.3.894'. [ 184.540865][ T9416] delete_channel: no stack [ 184.741003][ T9434] team0: No ports can be present during mode change [ 185.042686][ T9457] tipc: Resetting bearer [ 185.084663][ T9457] tipc: Resetting bearer [ 185.534736][ T9490] __nla_validate_parse: 3 callbacks suppressed [ 185.534757][ T9490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.916'. [ 185.559498][ T9490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.916'. [ 185.631354][ T5863] lo speed is unknown, defaulting to 1000 [ 185.637136][ T5863] syz0: Port: 1 Link DOWN [ 185.650212][ T5863] lo speed is unknown, defaulting to 1000 [ 186.022726][ T9518] unknown channel width for channel at 909000KHz? [ 186.025413][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'. [ 186.656743][ T9559] netlink: 224 bytes leftover after parsing attributes in process `syz.3.934'. [ 186.700850][ T9566] netlink: 36 bytes leftover after parsing attributes in process `syz.2.935'. [ 186.755796][ T9559] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 186.842621][ T9559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.913933][ T9564] bond2: (slave gretap2): making interface the new active one [ 186.939986][ T9564] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 186.951782][ T9570] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 186.961679][ T9570] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 186.991178][ T9526] vxcan1 speed is unknown, defaulting to 1000 [ 187.028608][ T1164] wlan0: Trigger new scan to find an IBSS to join [ 187.075358][ T9579] netlink: 52 bytes leftover after parsing attributes in process `syz.0.939'. [ 187.132692][ T9581] syz_tun: entered allmulticast mode [ 187.138798][ T9581] syz_tun: left allmulticast mode [ 187.183390][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.940'. [ 187.841322][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.863450][ T9591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.176449][ T9591] ip6gretap0: left allmulticast mode [ 188.218591][ T9526] lo speed is unknown, defaulting to 1000 [ 188.228614][ T9575] vxcan1 speed is unknown, defaulting to 1000 [ 188.275242][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.306894][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.338127][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.354652][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.404282][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.439413][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.447967][ T36] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.467051][ T9624] netlink: 'syz.3.947': attribute type 10 has an invalid length. [ 188.468351][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.640805][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.948'. [ 188.650527][ T9627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.948'. [ 188.823589][ T9603] vxcan1 speed is unknown, defaulting to 1000 [ 188.830608][ T9575] lo speed is unknown, defaulting to 1000 [ 189.283149][ T9635] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 189.543003][ T9603] lo speed is unknown, defaulting to 1000 [ 189.785890][ T9645] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 189.909239][ T9620] vxcan1 speed is unknown, defaulting to 1000 [ 189.983483][ T9647] lo: Caught tx_queue_len zero misconfig [ 190.293387][ T9658] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.956'. [ 190.302885][ T9661] batadv_slave_1: entered promiscuous mode [ 190.428603][ T9620] lo speed is unknown, defaulting to 1000 [ 190.722085][ T9677] veth9: entered promiscuous mode [ 190.745074][ T9677] bond0: (slave veth9): Enslaving as an active interface with an up link [ 191.110345][ T9685] batadv_slave_0: entered promiscuous mode [ 191.119391][ T9660] batadv_slave_1: left promiscuous mode [ 191.238157][ T9687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.402101][ T9692] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.530169][ T9692] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.763871][ T9692] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.842948][ T9655] vxcan1 speed is unknown, defaulting to 1000 [ 191.874595][ T9692] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.893619][ T9701] __nla_validate_parse: 1 callbacks suppressed [ 191.893637][ T9701] netlink: 348 bytes leftover after parsing attributes in process `syz.3.966'. [ 191.894982][ T9702] netlink: 348 bytes leftover after parsing attributes in process `syz.3.966'. [ 192.065197][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.126521][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.168254][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.238499][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.357616][ T9655] lo speed is unknown, defaulting to 1000 [ 193.107594][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 193.132069][ T9743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.975'. [ 193.283031][ T9746] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 193.378072][ T9746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.209603][ T9719] vxcan1 speed is unknown, defaulting to 1000 [ 194.405352][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.558850][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.985'. [ 194.587590][ T9719] lo speed is unknown, defaulting to 1000 [ 194.624246][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.987'. [ 194.983572][ T9802] nbd: nbd0 already in use [ 194.989355][ T9802] block nbd0: NBD_DISCONNECT [ 195.019068][ T9802] block nbd0: Send disconnect failed -107 [ 195.029559][ T9802] block nbd0: Disconnected due to user request. [ 195.036649][ T9802] block nbd0: shutting down sockets [ 195.112059][ T9805] bond2: entered promiscuous mode [ 195.126027][ T9805] bond2: entered allmulticast mode [ 195.169217][ T9805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.282178][ T9815] netlink: 96 bytes leftover after parsing attributes in process `syz.4.994'. [ 195.292697][ T9816] ip_vti0: entered promiscuous mode [ 195.299629][ T9816] netlink: 'syz.3.995': attribute type 2 has an invalid length. [ 195.307540][ T9816] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 195.859649][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 196.169932][ T9840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.808893][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.818768][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.827304][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.836195][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.846551][ T5180] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.857069][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.858633][ T5180] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.879262][ T5180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.887329][ T5180] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.895191][ T5180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.994866][ T5857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.004665][ T5857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.015157][ T5857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.030420][ T5857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.038120][ T5857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.219373][ T9846] vxcan1 speed is unknown, defaulting to 1000 [ 211.292569][ T5857] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 211.301993][ T5857] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 211.319475][ T5857] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 211.328910][ T5857] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 211.340665][ T5857] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 211.508126][ T9846] lo speed is unknown, defaulting to 1000 [ 211.509512][ T9844] vxcan1 speed is unknown, defaulting to 1000 [ 211.869249][ T9844] lo speed is unknown, defaulting to 1000 [ 211.869396][ T9849] vxcan1 speed is unknown, defaulting to 1000 [ 212.280231][ T9846] chnl_net:caif_netlink_parms(): no params data found [ 212.387933][ T9851] vxcan1 speed is unknown, defaulting to 1000 [ 212.452351][ T5857] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 212.466412][ T5857] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 212.475264][ T5857] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 212.483307][ T5857] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 212.491115][ T5857] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 212.519744][ T9846] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.527032][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.534411][ T9846] bridge_slave_0: entered allmulticast mode [ 212.542434][ T9846] bridge_slave_0: entered promiscuous mode [ 212.556645][ T9846] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.564044][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.571697][ T9846] bridge_slave_1: entered allmulticast mode [ 212.579620][ T9846] bridge_slave_1: entered promiscuous mode [ 212.586399][ T9849] lo speed is unknown, defaulting to 1000 [ 212.701363][ T9846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.732018][ T9846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.824333][ T9846] team0: Port device team_slave_0 added [ 212.849990][ T9846] team0: Port device team_slave_1 added [ 212.855934][ T9851] lo speed is unknown, defaulting to 1000 [ 212.948718][ T5857] Bluetooth: hci5: command tx timeout [ 212.954841][ T5857] Bluetooth: hci6: command tx timeout [ 212.969205][ T9846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.976204][ T9846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.018573][ T9846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.060313][ T9846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.067276][ T9846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.098869][ T9846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.109614][ T5857] Bluetooth: hci7: command tx timeout [ 213.148928][ T9860] vxcan1 speed is unknown, defaulting to 1000 [ 213.309598][ T9846] hsr_slave_0: entered promiscuous mode [ 213.316434][ T9846] hsr_slave_1: entered promiscuous mode [ 213.323954][ T9846] debugfs: 'hsr0' already exists in 'hsr' [ 213.330158][ T9846] Cannot create hsr debugfs directory [ 213.429179][ T5857] Bluetooth: hci8: command tx timeout [ 213.448359][ T9860] lo speed is unknown, defaulting to 1000 [ 213.651226][ T9844] chnl_net:caif_netlink_parms(): no params data found [ 213.678713][ T9849] chnl_net:caif_netlink_parms(): no params data found [ 213.981999][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.989579][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.996952][ T9849] bridge_slave_0: entered allmulticast mode [ 214.004262][ T9849] bridge_slave_0: entered promiscuous mode [ 214.016942][ T9844] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.024926][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.032558][ T9844] bridge_slave_0: entered allmulticast mode [ 214.042351][ T9844] bridge_slave_0: entered promiscuous mode [ 214.051219][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.058808][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.066035][ T9844] bridge_slave_1: entered allmulticast mode [ 214.073212][ T9844] bridge_slave_1: entered promiscuous mode [ 214.104105][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.111449][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.118980][ T9849] bridge_slave_1: entered allmulticast mode [ 214.125960][ T9849] bridge_slave_1: entered promiscuous mode [ 214.186713][ T9851] chnl_net:caif_netlink_parms(): no params data found [ 214.208247][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.221096][ T9844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.264056][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.278568][ T9844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.369173][ T9844] team0: Port device team_slave_0 added [ 214.396332][ T9849] team0: Port device team_slave_0 added [ 214.403965][ T9844] team0: Port device team_slave_1 added [ 214.430537][ T9849] team0: Port device team_slave_1 added [ 214.500310][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.507537][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.516442][ T9851] bridge_slave_0: entered allmulticast mode [ 214.523617][ T9851] bridge_slave_0: entered promiscuous mode [ 214.549033][ T5857] Bluetooth: hci9: command tx timeout [ 214.565199][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.572522][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.599773][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.612129][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.619551][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.626780][ T9851] bridge_slave_1: entered allmulticast mode [ 214.634993][ T9851] bridge_slave_1: entered promiscuous mode [ 214.642440][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.649657][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.675939][ T9844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.687090][ T9860] chnl_net:caif_netlink_parms(): no params data found [ 214.698452][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.705492][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.731995][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.763724][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.770948][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.797332][ T9844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.858564][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.894048][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.961431][ T9849] hsr_slave_0: entered promiscuous mode [ 214.967853][ T9849] hsr_slave_1: entered promiscuous mode [ 214.974693][ T9849] debugfs: 'hsr0' already exists in 'hsr' [ 214.980493][ T9849] Cannot create hsr debugfs directory [ 215.013693][ T9851] team0: Port device team_slave_0 added [ 215.022556][ T9851] team0: Port device team_slave_1 added [ 215.030027][ T5857] Bluetooth: hci6: command tx timeout [ 215.031486][ T5180] Bluetooth: hci5: command tx timeout [ 215.059300][ T9844] hsr_slave_0: entered promiscuous mode [ 215.065619][ T9844] hsr_slave_1: entered promiscuous mode [ 215.071812][ T9844] debugfs: 'hsr0' already exists in 'hsr' [ 215.077563][ T9844] Cannot create hsr debugfs directory [ 215.111146][ T9860] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.118520][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.125771][ T9860] bridge_slave_0: entered allmulticast mode [ 215.133037][ T9860] bridge_slave_0: entered promiscuous mode [ 215.153810][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.160839][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.187404][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.188709][ T5180] Bluetooth: hci7: command tx timeout [ 215.212824][ T9860] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.220300][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.227530][ T9860] bridge_slave_1: entered allmulticast mode [ 215.234608][ T9860] bridge_slave_1: entered promiscuous mode [ 215.248668][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.255641][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.282298][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.392907][ T9860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.430426][ T9860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.500326][ T9851] hsr_slave_0: entered promiscuous mode [ 215.507117][ T9851] hsr_slave_1: entered promiscuous mode [ 215.513399][ T5180] Bluetooth: hci8: command tx timeout [ 215.514471][ T9851] debugfs: 'hsr0' already exists in 'hsr' [ 215.525287][ T9851] Cannot create hsr debugfs directory [ 215.557794][ T9860] team0: Port device team_slave_0 added [ 215.588589][ T9860] team0: Port device team_slave_1 added [ 215.662400][ T9860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.670167][ T9860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.696209][ T9860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.708934][ T9860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.715909][ T9860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.742263][ T9860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.881985][ T9860] hsr_slave_0: entered promiscuous mode [ 215.888658][ T9860] hsr_slave_1: entered promiscuous mode [ 215.894970][ T9860] debugfs: 'hsr0' already exists in 'hsr' [ 215.900878][ T9860] Cannot create hsr debugfs directory [ 216.628507][ T5180] Bluetooth: hci9: command tx timeout [ 217.108578][ T5180] Bluetooth: hci5: command tx timeout [ 217.108876][ T5857] Bluetooth: hci6: command tx timeout [ 217.268797][ T5857] Bluetooth: hci7: command tx timeout [ 217.598993][ T5857] Bluetooth: hci8: command tx timeout [ 218.708972][ T5857] Bluetooth: hci9: command tx timeout [ 219.188925][ T5857] Bluetooth: hci5: command tx timeout [ 219.189155][ T5180] Bluetooth: hci6: command tx timeout [ 219.348520][ T5180] Bluetooth: hci7: command tx timeout [ 219.668526][ T5180] Bluetooth: hci8: command tx timeout [ 220.788460][ T5180] Bluetooth: hci9: command tx timeout [ 255.832439][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.608875][ T5857] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 271.620941][ T5857] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 271.629356][ T5857] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 271.638980][ T5857] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 271.647988][ T5857] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 271.678725][ T5866] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 271.688643][ T5866] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 271.698979][ T5866] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 271.709406][ T5866] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 271.722991][ T5866] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 271.731382][ T5865] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 271.741312][ T5865] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 271.750267][ T5866] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 271.760581][ T5865] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 271.770491][ T5865] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 271.778156][ T5866] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 271.787629][ T5866] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 271.794898][ T5865] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 271.810039][ T5180] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 271.817862][ T5180] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 271.961937][ T9890] vxcan1 speed is unknown, defaulting to 1000 [ 272.171281][ T9890] lo speed is unknown, defaulting to 1000 [ 272.179558][ T9892] vxcan1 speed is unknown, defaulting to 1000 [ 272.663811][ T9892] lo speed is unknown, defaulting to 1000 [ 272.663838][ T9894] vxcan1 speed is unknown, defaulting to 1000 [ 272.699777][ T5859] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 272.710623][ T5859] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 272.718863][ T5859] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 272.727216][ T5859] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 272.735109][ T5859] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 273.036050][ T9890] chnl_net:caif_netlink_parms(): no params data found [ 273.171753][ T9896] vxcan1 speed is unknown, defaulting to 1000 [ 273.171780][ T9894] lo speed is unknown, defaulting to 1000 [ 273.373909][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.381236][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.388791][ T9890] bridge_slave_0: entered allmulticast mode [ 273.396875][ T9890] bridge_slave_0: entered promiscuous mode [ 273.460161][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.467334][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.475112][ T9890] bridge_slave_1: entered allmulticast mode [ 273.483406][ T9890] bridge_slave_1: entered promiscuous mode [ 273.595472][ T9890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.629176][ T9900] vxcan1 speed is unknown, defaulting to 1000 [ 273.652760][ T9890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.690649][ T9896] lo speed is unknown, defaulting to 1000 [ 273.748521][ T5180] Bluetooth: hci10: command tx timeout [ 273.782611][ T9890] team0: Port device team_slave_0 added [ 273.827384][ T9892] chnl_net:caif_netlink_parms(): no params data found [ 273.835260][ T5180] Bluetooth: hci11: command tx timeout [ 273.866684][ T9890] team0: Port device team_slave_1 added [ 273.908492][ T5180] Bluetooth: hci12: command tx timeout [ 273.914743][ T5180] Bluetooth: hci13: command tx timeout [ 273.978783][ T9900] lo speed is unknown, defaulting to 1000 [ 273.991036][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.998003][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.024713][ T9890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.087885][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.095455][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.122252][ T9890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.305794][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.313693][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.321215][ T9892] bridge_slave_0: entered allmulticast mode [ 274.328435][ T9892] bridge_slave_0: entered promiscuous mode [ 274.342235][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.349419][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.356936][ T9892] bridge_slave_1: entered allmulticast mode [ 274.364251][ T9892] bridge_slave_1: entered promiscuous mode [ 274.404545][ T9890] hsr_slave_0: entered promiscuous mode [ 274.411555][ T9890] hsr_slave_1: entered promiscuous mode [ 274.417771][ T9890] debugfs: 'hsr0' already exists in 'hsr' [ 274.423605][ T9890] Cannot create hsr debugfs directory [ 274.467986][ T9892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.520648][ T9892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.613353][ T9892] team0: Port device team_slave_0 added [ 274.623041][ T9892] team0: Port device team_slave_1 added [ 274.760589][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.767565][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.794096][ T9892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.804808][ T5180] Bluetooth: hci14: command tx timeout [ 274.822862][ T9894] chnl_net:caif_netlink_parms(): no params data found [ 274.853284][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.860406][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.886753][ T9892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.100037][ T9892] hsr_slave_0: entered promiscuous mode [ 275.106344][ T9892] hsr_slave_1: entered promiscuous mode [ 275.113597][ T9892] debugfs: 'hsr0' already exists in 'hsr' [ 275.119606][ T9892] Cannot create hsr debugfs directory [ 275.147192][ T9896] chnl_net:caif_netlink_parms(): no params data found [ 275.157833][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 275.239449][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.246601][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.254392][ T9894] bridge_slave_0: entered allmulticast mode [ 275.261768][ T9894] bridge_slave_0: entered promiscuous mode [ 275.270536][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.277691][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.285281][ T9894] bridge_slave_1: entered allmulticast mode [ 275.292745][ T9894] bridge_slave_1: entered promiscuous mode [ 275.415925][ T9894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.432191][ T9894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.580714][ T9894] team0: Port device team_slave_0 added [ 275.586773][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.594257][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.601837][ T9900] bridge_slave_0: entered allmulticast mode [ 275.609164][ T9900] bridge_slave_0: entered promiscuous mode [ 275.616199][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.624000][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.631382][ T9896] bridge_slave_0: entered allmulticast mode [ 275.638874][ T9896] bridge_slave_0: entered promiscuous mode [ 275.646706][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.654907][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.662372][ T9896] bridge_slave_1: entered allmulticast mode [ 275.670330][ T9896] bridge_slave_1: entered promiscuous mode [ 275.684308][ T9894] team0: Port device team_slave_1 added [ 275.691131][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.698559][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.705812][ T9900] bridge_slave_1: entered allmulticast mode [ 275.713203][ T9900] bridge_slave_1: entered promiscuous mode [ 275.804269][ T9896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.828460][ T5180] Bluetooth: hci10: command tx timeout [ 275.858685][ T9896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.868757][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.875693][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.902241][ T9894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.913268][ T5180] Bluetooth: hci11: command tx timeout [ 275.922371][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.935523][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.966911][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.974122][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.988956][ T5180] Bluetooth: hci12: command tx timeout [ 276.001086][ T5859] Bluetooth: hci13: command tx timeout [ 276.008719][ T9894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.077293][ T9900] team0: Port device team_slave_0 added [ 276.085684][ T9896] team0: Port device team_slave_0 added [ 276.095421][ T9896] team0: Port device team_slave_1 added [ 276.103681][ T9900] team0: Port device team_slave_1 added [ 276.166815][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.174934][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.201563][ T9896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.246347][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.253401][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.279907][ T9896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.299134][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.306251][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.334479][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.350850][ T9894] hsr_slave_0: entered promiscuous mode [ 276.357254][ T9894] hsr_slave_1: entered promiscuous mode [ 276.363543][ T9894] debugfs: 'hsr0' already exists in 'hsr' [ 276.369421][ T9894] Cannot create hsr debugfs directory [ 276.385529][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.392559][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.419072][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.564637][ T9896] hsr_slave_0: entered promiscuous mode [ 276.571414][ T9896] hsr_slave_1: entered promiscuous mode [ 276.577630][ T9896] debugfs: 'hsr0' already exists in 'hsr' [ 276.583647][ T9896] Cannot create hsr debugfs directory [ 276.595317][ T9900] hsr_slave_0: entered promiscuous mode [ 276.601781][ T9900] hsr_slave_1: entered promiscuous mode [ 276.607994][ T9900] debugfs: 'hsr0' already exists in 'hsr' [ 276.614244][ T9900] Cannot create hsr debugfs directory [ 276.869044][ T5859] Bluetooth: hci14: command tx timeout [ 277.908522][ T5859] Bluetooth: hci10: command tx timeout [ 277.988705][ T5859] Bluetooth: hci11: command tx timeout [ 278.068663][ T5859] Bluetooth: hci12: command tx timeout [ 278.068681][ T5180] Bluetooth: hci13: command tx timeout [ 278.948504][ T5859] Bluetooth: hci14: command tx timeout [ 279.988534][ T5859] Bluetooth: hci10: command tx timeout [ 280.068480][ T5859] Bluetooth: hci11: command tx timeout [ 280.148992][ T5859] Bluetooth: hci13: command tx timeout [ 280.149002][ T5180] Bluetooth: hci12: command tx timeout [ 281.028751][ T5859] Bluetooth: hci14: command tx timeout [ 314.233214][ T5180] Bluetooth: hci1: command 0x0406 tx timeout [ 317.272008][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.484346][ T5180] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 331.494499][ T5180] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 331.502771][ T5180] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 331.512384][ T5180] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 331.521629][ T5180] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 331.652573][ T5180] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 331.662785][ T5180] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 331.671411][ T5180] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 331.682623][ T5180] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 331.691277][ T5180] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 331.772291][ T5180] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 331.781907][ T5180] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 331.790685][ T5180] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 331.801145][ T5180] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 331.809215][ T5180] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 331.859307][ T9935] vxcan1 speed is unknown, defaulting to 1000 [ 332.080976][ T9935] lo speed is unknown, defaulting to 1000 [ 332.089056][ T9937] vxcan1 speed is unknown, defaulting to 1000 [ 332.508846][ T9939] vxcan1 speed is unknown, defaulting to 1000 [ 332.567238][ T9937] lo speed is unknown, defaulting to 1000 [ 332.910564][ T9947] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 332.920893][ T9947] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 332.940406][ T9898] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 332.955918][ T9951] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 332.964637][ T9898] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 332.973732][ T9951] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 332.981654][ T9898] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 332.990442][ T9951] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 333.000677][ T9951] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 333.013197][ T51] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 333.128086][ T9935] chnl_net:caif_netlink_parms(): no params data found [ 333.176958][ T9939] lo speed is unknown, defaulting to 1000 [ 333.358314][ T9944] vxcan1 speed is unknown, defaulting to 1000 [ 333.546371][ T9935] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.569964][ T9935] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.577292][ T9935] bridge_slave_0: entered allmulticast mode [ 333.588415][ T9947] Bluetooth: hci15: command tx timeout [ 333.600583][ T9935] bridge_slave_0: entered promiscuous mode [ 333.620216][ T9935] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.627394][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.639626][ T9935] bridge_slave_1: entered allmulticast mode [ 333.647769][ T9935] bridge_slave_1: entered promiscuous mode [ 333.703065][ T9935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.717318][ T9944] lo speed is unknown, defaulting to 1000 [ 333.748729][ T9947] Bluetooth: hci16: command tx timeout [ 333.754442][ T9935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.785661][ T9948] vxcan1 speed is unknown, defaulting to 1000 [ 333.828668][ T9947] Bluetooth: hci17: command tx timeout [ 333.891555][ T9935] team0: Port device team_slave_0 added [ 334.012799][ T9935] team0: Port device team_slave_1 added [ 334.080505][ T9948] lo speed is unknown, defaulting to 1000 [ 334.141353][ T9935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.152052][ T9935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.179099][ T9935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.195978][ T9935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.203599][ T9935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.233215][ T9935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.269054][ T9937] chnl_net:caif_netlink_parms(): no params data found [ 334.417348][ T9935] hsr_slave_0: entered promiscuous mode [ 334.424030][ T9935] hsr_slave_1: entered promiscuous mode [ 334.430250][ T9935] debugfs: 'hsr0' already exists in 'hsr' [ 334.435972][ T9935] Cannot create hsr debugfs directory [ 334.496017][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.503590][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.511058][ T9937] bridge_slave_0: entered allmulticast mode [ 334.518179][ T9937] bridge_slave_0: entered promiscuous mode [ 334.563441][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.570983][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.578690][ T9937] bridge_slave_1: entered allmulticast mode [ 334.586604][ T9937] bridge_slave_1: entered promiscuous mode [ 334.659908][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.681518][ T9939] chnl_net:caif_netlink_parms(): no params data found [ 334.700347][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.717170][ T9947] Bluetooth: hci6: command 0x0406 tx timeout [ 334.717484][ T51] Bluetooth: hci9: command 0x0406 tx timeout [ 334.723302][ T9951] Bluetooth: hci5: command 0x0406 tx timeout [ 334.730606][ T5180] Bluetooth: hci7: command 0x0406 tx timeout [ 334.735446][ T9898] Bluetooth: hci8: command 0x0406 tx timeout [ 334.802988][ T9937] team0: Port device team_slave_0 added [ 334.848111][ T9937] team0: Port device team_slave_1 added [ 334.955823][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.962968][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.989340][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.003929][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.011125][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.037523][ T5859] Bluetooth: hci19: command tx timeout [ 335.044778][ T5859] Bluetooth: hci18: command tx timeout [ 335.048116][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.114469][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.122111][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.129691][ T9939] bridge_slave_0: entered allmulticast mode [ 335.136820][ T9939] bridge_slave_0: entered promiscuous mode [ 335.166781][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.174690][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.182544][ T9939] bridge_slave_1: entered allmulticast mode [ 335.191404][ T9939] bridge_slave_1: entered promiscuous mode [ 335.369954][ T9937] hsr_slave_0: entered promiscuous mode [ 335.376443][ T9937] hsr_slave_1: entered promiscuous mode [ 335.383028][ T9937] debugfs: 'hsr0' already exists in 'hsr' [ 335.388806][ T9937] Cannot create hsr debugfs directory [ 335.394728][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 335.408842][ T9939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.449128][ T9939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.548275][ T9939] team0: Port device team_slave_0 added [ 335.557789][ T9939] team0: Port device team_slave_1 added [ 335.574612][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 335.668904][ T5859] Bluetooth: hci15: command tx timeout [ 335.702873][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.710387][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.717673][ T9944] bridge_slave_0: entered allmulticast mode [ 335.724984][ T9944] bridge_slave_0: entered promiscuous mode [ 335.733575][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.741223][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.767514][ T9939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.804031][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.811377][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.819330][ T9944] bridge_slave_1: entered allmulticast mode [ 335.826509][ T9944] bridge_slave_1: entered promiscuous mode [ 335.832660][ T5859] Bluetooth: hci16: command tx timeout [ 335.836543][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.845431][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.871799][ T9939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.909439][ T5859] Bluetooth: hci17: command tx timeout [ 336.005740][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.039705][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.046895][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.054218][ T9948] bridge_slave_0: entered allmulticast mode [ 336.061656][ T9948] bridge_slave_0: entered promiscuous mode [ 336.070697][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.077841][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.085233][ T9948] bridge_slave_1: entered allmulticast mode [ 336.092933][ T9948] bridge_slave_1: entered promiscuous mode [ 336.102371][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.205658][ T9939] hsr_slave_0: entered promiscuous mode [ 336.212868][ T9939] hsr_slave_1: entered promiscuous mode [ 336.219464][ T9939] debugfs: 'hsr0' already exists in 'hsr' [ 336.225272][ T9939] Cannot create hsr debugfs directory [ 336.242204][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.253415][ T9944] team0: Port device team_slave_0 added [ 336.262487][ T9944] team0: Port device team_slave_1 added [ 336.277548][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.394433][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.401866][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.428680][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.442100][ T9948] team0: Port device team_slave_0 added [ 336.460567][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.467532][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.494716][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.507764][ T9948] team0: Port device team_slave_1 added [ 336.572901][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.579994][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.606365][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.647682][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.654793][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.681822][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.749303][ T9944] hsr_slave_0: entered promiscuous mode [ 336.756004][ T9944] hsr_slave_1: entered promiscuous mode [ 336.762678][ T9944] debugfs: 'hsr0' already exists in 'hsr' [ 336.769987][ T9944] Cannot create hsr debugfs directory [ 336.869919][ T9948] hsr_slave_0: entered promiscuous mode [ 336.876410][ T9948] hsr_slave_1: entered promiscuous mode [ 336.882726][ T9948] debugfs: 'hsr0' already exists in 'hsr' [ 336.888519][ T9948] Cannot create hsr debugfs directory [ 337.108591][ T5859] Bluetooth: hci19: command tx timeout [ 337.108605][ T5857] Bluetooth: hci18: command tx timeout [ 337.749399][ T5859] Bluetooth: hci15: command tx timeout [ 337.908449][ T5859] Bluetooth: hci16: command tx timeout [ 337.988845][ T5859] Bluetooth: hci17: command tx timeout [ 339.188453][ T5859] Bluetooth: hci18: command tx timeout [ 339.188462][ T5857] Bluetooth: hci19: command tx timeout [ 339.828665][ T5859] Bluetooth: hci15: command tx timeout [ 339.988537][ T5859] Bluetooth: hci16: command tx timeout [ 340.068730][ T5859] Bluetooth: hci17: command tx timeout [ 341.268413][ T5859] Bluetooth: hci18: command tx timeout [ 341.268630][ T5857] Bluetooth: hci19: command tx timeout [ 354.388671][ T31] INFO: task syz.0.990:9802 blocked for more than 143 seconds. [ 354.396276][ T31] Not tainted syzkaller #0 [ 354.401287][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.410124][ T31] task:syz.0.990 state:D stack:25352 pid:9802 tgid:9800 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 354.422161][ T31] Call Trace: [ 354.425448][ T31] [ 354.428436][ T31] __schedule+0x1798/0x4cc0 [ 354.432970][ T31] ? validate_chain+0x897/0x2140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 354.438060][ T31] ? __lock_acquire+0xab9/0xd20 [ 354.443093][ T31] ? __pfx___schedule+0x10/0x10 [ 354.448154][ T31] ? schedule+0x91/0x360 [ 354.454629][ T31] schedule+0x165/0x360 [ 354.459216][ T31] schedule_timeout+0x9a/0x270 [ 354.488390][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 354.493837][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.517288][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.525288][ T31] ? wait_for_completion+0x267/0x5d0 [ 354.531907][ T31] wait_for_completion+0x2bf/0x5d0 [ 354.537057][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 354.542814][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 354.549074][ T31] ? check_flush_dependency+0x88/0x400 [ 354.554555][ T31] __flush_workqueue+0x6f7/0x14b0 [ 354.559758][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 354.565660][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.571057][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 354.576594][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 354.582745][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 354.588289][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 354.593594][ T31] nbd_genl_disconnect+0x485/0x570 [ 354.598822][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 354.604449][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 354.611156][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 354.616725][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 354.622927][ T31] ? stack_trace_save+0x9c/0xe0 [ 354.627780][ T31] genl_rcv_msg+0x60e/0x790 [ 354.632821][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.637876][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 354.644049][ T31] netlink_rcv_skb+0x208/0x470 [ 354.648866][ T31] ? __lock_acquire+0xab9/0xd20 [ 354.653712][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.658915][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.664244][ T31] ? down_read+0x1ad/0x2e0 [ 354.668889][ T31] genl_rcv+0x28/0x40 [ 354.672875][ T31] netlink_unicast+0x82f/0x9e0 [ 354.677640][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 354.683155][ T31] ? netlink_sendmsg+0x642/0xb30 [ 354.688104][ T31] ? skb_put+0x11b/0x210 [ 354.692560][ T31] netlink_sendmsg+0x805/0xb30 [ 354.697351][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.702725][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 354.707659][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.713115][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.718571][ T31] __sock_sendmsg+0x21c/0x270 [ 354.723256][ T31] ____sys_sendmsg+0x505/0x830 [ 354.728017][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.733422][ T31] ? import_iovec+0x74/0xa0 [ 354.737938][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 354.742878][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.748289][ T31] ? __fget_files+0x2a/0x420 [ 354.752891][ T31] ? __fget_files+0x3a0/0x420 [ 354.757562][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 354.762739][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.768306][ T31] ? rcu_is_watching+0x15/0xb0 [ 354.773078][ T31] ? do_syscall_64+0xbe/0x3b0 [ 354.777790][ T31] do_syscall_64+0xfa/0x3b0 [ 354.782578][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.787775][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.794060][ T31] ? clear_bhb_loop+0x60/0xb0 [ 354.798809][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.804692][ T31] RIP: 0033:0x7f1f41b8ec29 [ 354.809127][ T31] RSP: 002b:00007f1f42a2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.817544][ T31] RAX: ffffffffffffffda RBX: 00007f1f41dd5fa0 RCX: 00007f1f41b8ec29 [ 354.825569][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 354.833591][ T31] RBP: 00007f1f41c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 354.841696][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.849824][ T31] R13: 00007f1f41dd6038 R14: 00007f1f41dd5fa0 R15: 00007ffcbc620b78 [ 354.857803][ T31] [ 354.860847][ T31] INFO: task syz.4.994:9815 blocked for more than 143 seconds. [ 354.868608][ T31] Not tainted syzkaller #0 [ 354.873541][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.882259][ T31] task:syz.4.994 state:D stack:25032 pid:9815 tgid:9813 ppid:5853 task_flags:0x400140 flags:0x00004004 [ 354.894199][ T31] Call Trace: [ 354.897467][ T31] [ 354.900438][ T31] __schedule+0x1798/0x4cc0 [ 354.904937][ T31] ? __lock_acquire+0xab9/0xd20 [ 354.909813][ T31] ? __lock_acquire+0xab9/0xd20 [ 354.914764][ T31] ? __pfx___schedule+0x10/0x10 [ 354.919633][ T31] ? schedule+0x91/0x360 [ 354.923865][ T31] schedule+0x165/0x360 [ 354.928018][ T31] schedule_preempt_disabled+0x13/0x30 [ 354.933510][ T31] __mutex_lock+0x7e6/0x1350 [ 354.938111][ T31] ? __mutex_lock+0x5bb/0x1350 [ 354.942911][ T31] ? genl_rcv_msg+0x10d/0x790 [ 354.947578][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 354.953192][ T31] ? stack_trace_save+0x9c/0xe0 [ 354.958062][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 354.963483][ T31] ? radix_tree_lookup+0x240/0x290 [ 354.968901][ T31] genl_rcv_msg+0x10d/0x790 [ 354.973398][ T31] ? __lock_acquire+0xab9/0xd20 [ 354.978468][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.983532][ T31] netlink_rcv_skb+0x208/0x470 [ 354.988314][ T31] ? __lock_acquire+0xab9/0xd20 [ 354.993170][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.998178][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.003500][ T31] ? down_read+0x1ad/0x2e0 [ 355.007908][ T31] genl_rcv+0x28/0x40 [ 355.011943][ T31] netlink_unicast+0x82f/0x9e0 [ 355.016712][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 355.022015][ T31] ? netlink_sendmsg+0x642/0xb30 [ 355.026964][ T31] ? skb_put+0x11b/0x210 [ 355.032622][ T31] netlink_sendmsg+0x805/0xb30 [ 355.037420][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.042810][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.047774][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.053160][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.058490][ T31] __sock_sendmsg+0x21c/0x270 [ 355.063178][ T31] __sys_sendto+0x3bd/0x520 [ 355.067696][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 355.072787][ T31] ? count_memcg_event_mm+0x21/0x260 [ 355.078164][ T31] ? exc_page_fault+0x76/0xf0 [ 355.082927][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 355.088262][ T31] __x64_sys_sendto+0xde/0x100 [ 355.093062][ T31] do_syscall_64+0xfa/0x3b0 [ 355.097597][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.102840][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.109154][ T31] ? clear_bhb_loop+0x60/0xb0 [ 355.113899][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.119852][ T31] RIP: 0033:0x7fd088d90abc [ 355.124278][ T31] RSP: 002b:00007fd089cb6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 355.132933][ T31] RAX: ffffffffffffffda RBX: 00007fd089cb6fc0 RCX: 00007fd088d90abc [ 355.141016][ T31] RDX: 0000000000000020 RSI: 00007fd089cb7010 RDI: 0000000000000008 [ 355.149112][ T31] RBP: 0000000000000000 R08: 00007fd089cb6f14 R09: 000000000000000c [ 355.157185][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 355.165176][ T31] R13: 00007fd089cb6f68 R14: 00007fd089cb7010 R15: 0000000000000000 [ 355.173311][ T31] [ 355.176361][ T31] INFO: task syz.3.995:9816 blocked for more than 144 seconds. [ 355.184147][ T31] Not tainted syzkaller #0 [ 355.189504][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.198183][ T31] task:syz.3.995 state:D stack:24008 pid:9816 tgid:9814 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 355.210230][ T31] Call Trace: [ 355.213516][ T31] [ 355.216453][ T31] __schedule+0x1798/0x4cc0 [ 355.221052][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.225911][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.230780][ T31] ? __pfx___schedule+0x10/0x10 [ 355.235657][ T31] ? schedule+0x91/0x360 [ 355.239940][ T31] schedule+0x165/0x360 [ 355.244159][ T31] schedule_preempt_disabled+0x13/0x30 [ 355.249677][ T31] __mutex_lock+0x7e6/0x1350 [ 355.254267][ T31] ? __mutex_lock+0x5bb/0x1350 [ 355.259118][ T31] ? genl_rcv_msg+0x10d/0x790 [ 355.263786][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 355.269058][ T31] ? stack_trace_save+0x9c/0xe0 [ 355.273970][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 355.279396][ T31] ? radix_tree_lookup+0x240/0x290 [ 355.284522][ T31] genl_rcv_msg+0x10d/0x790 [ 355.289157][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.294007][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.299062][ T31] netlink_rcv_skb+0x208/0x470 [ 355.303831][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.308730][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.313775][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.319132][ T31] ? down_read+0x1ad/0x2e0 [ 355.323555][ T31] genl_rcv+0x28/0x40 [ 355.327524][ T31] netlink_unicast+0x82f/0x9e0 [ 355.332351][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 355.337646][ T31] ? netlink_sendmsg+0x642/0xb30 [ 355.342637][ T31] ? skb_put+0x11b/0x210 [ 355.346901][ T31] netlink_sendmsg+0x805/0xb30 [ 355.351842][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.357122][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.362190][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.367480][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.372906][ T31] __sock_sendmsg+0x21c/0x270 [ 355.377582][ T31] __sys_sendto+0x3bd/0x520 [ 355.382234][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 355.387255][ T31] ? count_memcg_event_mm+0x21/0x260 [ 355.392599][ T31] ? exc_page_fault+0x76/0xf0 [ 355.397266][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 355.402605][ T31] __x64_sys_sendto+0xde/0x100 [ 355.407365][ T31] do_syscall_64+0xfa/0x3b0 [ 355.411937][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.417123][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.423227][ T31] ? clear_bhb_loop+0x60/0xb0 [ 355.428086][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.433996][ T31] RIP: 0033:0x7f44e6190abc [ 355.438457][ T31] RSP: 002b:00007f44e43ecec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 355.446878][ T31] RAX: ffffffffffffffda RBX: 00007f44e43ecfc0 RCX: 00007f44e6190abc [ 355.454909][ T31] RDX: 0000000000000024 RSI: 00007f44e43ed010 RDI: 0000000000000009 [ 355.463089][ T31] RBP: 0000000000000000 R08: 00007f44e43ecf14 R09: 000000000000000c [ 355.471120][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 355.479125][ T31] R13: 00007f44e43ecf68 R14: 00007f44e43ed010 R15: 0000000000000000 [ 355.487114][ T31] [ 355.490196][ T31] INFO: task syz.3.995:9818 blocked for more than 144 seconds. [ 355.497756][ T31] Not tainted syzkaller #0 [ 355.507982][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.517023][ T31] task:syz.3.995 state:D stack:27848 pid:9818 tgid:9814 ppid:5867 task_flags:0x400040 flags:0x00004004 [ 355.529020][ T31] Call Trace: [ 355.532306][ T31] [ 355.535239][ T31] __schedule+0x1798/0x4cc0 [ 355.539786][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.544655][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.549581][ T31] ? __pfx___schedule+0x10/0x10 [ 355.554423][ T31] ? schedule+0x91/0x360 [ 355.558686][ T31] schedule+0x165/0x360 [ 355.562922][ T31] schedule_preempt_disabled+0x13/0x30 [ 355.568414][ T31] __mutex_lock+0x7e6/0x1350 [ 355.573005][ T31] ? __mutex_lock+0x5bb/0x1350 [ 355.577754][ T31] ? genl_rcv_msg+0x10d/0x790 [ 355.582481][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 355.587506][ T31] ? __schedule+0x17ae/0x4cc0 [ 355.592364][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 355.597753][ T31] ? radix_tree_lookup+0x240/0x290 [ 355.602952][ T31] genl_rcv_msg+0x10d/0x790 [ 355.607467][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.612550][ T31] netlink_rcv_skb+0x208/0x470 [ 355.617301][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.622196][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.627214][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.632519][ T31] ? down_read+0x1ad/0x2e0 [ 355.636921][ T31] genl_rcv+0x28/0x40 [ 355.640920][ T31] netlink_unicast+0x82f/0x9e0 [ 355.645673][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 355.651010][ T31] ? netlink_sendmsg+0x642/0xb30 [ 355.655938][ T31] ? skb_put+0x11b/0x210 [ 355.660203][ T31] netlink_sendmsg+0x805/0xb30 [ 355.664977][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.670944][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.675901][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.681226][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.686590][ T31] __sock_sendmsg+0x21c/0x270 [ 355.691299][ T31] __sys_sendto+0x3bd/0x520 [ 355.695788][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 355.701050][ T31] ? rcu_is_watching+0x4e/0xb0 [ 355.705871][ T31] ? rcu_is_watching+0x15/0xb0 [ 355.710714][ T31] __x64_sys_sendto+0xde/0x100 [ 355.715596][ T31] do_syscall_64+0xfa/0x3b0 [ 355.720162][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.725364][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.731461][ T31] ? clear_bhb_loop+0x60/0xb0 [ 355.736131][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.742051][ T31] RIP: 0033:0x7f44e6190abc [ 355.746450][ T31] RSP: 002b:00007f44e43cbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 355.755232][ T31] RAX: ffffffffffffffda RBX: 00007f44e43cbfc0 RCX: 00007f44e6190abc [ 355.763315][ T31] RDX: 0000000000000024 RSI: 00007f44e43cc010 RDI: 0000000000000008 [ 355.771405][ T31] RBP: 0000000000000000 R08: 00007f44e43cbf14 R09: 000000000000000c [ 355.779405][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 355.787385][ T31] R13: 00007f44e43cbf68 R14: 00007f44e43cc010 R15: 0000000000000000 [ 355.795393][ T31] [ 355.798477][ T31] INFO: task syz.3.995:9819 blocked for more than 144 seconds. [ 355.806012][ T31] Not tainted syzkaller #0 [ 355.810967][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.819645][ T31] task:syz.3.995 state:D stack:28328 pid:9819 tgid:9814 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 355.831684][ T31] Call Trace: [ 355.834970][ T31] [ 355.837905][ T31] __schedule+0x1798/0x4cc0 [ 355.842495][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.847359][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.852242][ T31] ? __pfx___schedule+0x10/0x10 [ 355.857084][ T31] ? schedule+0x91/0x360 [ 355.861372][ T31] schedule+0x165/0x360 [ 355.865512][ T31] schedule_preempt_disabled+0x13/0x30 [ 355.871070][ T31] __mutex_lock+0x7e6/0x1350 [ 355.875652][ T31] ? __mutex_lock+0x5bb/0x1350 [ 355.880533][ T31] ? genl_rcv_msg+0x10d/0x790 [ 355.885199][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 355.890243][ T31] ? stack_trace_save+0x9c/0xe0 [ 355.895107][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 355.900516][ T31] ? radix_tree_lookup+0x240/0x290 [ 355.905622][ T31] genl_rcv_msg+0x10d/0x790 [ 355.910217][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.915077][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.920154][ T31] netlink_rcv_skb+0x208/0x470 [ 355.924903][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.929774][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.934876][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.940309][ T31] ? down_read+0x1ad/0x2e0 [ 355.944712][ T31] genl_rcv+0x28/0x40 [ 355.948726][ T31] netlink_unicast+0x82f/0x9e0 [ 355.953504][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 355.958835][ T31] ? netlink_sendmsg+0x642/0xb30 [ 355.963770][ T31] ? skb_put+0x11b/0x210 [ 355.967996][ T31] netlink_sendmsg+0x805/0xb30 [ 355.972997][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.978370][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.983308][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.988921][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.994212][ T31] __sock_sendmsg+0x21c/0x270 [ 355.998902][ T31] __sys_sendto+0x3bd/0x520 [ 356.003392][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 356.008446][ T31] ? count_memcg_event_mm+0x21/0x260 [ 356.013722][ T31] ? exc_page_fault+0x76/0xf0 [ 356.018431][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 356.023722][ T31] __x64_sys_sendto+0xde/0x100 [ 356.028503][ T31] do_syscall_64+0xfa/0x3b0 [ 356.032992][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.038171][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.044289][ T31] ? clear_bhb_loop+0x60/0xb0 [ 356.048999][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.054919][ T31] RIP: 0033:0x7f44e6190abc [ 356.059349][ T31] RSP: 002b:00007f44e43aaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 356.067774][ T31] RAX: ffffffffffffffda RBX: 00007f44e43aafc0 RCX: 00007f44e6190abc [ 356.076001][ T31] RDX: 0000000000000024 RSI: 00007f44e43ab010 RDI: 000000000000000b [ 356.084003][ T31] RBP: 0000000000000000 R08: 00007f44e43aaf14 R09: 000000000000000c [ 356.092075][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 356.100188][ T31] R13: 00007f44e43aaf68 R14: 00007f44e43ab010 R15: 0000000000000000 [ 356.108160][ T31] [ 356.111229][ T31] INFO: task syz.1.998:9831 blocked for more than 145 seconds. [ 356.118854][ T31] Not tainted syzkaller #0 [ 356.123790][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.132479][ T31] task:syz.1.998 state:D stack:25224 pid:9831 tgid:9830 ppid:7809 task_flags:0x400140 flags:0x00004004 [ 356.144638][ T31] Call Trace: [ 356.147924][ T31] [ 356.151019][ T31] __schedule+0x1798/0x4cc0 [ 356.155519][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.160430][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.165285][ T31] ? __pfx___schedule+0x10/0x10 [ 356.170185][ T31] ? schedule+0x91/0x360 [ 356.174418][ T31] schedule+0x165/0x360 [ 356.178699][ T31] schedule_preempt_disabled+0x13/0x30 [ 356.184145][ T31] __mutex_lock+0x7e6/0x1350 [ 356.188775][ T31] ? __mutex_lock+0x5bb/0x1350 [ 356.193557][ T31] ? genl_rcv_msg+0x10d/0x790 [ 356.198281][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 356.203310][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 356.208489][ T31] ? radix_tree_lookup+0x240/0x290 [ 356.213603][ T31] genl_rcv_msg+0x10d/0x790 [ 356.218104][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.223155][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 356.228173][ T31] ? __asan_memcpy+0x40/0x70 [ 356.232785][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 356.238167][ T31] netlink_rcv_skb+0x208/0x470 [ 356.243249][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.248147][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.253440][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.258794][ T31] ? down_read+0x1ad/0x2e0 [ 356.263228][ T31] genl_rcv+0x28/0x40 [ 356.267217][ T31] netlink_unicast+0x82f/0x9e0 [ 356.272072][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 356.277349][ T31] ? netlink_sendmsg+0x642/0xb30 [ 356.282391][ T31] ? skb_put+0x11b/0x210 [ 356.286659][ T31] netlink_sendmsg+0x805/0xb30 [ 356.291477][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.296758][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.301859][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.307241][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.312737][ T31] __sock_sendmsg+0x21c/0x270 [ 356.317433][ T31] __sys_sendto+0x3bd/0x520 [ 356.322007][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 356.327030][ T31] ? count_memcg_event_mm+0x21/0x260 [ 356.332363][ T31] ? exc_page_fault+0x76/0xf0 [ 356.337034][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 356.342354][ T31] __x64_sys_sendto+0xde/0x100 [ 356.347109][ T31] do_syscall_64+0xfa/0x3b0 [ 356.351683][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.356888][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.363023][ T31] ? clear_bhb_loop+0x60/0xb0 [ 356.367714][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.373663][ T31] RIP: 0033:0x7efe0e190abc [ 356.378087][ T31] RSP: 002b:00007efe0f08eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 356.386726][ T31] RAX: ffffffffffffffda RBX: 00007efe0f08efc0 RCX: 00007efe0e190abc [ 356.394779][ T31] RDX: 0000000000000024 RSI: 00007efe0f08f010 RDI: 000000000000000a [ 356.402793][ T31] RBP: 0000000000000000 R08: 00007efe0f08ef14 R09: 000000000000000c [ 356.410808][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 356.418814][ T31] R13: 00007efe0f08ef68 R14: 00007efe0f08f010 R15: 0000000000000000 [ 356.426795][ T31] [ 356.429841][ T31] INFO: task syz.2.1000:9839 blocked for more than 145 seconds. [ 356.437493][ T31] Not tainted syzkaller #0 [ 356.442575][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.451302][ T31] task:syz.2.1000 state:D stack:28360 pid:9839 tgid:9838 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 356.463267][ T31] Call Trace: [ 356.466533][ T31] [ 356.469526][ T31] __schedule+0x1798/0x4cc0 [ 356.474044][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.478925][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.483767][ T31] ? __pfx___schedule+0x10/0x10 [ 356.488717][ T31] ? schedule+0x91/0x360 [ 356.492945][ T31] schedule+0x165/0x360 [ 356.497077][ T31] schedule_preempt_disabled+0x13/0x30 [ 356.502592][ T31] __mutex_lock+0x7e6/0x1350 [ 356.507278][ T31] ? __mutex_lock+0x5bb/0x1350 [ 356.512090][ T31] ? genl_rcv_msg+0x10d/0x790 [ 356.516782][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 356.521862][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 356.526983][ T31] ? radix_tree_lookup+0x240/0x290 [ 356.532174][ T31] genl_rcv_msg+0x10d/0x790 [ 356.536695][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.541840][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 356.546849][ T31] ? __asan_memcpy+0x40/0x70 [ 356.551641][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 356.557029][ T31] netlink_rcv_skb+0x208/0x470 [ 356.561841][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.566684][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.571759][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.577042][ T31] ? down_read+0x1ad/0x2e0 [ 356.581615][ T31] genl_rcv+0x28/0x40 [ 356.585594][ T31] netlink_unicast+0x82f/0x9e0 [ 356.590504][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 356.595793][ T31] ? netlink_sendmsg+0x642/0xb30 [ 356.600819][ T31] ? skb_put+0x11b/0x210 [ 356.605058][ T31] netlink_sendmsg+0x805/0xb30 [ 356.609854][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.615129][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.620082][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.625359][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.630668][ T31] __sock_sendmsg+0x21c/0x270 [ 356.635335][ T31] __sys_sendto+0x3bd/0x520 [ 356.640153][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 356.645215][ T31] ? count_memcg_event_mm+0x21/0x260 [ 356.650570][ T31] ? exc_page_fault+0x76/0xf0 [ 356.655274][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 356.660614][ T31] __x64_sys_sendto+0xde/0x100 [ 356.665465][ T31] do_syscall_64+0xfa/0x3b0 [ 356.670016][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.675205][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.681320][ T31] ? clear_bhb_loop+0x60/0xb0 [ 356.686018][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.692024][ T31] RIP: 0033:0x7fd656990abc [ 356.696425][ T31] RSP: 002b:00007fd6578d2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 356.704862][ T31] RAX: ffffffffffffffda RBX: 00007fd6578d2fc0 RCX: 00007fd656990abc [ 356.712952][ T31] RDX: 0000000000000020 RSI: 00007fd6578d3010 RDI: 0000000000000003 [ 356.720968][ T31] RBP: 0000000000000000 R08: 00007fd6578d2f14 R09: 000000000000000c [ 356.728973][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 356.736931][ T31] R13: 00007fd6578d2f68 R14: 00007fd6578d3010 R15: 0000000000000000 [ 356.744938][ T31] [ 356.748008][ T31] [ 356.748008][ T31] Showing all locks held in the system: [ 356.755760][ T31] 1 lock held by khungtaskd/31: [ 356.760654][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 356.770539][ T31] 5 locks held by kworker/u8:4/73: [ 356.775678][ T31] 2 locks held by getty/5621: [ 356.780384][ T31] #0: ffff88814d4f50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 356.790183][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 356.800381][ T31] 2 locks held by kworker/u9:4/5860: [ 356.805654][ T31] #0: ffff8880250b0948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 356.817100][ T31] #1: ffffc9000412fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 356.828903][ T31] 3 locks held by syz.0.990/9802: [ 356.833912][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.842157][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 356.851142][ T31] #2: ffff888024f64a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 356.861550][ T31] 2 locks held by syz.4.994/9815: [ 356.866556][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.874828][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 356.883878][ T31] 2 locks held by syz.3.995/9816: [ 356.888931][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.897280][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 356.906316][ T31] 2 locks held by syz.3.995/9818: [ 356.911366][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.919589][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 356.928595][ T31] 2 locks held by syz.3.995/9819: [ 356.933618][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.941983][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 356.951313][ T31] 2 locks held by syz.1.998/9831: [ 356.956338][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.964573][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 356.973578][ T31] 2 locks held by syz.2.1000/9839: [ 356.978754][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 356.986940][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 356.995933][ T31] 2 locks held by syz-executor/9844: [ 357.001592][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.009923][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.018901][ T31] 2 locks held by syz-executor/9846: [ 357.024165][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.032455][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.041460][ T31] 2 locks held by syz-executor/9849: [ 357.046727][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.054957][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.063958][ T31] 2 locks held by syz-executor/9851: [ 357.069259][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.077426][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.086424][ T31] 2 locks held by syz-executor/9860: [ 357.091742][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.100018][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.109145][ T31] 2 locks held by syz-executor/9890: [ 357.114435][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.122732][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.131741][ T31] 2 locks held by syz-executor/9892: [ 357.137009][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.145318][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.154400][ T31] 2 locks held by syz-executor/9894: [ 357.159714][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.167933][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.176930][ T31] 2 locks held by syz-executor/9896: [ 357.182217][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.190661][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.199700][ T31] 2 locks held by syz-executor/9900: [ 357.205057][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.213259][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.222281][ T31] 2 locks held by syz-executor/9935: [ 357.227562][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.235812][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.244833][ T31] 2 locks held by syz-executor/9937: [ 357.250172][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.258421][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.267430][ T31] 2 locks held by syz-executor/9939: [ 357.272895][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.281557][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.290676][ T31] 2 locks held by syz-executor/9944: [ 357.295952][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.304236][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.313514][ T31] 2 locks held by syz-executor/9948: [ 357.318922][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 357.327109][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 357.336105][ T31] [ 357.338685][ T31] ============================================= [ 357.338685][ T31] [ 357.347085][ T31] NMI backtrace for cpu 0 [ 357.347105][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 357.347116][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.347122][ T31] Call Trace: [ 357.347126][ T31] [ 357.347132][ T31] dump_stack_lvl+0x189/0x250 [ 357.347150][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.347161][ T31] ? __pfx__printk+0x10/0x10 [ 357.347181][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 357.347197][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 357.347212][ T31] ? __pfx__printk+0x10/0x10 [ 357.347227][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 357.347243][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 357.347259][ T31] watchdog+0xf93/0xfe0 [ 357.347275][ T31] ? watchdog+0x1de/0xfe0 [ 357.347292][ T31] kthread+0x70e/0x8a0 [ 357.347306][ T31] ? __pfx_watchdog+0x10/0x10 [ 357.347318][ T31] ? __pfx_kthread+0x10/0x10 [ 357.347330][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.347340][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.347349][ T31] ? __pfx_kthread+0x10/0x10 [ 357.347360][ T31] ret_from_fork+0x439/0x7d0 [ 357.347372][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 357.347384][ T31] ? __switch_to_asm+0x39/0x70 [ 357.347395][ T31] ? __switch_to_asm+0x33/0x70 [ 357.347406][ T31] ? __pfx_kthread+0x10/0x10 [ 357.347419][ T31] ret_from_fork_asm+0x1a/0x30 [ 357.347438][ T31] [ 357.347442][ T31] Sending NMI from CPU 0 to CPUs 1: [ 357.494143][ C1] NMI backtrace for cpu 1 [ 357.494160][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 357.494177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.494187][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 357.494208][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 29 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 357.494221][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 357.494235][ C1] RAX: 85db285cf8f9ad00 RBX: ffffffff819683f8 RCX: 85db285cf8f9ad00 [ 357.494247][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba56b RDI: ffffffff8be33f00 [ 357.494259][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 357.494270][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa39030 [ 357.494282][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d7b40 [ 357.494292][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 357.494305][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.494316][ C1] CR2: 0000565201ab2000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 357.494330][ C1] Call Trace: [ 357.494337][ C1] [ 357.494344][ C1] default_idle+0x13/0x20 [ 357.494361][ C1] default_idle_call+0x74/0xb0 [ 357.494379][ C1] do_idle+0x1e8/0x510 [ 357.494397][ C1] ? __pfx_do_idle+0x10/0x10 [ 357.494420][ C1] cpu_startup_entry+0x44/0x60 [ 357.494434][ C1] start_secondary+0x101/0x110 [ 357.494455][ C1] common_startup_64+0x13e/0x147 [ 357.494482][ C1] [ 357.495218][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 357.661118][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 357.670226][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.680288][ T31] Call Trace: [ 357.683559][ T31] [ 357.686486][ T31] dump_stack_lvl+0x99/0x250 [ 357.691155][ T31] ? __asan_memcpy+0x40/0x70 [ 357.695742][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.701192][ T31] ? __pfx__printk+0x10/0x10 [ 357.705873][ T31] vpanic+0x281/0x750 [ 357.709932][ T31] ? __pfx_vpanic+0x10/0x10 [ 357.714422][ T31] ? preempt_schedule+0xae/0xc0 [ 357.719262][ T31] ? preempt_schedule_common+0x83/0xd0 [ 357.724718][ T31] panic+0xb9/0xc0 [ 357.728432][ T31] ? __pfx_panic+0x10/0x10 [ 357.732842][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 357.738212][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 357.744374][ T31] watchdog+0xfd2/0xfe0 [ 357.748529][ T31] ? watchdog+0x1de/0xfe0 [ 357.752862][ T31] kthread+0x70e/0x8a0 [ 357.756922][ T31] ? __pfx_watchdog+0x10/0x10 [ 357.761594][ T31] ? __pfx_kthread+0x10/0x10 [ 357.766175][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.771358][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.776552][ T31] ? __pfx_kthread+0x10/0x10 [ 357.781139][ T31] ret_from_fork+0x439/0x7d0 [ 357.785864][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 357.790973][ T31] ? __switch_to_asm+0x39/0x70 [ 357.795728][ T31] ? __switch_to_asm+0x33/0x70 [ 357.800483][ T31] ? __pfx_kthread+0x10/0x10 [ 357.805066][ T31] ret_from_fork_asm+0x1a/0x30 [ 357.809834][ T31] [ 357.813144][ T31] Kernel Offset: disabled [ 357.817488][ T31] Rebooting in 86400 seconds..