last executing test programs: 2m52.297826703s ago: executing program 3 (id=1758): r0 = socket(0x2b, 0x5, 0x7) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x972, 0x4, 0x5, 0x6, 0x4, 0x81, 0xe, {0x0, @in6={{0xa, 0x4e22, 0xfffffffc, @empty, 0x5}}, 0x4c7, 0xfa0, 0x3, 0x2, 0x8}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @local}}}, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x200000, 0x0, 0x400}, &(0x7f0000000200)=0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) getsockname$qrtr(r0, &(0x7f0000000300), &(0x7f0000000340)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @loopback}, 0x1b, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x1, 0x4}) getsockopt$sock_timeval(r0, 0x1, 0x57, &(0x7f0000000400), &(0x7f0000000440)=0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000004c0)={0x5, 0xc6, 0x45, 0x5, 0x6, 0x0, 0x9, 0x7, 0x2, 0x3, 0x7, 0x80, 0x1, 0xc5}, 0xe) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000540)={0x7, 0x8, '\x00', 0x0, &(0x7f0000000500)=[0x0]}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580)=r3, 0x4) recvfrom$l2tp(r0, &(0x7f00000005c0)=""/192, 0xc0, 0x101, &(0x7f0000000680)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000006c0)={r1, @in6={{0xa, 0x4e23, 0x100, @mcast2}}, 0x3, 0x4}, &(0x7f0000000780)=0x90) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000d80)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000ec0)=0xe8) sendmsg$unix(r0, &(0x7f0000000f40)={&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c40)="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", 0xff}], 0x1, &(0x7f0000000f00)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xffffffffffffffff}}}], 0x38, 0xc081}, 0x4044) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000f80)=@fragment={0x11, 0x0, 0x1, 0x1, 0x0, 0x8, 0x64}, 0x8) recvmsg$kcm(r0, &(0x7f0000001140)={&(0x7f0000000fc0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)=""/169, 0xa9}], 0x1}, 0x3000) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000001180), &(0x7f00000011c0)=0x4) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000001200)=r3, 0x4) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xac, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f37}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c4}]}, @TIPC_NLA_MON={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0xc020) 2m52.161884165s ago: executing program 3 (id=1762): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, '\x00', "877dab43c700", '\x00', "0100"}, 0x1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x201}, {0x80000006, 0xfc, 0x3, 0xfffffffd}]}, 0x10) 2m52.144523961s ago: executing program 1 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8003, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x400c1, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)={0x2ec, r11, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}, @ETHTOOL_A_EEE_MODES_OURS={0x2d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6b1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'team\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')#}&\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'I\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\\+\\(,.[\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'notify_peers_interval\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'team\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/}%@,!:}:-]-\'^\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'enabled\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}]}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "b75402920f5c63c45740825206376420a23d1858c8221bbb35fa356304c0f8d37ad6f89dc3bce6e18b6b30bb9ce4cf4b18aeadcb542a1b5e0753ddb040c67652832a83168e37013c7ef98574f790c5a71d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'netem\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'notify_peers_count\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^+%@\'\x99\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "a04d4b7e8f8c1b8928f034b5858aeb847c65dae2c6d335d4817e2fa8cbe2b34ca3f28f6e3293144a92f0bc158fd1fd9af4153d42cb437ffa13617fff357e2a37af614a1332bd384888ecac98a11ca87b83099558504b72c2b48a90bb67c839a7a49f8bce40a9f32c843bc4e8144e6c0c16a77ac544a212054f78dc769404a27ad21b6de5453bcd80cd5a7220211d902998af98e0edf56bf19d2474789f7adcdb7ee308b41f2db761afee8d2f87"}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20000001}, 0xe0) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x5c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x44, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}, @nested={0x3c, 0x64, 0x0, 0x1, [@nested={0x38, 0xcd, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @uid}, @nested={0x4, 0x62}, @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x145, 0x0, 0x0, @fd}, @nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @ipv4=@multicast2}]}]}]}]}]}, 0x5c}}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltclass={0x64, 0x29, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff1, 0xf}, {0xfff2, 0xa}, {0xb, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xa0}}, @TCA_RATE={0x6, 0x5, {0x20, 0x40}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x6}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xb5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x64}}, 0x0) r15 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r15, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0xffffffff, 0xfffffffc, {0x0, 0x0, 0x0, r13, {0x4, 0x9}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20054004) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev, @empty}, &(0x7f0000000140)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev}, &(0x7f00000001c0)=0xc) 2m52.088057152s ago: executing program 4 (id=1764): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe40c}, &(0x7f00000000c0)=0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000940)="48f3a6d09ef7d0010d3c33092b0c51188147167bb8642b28a7aeb6bb9b0580d67933c0e8a8452b5de90708da802756a9b74addd720afbf9f682ac44cb12b39633827f6f0a550084bce60c63641ade717f8f2f70738ee0c6ed3054123eee95fcfdf94b6810527be24c314d266756a01cc228713e52d324107a93178f10bdfd06cee628b406509994276a1bc695632aafb42f70dc29f6a0770e3bc310f2105", 0x9e}, {&(0x7f0000000700)="b558adee7f6146bc37c8a7712e286dc559ff1afcfa1b9c8ee36a059a361f93db", 0x20}], 0x2) accept4$unix(r6, 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000003440)=""/194, 0xc2, 0x4041, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x1}, 0x6) write(r5, &(0x7f0000000140)="01020000", 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=@delchain={0x2c, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfffb}, {}, {0xb, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8808}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000003180)={@loopback, @private}, &(0x7f00000031c0)=0xc) sendmsg$inet(r8, &(0x7f0000003340)={&(0x7f0000002d40)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000003140)=[{&(0x7f0000002d80)="ef7fc3b822b9776ba403cc346e6d84209df6a711a68e089decb5bfbd4e63b2eb411704634f999724d5a6b587828fec9e68257932eafe11da59f98251377ae5a6bd9604dec661160f921251e153c98ff38a87f5833d4f5083ed01f25807595c7c3bbcf77c3011808069df70d9b82b049b64c50403473c3783768d12586115160ce118cf38ffe1c06b5be47a1566ec425f9ab16c040b2a0e03662302f0b25e198a9b469adc01d31f4970f0efd89b3d196b478839137a7fe158d87e7b0926b2ea66e9eff6b562d9d2fde4895841d11a", 0xce}, {&(0x7f0000002e80)="ff3a01e0cfacbc6aaf8237bf946f243afcae6a0fc737f3f1d061d74ba5fb5d83dcfe3b37ef330badb9a2f1b26aa54dce3095ead78fa85b402236db1f8f9121d39a12a59ff6f2ab99c4260b74ea00e7f472798ab05dcfcd54f7d08e9e9c27baa8613c68652611bc47ff13bcb4e742ad4ebbdcd2538e3f574afb9a8d4b7d036856c65f41fdf6d9ad48d3786c7ab9e0ce4f6eb8b041739fbadd662ebcb95707c22d25f3c5728ae28bf6d55b2f85f003c156a1c0ddb60100b229dbe46b32568fa27ab9697497709916db9ed779db03aef398621b02d8b3da45ef451495ba", 0xdc}, {&(0x7f0000002f80)="09ffb75726fc807df06f0004f68b404da0548165c49bab5ed6f5e8597ff183294203ca16561889285c23260325a62c0617cfc5b26eb663df980bfa517c1acde48ea7dc6ddb27f2cdd7ff69e0befc2270a97bd55c83c670c7360c9eeeed8ceda3efb9508c2c30a78588890614d2d0c779fd05a76bd10c338aa425529065dbb54dbc9024632191e259cd1d8b6abc7a07caf076503a506ef76015c8db281312fd78d36ec8ad9e95c81df029c50ef7e44bf3e71a7e81fa75627db11408e6", 0xbc}, {&(0x7f0000003040)="7dc5f6805e3f49108b709c247d206c4349d93188425f09afb831ac5cdebe718e6be7d0d4abdbc7db59abac2d1be518fd4d387f982fd5ae802b282c7f2b436af7397b8ee658512937c747e29d1bef1679bb78007ce768a77dea5d6148b830fa26a512a558c8a1fb1e21ece84d496f95fd6442113bcaf71783e40dd7398cf06806c7b884d4d1dd7dbac9039bfcadb096a5682a2983de40fa7163bdc7d7051dd86869f8e38e50dc641e4946b116c5a1d8f3d793e56eb365ff2e8c0fe0cbd82f77f8a4783707883a7ec89e3a265d1224d4ffef4a6bfb342b5884d4", 0xd9}], 0x4, &(0x7f0000003200)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYBLOB="000000000000000000000000140000000000000000000000010000000100008000000000110000000000000000000000010000e201000000000000003c000000000000000000000007000000442c3a93ac1414aa00000010ac1e000100000009e0000001000099250a010102000000077f100001ffffff01000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="ffffffffe000000200000000140000000000000000000000010000000700000000000000140000000000000000000000020000000300000000000000140000000000000000000000020000000800000000000000"], 0x128}, 0x840) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) recvmmsg(r1, &(0x7f0000002c80)=[{{&(0x7f0000000100)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000080)}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000480)=""/31, 0x1f}], 0x5, &(0x7f0000000540)=""/59, 0x3b}}, {{&(0x7f0000000580)=@un=@abs, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/79, 0x4f}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000680)=""/17, 0x11}], 0x3, &(0x7f0000000700)=""/149, 0x95}, 0x3}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/43, 0x2b}, {&(0x7f0000000800)=""/151, 0x97}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/122, 0x7a}, {&(0x7f0000000a80)=""/174, 0xae}, {&(0x7f0000000b40)=""/53, 0x35}], 0x8, &(0x7f0000000c00)=""/49, 0x31}, 0xfff}], 0x3, 0x40002000, 0x0) 2m51.99581497s ago: executing program 3 (id=1767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x104004}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r5, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_ADD_TX_TS(r4, 0x0, 0x20000840) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, 0x0, 0x1) sendmsg$TIPC_NL_NET_GET(r4, 0x0, 0x4080) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000840)={0x1, 'caif0\x00', {}, 0xfffe}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, 0x0, 0x801) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r6) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001740)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60040010}, 0x20008800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m51.659062263s ago: executing program 1 (id=1771): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000001100011909006018008e42d47edf0000000000000900c2f297126960b033ebaa5a417a25c1970846a54cebe6bdcdb430e6888376a2856c1205e83f3a5b23d725e4917ca38dae7491ebd815df8fa689e0be0e4200224022add0c0456a3af957e6f69208c5ee7111a6ea06285a9eae03e13e6119a36447e87a85e26ef032df4864f1806d67f39f018a861419e4c366719bff48e0a5bac04397d9face6c2d7a14d77817bb2b864d761a365b10acbd1dbf06bef053c03b9f7cc6aa296c58b86498e11c2b7e28c3f58120a45a6aaf26b4147c4b7f8586117ec4ad02f4934c336dd8e2a7399ec86058ed3a454d02257f5b0fa5a9423cb8", @ANYRES32=r3, @ANYBLOB="d66a6d3987049224444a179cf6b8d8e2f60edb39e1bdecfa543902684a9352e6b700"/43], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 2m51.584201497s ago: executing program 4 (id=1772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) (async) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x3, 0xffff, 0xfffffffffffffe99}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) 2m51.320439953s ago: executing program 1 (id=1776): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x90) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xa, [@float={0xd, 0x0, 0x0, 0x10, 0x2}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0xf, 0x4}, {0x7}, {0x10, 0x4}, {0x6, 0x4}, {0x3}, {0x3, 0x5}, {0x2, 0x5}]}]}, {0x0, [0x41, 0x30, 0x0, 0x61, 0x2e, 0x0, 0x0, 0x61]}}, &(0x7f0000000340)=""/96, 0x7a, 0x60, 0x0, 0x6, 0x10000}, 0x28) (rerun: 64) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r3, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000000)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000fd0f000100000000000000000f000000", @ANYRES32=0x0, @ANYBLOB="84d00100000001000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b00000000000500110000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2m51.314855514s ago: executing program 4 (id=1777): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) unshare(0x20000400) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x0, 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r11, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa2aaaaaaaaaffffffffff08004500001c0008750000fb02907800000000e000030000009078006400d200"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r12, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005", @ANYBLOB="afb82e9fc5d8", @ANYRESDEC=r3, @ANYRES16=r3], 0x24}}, 0x0) 2m50.998615406s ago: executing program 3 (id=1780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) (async) bind$packet(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000036feafbffd3fd5d8600000000000000"], 0x14}}, 0x8081) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0xf3c, 0x0) (async) splice(r1, 0x0, r5, 0x0, 0xf3c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) splice(r5, &(0x7f00000001c0)=0x3, r3, &(0x7f0000000340), 0x8000000000000000, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000040001901feffffff00000000017c000006000600800a000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002800c00028005000100000000002c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa080007400000000018001280080001000000000051eda2c0d4390a087bb10282096906580305784f7220c2da3c2d9244b60ebb"], 0xa0}}, 0x0) 2m50.841514054s ago: executing program 1 (id=1782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r6}], 0x1, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x108}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000000c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r9) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r12, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r12, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40030}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x99}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 2m50.617133698s ago: executing program 4 (id=1784): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socket(0x1e, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 2m50.553064063s ago: executing program 3 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0x70bd2b, 0x0, {0xb, 0x7c}, [@typed={0x6, 0x6a, 0x0, 0x0, @str='\x84;'}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m50.492076143s ago: executing program 1 (id=1787): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffff, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1610538917aa875e9b6000000007aa56a33d100"}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r2, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) (async, rerun: 64) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) 2m50.43790164s ago: executing program 4 (id=1788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf253100000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2m50.285165837s ago: executing program 3 (id=1790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000500)="3b0e4690ee852c09d771b3cbbb5b", 0xe, 0x4048804, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@getaddr={0x14, 0x16, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x10801) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xc}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x8, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xb, 0xb}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x10) close(r6) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) (async) ioctl(r7, 0x9, &(0x7f0000000400)="a5c9f47938ed56f2a002f850a7ade0630b301f8e01cc06f2a1a78fd84f4ea4791f62fb73752bacba15c9eac710f239ae106e2327369bb15f02e69c5bcbb622f409b6d0dd10cd85270885906078c22a2405c8ec71f122a1627e01109f4b96a97181f56b9b210a8def7bd4082786e4dc54ba54acd46eebf63b97a4ffe64cee1cd89456ec8c") (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m50.226099365s ago: executing program 4 (id=1791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500000084fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000001fc0040"], 0x48}}, 0x0) 2m50.225587151s ago: executing program 1 (id=1792): socket$inet6(0xa, 0x4, 0x3) 2m49.716277766s ago: executing program 32 (id=1790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000500)="3b0e4690ee852c09d771b3cbbb5b", 0xe, 0x4048804, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@getaddr={0x14, 0x16, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x10801) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xc}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x8, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xb, 0xb}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x10) close(r6) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) (async) ioctl(r7, 0x9, &(0x7f0000000400)="a5c9f47938ed56f2a002f850a7ade0630b301f8e01cc06f2a1a78fd84f4ea4791f62fb73752bacba15c9eac710f239ae106e2327369bb15f02e69c5bcbb622f409b6d0dd10cd85270885906078c22a2405c8ec71f122a1627e01109f4b96a97181f56b9b210a8def7bd4082786e4dc54ba54acd46eebf63b97a4ffe64cee1cd89456ec8c") (async) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x22, 0x0, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m49.674802886s ago: executing program 33 (id=1792): socket$inet6(0xa, 0x4, 0x3) 2m49.667696155s ago: executing program 34 (id=1791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500000084fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000001fc0040"], 0x48}}, 0x0) 18.394090445s ago: executing program 6 (id=3510): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x69) 18.358110862s ago: executing program 0 (id=3512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 18.321736588s ago: executing program 6 (id=3513): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="8af9950154398bd7d46bc01387bc62bd40de7f9b28577d3655ccb77bd0080b2ae54e22df64bc9929c89de63d7955fec359479169a334285f14bac0370bac295ab1465e89d81014fcddb22eb697a5f1ebddb75dac26ef453e199e930ac700db5267fab6efa81c7862caf616826be7f07d66c2bd10f6998f74218eac5dee8730fbe4548d2694bf90959f70f81d9252c8ed4d1f0d5c3d82fb7e3885370704cbe32e523add617c333532f2e5c759399a934fb1d037b763ce8320aac536a796df79092c184caee0b68eeaf4cd325b1bc3328b5d7797b687a0b8abdf8ddd01442568ec", 0xe0}], 0x1, &(0x7f0000000200)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @op={0x18}], 0x48, 0x20000000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_xfrm(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c40)=@getsadinfo={0x1088, 0x23, 0x1, 0x70bd27, 0x25dfdbfe, 0x0, [@mark={0xc, 0x15, {0x35075b, 0x4}}, @algo_aead={0x104c, 0x12, {{'rfc4106(aegis256-generic)\x00'}, 0x8000, 0x180, "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"}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e23, @in=@multicast2}}]}, 0x1088}, 0x1, 0x0, 0x0, 0x50}, 0x50) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@rand_addr=0x64010140, 0x20, 0x0, 0x4e21, 0x0, 0xa}, {0xc3, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x8000000000000000, 0x100009, 0x53e5, 0x21}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@private=0xa010101, 0xfffffffd, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) 18.210005918s ago: executing program 0 (id=3515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaabcb0a0937aaaaaaaaaa8aca60e0ffac00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00fffc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 18.209558956s ago: executing program 6 (id=3516): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) openat$cgroup_ro(r4, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 18.058063701s ago: executing program 0 (id=3519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10, 0x0, r0}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r5 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r5, &(0x7f0000000280)=""/105, 0x69, 0x2001, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 18.056002459s ago: executing program 6 (id=3520): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2c, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r5, 0x228, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x28, r0, 0xb15, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x105}, 0x4) 17.979738517s ago: executing program 7 (id=3522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x14, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x400, 0x9, 0xdd, 0xc01, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f00000001c0)="f5e4381c5c670e2574d8e7e55d493296fbb80597b476400838fa035a5430e87189cbc472a39d5974840747a69b0967c41849e8829f2917fa75f49e31d69d0c", 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x0, 0x3, 0x0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7, 0x568f1896, 0x7}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x22, &(0x7f0000001900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x5, 0x3, 0x2, 0x6, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6582, 0x0, 0x0, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0x1, 0x3, 0xe, 0xffff, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x1000, &(0x7f0000000640)=""/4096, 0x41100, 0x21, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000540)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xa, 0xfff, 0x8b38}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001640)=[r7, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x0, 0x1, 0x6, 0x9}, {0x2, 0x3, 0xd}, {0x1, 0x5, 0x10}, {0x1, 0x5, 0x6, 0x9}, {0x3, 0x5, 0xb, 0x2}], 0x10, 0x123e34a9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f0000000480)={0x65ef, 0x0, 0x0, 0x4, 0x6, 0x4629, 0x3}, &(0x7f00000004c0)={0x2, 0x7c, 0x1, 0x8, 0x2, 0x7, 0x2, 0x3}, &(0x7f0000000500)={0x0, 0x2, 0x9, 0x1ff, 0x1, 0x4, 0x7f, 0x4}, &(0x7f0000001680)={0x77359400}, &(0x7f0000001a40)={&(0x7f00000016c0)={[0x5]}, 0x8}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r7) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f00000018c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001880)={&(0x7f00000003c0)={0x14, r8, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 17.805918195s ago: executing program 7 (id=3524): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x8d, 0xb, 0x4, 0x2, @empty, @private0, 0x8000, 0x700, 0x6, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x17, 0x2, 0x4, 0x40, @private1, @remote, 0x700, 0x8, 0x22bc0000, 0x8}}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x9b8, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x974, 0x1, [@m_simple={0x8c, 0xa, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x800, 0x7, 0x4, 0x0, 0x10000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4, 0x1, 0x6, 0x6e3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xb5ae, 0x6, 0x3, 0xfffeffff}}, @TCA_DEF_DATA={0x7, 0x3, 'ct\x00'}, @TCA_DEF_DATA={0x5, 0x3, '{'}]}, {0x5, 0x6, "f1"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0xb4, 0xf, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x73, 0x6, "b5f0022b139bccfdcbc20ad80753186c4a8ef226bb836f7ab658689bba263be0b6bafd6645f059ac216e0df2e9238d68b6dc1d2d1797e4c292c68c5cb308489e565b58e7db0f52e2cdccb10b9d67f5ceef0fb127f504ca4f795648517fde3361bbda4da4e6b91cb7ea81d315055588"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xb0, 0x1f, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x81}]}, {0x74, 0x6, "d8e6d81407aecc355c7f7e205989b9080a043985ea514c7c0689ce57865535e9e2c6e883cf5bcf81e3366e351bf3c9a109b38a913246a6dcb7017961bbb851dc3c3dce60a3a21cb9d8bb9d41d811c26adf81782b93b3741c6344b945ead2a1e9774e96106bc0792de128dbfd09ac7e0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xc4, 0xf, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x93, 0x6, "8149449fd7f06adf14782a336a1ed53feb463989c692cb65ce3f68e0cb35958e03a1c474e8d3ab01873995fcbd8a2a5f55265bf572d0166a7d8af2f12b90eb5389af4a999076e4ef1edca08ae937d6731662809c064be9320bdeba894d33f78452da85ccf4bb99b63335f211c17a67a8cd4f81a2fb32d4cb07e9b265ecf27d67e80d3d90d011534f74dd3b27856b36"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x194, 0x1e, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xc17c}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x5, 0x3, 0x7db7}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffe, 0x3, 0x4, 0xfffffeff, 0x6}, 0x4}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0xedf, 0x8, 0x0, 0x43}, 0x1}}]}, {0xd9, 0x6, "47aecea28cb61175661103160036e9ee62059edd9932589709ee317fb80b150fb831572dcc9a4f8984991dd3199129334b85483f0dc4ad1af4bfabd6e6dc3c118d1e708b7ccd0a96cbbee45389c93f32909f5d81c06f5ac2818829d1b74ef5411355334c2b7ec83e3f1998b61599beb15813092023dc99b2b109246aa04def20c101f74ef8b2a75afce71f1c649ea35aec72b25a0c2e5535be9657cb5e9f8d9fafcd3f48ae94afdf833078f4014969cdc2e4f5b5c68c9b129859261fa4ad0d02a673e05f7d800fc1f7627bae7a4d2462e47dd2771e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xcc, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x98, 0x6, 0xb, 0x2}, 0x0, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6d37, 0x3, 0xfffffff9, 0x200}, 0x4, r5}}]}, {0x60, 0x6, "e2c654ae630ca94a1260cfe59207b3e7b413127123c8318423278181bd97c5d2fa70e22f19f9f4f106bcdc40ea5878f20e7bf10c0e812ae8ccd89cb5a855a83e03ea9a77f85b5055d0e860c924c56cd151a1cc3474645163c76ad439"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xc8, 0x7, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x2a}}, @TCA_CT_ACTION={0x6, 0x3, 0x11}]}, {0x82, 0x6, "8bda57f09ecf6d10d0d5e03b12b91f71acd723fc4a949763eb02573406bfa04685d7b1b126569e7e6e339599ed3ee570d52c8eafd549aa2fe17d6d047d3ecf48e1697933f32e8e4141a898159e061f674df9ae1a781d1f0c029a48f9dfa0179427b7936ae48b07736c31fe46071d36484932d76a549702d4c607f797799d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x17c, 0x17, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}]}, {0xee, 0x6, "b9b613e4d449042fbf96a334eb1de40b4adbadda1ba9a7d7a5e3dd0565140e57596be909e597de2642bc03fab94ac8de4bbd88e9a897ef3e6fe164d8ae3330852a637dbd3e4da737a0ad037ffca0090749634e7a3524efec1cf5b34f449dc7c8bb19e024b92c22244ad44dfba7270799c451524d617c56ad0a330c5516c92446fffcaae32b90200a823e18c9ccfddba274485c4e99a5c485d1e092a5cab74ca18d899b10ab302287b802a1f6492882bfdc23aa5f582044f181bdf415ab8f0302f8cd21d8a9dd2f503a36493727161fe25c5fa38cb5911fb687a8ef71fb6a2bd49e9217537639c342d591"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x98, 0x0, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}]}, {0x5a, 0x6, "8043ae681ab279ffbb4e44d3bb58e632c58bba935832766fd1e32e0a29e9e4228b102d301ae25d8efe887a61f7e732bc8a06fad0272eaed2c1f075ebc406ad7888a52f79595193ed422cfeb94beaa8f1ccd0b0ec47f7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x180, 0x3, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xd6d, 0x2d60, 0xffffffffffffffff, 0x4, 0x84de}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x285, 0x7, 0x44, 0x2}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x2, 0x8, 0x3493, 0x74}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x7, 0x2, 0x1, 0x8}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x94, 0x3, 0x10000002, 0x0, 0x1}}]}, {0xcb, 0x6, "be1748abe293c53ca5c24e6632dd9fb3043414e7d048ce56ae10930f67cb71365c4c4c380a0a4a76d3d35089bb0e20cdabd02025f6712117739284a2bb44ae3b128079881ab5b0b824e1ad0f7fc769524ebf2a4fd5e06d149c2a61e840d2153ece934ae09209a4677d0f102e29725c7744def1f5833bc1d8183090b4cd7a6765007ea082cf35f3a22a1cf0e9d797088c16781dbb92e0a279b711866cee3b9668b7db92b05d7cf91d165160fb810662a75c5bccfc7144cbbb5bcff4377875c395c4454093fa9e1b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x9b8}}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0x10) 17.805175244s ago: executing program 6 (id=3525): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$sock_proto_private(r4, 0x89e8, &(0x7f0000000b80)="da745502116f7ffad3799cc22bbf26d5ad3fb0579fc54bd68266f6bf416c1ca6538e59ff49d662f639") 17.803809432s ago: executing program 0 (id=3526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`'], 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) syz_emit_ethernet(0x55, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000, "ca99336ab6236f0eb9526eaec75b9baa5e6fe331efaa837fcb1dab95797cf14519b61655ef4843635a3cf3e0e1797f409270e0f3b4106700f9677608b80fa0d2f728a5"}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) 17.674340865s ago: executing program 2 (id=3527): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x114, 0x71, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r4, @ANYBLOB="830405000000128008000100677265001c00028008000600ac1414bb06000e000100000006000f00b74b000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 17.53236654s ago: executing program 0 (id=3528): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x6, 0x803, 0x1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc1bc}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x40000d0) bind$x25(r2, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) close(0x3) close(0xffffffffffffffff) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r8, 0x10c, 0x6, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) recvfrom$rxrpc(r5, 0x0, 0x0, 0x2003, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r9, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00fff60000000000140012800900010076657468000000000400028008000a007d1cc2cdcc3ab10af89f902b7ac55233ca85092fb4e18bea6b4cf600046140ede6482c2f60255bae2270844176f7f84f5badef106f0015ff6a8e909d4684cb761828b59c3b6ef05c7f415514dcd3c86cbac24bad27aef9304a069570088aa741f3028922203b9eb080ddc5278f5ce3b2904f3c98da3b552682dd99ddeeccbb2c79354059239e2722bc88d64ecb9f759ce45659fe8f82c578a85ec88fdfda8524b44d8e6bbbec58fa6e5ab79e5ceaf17f62a665", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000180)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) 16.851873456s ago: executing program 0 (id=3530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r7}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x6c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r9, 0x2, {0x1, 0x0, 0x2}}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000008ed988dd2ca4b33e70323da7de7b26dfc9c2d7ec1ed2de97d6c51eac2b1a9bb31f85c96917912a4af5fcd0e5ec15170c99472911dae9f84551d5ed33b6df14b71a2685369f7fab4154c16c64ef2066901aea877828f4357f6a7cfec82b760d2f000a084a402919e8f464e43b7939e2a1a7d04be9b78158ce5a47880189fceff2d5486301059642151bffd0829f70f7dba2de6c13f42b08ef6cbfe4b90edde5d58838f4477d3d1d4f4b8daad28be4405ea55d4f324d32181f653bea1c8b53bc65dad5e209dced1b6876a7bef7c5e0196667612a37b9", @ANYRES16=r12, @ANYBLOB="010027bd7800fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002f000b0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r13, 0x20, &(0x7f0000000040)={&(0x7f0000000200)=""/168, 0xa8, 0x0, &(0x7f0000000600)=""/221, 0xdd}}, 0x10) 16.835026376s ago: executing program 7 (id=3531): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r4) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x1bd, 0x9ffffd}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x0) r5 = socket(0x10, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmsg$inet(r6, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07d7a752d0e0b473e20e9000e8d84c45b8cee37faef5a633c0d97e7f1f1a0f420083a61c580df65c76fb5d98ea9d1e736d866585548ba3a73fc477f58ca764e7fb9277a226c919119d6bf57b3d469efe9f82475877cf7afac9e8edf7502b7af12c1c8f5e7a01d1d7cf1313854b7f49f985fb7865068d3b35bb64ed808df49e7d43ede3ba88a46cbf0ad62d6a8827c5b1666aac8a3dcb4d576896ec553f4f03d0dc0cd6f0b66c535c203bdf51c0fdba9d5cbf91f8b0888d9bbc70d415ae9e2473458cc6adcce77401219cb811e5de41ddc374c4d2e5ef8d55b9fbc22cbd8ec28815eb2d47f711761b2b3c3c1f9b2dab2e0358041ad57fc4c40162f5353c56afafa51c3483bcaf3ae1268ad8adccd9111a24a93ffd3a94468aec075e65a1a40527add2034ae0174fe5cbf499d72ec049a48d28b997de505d6fa4d8456b9120159227876cd255361d173c6ea33b5969062c846640ef", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) 16.820588957s ago: executing program 6 (id=3532): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x210, 0xfeffffff, 0x150, 0x210, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc02"], 0x58}, 0x1, 0x2}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x40008c0) 16.818236216s ago: executing program 2 (id=3534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x1e0, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57105b, 0xc574450d1af3b5bc}, [@IFLA_VFINFO_LIST={0x1ac, 0x16, 0x0, 0x1, [{0xa8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x20000000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x59f, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffffa, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x3ff, @remote}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x93d, 0x1ff, 0x8100}}, {0x14, 0x1, {0x7, 0x113, 0x57, 0x8100}}, {0x14, 0x1, {0x5a, 0xa74, 0xa, 0x88a8}}]}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80, 0x10}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7ff, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x25c, 0xff}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffffe}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0xb}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x1}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x10}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x810, 0x3ff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xe9, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3bd, 0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffff1, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xff, 0xa}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xc, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x40, 0x3}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 16.589911645s ago: executing program 2 (id=3535): r0 = socket(0x40000000015, 0x5, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x2, 0x3}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34045803}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4c094) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@allocspi={0x168, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x70bd2b}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00', 0xfffffffe}]}, @lifetime_val={0x24, 0x9, {0x5, 0x80000000, 0x8, 0x6}}]}, 0x168}}, 0x20000800) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8629f05e03c71a0d}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0xb, 0x401, 0x0, 0x0, {0x9, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xa, 0x1, 'vlan1\x00'}]}, 0x30}}, 0x0) 16.425418861s ago: executing program 2 (id=3537): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x40, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) bind$tipc(r2, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x0, 0x1003, 0xcc8b, 0x9, 0xb]}, &(0x7f0000000280)=0x54) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "8763c1e5966c6af2", "8e083700daf38a6d69e9b5e9c2f133d7", '\x00', "12772541f8eb02bb"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000004002) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, &(0x7f00000004c0)=0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES16=r4, @ANYRES64=r0, @ANYRESHEX=r2, @ANYRES8=r2, @ANYRES16=0x0, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xf}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0xfd, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x18) 15.97526572s ago: executing program 5 (id=3540): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_coalesce={0xe, 0xb169, 0x9, 0xfffffffd, 0x4, 0x9, 0x8, 0x20000, 0xfff, 0x10000, 0x8000, 0x7, 0x4, 0x8, 0x8001, 0x1, 0x5, 0xfffffffd, 0x2400, 0x3, 0x9, 0xede, 0x80000000}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)='}', 0x1}, {&(0x7f00000003c0)="3698b65f151d46706787d0fcebdb2d193eb7e2db7836b052abe6f39aa4bab4cb53999fd5d8d703753a178de863cd64d2191637f6062da9dd9af82025baf393", 0x3f}], 0x3}}], 0x1, 0x4400c800) sendto$inet6(r3, &(0x7f0000000240)="5cf3ac579e00", 0x6, 0x0, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESHEX=r2], 0x10) 15.845854497s ago: executing program 2 (id=3541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000180900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x1c, 0x0, 0x0, "701916572366"}}) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000a0a05000800084000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}, [{0xc}, {0x0, 0x200000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x66}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0x5, 0xffff}, {0x9, 0xffe8}}}, 0x24}}, 0x4000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000000880)={&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)=""/142, 0x8e}, {&(0x7f0000000740)=""/115, 0x73}, {&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x4, &(0x7f0000003180)=""/4096, 0x1000}, 0x2102) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) recvfrom$inet6(r9, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff000000007111bf00000000008510000002000000850006000000000095000810000000009541f0366e402759"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="91e004000001010008000a00", @ANYRES32=r11, @ANYBLOB="0800c7c60500", @ANYRES32=r7, @ANYBLOB="050021000a000000"], 0x38}, 0x1, 0x0, 0x0, 0x204c800}, 0x4) 15.844572729s ago: executing program 5 (id=3542): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4002014}, 0x4040088) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000dd2efd31d36481ceec2bfbef2f9248ba3506f0bb5904a2"], &(0x7f0000000040)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 15.841323137s ago: executing program 7 (id=3543): ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000380)=""/41, 0x29}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000600)=""/170, 0xaa}, {&(0x7f0000000880)=""/144, 0x90}], 0x5, &(0x7f0000000780)=""/58, 0x3a}, 0x2}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000000940)=""/27, 0x1b}, {&(0x7f0000000980)=""/4089, 0xff9}, {&(0x7f0000001980)=""/192, 0xc0}, {&(0x7f0000001a40)=""/52, 0x34}, {&(0x7f0000001a80)=""/41, 0x29}], 0x5, &(0x7f0000001b40)=""/9, 0x9}, 0x100}, {{&(0x7f0000001b80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000001c00)=""/128, 0x80}, {&(0x7f0000001c80)=""/130, 0x82}, {&(0x7f0000001d40)=""/6, 0x6}, {&(0x7f0000001d80)=""/64, 0x40}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/128, 0x80}], 0x7}, 0x1}, {{&(0x7f0000003ec0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000004100)=[{&(0x7f0000003f40)=""/25, 0x19}, {&(0x7f0000003f80)=""/237, 0xed}, {&(0x7f0000004080)=""/14, 0xe}, {&(0x7f00000040c0)=""/55, 0x37}], 0x4, &(0x7f0000004140)=""/147, 0x93}, 0x4}, {{&(0x7f0000004200)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004280)=""/246, 0xf6}], 0x1, &(0x7f00000043c0)=""/123, 0x7b}, 0x7964}], 0x6, 0x40002000, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x81}, 0xc000) poll(&(0x7f0000000740)=[{r2, 0xa403}], 0x1, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="81f21830a7c39b4fffaf78d72d000000fc0003000000907800195d5200d200cf7a5f2f7ce9f15154588928b70ca953deb3c2c10f27bf8683838db6b2567c6bc2556fdce3fac020cff6ae188b8c829a00d8dd9d0e299f04f09257b400111eff90a5179080daaf5401332e575d1bd9d95d9282718fd17bd6e3058fd7eb7e8322ebcb689272ea167ad4d1d58ea9ba0f0296a7c9f4df2146b2e5f3ee653e0cd1bbb7f6fb270a0fd39f46379613001b8235aae3abaa"], 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000c14010025bd7000fcdb9f2508003d000000080008000300000000000101010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r8 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8943, &(0x7f0000000080)={'macvtap0\x00', 0x57e6}) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtclass={0x74, 0x28, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x2, 0xd}, {0xc, 0x1}, {0xf, 0xf}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0xc6, 0x37}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x81, 0x4b}}, @TCA_RATE={0x6, 0x5, {0xc, 0x4}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) 15.669696627s ago: executing program 7 (id=3544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newtclass={0x48, 0x28, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0x2}, {0xd, 0xfff3}, {0x5, 0x10}}, [@tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @tclass_kind_options=@c_mq={0x7}]}, 0x48}}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x60}}, 0x0) 15.613771224s ago: executing program 5 (id=3545): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @broadcast}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="61a000fe00000000691086000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={r3, 0x5, 0x310, 0xffffffff, 0x5b33, 0xb}, 0x14) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={r3, 0x5, 0x310, 0xffffffff, 0x5b33, 0xb}, 0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000040)="01003840500d9136", 0x8) 15.554837923s ago: executing program 2 (id=3546): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) getpeername(r0, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 15.548831301s ago: executing program 7 (id=3547): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="a90d0100000000000000ef11f3c90ed7000005000000bdb26ec500001247c807662b5203fd5b7eae7a0b9e47a35e1b0cb39d6dcf134f21139356778f"], 0x14}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, &(0x7f0000001040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r5) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008011}, 0x4004c074) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x5c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000070}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r7, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r7, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.445821674s ago: executing program 5 (id=3548): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071106f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="392b5766e5", 0x5}], 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) (async, rerun: 64) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10) (async, rerun: 64) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x62b8, 0x4) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) connect$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x285a3979f803ea0d, {{0x1}, 0x3}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x5, 0x1000, 0xffffffffffffffff, 0xe}, 0x48) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socket(0x1d, 0x4, 0x1) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x34, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x808}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) 15.216019697s ago: executing program 5 (id=3549): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2b, 0x7, 0x2, 0xa, 0x2, @empty, @mcast1, 0x8000, 0x80, 0x4, 0xcc}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000012c0), 0x4) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) (async) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x1) (async) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r7, 0x7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x100) (async) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)='%+9llu \x00'}, 0x20) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r12, 0xd7735000) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x110, r2, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x13, 0x0, 0x24, 0x6de, 0x1010, 0x1, 0x3, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2}, 0x2d) (async) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1b00000000000000000000004401000000000000a564a583abd1819ab7b919645c7f22169b61cac583efc8e9a4e4d5199663e670e806da03f74a50fe0867d1e832df01ad8c5ffaf8e8ef40492200d4d48c89a12d7d470b9942a5a910c23b5cec1d35855d4ba1", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000500"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x12, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @alu={0x7, 0x1, 0x6, 0x8, 0x6, 0x10, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0xf, 0x1000, &(0x7f00000002c0)=""/4096, 0x81e00, 0x0, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000001300)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0x3, 0x7, 0xe, 0xd}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001540)=[r11, r12, r13, r14, r15], &(0x7f0000001580)=[{0x5, 0x3, 0x6, 0x4}]}, 0x94) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e00070127bd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="08000280725eb86208000700", @ANYRES32=0x0, @ANYBLOB="3299ddd5d8c6b065b0a77b8294431cb7f298f629ed407e4e9edf14a4b687ab8fcd4d07ea5997a6efdc9797346b3b1d542e0e3727ab3f953b3862"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 15.215410378s ago: executing program 5 (id=3550): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async) recvmmsg(r2, &(0x7f0000000900), 0x40000000000002a, 0x40000161, 0x0) (async) recvmsg(r2, &(0x7f00000006c0)={&(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x2, &(0x7f0000000600)=""/136, 0x88}, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000700)) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x12c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf07f2287b6fba1b1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xe4, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcb6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1a9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf4}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc810}, 0x4010) socketpair(0x1f, 0x80000, 0x6, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0xd, 0xa, 0x180, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc0) (async) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.183275859s ago: executing program 35 (id=3530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r7}, 0x20) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)={0x6c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r9, 0x2, {0x1, 0x0, 0x2}}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000008ed988dd2ca4b33e70323da7de7b26dfc9c2d7ec1ed2de97d6c51eac2b1a9bb31f85c96917912a4af5fcd0e5ec15170c99472911dae9f84551d5ed33b6df14b71a2685369f7fab4154c16c64ef2066901aea877828f4357f6a7cfec82b760d2f000a084a402919e8f464e43b7939e2a1a7d04be9b78158ce5a47880189fceff2d5486301059642151bffd0829f70f7dba2de6c13f42b08ef6cbfe4b90edde5d58838f4477d3d1d4f4b8daad28be4405ea55d4f324d32181f653bea1c8b53bc65dad5e209dced1b6876a7bef7c5e0196667612a37b9", @ANYRES16=r12, @ANYBLOB="010027bd7800fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002f000b0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r13, 0x20, &(0x7f0000000040)={&(0x7f0000000200)=""/168, 0xa8, 0x0, &(0x7f0000000600)=""/221, 0xdd}}, 0x10) 1.147140051s ago: executing program 36 (id=3532): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x210, 0xfeffffff, 0x150, 0x210, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc02"], 0x58}, 0x1, 0x2}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x40008c0) 106.611951ms ago: executing program 37 (id=3546): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) getpeername(r0, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 70.885174ms ago: executing program 38 (id=3550): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901", 0x3d}], 0x1}, 0x48002) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async) recvmmsg(r2, &(0x7f0000000900), 0x40000000000002a, 0x40000161, 0x0) (async) recvmsg(r2, &(0x7f00000006c0)={&(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x2, &(0x7f0000000600)=""/136, 0x88}, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000700)) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x12c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf07f2287b6fba1b1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xe4, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcb6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1a9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf4}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc810}, 0x4010) socketpair(0x1f, 0x80000, 0x6, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0xd, 0xa, 0x180, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc0) (async) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 0s ago: executing program 39 (id=3547): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="a90d0100000000000000ef11f3c90ed7000005000000bdb26ec500001247c807662b5203fd5b7eae7a0b9e47a35e1b0cb39d6dcf134f21139356778f"], 0x14}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, &(0x7f0000001040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r5) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008011}, 0x4004c074) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x5c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000070}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r7, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r7, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): syz.2.2597 forgot to set AF_INET. Fix it! [ 304.912450][T15315] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2598'. [ 304.954950][T15319] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 305.257372][T15323] lo speed is unknown, defaulting to 1000 [ 305.334017][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2604'. [ 305.344663][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2604'. [ 305.490434][T15339] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2604'. [ 305.802013][T15360] netlink: 'syz.7.2607': attribute type 1 has an invalid length. [ 305.840424][T15360] netlink: 'syz.7.2607': attribute type 1 has an invalid length. [ 305.922843][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'. [ 305.994768][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2609'. [ 306.066592][T15369] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2611'. [ 306.111517][T15371] tipc: Enabled bearer , priority 0 [ 306.169090][T15375] syzkaller0: entered promiscuous mode [ 306.174621][T15375] syzkaller0: entered allmulticast mode [ 306.392394][T15388] netlink: 'syz.5.2616': attribute type 11 has an invalid length. [ 306.413547][T15371] tipc: Resetting bearer [ 306.458783][T15389] netlink: 'syz.7.2614': attribute type 4 has an invalid length. [ 306.486840][T15370] tipc: Resetting bearer [ 306.517632][T15370] tipc: Disabling bearer [ 306.532730][T15397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2617'. [ 306.576993][T15400] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2619'. [ 306.806629][T15413] º: renamed from veth1_vlan (while UP) [ 306.846704][T15415] netlink: 'syz.6.2624': attribute type 1 has an invalid length. [ 306.884306][T15415] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 307.006729][T15426] tipc: Enabling of bearer rejected, failed to enable media [ 307.316464][T15448] netlink: 'syz.2.2632': attribute type 12 has an invalid length. [ 307.327695][T15448] netlink: 'syz.2.2632': attribute type 29 has an invalid length. [ 307.512350][T15465] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 308.020179][T15494] ip6tnl0: Caught tx_queue_len zero misconfig [ 308.052458][T15499] netlink: zone id is out of range [ 308.061493][T15499] netlink: zone id is out of range [ 308.066648][T15499] netlink: zone id is out of range [ 308.099164][T15500] netlink: zone id is out of range [ 308.104410][T15500] netlink: zone id is out of range [ 308.106157][T15499] netlink: zone id is out of range [ 308.114966][T15500] netlink: zone id is out of range [ 308.119615][T15499] netlink: zone id is out of range [ 308.130212][T15500] netlink: zone id is out of range [ 308.139469][T15500] netlink: zone id is out of range [ 308.332069][T15517] ip6gre2: entered promiscuous mode [ 308.337345][T15517] ip6gre2: entered allmulticast mode [ 308.385742][T15523] tipc: Enabled bearer , priority 0 [ 308.394530][ T56] block nbd0: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 150 seconds [ 308.398695][T15523] syzkaller0: entered promiscuous mode [ 308.405907][ T56] block nbd0: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 150 seconds [ 308.422081][ T56] block nbd0: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 150 seconds [ 308.434100][ T56] block nbd0: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 150 seconds [ 308.447016][T15523] syzkaller0: entered allmulticast mode [ 308.577959][T15522] tipc: Resetting bearer [ 308.657699][T15522] tipc: Disabling bearer [ 309.693531][T15585] __nla_validate_parse: 20 callbacks suppressed [ 309.693553][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2677'. [ 309.729289][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2677'. [ 309.753125][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2679'. [ 309.806574][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2677'. [ 309.830031][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2677'. [ 309.842828][T15592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2679'. [ 309.860385][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2677'. [ 309.928204][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2677'. [ 309.957851][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2677'. [ 309.981131][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2677'. [ 310.314482][T15621] xt_TCPMSS: Only works on TCP SYN packets [ 310.535251][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.570200][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.588200][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.644742][T15636] IPVS: length: 171 != 24 [ 310.813130][T15634] validate_nla: 45 callbacks suppressed [ 310.813151][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.846235][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.864222][T15643] dvmrp8: entered allmulticast mode [ 310.887551][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.897842][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.903209][T15643] netlink: 'syz.0.2695': attribute type 10 has an invalid length. [ 310.908904][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.923668][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.933293][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 310.955865][T15645] netlink: 'syz.0.2695': attribute type 10 has an invalid length. [ 310.955895][T15643] dummy0: left allmulticast mode [ 310.992904][T15643] dummy0: left promiscuous mode [ 310.998193][T15643] bridge0: port 4(dummy0) entered disabled state [ 311.015911][T15643] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 311.024983][T15643] team0: Failed to send options change via netlink (err -105) [ 311.032948][T15643] team0: Port device dummy0 added [ 311.040000][T15634] netlink: 'syz.5.2691': attribute type 2 has an invalid length. [ 311.053024][T15645] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 311.072085][T15645] team0: Failed to send options change via netlink (err -105) [ 311.080387][T15645] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 311.099072][T15645] team0: Port device dummy0 removed [ 311.110544][T15645] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 311.410754][T15666] 8021q: VLANs not supported on ip_vti0 [ 311.436356][T15664] sctp: [Deprecated]: syz.2.2702 (pid 15664) Use of int in max_burst socket option deprecated. [ 311.436356][T15664] Use struct sctp_assoc_value instead [ 312.105083][T15711] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.133517][T15711] bond0: (slave team0): Enslaving as an active interface with an up link [ 312.932043][T15760] bridge_slave_0: left allmulticast mode [ 312.937750][T15760] bridge_slave_0: left promiscuous mode [ 312.946982][T15760] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.966456][T15760] bridge_slave_1: left allmulticast mode [ 313.005176][T15760] bridge_slave_1: left promiscuous mode [ 313.015563][T15760] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.050520][T15760] bond0: (slave bond_slave_0): Releasing backup interface [ 313.065804][T15760] bond0: (slave bond_slave_1): Releasing backup interface [ 313.090521][T15760] team0: Port device team_slave_0 removed [ 313.102850][T15760] team0: Port device team_slave_1 removed [ 313.110119][T15760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.117518][T15760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.126685][T15760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.134457][T15760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.144675][T15760] net_ratelimit: 20 callbacks suppressed [ 313.144690][T15760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 313.167746][T15758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.175622][T15758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.184277][T15758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.192530][T15758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.464106][T15780] syzkaller0: entered promiscuous mode [ 313.488609][T15780] syzkaller0: entered allmulticast mode [ 313.531141][T15780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.538433][T15780] IPv6: NLM_F_CREATE should be set when creating new route [ 313.545847][T15780] IPv6: NLM_F_CREATE should be set when creating new route [ 313.553137][T15780] IPv6: NLM_F_CREATE should be set when creating new route [ 313.592993][T15780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.716553][T15797] 8021q: VLANs not supported on vxcan1 [ 313.800529][T15797] veth1: entered promiscuous mode [ 313.839796][T15797] gretap0: entered promiscuous mode [ 314.271842][ T10] IPVS: starting estimator thread 0... [ 314.390321][T15831] IPVS: using max 25 ests per chain, 60000 per kthread [ 314.774378][T15861] bond11: entered promiscuous mode [ 314.782140][T15861] 8021q: adding VLAN 0 to HW filter on device bond11 [ 314.798669][T15864] __nla_validate_parse: 75 callbacks suppressed [ 314.798691][T15864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2763'. [ 314.987326][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2764'. [ 315.053470][T15877] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2765'. [ 315.086302][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2764'. [ 315.130558][T15881] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 315.183259][T15881] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2767'. [ 315.289614][T15886] 8021q: adding VLAN 0 to HW filter on device bond12 [ 315.341934][T15886] bond8: (slave veth0_to_bond): Releasing active interface [ 315.394772][T15886] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 315.470922][T15889] bond12: (slave veth9): Enslaving as an active interface with a down link [ 315.507253][T15899] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2770'. [ 315.822586][T15916] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2773'. [ 315.907151][T15920] syzkaller1: entered promiscuous mode [ 315.948132][T15920] syzkaller1: entered allmulticast mode [ 315.979639][T15920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2774'. [ 316.043682][T15927] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2776'. [ 316.220561][T15929] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2777'. [ 316.465436][T15948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.491262][T15948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.502536][T15948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 316.602581][T15962] sctp: [Deprecated]: syz.6.2786 (pid 15962) Use of int in maxseg socket option. [ 316.602581][T15962] Use struct sctp_assoc_value instead [ 316.642393][T15948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.660542][T15948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.676743][T15948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 316.813154][T15948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.827297][T15948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.854602][T15948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 317.021476][T15948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.037432][T15948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.050180][T15948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 317.340293][ T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.358585][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.399681][ T37] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.474421][ T7574] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.493185][ T7574] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.527661][ T7574] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.614127][T11196] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.626102][T11196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.633522][ T7574] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.643259][ T7574] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.653582][T11196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.661408][ T7574] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.677548][T11196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.691532][T11196] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.701562][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.711265][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 317.726430][ T37] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.741354][ T7574] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.822769][ T7574] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.841531][T16004] validate_nla: 16 callbacks suppressed [ 317.841551][T16004] netlink: 'syz.6.2796': attribute type 2 has an invalid length. [ 317.855989][T15995] lo speed is unknown, defaulting to 1000 [ 317.874186][ T7574] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.940332][ T7574] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.156432][ T7574] bond1: left promiscuous mode [ 318.164234][ T7574] bridge0: port 3(bond1) entered disabled state [ 318.176483][ T7574] bridge_slave_1: left allmulticast mode [ 318.183028][ T7574] bridge_slave_1: left promiscuous mode [ 318.189294][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.200182][ T7574] bridge_slave_0: left allmulticast mode [ 318.212995][ T7574] bridge_slave_0: left promiscuous mode [ 318.227386][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.533836][T16027] ip6t_srh: unknown srh invflags 4000 [ 318.655520][T16031] netlink: 'syz.0.2803': attribute type 1 has an invalid length. [ 318.874999][ T7574] bond9 (unregistering): (slave gretap2): Releasing active interface [ 318.884544][ T7574] gretap2 (unregistering): left allmulticast mode [ 318.982817][ T7574] dvmrp0 (unregistering): left allmulticast mode [ 319.015502][ T7574] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 319.061267][ T7574] team0: Port device geneve0 removed [ 319.239616][ T7574] bond10 (unregistering): (slave bridge2): Releasing active interface [ 319.544737][ T7574] bond1 (unregistering): Released all slaves [ 319.560314][ T7574] bond2 (unregistering): Released all slaves [ 319.657318][ T7574] bond3 (unregistering): Released all slaves [ 319.672661][ T7574] bond4 (unregistering): Released all slaves [ 319.686814][ T7574] bond5 (unregistering): Released all slaves [ 319.701365][ T7574] bond6 (unregistering): Released all slaves [ 319.718801][ T7574] bond7 (unregistering): Released all slaves [ 319.750200][T11196] Bluetooth: hci4: command tx timeout [ 319.832538][ T7574] bond8 (unregistering): (slave veth5): Releasing active interface [ 319.842987][ T7574] bond8 (unregistering): (slave veth7): Releasing active interface [ 319.852731][ T7574] bond8 (unregistering): Released all slaves [ 319.867911][ T7574] bond9 (unregistering): Released all slaves [ 319.882905][ T7574] bond10 (unregistering): Released all slaves [ 319.897894][ T7574] bond0 (unregistering): Released all slaves [ 319.996018][ T7574] bond11 (unregistering): Released all slaves [ 320.092941][ T7574] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 320.105737][ T7574] bond12 (unregistering): (slave veth9): Releasing active interface [ 320.115524][ T7574] bond12 (unregistering): Released all slaves [ 320.476824][T16057] lo speed is unknown, defaulting to 1000 [ 320.868872][T15995] chnl_net:caif_netlink_parms(): no params data found [ 320.969730][T16086] netlink: 'syz.5.2816': attribute type 2 has an invalid length. [ 321.000236][T16084] bond0: Caught tx_queue_len zero misconfig [ 321.132426][T16086] 9: entered promiscuous mode [ 321.265751][T16101] xt_addrtype: ipv6 does not support BROADCAST matching [ 321.361433][T16106] netlink: 'syz.0.2820': attribute type 10 has an invalid length. [ 321.395106][T16106] __nla_validate_parse: 5 callbacks suppressed [ 321.395127][T16106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2820'. [ 321.442592][T16106] batadv0: entered promiscuous mode [ 321.448137][T16106] batadv0: entered allmulticast mode [ 321.454605][T16106] bridge0: port 4(batadv0) entered blocking state [ 321.461730][T16106] bridge0: port 4(batadv0) entered disabled state [ 321.470885][T16106] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 321.511069][T15995] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.519355][T15995] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.526742][T15995] bridge_slave_0: entered allmulticast mode [ 321.535191][T15995] bridge_slave_0: entered promiscuous mode [ 321.547506][T15995] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.571573][T15995] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.579025][T15995] bridge_slave_1: entered allmulticast mode [ 321.592246][T15995] bridge_slave_1: entered promiscuous mode [ 321.765310][T15995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.806151][T15995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.830873][T11196] Bluetooth: hci4: command tx timeout [ 321.850984][ T7574] : left promiscuous mode [ 321.934173][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2826'. [ 321.973530][T16133] Unsupported ieee802154 address type: 0 [ 321.983766][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2828'. [ 322.135732][T16127] hsr_slave_0 (unregistering): left promiscuous mode [ 322.147338][ T7574] tipc: Disabling bearer [ 322.154335][ T7574] tipc: Disabling bearer [ 322.162874][ T7574] tipc: Left network mode [ 322.260490][T15995] team0: Port device team_slave_0 added [ 322.306341][T15995] team0: Port device team_slave_1 added [ 322.366558][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2831'. [ 322.401518][T16144] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 322.412626][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2831'. [ 322.445400][T16144] bond1 (unregistering): Released all slaves [ 322.483812][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.621456][T15995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.636137][T15995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.665614][T15995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.683524][T15995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.691316][T15995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.737590][T15995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.965885][T15995] hsr_slave_0: entered promiscuous mode [ 322.999170][T15995] hsr_slave_1: entered promiscuous mode [ 323.005765][T15995] debugfs: 'hsr0' already exists in 'hsr' [ 323.016398][T15995] Cannot create hsr debugfs directory [ 323.143605][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 323.155463][T16171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.178887][T16179] openvswitch: netlink: Flow actions attr not present in new flow. [ 323.263808][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2843'. [ 323.288229][T16183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2843'. [ 323.366206][T16186] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 323.384190][T16186] bond6 (unregistering): Released all slaves [ 323.393122][T16190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2845'. [ 323.500236][T16194] netlink: 'syz.6.2846': attribute type 4 has an invalid length. [ 323.553206][T16196] netlink: 'syz.6.2846': attribute type 1 has an invalid length. [ 323.667236][T16196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.700185][T16207] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2850'. [ 323.702501][T16202] bridge0: port 4(ipvlan3) entered blocking state [ 323.716173][T16202] bridge0: port 4(ipvlan3) entered disabled state [ 323.729435][T16202] ipvlan3: entered allmulticast mode [ 323.734819][T16202] bridge0: entered allmulticast mode [ 323.742799][T16202] ipvlan3: left allmulticast mode [ 323.747868][T16202] bridge0: left allmulticast mode [ 323.877970][T16194] bond2: (slave veth7): Enslaving as an active interface with a down link [ 323.908848][T11196] Bluetooth: hci4: command tx timeout [ 323.948025][T16196] veth9: entered promiscuous mode [ 323.966002][T16196] bond2: (slave veth9): Enslaving as an active interface with a down link [ 323.975331][T16201] tipc: Enabled bearer , priority 0 [ 324.014253][T16211] syzkaller0: entered promiscuous mode [ 324.019980][T16211] syzkaller0: entered allmulticast mode [ 324.034902][T16206] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 324.070994][T16201] tipc: Resetting bearer [ 324.086240][ T7574] hsr_slave_0: left promiscuous mode [ 324.092901][ T7574] hsr_slave_1: left promiscuous mode [ 324.100624][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.109316][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.253300][ T7574] pimreg (unregistering): left allmulticast mode [ 324.702606][ T7574] team0 (unregistering): Port device team_slave_1 removed [ 324.744130][ T7574] team0 (unregistering): Port device team_slave_0 removed [ 324.752633][ T5920] smc: removing ib device !yz! [ 325.095370][T16200] tipc: Resetting bearer [ 325.115110][T16200] tipc: Disabling bearer [ 325.151880][ T7980] tipc: Node number set to 3599137352 [ 325.314441][T16235] netlink: 'syz.7.2854': attribute type 4 has an invalid length. [ 325.480243][T16240] netlink: 'syz.5.2855': attribute type 83 has an invalid length. [ 325.938758][T16254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.988653][T11196] Bluetooth: hci4: command tx timeout [ 326.390256][T15995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.453339][T15995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.505676][T16280] team0: Caught tx_queue_len zero misconfig [ 326.545499][T16289] __nla_validate_parse: 3 callbacks suppressed [ 326.545519][T16289] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2867'. [ 326.571164][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2866'. [ 326.572105][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2867'. [ 326.580206][T15995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.796405][T15995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.145141][T16313] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2874'. [ 327.233227][T16324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.264243][T15995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.371523][T16332] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2877'. [ 327.432529][T15995] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.438510][T16327] netlink: 'syz.6.2877': attribute type 1 has an invalid length. [ 327.469399][T12650] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.476574][T12650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.510625][T12650] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.517862][T12650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.644044][ T7574] IPVS: stop unused estimator thread 0... [ 328.131452][T16362] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.215357][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2886'. [ 328.227812][T16359] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2886'. [ 328.366289][T15995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.519470][T16383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2889'. [ 328.554575][T16383] netlink: 'syz.0.2889': attribute type 7 has an invalid length. [ 328.608530][T16383] netlink: 'syz.0.2889': attribute type 8 has an invalid length. [ 328.616320][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'. [ 328.627372][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2891'. [ 328.702113][T16386] bridge_slave_1: left allmulticast mode [ 328.719513][T16386] bridge_slave_1: left promiscuous mode [ 328.725444][T16386] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.751747][T16386] bridge_slave_0: left allmulticast mode [ 328.757455][T16386] bridge_slave_0: left promiscuous mode [ 328.778697][T16386] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.893657][T16393] netlink: 'syz.7.2892': attribute type 4 has an invalid length. [ 329.218266][T15995] veth0_vlan: entered promiscuous mode [ 329.301362][T15995] veth1_vlan: entered promiscuous mode [ 329.376293][T15995] veth0_macvtap: entered promiscuous mode [ 329.403064][T15995] veth1_macvtap: entered promiscuous mode [ 329.478166][T15995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.496409][T15995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.531993][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.547776][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.572454][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.597531][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.629667][T16422] syzkaller0: entered promiscuous mode [ 329.635677][T16422] syzkaller0: entered allmulticast mode [ 329.643214][T16424] netlink: 'syz.7.2899': attribute type 1 has an invalid length. [ 329.703682][T16424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.739545][T16428] bond3: (slave veth3): Enslaving as an active interface with a down link [ 329.775603][T16424] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 329.814008][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.831076][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.871155][ T7580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.890821][ T7580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.945987][T16434] netlink: 'syz.7.2902': attribute type 1 has an invalid length. [ 329.982852][T16434] netlink: 'syz.7.2902': attribute type 10 has an invalid length. [ 330.018033][T16434] team0: Device veth1_macvtap failed to register rx_handler [ 330.080729][T16438] sock: sock_timestamping_bind_phc: sock not bind to device [ 330.916945][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.925757][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.934141][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.968786][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.977755][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.091305][T16470] lo speed is unknown, defaulting to 1000 [ 331.392580][T16506] Cannot find add_set index 2048 as target [ 331.456846][T16470] chnl_net:caif_netlink_parms(): no params data found [ 331.524486][T16513] syz.5.2922: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.539825][T16513] CPU: 0 UID: 0 PID: 16513 Comm: syz.5.2922 Not tainted syzkaller #0 PREEMPT(full) [ 331.539856][T16513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.539884][T16513] Call Trace: [ 331.539894][T16513] [ 331.539905][T16513] dump_stack_lvl+0x189/0x250 [ 331.539947][T16513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.539980][T16513] ? __pfx__printk+0x10/0x10 [ 331.540015][T16513] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 331.540049][T16513] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 331.540085][T16513] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 331.540123][T16513] warn_alloc+0x214/0x310 [ 331.540158][T16513] ? stack_depot_save_flags+0x40/0x860 [ 331.540202][T16513] ? __pfx_warn_alloc+0x10/0x10 [ 331.540240][T16513] ? kasan_save_track+0x3e/0x80 [ 331.540272][T16513] ? __kasan_kmalloc+0x93/0xb0 [ 331.540309][T16513] ? xsk_setsockopt+0x4dc/0x8d0 [ 331.540336][T16513] ? do_sock_setsockopt+0x17c/0x1b0 [ 331.540359][T16513] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 331.540382][T16513] ? do_syscall_64+0xfa/0xfa0 [ 331.540415][T16513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.540450][T16513] __vmalloc_node_range_noprof+0x125/0x12d0 [ 331.540521][T16513] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.540561][T16513] ? __kasan_kmalloc+0x93/0xb0 [ 331.540604][T16513] vmalloc_user_noprof+0xad/0xf0 [ 331.540639][T16513] ? xskq_create+0xbf/0x170 [ 331.540672][T16513] xskq_create+0xbf/0x170 [ 331.540708][T16513] xsk_init_queue+0xb0/0x110 [ 331.540740][T16513] xsk_setsockopt+0x4dc/0x8d0 [ 331.540773][T16513] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.540807][T16513] ? __pfx_aa_sk_perm+0x10/0x10 [ 331.540841][T16513] ? aa_sock_opt_perm+0xff/0x1b0 [ 331.540880][T16513] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 331.540903][T16513] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.540935][T16513] do_sock_setsockopt+0x17c/0x1b0 [ 331.540965][T16513] __x64_sys_setsockopt+0x13f/0x1b0 [ 331.541003][T16513] do_syscall_64+0xfa/0xfa0 [ 331.541038][T16513] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.541072][T16513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.541095][T16513] ? clear_bhb_loop+0x60/0xb0 [ 331.541123][T16513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.541145][T16513] RIP: 0033:0x7fb58238f749 [ 331.541166][T16513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.541187][T16513] RSP: 002b:00007fb583217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.541210][T16513] RAX: ffffffffffffffda RBX: 00007fb5825e5fa0 RCX: 00007fb58238f749 [ 331.541228][T16513] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 331.541242][T16513] RBP: 00007fb582413f91 R08: 0000000000000004 R09: 0000000000000000 [ 331.541256][T16513] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.541271][T16513] R13: 00007fb5825e6038 R14: 00007fb5825e5fa0 R15: 00007ffdf973fce8 [ 331.541309][T16513] [ 331.541377][T16513] Mem-Info: [ 331.853359][T16513] active_anon:5508 inactive_anon:0 isolated_anon:0 [ 331.853359][T16513] active_file:2952 inactive_file:40012 isolated_file:0 [ 331.853359][T16513] unevictable:768 dirty:68 writeback:0 [ 331.853359][T16513] slab_reclaimable:12445 slab_unreclaimable:107554 [ 331.853359][T16513] mapped:37362 shmem:1363 pagetables:1159 [ 331.853359][T16513] sec_pagetables:0 bounce:0 [ 331.853359][T16513] kernel_misc_reclaimable:0 [ 331.853359][T16513] free:1315863 free_pcp:12690 free_cma:0 [ 331.929381][T16513] Node 0 active_anon:22032kB inactive_anon:0kB active_file:11808kB inactive_file:159848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137048kB dirty:268kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14020kB pagetables:4496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.966299][T16470] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.975450][T16513] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 331.997097][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.037197][T16470] bridge_slave_0: entered allmulticast mode [ 332.051719][T16513] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.053893][T16470] bridge_slave_0: entered promiscuous mode [ 332.108138][T16513] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 332.114729][T16527] __nla_validate_parse: 6 callbacks suppressed [ 332.114749][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2923'. [ 332.128603][T16513] Node 0 DMA32 free:1354108kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21600kB inactive_anon:0kB active_file:11808kB inactive_file:159848kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:34328kB local_pcp:13356kB free_cma:0kB [ 332.144125][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2923'. [ 332.174788][T16513] lowmem_reserve[]: 0 0 0 0 0 [ 332.181020][T16513] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 332.193459][T16470] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.224616][T16513] lowmem_reserve[]: 0 0 0 0 0 [ 332.225807][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.231297][T16513] Node 1 Normal free:3893932kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:8672kB free_cma:0kB [ 332.238099][T16470] bridge_slave_1: entered allmulticast mode [ 332.274081][T16513] lowmem_reserve[]: 0 0 0 0 0 [ 332.283561][T16470] bridge_slave_1: entered promiscuous mode [ 332.283908][T16513] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 332.304204][T16513] Node 0 DMA32: 357*4kB (UM) 435*8kB (ME) 243*16kB (UME) 137*32kB (UME) 70*64kB (UME) 29*128kB (UM) 114*256kB (UME) 56*512kB (UM) 59*1024kB (UM) 21*2048kB (UME) 286*4096kB (UM) = 1354108kB [ 332.324808][T16513] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 332.337720][T16513] Node 1 Normal: 183*4kB (UME) 52*8kB (UME) 51*16kB (UME) 148*32kB (UME) 60*64kB (UME) 7*128kB (UM) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3893932kB [ 332.362410][T16513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.372470][T16513] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.380516][T16529] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 332.382049][T16513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 332.402123][T16513] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 332.404904][T16529] bond3 (unregistering): Released all slaves [ 332.412642][T16513] 44323 total pagecache pages [ 332.423684][T16513] 0 pages in swap cache [ 332.427867][T16513] Free swap = 124996kB [ 332.432149][T16513] Total swap = 124996kB [ 332.436331][T16513] 2097051 pages RAM [ 332.440212][T16513] 0 pages HighMem/MovableOnly [ 332.444946][T16513] 424121 pages reserved [ 332.449485][T16513] 0 pages cma reserved [ 332.465474][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2923'. [ 332.593010][T16470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.627392][T16470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.631018][T16543] openvswitch: netlink: Missing key (keys=40, expected=100) [ 332.658624][T16541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2926'. [ 332.669620][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'. [ 332.699713][T16470] team0: Port device team_slave_0 added [ 332.709006][T16470] team0: Port device team_slave_1 added [ 332.886589][T16470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.903215][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.992955][T16470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.023147][T16470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.039466][T11196] Bluetooth: hci5: command tx timeout [ 333.040329][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.086268][T16470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.213225][T16567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2934'. [ 333.259769][T16470] hsr_slave_0: entered promiscuous mode [ 333.290381][T16470] hsr_slave_1: entered promiscuous mode [ 333.296913][T16470] debugfs: 'hsr0' already exists in 'hsr' [ 333.338445][T16470] Cannot create hsr debugfs directory [ 333.762396][T16470] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.777711][T16470] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 333.789120][T16470] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 333.829935][T16592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2942'. [ 333.877242][T16470] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.887780][T16470] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 333.924444][T16470] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 334.013138][T16599] IPVS: set_ctl: invalid protocol: 22 172.20.20.21:20001 [ 334.015103][T16470] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.042546][ T5941] IPVS: starting estimator thread 0... [ 334.051243][T16470] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 334.082132][T16470] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 334.140280][T16604] IPVS: using max 24 ests per chain, 57600 per kthread [ 334.214899][T16470] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.246758][T16470] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 334.275206][T16470] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 334.309329][T16621] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2949'. [ 334.345517][T16625] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 334.387329][T16625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.507947][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2950'. [ 334.526778][T16632] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2951'. [ 334.574741][T16470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.592937][T16470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.614413][T16470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.630713][T16470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.690696][T16643] netlink: 'syz.7.2952': attribute type 17 has an invalid length. [ 334.713317][T16643] erspan0: entered promiscuous mode [ 334.722520][T16643] erspan0: left promiscuous mode [ 334.880142][T16647] dvmrp0: left allmulticast mode [ 334.961494][T16652] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 334.987973][T16470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.028595][T16470] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.047969][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.055216][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.104489][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.111780][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.123896][T11196] Bluetooth: hci5: command tx timeout [ 335.200859][T16470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.444677][T16677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.686555][T16470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.845527][T16704] netlink: 'syz.2.2970': attribute type 2 has an invalid length. [ 335.913931][T16470] veth0_vlan: entered promiscuous mode [ 335.930434][T16470] veth1_vlan: entered promiscuous mode [ 336.069705][T16470] veth0_macvtap: entered promiscuous mode [ 336.125859][T16470] veth1_macvtap: entered promiscuous mode [ 336.156314][T16470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.175863][T16470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.207066][T12650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.247216][T12650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.269801][T12650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.270414][T16718] netlink: 'syz.6.2976': attribute type 2 has an invalid length. [ 336.286980][T16718] netlink: 'syz.6.2976': attribute type 1 has an invalid length. [ 336.289851][T12650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.304410][T16717] netlink: 'syz.6.2976': attribute type 2 has an invalid length. [ 336.304433][T16717] netlink: 'syz.6.2976': attribute type 1 has an invalid length. [ 336.480191][T12650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.488211][T12650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.601236][ T5920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.615960][ T5920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.758220][T16739] bond0: entered promiscuous mode [ 336.764934][T16739] bond_slave_0: entered promiscuous mode [ 336.776415][T16739] bond_slave_1: entered promiscuous mode [ 336.786229][T16739] bond0: left promiscuous mode [ 336.792210][T16739] bond_slave_0: left promiscuous mode [ 336.802793][T16739] bond_slave_1: left promiscuous mode [ 337.183861][T16770] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 337.202250][T11196] Bluetooth: hci5: command tx timeout [ 337.216862][T16754] __nla_validate_parse: 13 callbacks suppressed [ 337.216882][T16754] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2986'. [ 337.235054][T16754] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2986'. [ 337.255409][T16760] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2986'. [ 337.274776][T16760] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2986'. [ 337.456983][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2992'. [ 337.523026][T16778] xfrm1: entered allmulticast mode [ 337.732970][T16797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.961385][T16806] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3002'. [ 337.979974][T16806] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3002'. [ 337.983114][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3004'. [ 338.000740][T16813] netlink: 'syz.7.3004': attribute type 3 has an invalid length. [ 338.060582][T16814] bond3: entered promiscuous mode [ 338.067491][T16819] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3006'. [ 338.099109][T16814] bond3: entered allmulticast mode [ 338.104539][T16821] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3007'. [ 338.105395][T16814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.473296][ T56] block nbd0: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 180 seconds [ 338.484415][ T56] block nbd0: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 180 seconds [ 338.495909][ T56] block nbd0: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 180 seconds [ 338.507048][ T56] block nbd0: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 180 seconds [ 339.085247][T16874] netlink: 'syz.0.3026': attribute type 4 has an invalid length. [ 339.278481][T11196] Bluetooth: hci5: command tx timeout [ 339.445382][T16894] netlink: 'syz.2.3031': attribute type 2 has an invalid length. [ 339.476085][T16894] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 340.265848][T16945] sctp: [Deprecated]: syz.0.3046 (pid 16945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.265848][T16945] Use struct sctp_sack_info instead [ 340.334883][T16955] tipc: Enabling of bearer rejected, failed to enable media [ 340.460324][T16960] netlink: 'syz.2.3052': attribute type 10 has an invalid length. [ 340.520645][T16960] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 340.531064][T16963] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 340.752715][T16975] netlink: 'syz.0.3060': attribute type 1 has an invalid length. [ 340.766641][T16977] netlink: 'syz.0.3060': attribute type 1 has an invalid length. [ 341.305235][T17003] bond4: option xmit_hash_policy: invalid value (64) [ 341.326715][T17003] bond4 (unregistering): Released all slaves [ 341.471548][T17014] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 341.575302][T17020] siw: device registration error -23 [ 341.636117][T17023] netlink: 'syz.2.3076': attribute type 4 has an invalid length. [ 341.670620][T17023] netlink: 'syz.2.3076': attribute type 3 has an invalid length. [ 341.907241][T17041] xt_TCPMSS: Only works on TCP SYN packets [ 341.983718][T17048] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 342.212775][T17059] tipc: Enabled bearer , priority 0 [ 342.237287][T17059] syzkaller0: entered promiscuous mode [ 342.243683][T17059] syzkaller0: entered allmulticast mode [ 342.254518][T17059] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 342.265108][T17063] openvswitch: netlink: IP tunnel dst address not specified [ 342.314133][T17059] tipc: Resetting bearer [ 342.332646][T17059] tipc: Resetting bearer [ 342.407357][T17059] tipc: Disabling bearer [ 342.578493][T17081] __nla_validate_parse: 23 callbacks suppressed [ 342.578514][T17081] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3094'. [ 342.948037][T17102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3101'. [ 342.978498][T17102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3101'. [ 343.007381][T17102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3101'. [ 343.044326][T17102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3101'. [ 343.538090][T17149] xt_l2tp: missing protocol rule (udp|l2tpip) [ 343.680210][ T7580] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 343.889621][T17167] lo speed is unknown, defaulting to 1000 [ 344.204840][T17190] sctp: [Deprecated]: syz.5.3125 (pid 17190) Use of int in maxseg socket option. [ 344.204840][T17190] Use struct sctp_assoc_value instead [ 344.224569][T17192] netlink: 'syz.2.3124': attribute type 1 has an invalid length. [ 344.237085][T17192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.256810][T17192] pimreg3: entered allmulticast mode [ 344.276916][T17192] netlink: 'syz.2.3124': attribute type 1 has an invalid length. [ 344.303689][T17192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.550049][T17214] erspan0: entered promiscuous mode [ 344.568434][T17214] erspan0: entered allmulticast mode [ 344.806931][T17235] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3134'. [ 344.903706][T17231] tun0: tun_chr_ioctl cmd 1074025675 [ 344.918526][T17231] tun0: persist disabled [ 345.169170][T17263] netlink: 'syz.2.3139': attribute type 58 has an invalid length. [ 345.177144][T17263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3139'. [ 345.221001][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3141'. [ 345.235959][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3141'. [ 345.245483][T17259] netlink: 'syz.5.3141': attribute type 13 has an invalid length. [ 345.271577][T17259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3141'. [ 345.780951][ T7989] IPVS: starting estimator thread 0... [ 345.908575][T17300] IPVS: using max 24 ests per chain, 57600 per kthread [ 346.350404][T17334] IPVS: Unknown mcast interface: vcan0 [ 346.387677][T17335] netlink: 'syz.7.3162': attribute type 1 has an invalid length. [ 346.416761][T17335] netlink: 'syz.7.3162': attribute type 3 has an invalid length. [ 346.428044][T17335] NCSI netlink: No device for ifindex 813332851 [ 346.461720][T17335] rdma_op ffff888059bb99f0 conn xmit_rdma 0000000000000000 [ 346.487411][T17335] : renamed from bridge_slave_0 (while UP) [ 346.961469][T17371] netlink: 'syz.6.3172': attribute type 1 has an invalid length. [ 347.086826][T17372] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 347.099807][T17372] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 347.119698][T17372] bond4: (slave xfrm1): making interface the new active one [ 347.127943][T17372] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 347.262899][T17393] netlink: 'syz.6.3180': attribute type 2 has an invalid length. [ 360.389178][T11196] Bluetooth: hci2: command 0x0406 tx timeout [ 365.008076][T17411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.155023][T17422] __nla_validate_parse: 66 callbacks suppressed [ 365.155045][T17422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3188'. [ 365.181790][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 365.187554][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3191'. [ 365.206217][T17430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3188'. [ 365.211453][T17423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3189'. [ 365.221317][T17426] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3190'. [ 365.234040][T17426] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3190'. [ 365.244716][T17426] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3190'. [ 365.258001][T17427] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 365.270773][T17427] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3191'. [ 365.346806][T17436] netlink: 'syz.6.3192': attribute type 2 has an invalid length. [ 365.356132][T17436] netlink: 'syz.6.3192': attribute type 2 has an invalid length. [ 365.428109][T17441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 365.479142][T17442] syzkaller1: entered promiscuous mode [ 365.485657][T17442] syzkaller1: entered allmulticast mode [ 365.785643][T17469] tipc: Cannot configure node identity twice [ 365.838011][T17469] netlink: 'syz.6.3201': attribute type 1 has an invalid length. [ 366.298932][T17498] netlink: 'syz.6.3211': attribute type 1 has an invalid length. [ 366.444566][T17501] bond5: (slave geneve2): making interface the new active one [ 366.456044][T17501] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 366.486910][ T37] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.521503][ T37] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.537212][T17506] team_slave_1: Caught tx_queue_len zero misconfig [ 366.594345][ T37] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.605109][ T37] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 366.944547][T17533] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 366.981989][T17540] netlink: 'syz.7.3220': attribute type 1 has an invalid length. [ 367.080061][T17540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.106070][T17542] vlan3: entered allmulticast mode [ 367.123190][T17542] bond5: entered allmulticast mode [ 367.220652][T17542] bond5: (slave gretap1): making interface the new active one [ 367.230327][T17542] gretap1: entered allmulticast mode [ 367.237413][T17542] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 367.471393][T17563] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 367.947362][T17590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.988144][T17592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.050654][T17596] team0: Device ipvlan1 failed to register rx_handler [ 368.574371][ T56] block nbd0: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 210 seconds [ 368.585692][ T56] block nbd0: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 210 seconds [ 368.596840][ T56] block nbd0: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 210 seconds [ 368.608107][ T56] block nbd0: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 210 seconds [ 368.705175][T17644] netlink: 'syz.6.3247': attribute type 1 has an invalid length. [ 368.825833][T17653] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 368.837019][T17653] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 368.914598][T17649] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.928087][T17649] bond6: (slave bond7): making interface the new active one [ 368.936769][T17649] bond6: (slave bond7): Enslaving as an active interface with an up link [ 368.982350][T17661] IPv6: sit2: Disabled Multicast RS [ 368.991832][T17661] sit2: entered allmulticast mode [ 369.263755][T17678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.499023][T17692] netlink: 'syz.2.3264': attribute type 14 has an invalid length. [ 369.537886][T17692] netlink: 'syz.2.3264': attribute type 13 has an invalid length. [ 369.813117][T17708] syzkaller1: entered promiscuous mode [ 370.210773][T17732] __nla_validate_parse: 21 callbacks suppressed [ 370.210795][T17732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3276'. [ 370.228235][T17732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3276'. [ 370.356712][T17743] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 370.386290][T17734] can: request_module (can-proto-3) failed. [ 370.574871][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'. [ 370.609982][T17764] tipc: Enabling of bearer rejected, failed to enable media [ 370.753281][T17772] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3288'. [ 371.132010][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 371.970202][T17823] netlink: 'syz.5.3301': attribute type 4 has an invalid length. [ 372.813211][T17821] gre2: entered promiscuous mode [ 372.818219][T17821] gre2: entered allmulticast mode [ 372.984380][T17835] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3305'. [ 373.031740][T17841] batadv_slave_0: Caught tx_queue_len zero misconfig [ 373.546926][T17862] Cannot find del_set index 4 as target [ 373.678789][T17829] netlink: 'syz.7.3303': attribute type 21 has an invalid length. [ 373.696952][T17877] pim6reg1: entered promiscuous mode [ 373.703374][T17877] pim6reg1: entered allmulticast mode [ 374.065025][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 374.092601][ T4537] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.108491][ T4537] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.122315][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 374.132477][ T4537] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.165679][ T4537] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.293369][T17906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3324'. [ 374.534597][T17918] netlink: 'syz.5.3329': attribute type 4 has an invalid length. [ 374.543153][T17918] netlink: 'syz.5.3329': attribute type 4 has an invalid length. [ 374.569486][T17918] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3329'. [ 375.034931][T17934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.088804][T17934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.151700][T17941] syzkaller0: entered promiscuous mode [ 375.160763][T17941] syzkaller0: entered allmulticast mode [ 375.315836][T17934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.330612][T17934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.345039][T17948] __nla_validate_parse: 2 callbacks suppressed [ 375.345058][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3335'. [ 375.361157][T17948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3335'. [ 375.379642][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3336'. [ 375.524682][T17934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.559138][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3339'. [ 375.574111][T17934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.761751][T17934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.772655][T17934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.832921][T17978] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3344'. [ 375.843330][T17978] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3344'. [ 375.882900][T17978] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 375.896464][T17978] bond1 (unregistering): Released all slaves [ 375.922578][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3344'. [ 375.956697][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3344'. [ 376.036151][ T1314] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.069837][ T1314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.119392][ T37] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.142038][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.171547][ T37] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.184647][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.194463][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3347'. [ 376.203366][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.213971][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.465565][T18002] tipc: Enabling of bearer rejected, failed to enable media [ 376.484204][T18003] netlink: 'syz.6.3352': attribute type 3 has an invalid length. [ 376.523120][T18006] syzkaller0: entered promiscuous mode [ 376.542917][T18006] syzkaller0: entered allmulticast mode [ 376.652625][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3354'. [ 376.755962][T18015] bridge_slave_1: left allmulticast mode [ 376.763207][T18015] bridge_slave_1: left promiscuous mode [ 376.772147][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.791474][T18015] bridge_slave_0: left allmulticast mode [ 376.797361][T18015] bridge_slave_0: left promiscuous mode [ 376.805275][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.102362][T18023] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 377.758252][T18057] syzkaller0: entered allmulticast mode [ 377.916579][T18065] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 378.127729][T18076] nbd: must specify an index to disconnect [ 378.413227][T18091] netlink: 'syz.7.3379': attribute type 1 has an invalid length. [ 378.429573][T18092] netlink: 'syz.7.3379': attribute type 1 has an invalid length. [ 378.474845][T18092] 8021q: adding VLAN 0 to HW filter on device bond6 [ 378.607108][T18091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 378.617227][T18091] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 378.629256][T18091] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 378.738260][T18092] veth5: entered promiscuous mode [ 378.754056][T18092] bond6: (slave veth5): Enslaving as an active interface with a down link [ 378.825432][T18105] vlan4: entered allmulticast mode [ 378.849764][T18105] bond6: entered allmulticast mode [ 379.119698][T18128] netlink: 'syz.0.3389': attribute type 11 has an invalid length. [ 379.521591][T18138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.131637][T18166] netlink: 'syz.7.3400': attribute type 10 has an invalid length. [ 380.241684][T18166] team0: Port device geneve0 added [ 380.273443][T18172] tipc: Enabled bearer , priority 0 [ 380.390923][T18172] syzkaller0: entered promiscuous mode [ 380.418273][T18172] syzkaller0: entered allmulticast mode [ 380.428026][T18172] tipc: Resetting bearer [ 380.657651][ T5920] tipc: Resetting bearer [ 380.745242][T18181] tipc: Resetting bearer [ 380.830674][T18211] __nla_validate_parse: 11 callbacks suppressed [ 380.830696][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 380.946701][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 380.965985][T18213] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3412'. [ 380.989971][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 381.122281][T18220] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3413'. [ 382.693132][T18181] tipc: Disabling bearer [ 383.042619][T18247] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 383.136520][T18245] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 383.332329][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3429'. [ 383.383713][T18271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.496672][T18280] netlink: 'syz.2.3431': attribute type 29 has an invalid length. [ 383.553873][T18284] netlink: 'syz.2.3431': attribute type 29 has an invalid length. [ 383.578482][T18280] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3431'. [ 383.601380][T18288] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3433'. [ 383.645038][T18288] x_tables: duplicate underflow at hook 1 [ 383.784937][T18292] tipc: Started in network mode [ 383.798535][T18292] tipc: Node identity 4abe04e3b133, cluster identity 4711 [ 383.822176][T18292] tipc: Enabled bearer , priority 0 [ 383.829875][T18294] veth0: entered promiscuous mode [ 383.841911][T18292] syzkaller0: entered promiscuous mode [ 383.847627][T18292] syzkaller0: entered allmulticast mode [ 383.856171][T18294] veth0: left promiscuous mode [ 383.902511][T18291] tipc: Resetting bearer [ 383.936453][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.000130][T18291] tipc: Disabling bearer [ 384.106020][T18315] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3441'. [ 384.246756][T18316] warn_alloc: 1 callbacks suppressed [ 384.246777][T18316] syz.5.3442: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 384.282352][T18327] netlink: 'syz.7.3443': attribute type 12 has an invalid length. [ 384.310276][T18316] ,cpuset=/,mems_allowed=0-1 [ 384.315080][T18316] CPU: 1 UID: 0 PID: 18316 Comm: syz.5.3442 Not tainted syzkaller #0 PREEMPT(full) [ 384.315109][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.315128][T18316] Call Trace: [ 384.315138][T18316] [ 384.315147][T18316] dump_stack_lvl+0x189/0x250 [ 384.315189][T18316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.315220][T18316] ? __pfx__printk+0x10/0x10 [ 384.315243][T18316] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.315275][T18316] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.315308][T18316] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 384.315344][T18316] warn_alloc+0x214/0x310 [ 384.315385][T18316] ? __pfx_warn_alloc+0x10/0x10 [ 384.315431][T18316] ? __get_vm_area_node+0x28f/0x300 [ 384.315463][T18316] ? nf_tables_newset+0x1330/0x2540 [ 384.315497][T18316] __vmalloc_node_range_noprof+0x690/0x12d0 [ 384.315566][T18316] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.315598][T18316] ? nf_tables_newset+0x1330/0x2540 [ 384.315630][T18316] ? rcu_is_watching+0x15/0xb0 [ 384.315657][T18316] ? nf_tables_newset+0x1330/0x2540 [ 384.315685][T18316] __kvmalloc_node_noprof+0x674/0x910 [ 384.315720][T18316] ? nf_tables_newset+0x1330/0x2540 [ 384.315752][T18316] ? nft_set_lookup+0x128/0x150 [ 384.315782][T18316] ? nft_hash_privsize+0x4f/0xf0 [ 384.315810][T18316] nf_tables_newset+0x1330/0x2540 [ 384.315854][T18316] ? __pfx_nf_tables_newset+0x10/0x10 [ 384.315910][T18316] ? __nla_parse+0x40/0x60 [ 384.315940][T18316] nfnetlink_rcv+0x11d9/0x2590 [ 384.316017][T18316] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 384.316075][T18316] ? ref_tracker_free+0x63a/0x7d0 [ 384.316132][T18316] ? __netlink_deliver_tap+0x807/0x850 [ 384.316155][T18316] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.316199][T18316] netlink_unicast+0x82f/0x9e0 [ 384.316244][T18316] ? __pfx_netlink_unicast+0x10/0x10 [ 384.316279][T18316] ? netlink_sendmsg+0x642/0xb30 [ 384.316300][T18316] ? skb_put+0x11b/0x210 [ 384.316327][T18316] netlink_sendmsg+0x805/0xb30 [ 384.316361][T18316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.316388][T18316] ? aa_sock_msg_perm+0xf1/0x1d0 [ 384.316424][T18316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.316446][T18316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.316470][T18316] __sock_sendmsg+0x21c/0x270 [ 384.316505][T18316] ____sys_sendmsg+0x505/0x830 [ 384.316537][T18316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.316574][T18316] ? import_iovec+0x74/0xa0 [ 384.316607][T18316] ___sys_sendmsg+0x21f/0x2a0 [ 384.316635][T18316] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.316705][T18316] ? __fget_files+0x2a/0x420 [ 384.316725][T18316] ? __fget_files+0x3a0/0x420 [ 384.316760][T18316] __x64_sys_sendmsg+0x19b/0x260 [ 384.316789][T18316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.316835][T18316] ? do_syscall_64+0xbe/0xfa0 [ 384.316872][T18316] do_syscall_64+0xfa/0xfa0 [ 384.316905][T18316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.316926][T18316] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 384.316949][T18316] ? clear_bhb_loop+0x60/0xb0 [ 384.316976][T18316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.317003][T18316] RIP: 0033:0x7fb58238f749 [ 384.317024][T18316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.317043][T18316] RSP: 002b:00007fb583217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.317066][T18316] RAX: ffffffffffffffda RBX: 00007fb5825e5fa0 RCX: 00007fb58238f749 [ 384.317091][T18316] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 384.317105][T18316] RBP: 00007fb582413f91 R08: 0000000000000000 R09: 0000000000000000 [ 384.317119][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.317132][T18316] R13: 00007fb5825e6038 R14: 00007fb5825e5fa0 R15: 00007ffdf973fce8 [ 384.317171][T18316] [ 384.317184][T18316] Mem-Info: [ 384.349294][T18327] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3443'. [ 384.419842][T18316] active_anon:5419 inactive_anon:0 isolated_anon:0 [ 384.419842][T18316] active_file:2952 inactive_file:40029 isolated_file:0 [ 384.419842][T18316] unevictable:768 dirty:58 writeback:0 [ 384.419842][T18316] slab_reclaimable:12489 slab_unreclaimable:111884 [ 384.419842][T18316] mapped:29168 shmem:1363 pagetables:1103 [ 384.419842][T18316] sec_pagetables:0 bounce:0 [ 384.419842][T18316] kernel_misc_reclaimable:0 [ 384.419842][T18316] free:1309038 free_pcp:13495 free_cma:0 [ 384.767956][T18316] Node 0 active_anon:21976kB inactive_anon:0kB active_file:11808kB inactive_file:159916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116972kB dirty:232kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14512kB pagetables:4672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 384.803288][T18316] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 384.875410][T18316] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.973012][T18316] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 384.989360][T18316] Node 0 DMA32 free:1326304kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21576kB inactive_anon:0kB active_file:11808kB inactive_file:159916kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:37452kB local_pcp:14512kB free_cma:0kB [ 385.063824][T18353] sctp: [Deprecated]: syz.2.3452 (pid 18353) Use of int in max_burst socket option deprecated. [ 385.063824][T18353] Use struct sctp_assoc_value instead [ 385.081983][T18316] lowmem_reserve[]: 0 0 0 0 0 [ 385.086772][T18316] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.154529][T18316] lowmem_reserve[]: 0 0 0 0 0 [ 385.241257][T18316] Node 1 Normal free:3894188kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:8320kB free_cma:0kB [ 385.365470][T18369] netem: incorrect ge model size [ 385.372984][T18316] lowmem_reserve[]: 0 0 0 0 0 [ 385.377769][T18316] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 385.427472][T18369] netem: change failed [ 385.449759][T18316] Node 0 DMA32: 1386*4kB (UM) 524*8kB (UM) 363*16kB (UME) 277*32kB (UME) 70*64kB (UME) 21*128kB (UME) 20*256kB (UME) 50*512kB (UME) 60*1024kB (UME) 16*2048kB (UM) 286*4096kB (UM) = 1327960kB [ 385.482281][T18374] vlan2: entered promiscuous mode [ 385.487405][T18374] bridge0: entered promiscuous mode [ 385.500309][T18316] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 385.534839][T18316] Node 1 Normal: 183*4kB (UME) 52*8kB (UME) 51*16kB (UME) 148*32kB (UME) 62*64kB (UME) 8*128kB (UM) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3894188kB [ 385.558249][T18316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.569768][T18316] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.579781][T18316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.601861][T18316] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.612413][T18316] 44340 total pagecache pages [ 385.617159][T18316] 0 pages in swap cache [ 385.621471][T18316] Free swap = 124996kB [ 385.646754][T18316] Total swap = 124996kB [ 385.651285][T18380] netlink: 'syz.0.3459': attribute type 6 has an invalid length. [ 385.654640][T18316] 2097051 pages RAM [ 385.670356][T18380] netlink: 'syz.0.3459': attribute type 6 has an invalid length. [ 385.673213][T18316] 0 pages HighMem/MovableOnly [ 385.699101][T18316] 424121 pages reserved [ 385.706007][T18316] 0 pages cma reserved [ 385.768057][T18387] syzkaller0: entered promiscuous mode [ 385.778825][T18387] syzkaller0: entered allmulticast mode [ 385.888603][T18387] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 385.895901][ T7997] IPVS: starting estimator thread 0... [ 385.916351][T18390] __nla_validate_parse: 5 callbacks suppressed [ 385.916375][T18390] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3462'. [ 385.957733][T18390] netlink: 'syz.0.3462': attribute type 6 has an invalid length. [ 386.028479][T18391] IPVS: using max 24 ests per chain, 57600 per kthread [ 386.097462][T18396] netlink: 'syz.5.3464': attribute type 2 has an invalid length. [ 386.149344][T18400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3465'. [ 386.158908][T18398] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3466'. [ 386.454588][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'. [ 386.465964][T18413] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3469'. [ 386.658937][T18423] netlink: 'syz.0.3471': attribute type 10 has an invalid length. [ 386.702681][T18423] team0: Port device dummy0 added [ 387.082770][T18449] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.355876][T18470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3484'. [ 387.600993][T18497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3490'. [ 387.687512][T18497] 8021q: adding VLAN 0 to HW filter on device bond7 [ 387.770477][T18502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 387.789933][T18502] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 387.806293][T18502] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 388.284866][T18541] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 389.246142][T18596] netlink: 'syz.7.3524': attribute type 4 has an invalid length. [ 389.295453][T18595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3525'. [ 389.301601][T18600] netlink: 'syz.2.3527': attribute type 30 has an invalid length. [ 389.305910][T18601] netlink: 'syz.7.3524': attribute type 4 has an invalid length. [ 389.343896][ T5148] block nbd3: Receive control failed (result -107) [ 389.380089][T18600] bond2: option arp_missed_max: invalid value (0) [ 389.386688][T18600] bond2: option arp_missed_max: allowed values 1 - 255 [ 389.417128][T18600] bond2 (unregistering): Released all slaves [ 389.450015][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'. [ 389.540190][T18613] netlink: 'syz.5.3529': attribute type 1 has an invalid length. [ 389.993537][ T5920] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.039055][ T5920] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.048009][ T5920] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.086796][ T5920] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.138766][ T5920] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.147682][ T5920] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.198186][T18618] netlink: 'syz.0.3530': attribute type 3 has an invalid length. [ 390.224101][ T5920] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.238684][T18618] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3530'. [ 390.253109][ T5920] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.211713][T18658] __nla_validate_parse: 2 callbacks suppressed [ 391.211733][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3543'. [ 391.289996][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3541'. [ 391.310472][T18663] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3544'. [ 398.630147][ T56] block nbd0: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 240 seconds [ 398.641100][ T56] block nbd0: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 240 seconds [ 398.652743][ T56] block nbd0: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 240 seconds [ 398.665203][ T56] block nbd0: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 240 seconds [ 406.096804][T11196] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.106098][T11196] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.114349][T11196] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.124397][T11196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.124596][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.135909][T11196] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.144237][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.147941][T11196] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.162666][T11196] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.170695][T11196] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.202257][T18688] lo speed is unknown, defaulting to 1000 [ 406.242419][T18690] lo speed is unknown, defaulting to 1000 [ 406.471738][T18688] chnl_net:caif_netlink_parms(): no params data found [ 406.547289][T18690] chnl_net:caif_netlink_parms(): no params data found [ 406.601697][T18688] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.609382][T18688] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.616620][T18688] bridge_slave_0: entered allmulticast mode [ 406.625435][T18688] bridge_slave_0: entered promiscuous mode [ 406.654776][T18688] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.662306][T18688] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.669678][T18688] bridge_slave_1: entered allmulticast mode [ 406.677025][T18688] bridge_slave_1: entered promiscuous mode [ 406.755957][T18688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.766448][T18690] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.774162][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.782218][T18690] bridge_slave_0: entered allmulticast mode [ 406.790767][T18690] bridge_slave_0: entered promiscuous mode [ 406.803048][T18688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.900867][T18690] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.908073][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.940434][T18690] bridge_slave_1: entered allmulticast mode [ 406.970590][T18690] bridge_slave_1: entered promiscuous mode [ 407.133035][T18688] team0: Port device team_slave_0 added [ 407.189533][T18690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.212354][T18688] team0: Port device team_slave_1 added [ 407.266191][T18690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.333304][T18688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.340888][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.398951][T18688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.472157][T18688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.488472][T18688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.525121][T18688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.570703][T18690] team0: Port device team_slave_0 added [ 407.596079][T18690] team0: Port device team_slave_1 added [ 407.599792][T11196] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 407.612025][T11196] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 407.620558][T11196] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 407.637614][T11196] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 407.652492][T11196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 407.776764][T18688] hsr_slave_0: entered promiscuous mode [ 407.810766][T11196] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 407.811945][T18688] hsr_slave_1: entered promiscuous mode [ 407.825722][T18688] debugfs: 'hsr0' already exists in 'hsr' [ 407.835675][T11196] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 407.844060][T18688] Cannot create hsr debugfs directory [ 407.849966][T11196] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 407.858272][T11196] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 407.866757][T18690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.875555][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.903462][T11196] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 407.913403][T18690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.916477][T11196] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 407.949057][T11196] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 407.959437][T11196] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 407.973060][T11196] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 407.975289][T18690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.991091][T18690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.992190][T11196] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 408.017968][T18690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.058503][T18707] lo speed is unknown, defaulting to 1000 [ 408.189295][T18690] hsr_slave_0: entered promiscuous mode [ 408.195864][T18690] hsr_slave_1: entered promiscuous mode [ 408.203199][T18690] debugfs: 'hsr0' already exists in 'hsr' [ 408.209234][T18690] Cannot create hsr debugfs directory [ 408.228658][ T5830] Bluetooth: hci1: command tx timeout [ 408.236295][ T52] Bluetooth: hci6: command tx timeout [ 408.251269][T18709] lo speed is unknown, defaulting to 1000 [ 408.292351][T18711] lo speed is unknown, defaulting to 1000 [ 408.725155][T18707] chnl_net:caif_netlink_parms(): no params data found [ 408.940964][T18711] chnl_net:caif_netlink_parms(): no params data found [ 408.990564][T18709] chnl_net:caif_netlink_parms(): no params data found [ 409.085907][T18707] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.093481][T18707] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.101480][T18707] bridge_slave_0: entered allmulticast mode [ 409.110851][T18707] bridge_slave_0: entered promiscuous mode [ 409.119937][T18707] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.127089][T18707] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.134850][T18707] bridge_slave_1: entered allmulticast mode [ 409.143112][T18707] bridge_slave_1: entered promiscuous mode [ 409.211278][T18707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.243027][T18707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.290699][T18711] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.297913][T18711] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.305965][T18711] bridge_slave_0: entered allmulticast mode [ 409.315905][T18711] bridge_slave_0: entered promiscuous mode [ 409.353134][T18711] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.360766][T18711] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.368067][T18711] bridge_slave_1: entered allmulticast mode [ 409.375864][T18711] bridge_slave_1: entered promiscuous mode [ 409.382793][T18709] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.390534][T18709] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.397958][T18709] bridge_slave_0: entered allmulticast mode [ 409.406273][T18709] bridge_slave_0: entered promiscuous mode [ 409.417432][T18707] team0: Port device team_slave_0 added [ 409.438710][T18709] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.445972][T18709] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.453590][T18709] bridge_slave_1: entered allmulticast mode [ 409.462036][T18709] bridge_slave_1: entered promiscuous mode [ 409.471301][T18707] team0: Port device team_slave_1 added [ 409.512159][T18711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.553873][T18711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.581237][T18709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.594700][T18709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.619921][T18707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.626913][T18707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.653827][T18707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.701633][T18707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.708905][T18707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.736356][T18707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.758915][ T52] Bluetooth: hci7: command tx timeout [ 409.769253][T18711] team0: Port device team_slave_0 added [ 409.783741][T18709] team0: Port device team_slave_0 added [ 409.792800][T18711] team0: Port device team_slave_1 added [ 409.816683][T18709] team0: Port device team_slave_1 added [ 409.884237][T18711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.891911][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.920743][T18711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.946822][T18709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.954631][T18709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.981424][T18709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.992275][ T52] Bluetooth: hci8: command tx timeout [ 409.994823][T18709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.005114][T18709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.032096][T18709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.046335][T18711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.053587][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.080339][T18711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.092284][ T52] Bluetooth: hci9: command tx timeout [ 410.101331][T18707] hsr_slave_0: entered promiscuous mode [ 410.107822][T18707] hsr_slave_1: entered promiscuous mode [ 410.114473][T18707] debugfs: 'hsr0' already exists in 'hsr' [ 410.120620][T18707] Cannot create hsr debugfs directory [ 410.240969][T18711] hsr_slave_0: entered promiscuous mode [ 410.247564][T18711] hsr_slave_1: entered promiscuous mode [ 410.254642][T18711] debugfs: 'hsr0' already exists in 'hsr' [ 410.261537][T18711] Cannot create hsr debugfs directory [ 410.298022][T18709] hsr_slave_0: entered promiscuous mode [ 410.305289][T18709] hsr_slave_1: entered promiscuous mode [ 410.311260][ T52] Bluetooth: hci6: command tx timeout [ 410.316699][ T52] Bluetooth: hci1: command tx timeout [ 410.321398][T18709] debugfs: 'hsr0' already exists in 'hsr' [ 410.327826][T18709] Cannot create hsr debugfs directory [ 410.544260][T18707] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.635219][T18707] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.685029][T18707] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.733862][T18707] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.828639][ T52] Bluetooth: hci7: command tx timeout [ 412.069243][ T52] Bluetooth: hci8: command tx timeout [ 412.148981][ T52] Bluetooth: hci9: command tx timeout [ 412.389175][T11196] Bluetooth: hci6: command tx timeout [ 412.389760][ T52] Bluetooth: hci1: command tx timeout [ 413.918770][ T52] Bluetooth: hci7: command tx timeout [ 414.148707][ T52] Bluetooth: hci8: command tx timeout [ 414.228870][ T52] Bluetooth: hci9: command tx timeout [ 414.468955][ T52] Bluetooth: hci1: command tx timeout [ 414.469066][T11196] Bluetooth: hci6: command tx timeout [ 415.989499][ T52] Bluetooth: hci7: command tx timeout [ 416.228963][ T52] Bluetooth: hci8: command tx timeout [ 416.308689][ T52] Bluetooth: hci9: command tx timeout [ 416.708950][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 428.712266][ T56] block nbd0: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 270 seconds [ 428.723290][ T56] block nbd0: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 270 seconds [ 428.734413][ T56] block nbd0: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 270 seconds [ 428.745786][ T56] block nbd0: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 270 seconds [ 442.308735][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 445.356039][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.790476][ T56] block nbd0: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 300 seconds [ 458.801430][ T56] block nbd0: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 300 seconds [ 458.812880][ T56] block nbd0: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 300 seconds [ 458.824007][ T56] block nbd0: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 300 seconds [ 466.397782][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 466.408157][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 466.417880][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 466.426858][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 466.427473][ T5148] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 466.434848][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 466.451383][ T5148] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 466.463259][ T5148] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 466.472366][ T5148] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 466.484114][ T5148] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 466.493719][T18740] lo speed is unknown, defaulting to 1000 [ 466.563837][T18742] lo speed is unknown, defaulting to 1000 [ 466.780292][T18740] chnl_net:caif_netlink_parms(): no params data found [ 466.866505][T18742] chnl_net:caif_netlink_parms(): no params data found [ 466.921174][T18740] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.928876][T18740] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.936147][T18740] bridge_slave_0: entered allmulticast mode [ 466.944467][T18740] bridge_slave_0: entered promiscuous mode [ 466.974072][T18740] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.981360][T18740] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.989249][T18740] bridge_slave_1: entered allmulticast mode [ 466.996595][T18740] bridge_slave_1: entered promiscuous mode [ 467.057833][T18740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.085760][T18740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.113968][T18742] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.122219][T18742] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.130539][T18742] bridge_slave_0: entered allmulticast mode [ 467.140284][T18742] bridge_slave_0: entered promiscuous mode [ 467.151006][T18742] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.158168][T18742] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.168122][T18742] bridge_slave_1: entered allmulticast mode [ 467.176597][T18742] bridge_slave_1: entered promiscuous mode [ 467.252129][T18740] team0: Port device team_slave_0 added [ 467.356358][T18740] team0: Port device team_slave_1 added [ 467.402741][T18742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.433947][T18742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.482688][T18740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.498722][T18740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.558621][T18740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.652842][T18740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.660122][T18740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.718891][T18740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.741742][T18742] team0: Port device team_slave_0 added [ 467.819241][ T5148] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 467.828841][ T5148] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 467.837004][ T5148] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 467.850238][ T5148] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 467.860561][ T5148] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 467.870317][T18742] team0: Port device team_slave_1 added [ 467.907131][ T5148] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 467.917537][ T5148] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 467.926625][ T5148] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 467.950656][ T5148] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 467.959445][ T5148] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 467.970010][ T5148] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 467.987641][ T5148] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 467.996339][ T5148] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 468.006148][ T5148] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 468.014926][ T5148] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 468.037578][T18740] hsr_slave_0: entered promiscuous mode [ 468.050674][T18740] hsr_slave_1: entered promiscuous mode [ 468.057076][T18740] debugfs: 'hsr0' already exists in 'hsr' [ 468.062931][T18740] Cannot create hsr debugfs directory [ 468.075496][T18742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.082867][T18742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.110305][T18742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.134224][T18742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.141713][T18742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.168344][T18742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.205007][T18759] lo speed is unknown, defaulting to 1000 [ 468.298550][T18763] lo speed is unknown, defaulting to 1000 [ 468.322858][T18742] hsr_slave_0: entered promiscuous mode [ 468.329957][T18742] hsr_slave_1: entered promiscuous mode [ 468.336271][T18742] debugfs: 'hsr0' already exists in 'hsr' [ 468.342712][T18742] Cannot create hsr debugfs directory [ 468.366318][T18761] lo speed is unknown, defaulting to 1000 [ 468.478861][ T5148] Bluetooth: hci10: command tx timeout [ 468.548684][ T5148] Bluetooth: hci11: command tx timeout [ 468.912332][T18759] chnl_net:caif_netlink_parms(): no params data found [ 469.038777][T18763] chnl_net:caif_netlink_parms(): no params data found [ 469.136663][T18761] chnl_net:caif_netlink_parms(): no params data found [ 469.224665][T18759] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.231995][T18759] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.239966][T18759] bridge_slave_0: entered allmulticast mode [ 469.247413][T18759] bridge_slave_0: entered promiscuous mode [ 469.301785][T18759] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.309832][T18759] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.317974][T18759] bridge_slave_1: entered allmulticast mode [ 469.325904][T18759] bridge_slave_1: entered promiscuous mode [ 469.382252][T18763] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.389886][T18763] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.397193][T18763] bridge_slave_0: entered allmulticast mode [ 469.405083][T18763] bridge_slave_0: entered promiscuous mode [ 469.442789][T18763] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.450534][T18763] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.458055][T18763] bridge_slave_1: entered allmulticast mode [ 469.465997][T18763] bridge_slave_1: entered promiscuous mode [ 469.477051][T18759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.491274][T18759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.550264][T18761] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.557414][T18761] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.565552][T18761] bridge_slave_0: entered allmulticast mode [ 469.574170][T18761] bridge_slave_0: entered promiscuous mode [ 469.617469][T18761] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.625689][T18761] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.634283][T18761] bridge_slave_1: entered allmulticast mode [ 469.642890][T18761] bridge_slave_1: entered promiscuous mode [ 469.670011][T18763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.681566][T18759] team0: Port device team_slave_0 added [ 469.707440][T18763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.740031][T18759] team0: Port device team_slave_1 added [ 469.753976][T18761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.774196][T18761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.812030][T18763] team0: Port device team_slave_0 added [ 469.864227][T18763] team0: Port device team_slave_1 added [ 469.899876][T18759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.906865][T18759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.909117][ T5148] Bluetooth: hci12: command tx timeout [ 469.938624][T18759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.985584][T18761] team0: Port device team_slave_0 added [ 469.988690][ T5148] Bluetooth: hci13: command tx timeout [ 469.995855][T18761] team0: Port device team_slave_1 added [ 470.003642][T18759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.010950][T18759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.038894][T18759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.058684][T18763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.065666][T18763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.091794][ T5148] Bluetooth: hci14: command tx timeout [ 470.099287][T18763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.152352][T18763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.159721][T18763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.186400][T18763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.199910][T18761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.206883][T18761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.234752][T18761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.249035][T18761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.256005][T18761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.283174][T18761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.364213][T18759] hsr_slave_0: entered promiscuous mode [ 470.371242][T18759] hsr_slave_1: entered promiscuous mode [ 470.377485][T18759] debugfs: 'hsr0' already exists in 'hsr' [ 470.383470][T18759] Cannot create hsr debugfs directory [ 470.488226][T18763] hsr_slave_0: entered promiscuous mode [ 470.495473][T18763] hsr_slave_1: entered promiscuous mode [ 470.502268][T18763] debugfs: 'hsr0' already exists in 'hsr' [ 470.508020][T18763] Cannot create hsr debugfs directory [ 470.526820][T18761] hsr_slave_0: entered promiscuous mode [ 470.533535][T18761] hsr_slave_1: entered promiscuous mode [ 470.539938][T18761] debugfs: 'hsr0' already exists in 'hsr' [ 470.546852][T18761] Cannot create hsr debugfs directory [ 470.558496][ T5148] Bluetooth: hci10: command tx timeout [ 470.628542][ T5148] Bluetooth: hci11: command tx timeout [ 471.988768][ T5148] Bluetooth: hci12: command tx timeout [ 472.069331][ T5148] Bluetooth: hci13: command tx timeout [ 472.148864][ T5148] Bluetooth: hci14: command tx timeout [ 472.628690][ T5148] Bluetooth: hci10: command tx timeout [ 472.708929][ T5148] Bluetooth: hci11: command tx timeout [ 474.068694][ T5148] Bluetooth: hci12: command tx timeout [ 474.160142][ T5148] Bluetooth: hci13: command tx timeout [ 474.228804][ T5148] Bluetooth: hci14: command tx timeout [ 474.708733][ T5148] Bluetooth: hci10: command tx timeout [ 474.793139][T11196] Bluetooth: hci11: command tx timeout [ 476.148591][T11196] Bluetooth: hci12: command tx timeout [ 476.229064][T11196] Bluetooth: hci13: command tx timeout [ 476.308868][T11196] Bluetooth: hci14: command tx timeout [ 488.875695][ T56] block nbd0: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 330 seconds [ 488.886900][ T56] block nbd0: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 330 seconds [ 488.898084][ T56] block nbd0: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 330 seconds [ 488.909714][ T56] block nbd0: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 330 seconds [ 498.629134][T11196] Bluetooth: hci5: command 0x0406 tx timeout [ 506.792207][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 518.949076][ T56] block nbd0: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 360 seconds [ 518.960066][ T56] block nbd0: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 360 seconds [ 518.971699][ T56] block nbd0: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 360 seconds [ 518.983868][ T56] block nbd0: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 360 seconds [ 526.636721][T11196] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 526.647101][T11196] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 526.655860][T11196] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 526.667168][T11196] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 526.669250][ T52] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 526.675674][T11196] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 526.685882][ T52] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 526.700659][ T52] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 526.709813][ T52] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 526.719586][ T52] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 526.733864][T18792] lo speed is unknown, defaulting to 1000 [ 526.789867][T18794] lo speed is unknown, defaulting to 1000 [ 527.019327][T18792] chnl_net:caif_netlink_parms(): no params data found [ 527.096076][T18794] chnl_net:caif_netlink_parms(): no params data found [ 527.174825][T18792] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.182177][T18792] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.189946][T18792] bridge_slave_0: entered allmulticast mode [ 527.197425][T18792] bridge_slave_0: entered promiscuous mode [ 527.217922][T18792] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.225248][T18792] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.233051][T18792] bridge_slave_1: entered allmulticast mode [ 527.240950][T18792] bridge_slave_1: entered promiscuous mode [ 527.324246][T18792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.339347][T18792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.388524][T18794] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.395740][T18794] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.411622][T18794] bridge_slave_0: entered allmulticast mode [ 527.420691][T18794] bridge_slave_0: entered promiscuous mode [ 527.474297][T18792] team0: Port device team_slave_0 added [ 527.483090][T18794] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.492091][T18794] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.501090][T18794] bridge_slave_1: entered allmulticast mode [ 527.529482][T18794] bridge_slave_1: entered promiscuous mode [ 527.539391][T18792] team0: Port device team_slave_1 added [ 527.752721][T18792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.769586][T18792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.828544][T18792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.851215][T18792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.858208][T18792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.928381][T18792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.953173][T18794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.995488][T18794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.029750][ T5148] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 528.040076][ T5148] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 528.048613][ T5148] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 528.060532][ T5148] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 528.074313][ T5148] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 528.137468][T11196] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 528.160711][T11196] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 528.169419][T11196] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 528.177623][T11196] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 528.186618][T11195] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 528.195592][T11195] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 528.210744][ T5148] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 528.219508][T11195] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 528.228065][ T5148] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 528.239128][ T5148] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 528.251795][T18794] team0: Port device team_slave_0 added [ 528.264841][T18792] hsr_slave_0: entered promiscuous mode [ 528.272497][T18792] hsr_slave_1: entered promiscuous mode [ 528.280226][T18792] debugfs: 'hsr0' already exists in 'hsr' [ 528.285974][T18792] Cannot create hsr debugfs directory [ 528.294943][T18794] team0: Port device team_slave_1 added [ 528.395559][T18794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.406639][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.433563][T18794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.461726][T18815] lo speed is unknown, defaulting to 1000 [ 528.473795][T18794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.481008][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.508647][T18794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.541966][T18811] lo speed is unknown, defaulting to 1000 [ 528.578364][T18813] lo speed is unknown, defaulting to 1000 [ 528.708642][ T5148] Bluetooth: hci15: command tx timeout [ 528.716193][T18794] hsr_slave_0: entered promiscuous mode [ 528.723394][T18794] hsr_slave_1: entered promiscuous mode [ 528.730092][T18794] debugfs: 'hsr0' already exists in 'hsr' [ 528.735826][T18794] Cannot create hsr debugfs directory [ 528.790013][ T5148] Bluetooth: hci16: command tx timeout [ 529.237725][T18815] chnl_net:caif_netlink_parms(): no params data found [ 529.274236][T18811] chnl_net:caif_netlink_parms(): no params data found [ 529.350704][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 529.350822][ T5826] Bluetooth: hci6: command 0x0406 tx timeout [ 529.414865][T18813] chnl_net:caif_netlink_parms(): no params data found [ 529.584892][T18815] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.593487][T18815] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.601768][T18815] bridge_slave_0: entered allmulticast mode [ 529.609425][T18815] bridge_slave_0: entered promiscuous mode [ 529.625054][T18811] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.634039][T18811] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.641817][T18811] bridge_slave_0: entered allmulticast mode [ 529.649546][T18811] bridge_slave_0: entered promiscuous mode [ 529.668098][T18815] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.676887][T18815] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.685010][T18815] bridge_slave_1: entered allmulticast mode [ 529.692904][T18815] bridge_slave_1: entered promiscuous mode [ 529.713804][T18811] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.721354][T18811] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.728916][T18811] bridge_slave_1: entered allmulticast mode [ 529.737604][T18811] bridge_slave_1: entered promiscuous mode [ 529.808120][T18811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.835287][T18813] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.842814][T18813] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.850610][T18813] bridge_slave_0: entered allmulticast mode [ 529.858017][T18813] bridge_slave_0: entered promiscuous mode [ 529.866330][T18813] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.873697][T18813] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.881514][T18813] bridge_slave_1: entered allmulticast mode [ 529.890008][T18813] bridge_slave_1: entered promiscuous mode [ 529.899972][T18811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.945729][T18815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.986459][T18815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.030716][T18811] team0: Port device team_slave_0 added [ 530.063094][T18813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.074914][T18811] team0: Port device team_slave_1 added [ 530.099087][T18815] team0: Port device team_slave_0 added [ 530.108206][T18813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.142732][T18815] team0: Port device team_slave_1 added [ 530.151565][ T52] Bluetooth: hci17: command tx timeout [ 530.183942][T18811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.191585][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.218787][T18811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.229560][ T52] Bluetooth: hci18: command tx timeout [ 530.282167][T18811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.289458][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.316028][ T52] Bluetooth: hci19: command tx timeout [ 530.321178][T18811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.333972][T18815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.341614][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.369274][T18815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.383919][T18813] team0: Port device team_slave_0 added [ 530.399199][T18813] team0: Port device team_slave_1 added [ 530.422667][T18815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.430582][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.458159][T18815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.522004][T18813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.529512][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.562792][T18813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.626050][T18811] hsr_slave_0: entered promiscuous mode [ 530.633881][T18811] hsr_slave_1: entered promiscuous mode [ 530.641396][T18811] debugfs: 'hsr0' already exists in 'hsr' [ 530.647247][T18811] Cannot create hsr debugfs directory [ 530.655498][T18813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.663095][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.689939][T18813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.706471][T18815] hsr_slave_0: entered promiscuous mode [ 530.714394][T18815] hsr_slave_1: entered promiscuous mode [ 530.721850][T18815] debugfs: 'hsr0' already exists in 'hsr' [ 530.727597][T18815] Cannot create hsr debugfs directory [ 530.788530][ T52] Bluetooth: hci15: command tx timeout [ 530.868974][ T52] Bluetooth: hci16: command tx timeout [ 530.974337][T18813] hsr_slave_0: entered promiscuous mode [ 530.982394][T18813] hsr_slave_1: entered promiscuous mode [ 530.989179][T18813] debugfs: 'hsr0' already exists in 'hsr' [ 530.995006][T18813] Cannot create hsr debugfs directory [ 532.230615][ T52] Bluetooth: hci17: command tx timeout [ 532.308715][ T52] Bluetooth: hci18: command tx timeout [ 532.391605][ T5826] Bluetooth: hci19: command tx timeout [ 532.868677][ T52] Bluetooth: hci15: command tx timeout [ 532.948635][ T52] Bluetooth: hci16: command tx timeout [ 534.309114][ T52] Bluetooth: hci17: command tx timeout [ 534.388569][ T52] Bluetooth: hci18: command tx timeout [ 534.472150][ T5826] Bluetooth: hci9: command 0x0406 tx timeout [ 534.473202][T11196] Bluetooth: hci8: command 0x0406 tx timeout [ 534.480046][ T5826] Bluetooth: hci19: command tx timeout [ 534.490088][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 534.948693][T18836] Bluetooth: hci15: command tx timeout [ 535.028646][T18836] Bluetooth: hci16: command tx timeout [ 536.391512][T18836] Bluetooth: hci17: command tx timeout [ 536.469486][T18836] Bluetooth: hci18: command tx timeout [ 536.548781][T18836] Bluetooth: hci19: command tx timeout [ 549.031917][ T56] block nbd0: Possible stuck request ffff888024d90000: control (read@0,1024B). Runtime 390 seconds [ 549.043097][ T56] block nbd0: Possible stuck request ffff888024d901c0: control (read@1024,1024B). Runtime 390 seconds [ 549.054193][ T56] block nbd0: Possible stuck request ffff888024d90380: control (read@2048,1024B). Runtime 390 seconds [ 549.065704][ T56] block nbd0: Possible stuck request ffff888024d90540: control (read@3072,1024B). Runtime 390 seconds [ 552.228934][ T31] INFO: task syz.0.3530:18618 blocked for more than 143 seconds. [ 552.236739][ T31] Not tainted syzkaller #0 [ 552.241871][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.251239][ T31] task:syz.0.3530 state:D stack:26024 pid:18618 tgid:18617 ppid:16470 task_flags:0x480140 flags:0x00080002 [ 552.264046][ T31] Call Trace: [ 552.267397][ T31] [ 552.270410][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 552.274956][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.280107][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.285127][ T31] ? __pfx___schedule+0x10/0x10 [ 552.291205][ T31] ? schedule+0x91/0x360 [ 552.295531][ T31] schedule+0x165/0x360 [ 552.299844][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 552.305351][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 552.348365][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 552.354533][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 552.390692][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 552.397036][ T31] nbd_set_size+0x47e/0x6a0 [ 552.403416][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 552.408624][ T31] ? nla_memcpy+0x5b/0xc0 [ 552.413015][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 552.417998][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 552.423589][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 552.430230][ T31] ? bpf_lsm_capable+0x9/0x20 [ 552.434950][ T31] ? security_capable+0x7e/0x2e0 [ 552.440141][ T31] ? radix_tree_lookup+0x240/0x290 [ 552.445296][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 552.450994][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 552.456739][ T31] ? rcu_is_watching+0x15/0xb0 [ 552.461792][ T31] ? __nla_parse+0x40/0x60 [ 552.466881][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 552.474260][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 552.480017][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 552.486141][ T31] ? stack_trace_save+0x9c/0xe0 [ 552.491159][ T31] genl_rcv_msg+0x60e/0x790 [ 552.495693][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.501008][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 552.506752][ T31] netlink_rcv_skb+0x208/0x470 [ 552.511608][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.516483][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.521747][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.527097][ T31] ? down_read+0x1ad/0x2e0 [ 552.531904][ T31] genl_rcv+0x28/0x40 [ 552.535928][ T31] netlink_unicast+0x82f/0x9e0 [ 552.540791][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 552.546096][ T31] ? netlink_sendmsg+0x642/0xb30 [ 552.551234][ T31] ? skb_put+0x11b/0x210 [ 552.555509][ T31] netlink_sendmsg+0x805/0xb30 [ 552.560575][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.566679][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.571768][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.577082][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.582599][ T31] __sock_sendmsg+0x21c/0x270 [ 552.587380][ T31] ____sys_sendmsg+0x505/0x830 [ 552.592450][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.597762][ T31] ? import_iovec+0x74/0xa0 [ 552.602365][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 552.607066][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.612371][ T31] ? __fget_files+0x2a/0x420 [ 552.616991][ T31] ? __fget_files+0x3a0/0x420 [ 552.621982][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 552.627020][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.632597][ T31] ? do_syscall_64+0xbe/0xfa0 [ 552.637326][ T31] do_syscall_64+0xfa/0xfa0 [ 552.641931][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.647170][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.653612][ T31] ? clear_bhb_loop+0x60/0xb0 [ 552.658424][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.664369][ T31] RIP: 0033:0x7f892058f749 [ 552.669687][ T31] RSP: 002b:00007f89213cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.678143][ T31] RAX: ffffffffffffffda RBX: 00007f89207e5fa0 RCX: 00007f892058f749 [ 552.686433][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000005 [ 552.694657][ T31] RBP: 00007f8920613f91 R08: 0000000000000000 R09: 0000000000000000 [ 552.702708][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.711213][ T31] R13: 00007f89207e6038 R14: 00007f89207e5fa0 R15: 00007ffc98062d28 [ 552.719307][ T31] [ 552.722345][ T31] INFO: task syz.0.3530:18632 blocked for more than 143 seconds. [ 552.730128][ T31] Not tainted syzkaller #0 [ 552.735060][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.744001][ T31] task:syz.0.3530 state:D stack:28360 pid:18632 tgid:18617 ppid:16470 task_flags:0x400140 flags:0x00080002 [ 552.755981][ T31] Call Trace: [ 552.759313][ T31] [ 552.762275][ T31] __schedule+0x1798/0x4cc0 [ 552.766837][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.772902][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.777799][ T31] ? __pfx___schedule+0x10/0x10 [ 552.782747][ T31] ? schedule+0x91/0x360 [ 552.787006][ T31] schedule+0x165/0x360 [ 552.791458][ T31] schedule_preempt_disabled+0x13/0x30 [ 552.796960][ T31] __mutex_lock+0x7e6/0x1350 [ 552.802018][ T31] ? __mutex_lock+0x5bb/0x1350 [ 552.806809][ T31] ? genl_rcv_msg+0x10d/0x790 [ 552.811570][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 552.816635][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 552.821792][ T31] ? radix_tree_lookup+0x240/0x290 [ 552.826921][ T31] genl_rcv_msg+0x10d/0x790 [ 552.831767][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.836808][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 552.841890][ T31] ? __asan_memcpy+0x40/0x70 [ 552.846508][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 552.851933][ T31] netlink_rcv_skb+0x208/0x470 [ 552.856705][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.861834][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.866873][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.874001][ T31] ? down_read+0x1ad/0x2e0 [ 552.878571][ T31] genl_rcv+0x28/0x40 [ 552.882597][ T31] netlink_unicast+0x82f/0x9e0 [ 552.887400][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 552.893000][ T31] ? netlink_sendmsg+0x642/0xb30 [ 552.897941][ T31] ? skb_put+0x11b/0x210 [ 552.902278][ T31] netlink_sendmsg+0x805/0xb30 [ 552.907076][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.912531][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.917497][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.923068][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.928448][ T31] __sock_sendmsg+0x21c/0x270 [ 552.933167][ T31] __sys_sendto+0x3bd/0x520 [ 552.937698][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 552.942799][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.947711][ T31] __x64_sys_sendto+0xde/0x100 [ 552.952988][ T31] do_syscall_64+0xfa/0xfa0 [ 552.957597][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.963089][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.969226][ T31] ? clear_bhb_loop+0x60/0xb0 [ 552.973916][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.980685][ T31] RIP: 0033:0x7f89205915dc [ 552.985138][ T31] RSP: 002b:00007f8921389ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 552.993617][ T31] RAX: ffffffffffffffda RBX: 00007f8921389fc0 RCX: 00007f89205915dc [ 553.001663][ T31] RDX: 000000000000001c RSI: 00007f892138a010 RDI: 0000000000000010 [ 553.009992][ T31] RBP: 0000000000000000 R08: 00007f8921389f14 R09: 000000000000000c [ 553.017975][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 [ 553.026158][ T31] R13: 00007f8921389f68 R14: 00007f892138a010 R15: 0000000000000000 [ 553.034416][ T31] [ 553.037477][ T31] INFO: task syz.6.3532:18624 blocked for more than 144 seconds. [ 553.045619][ T31] Not tainted syzkaller #0 [ 553.050671][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.059383][ T31] task:syz.6.3532 state:D stack:27240 pid:18624 tgid:18620 ppid:12519 task_flags:0x400140 flags:0x00080002 [ 553.071600][ T31] Call Trace: [ 553.074885][ T31] [ 553.078648][ T31] __schedule+0x1798/0x4cc0 [ 553.083211][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.088074][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.092981][ T31] ? __pfx___schedule+0x10/0x10 [ 553.097857][ T31] ? schedule+0x91/0x360 [ 553.102389][ T31] schedule+0x165/0x360 [ 553.106555][ T31] schedule_preempt_disabled+0x13/0x30 [ 553.112312][ T31] __mutex_lock+0x7e6/0x1350 [ 553.116951][ T31] ? __mutex_lock+0x5bb/0x1350 [ 553.122026][ T31] ? genl_rcv_msg+0x10d/0x790 [ 553.126731][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 553.132350][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 553.137517][ T31] ? radix_tree_lookup+0x240/0x290 [ 553.143770][ T31] genl_rcv_msg+0x10d/0x790 [ 553.148471][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.153545][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 553.158715][ T31] ? __asan_memcpy+0x40/0x70 [ 553.163345][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 553.169071][ T31] netlink_rcv_skb+0x208/0x470 [ 553.173840][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.178916][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.184729][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.190364][ T31] ? down_read+0x1ad/0x2e0 [ 553.194826][ T31] genl_rcv+0x28/0x40 [ 553.199317][ T31] netlink_unicast+0x82f/0x9e0 [ 553.204162][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 553.209584][ T31] ? netlink_sendmsg+0x642/0xb30 [ 553.214532][ T31] ? skb_put+0x11b/0x210 [ 553.218833][ T31] netlink_sendmsg+0x805/0xb30 [ 553.223613][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.229454][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 553.234422][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.239937][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.245246][ T31] __sock_sendmsg+0x21c/0x270 [ 553.250229][ T31] __sys_sendto+0x3bd/0x520 [ 553.254767][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 553.260126][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.265047][ T31] ? fd_install+0x97/0x540 [ 553.270020][ T31] ? fd_install+0x30d/0x540 [ 553.274573][ T31] __x64_sys_sendto+0xde/0x100 [ 553.279481][ T31] do_syscall_64+0xfa/0xfa0 [ 553.284975][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.290571][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.296655][ T31] ? clear_bhb_loop+0x60/0xb0 [ 553.301485][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.307406][ T31] RIP: 0033:0x7f33cbb915dc [ 553.311989][ T31] RSP: 002b:00007f33ccac6ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 553.320965][ T31] RAX: ffffffffffffffda RBX: 00007f33ccac6fc0 RCX: 00007f33cbb915dc [ 553.329107][ T31] RDX: 0000000000000020 RSI: 00007f33ccac7010 RDI: 0000000000000006 [ 553.337195][ T31] RBP: 0000000000000000 R08: 00007f33ccac6f14 R09: 000000000000000c [ 553.345340][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 553.354030][ T31] R13: 00007f33ccac6f68 R14: 00007f33ccac7010 R15: 0000000000000000 [ 553.362117][ T31] [ 553.365162][ T31] INFO: task syz.7.3547:18670 blocked for more than 144 seconds. [ 553.373569][ T31] Not tainted syzkaller #0 [ 553.378866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.388583][ T31] task:syz.7.3547 state:D stack:25160 pid:18670 tgid:18667 ppid:12515 task_flags:0x400140 flags:0x00080002 [ 553.400630][ T31] Call Trace: [ 553.403939][ T31] [ 553.406915][ T31] __schedule+0x1798/0x4cc0 [ 553.411921][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.416808][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.421743][ T31] ? __pfx___schedule+0x10/0x10 [ 553.426622][ T31] ? schedule+0x91/0x360 [ 553.431832][ T31] schedule+0x165/0x360 [ 553.436040][ T31] schedule_preempt_disabled+0x13/0x30 [ 553.441967][ T31] __mutex_lock+0x7e6/0x1350 [ 553.446598][ T31] ? __mutex_lock+0x5bb/0x1350 [ 553.451575][ T31] ? genl_rcv_msg+0x10d/0x790 [ 553.456279][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 553.461528][ T31] ? stack_trace_save+0x9c/0xe0 [ 553.466427][ T31] ? radix_tree_lookup+0x240/0x290 [ 553.472086][ T31] genl_rcv_msg+0x10d/0x790 [ 553.476634][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.481671][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.487928][ T31] netlink_rcv_skb+0x208/0x470 [ 553.492880][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.497746][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.503105][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.508927][ T31] ? down_read+0x1ad/0x2e0 [ 553.513398][ T31] genl_rcv+0x28/0x40 [ 553.517419][ T31] netlink_unicast+0x82f/0x9e0 [ 553.522285][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 553.527590][ T31] ? netlink_sendmsg+0x642/0xb30 [ 553.532947][ T31] ? skb_put+0x11b/0x210 [ 553.537209][ T31] netlink_sendmsg+0x805/0xb30 [ 553.542146][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.547472][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 553.552590][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.557888][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.563624][ T31] __sock_sendmsg+0x21c/0x270 [ 553.568505][ T31] __sys_sendto+0x3bd/0x520 [ 553.573042][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 553.578073][ T31] ? count_memcg_event_mm+0x21/0x260 [ 553.583623][ T31] ? exc_page_fault+0x82/0x100 [ 553.590267][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 553.595614][ T31] __x64_sys_sendto+0xde/0x100 [ 553.600519][ T31] do_syscall_64+0xfa/0xfa0 [ 553.605040][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.610394][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.616490][ T31] ? clear_bhb_loop+0x60/0xb0 [ 553.621465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.627366][ T31] RIP: 0033:0x7f07201915dc [ 553.631893][ T31] RSP: 002b:00007f07210bdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 553.640395][ T31] RAX: ffffffffffffffda RBX: 00007f07210bdfc0 RCX: 00007f07201915dc [ 553.648873][ T31] RDX: 0000000000000028 RSI: 00007f07210be010 RDI: 0000000000000008 [ 553.656928][ T31] RBP: 0000000000000000 R08: 00007f07210bdf14 R09: 000000000000000c [ 553.665172][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 553.673626][ T31] R13: 00007f07210bdf68 R14: 00007f07210be010 R15: 0000000000000000 [ 553.682066][ T31] [ 553.685117][ T31] INFO: task syz.2.3546:18669 blocked for more than 144 seconds. [ 553.694044][ T31] Not tainted syzkaller #0 [ 553.699717][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.708578][ T31] task:syz.2.3546 state:D stack:28360 pid:18669 tgid:18668 ppid:15995 task_flags:0x400040 flags:0x00080002 [ 553.720677][ T31] Call Trace: [ 553.723977][ T31] [ 553.726917][ T31] __schedule+0x1798/0x4cc0 [ 553.731913][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.736805][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.741814][ T31] ? __pfx___schedule+0x10/0x10 [ 553.746788][ T31] ? schedule+0x91/0x360 [ 553.751238][ T31] schedule+0x165/0x360 [ 553.755432][ T31] schedule_preempt_disabled+0x13/0x30 [ 553.761021][ T31] __mutex_lock+0x7e6/0x1350 [ 553.765655][ T31] ? __mutex_lock+0x5bb/0x1350 [ 553.770915][ T31] ? genl_rcv_msg+0x10d/0x790 [ 553.775664][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 553.780849][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 553.786015][ T31] ? radix_tree_lookup+0x240/0x290 [ 553.791738][ T31] genl_rcv_msg+0x10d/0x790 [ 553.797095][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.802240][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 553.807393][ T31] ? __asan_memcpy+0x40/0x70 [ 553.812218][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 553.817701][ T31] netlink_rcv_skb+0x208/0x470 [ 553.822810][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.827673][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.833005][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.838449][ T31] ? down_read+0x1ad/0x2e0 [ 553.842897][ T31] genl_rcv+0x28/0x40 [ 553.846918][ T31] netlink_unicast+0x82f/0x9e0 [ 553.852052][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 553.857383][ T31] ? netlink_sendmsg+0x642/0xb30 [ 553.862427][ T31] ? skb_put+0x11b/0x210 [ 553.866719][ T31] netlink_sendmsg+0x805/0xb30 [ 553.871665][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.877020][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 553.882253][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.887549][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.892887][ T31] __sock_sendmsg+0x21c/0x270 [ 553.898416][ T31] __sys_sendto+0x3bd/0x520 [ 553.902975][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 553.908029][ T31] ? count_memcg_event_mm+0x21/0x260 [ 553.913798][ T31] ? exc_page_fault+0x82/0x100 [ 553.918710][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 553.924026][ T31] __x64_sys_sendto+0xde/0x100 [ 553.928975][ T31] do_syscall_64+0xfa/0xfa0 [ 553.933506][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.938984][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.945057][ T31] ? clear_bhb_loop+0x60/0xb0 [ 553.949788][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.955721][ T31] RIP: 0033:0x7fc1437915dc [ 553.960208][ T31] RSP: 002b:00007fc14453fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 553.968903][ T31] RAX: ffffffffffffffda RBX: 00007fc14453ffc0 RCX: 00007fc1437915dc [ 553.976882][ T31] RDX: 0000000000000020 RSI: 00007fc144540010 RDI: 0000000000000006 [ 553.985132][ T31] RBP: 0000000000000000 R08: 00007fc14453ff14 R09: 000000000000000c [ 553.993410][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 554.002358][ T31] R13: 00007fc14453ff68 R14: 00007fc144540010 R15: 0000000000000000 [ 554.010470][ T31] [ 554.013570][ T31] INFO: task syz.5.3550:18683 blocked for more than 145 seconds. [ 554.022579][ T31] Not tainted syzkaller #0 [ 554.027540][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.036632][ T31] task:syz.5.3550 state:D stack:28360 pid:18683 tgid:18681 ppid:12517 task_flags:0x400040 flags:0x00080002 [ 554.048874][ T31] Call Trace: [ 554.052187][ T31] [ 554.055146][ T31] __schedule+0x1798/0x4cc0 [ 554.059974][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.064859][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.069955][ T31] ? __pfx___schedule+0x10/0x10 [ 554.074869][ T31] ? schedule+0x91/0x360 [ 554.079195][ T31] schedule+0x165/0x360 [ 554.083369][ T31] schedule_preempt_disabled+0x13/0x30 [ 554.089399][ T31] __mutex_lock+0x7e6/0x1350 [ 554.094048][ T31] ? __mutex_lock+0x5bb/0x1350 [ 554.098885][ T31] ? genl_rcv_msg+0x10d/0x790 [ 554.104174][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 554.109288][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 554.114422][ T31] ? radix_tree_lookup+0x240/0x290 [ 554.119847][ T31] genl_rcv_msg+0x10d/0x790 [ 554.124389][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.129470][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 554.134508][ T31] ? __asan_memcpy+0x40/0x70 [ 554.139182][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 554.144608][ T31] netlink_rcv_skb+0x208/0x470 [ 554.149980][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.154958][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.160244][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 554.165580][ T31] ? down_read+0x1ad/0x2e0 [ 554.170320][ T31] genl_rcv+0x28/0x40 [ 554.174351][ T31] netlink_unicast+0x82f/0x9e0 [ 554.179339][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 554.184663][ T31] ? netlink_sendmsg+0x642/0xb30 [ 554.190027][ T31] ? skb_put+0x11b/0x210 [ 554.194311][ T31] netlink_sendmsg+0x805/0xb30 [ 554.199259][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.205461][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 554.210784][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.216142][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.221513][ T31] __sock_sendmsg+0x21c/0x270 [ 554.226227][ T31] __sys_sendto+0x3bd/0x520 [ 554.231155][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 554.236211][ T31] ? count_memcg_event_mm+0x21/0x260 [ 554.241807][ T31] ? exc_page_fault+0x82/0x100 [ 554.246593][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 554.251935][ T31] __x64_sys_sendto+0xde/0x100 [ 554.256713][ T31] do_syscall_64+0xfa/0xfa0 [ 554.261269][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.266485][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.272969][ T31] ? clear_bhb_loop+0x60/0xb0 [ 554.277679][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.283818][ T31] RIP: 0033:0x7fb5823915dc [ 554.288452][ T31] RSP: 002b:00007fb5831f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 554.297034][ T31] RAX: ffffffffffffffda RBX: 00007fb5831f4fc0 RCX: 00007fb5823915dc [ 554.305529][ T31] RDX: 000000000000001c RSI: 00007fb5831f5010 RDI: 0000000000000003 [ 554.315131][ T31] RBP: 0000000000000000 R08: 00007fb5831f4f14 R09: 000000000000000c [ 554.323291][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 554.331692][ T31] R13: 00007fb5831f4f68 R14: 00007fb5831f5010 R15: 0000000000000000 [ 554.340193][ T31] [ 554.343257][ T31] INFO: task syz-executor:18688 blocked for more than 145 seconds. [ 554.351670][ T31] Not tainted syzkaller #0 [ 554.356626][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.365642][ T31] task:syz-executor state:D stack:22568 pid:18688 tgid:18688 ppid:1 task_flags:0x400140 flags:0x00080002 [ 554.378041][ T31] Call Trace: [ 554.381411][ T31] [ 554.384364][ T31] __schedule+0x1798/0x4cc0 [ 554.389224][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.394120][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.399421][ T31] ? __pfx___schedule+0x10/0x10 [ 554.404337][ T31] ? schedule+0x91/0x360 [ 554.409952][ T31] schedule+0x165/0x360 [ 554.414290][ T31] schedule_preempt_disabled+0x13/0x30 [ 554.420062][ T31] __mutex_lock+0x7e6/0x1350 [ 554.424711][ T31] ? __mutex_lock+0x5bb/0x1350 [ 554.429924][ T31] ? genl_rcv_msg+0x10d/0x790 [ 554.434639][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 554.439876][ T31] ? stack_trace_save+0x9c/0xe0 [ 554.444770][ T31] ? radix_tree_lookup+0x240/0x290 [ 554.450004][ T31] genl_rcv_msg+0x10d/0x790 [ 554.454522][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.459664][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.464714][ T31] netlink_rcv_skb+0x208/0x470 [ 554.469875][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.474753][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.479950][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 554.485285][ T31] ? down_read+0x1ad/0x2e0 [ 554.490412][ T31] genl_rcv+0x28/0x40 [ 554.494440][ T31] netlink_unicast+0x82f/0x9e0 [ 554.499326][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 554.504633][ T31] ? netlink_sendmsg+0x642/0xb30 [ 554.509705][ T31] ? skb_put+0x11b/0x210 [ 554.514985][ T31] netlink_sendmsg+0x805/0xb30 [ 554.520114][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.525435][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 554.530508][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.535802][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.541161][ T31] __sock_sendmsg+0x21c/0x270 [ 554.545856][ T31] __sys_sendto+0x3bd/0x520 [ 554.550913][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 554.555951][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.561021][ T31] ? fd_install+0x97/0x540 [ 554.565495][ T31] ? fd_install+0x30d/0x540 [ 554.570187][ T31] __x64_sys_sendto+0xde/0x100 [ 554.574968][ T31] do_syscall_64+0xfa/0xfa0 [ 554.579821][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.585050][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.591266][ T31] ? clear_bhb_loop+0x60/0xb0 [ 554.595961][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.601972][ T31] RIP: 0033:0x7fe2071915dc [ 554.606413][ T31] RSP: 002b:00007ffd9ef4a140 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 554.616303][ T31] RAX: ffffffffffffffda RBX: 00007fe207f14620 RCX: 00007fe2071915dc [ 554.624434][ T31] RDX: 0000000000000020 RSI: 00007fe207f14670 RDI: 0000000000000005 [ 554.632686][ T31] RBP: 0000000000000000 R08: 00007ffd9ef4a194 R09: 000000000000000c [ 554.641103][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 554.649257][ T31] R13: 00007ffd9ef4a1e8 R14: 00007fe207f14670 R15: 0000000000000000 [ 554.657274][ T31] [ 554.660566][ T31] [ 554.660566][ T31] Showing all locks held in the system: [ 554.668776][ T31] 1 lock held by khungtaskd/31: [ 554.673645][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 554.683701][ T31] 2 locks held by getty/5585: [ 554.689139][ T31] #0: ffff88814db720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 554.699395][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 554.709761][ T31] 1 lock held by udevd/5872: [ 554.714374][ T31] #0: ffff88814331b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 554.724825][ T31] 3 locks held by kworker/u8:8/5920: [ 554.730472][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 554.740582][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 554.749615][ T31] #2: ffff8880b8825958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 554.758919][ T31] 6 locks held by syz.0.3530/18618: [ 554.764138][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.772546][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.781599][ T31] #2: ffff888024bffa70 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 554.792564][ T31] #3: ffff888142ffc1e8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 554.802142][ T31] #4: ffff888142ffbb88 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 554.814447][ T31] #5: ffff888142ffbbc0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 554.828578][ T31] 2 locks held by syz.0.3530/18632: [ 554.833814][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.842080][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.851424][ T31] 2 locks held by syz.6.3532/18624: [ 554.856623][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.865164][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.874502][ T31] 2 locks held by syz.7.3547/18670: [ 554.880315][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.888719][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.897741][ T31] 2 locks held by syz.2.3546/18669: [ 554.903032][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.911610][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.921826][ T31] 2 locks held by syz.5.3550/18683: [ 554.927055][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.935384][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.944748][ T31] 2 locks held by syz-executor/18688: [ 554.950567][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.958937][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.967970][ T31] 2 locks held by syz-executor/18690: [ 554.973724][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.982017][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.991204][ T31] 2 locks held by syz-executor/18707: [ 554.996577][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.005064][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.014172][ T31] 2 locks held by syz-executor/18709: [ 555.019644][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.029466][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.038687][ T31] 2 locks held by syz-executor/18711: [ 555.044059][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.052405][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.061678][ T31] 2 locks held by syz-executor/18740: [ 555.067057][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.075474][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.084562][ T31] 2 locks held by syz-executor/18742: [ 555.090363][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.098855][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.107881][ T31] 2 locks held by syz-executor/18759: [ 555.115955][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.124514][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.134544][ T31] 2 locks held by syz-executor/18761: [ 555.140093][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.148801][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.157924][ T31] 2 locks held by syz-executor/18763: [ 555.163416][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.171728][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.181012][ T31] 2 locks held by syz-executor/18792: [ 555.186382][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.194844][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.203997][ T31] 2 locks held by syz-executor/18794: [ 555.209888][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.218119][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.227186][ T31] 2 locks held by syz-executor/18811: [ 555.233748][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.242332][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.251465][ T31] 2 locks held by syz-executor/18813: [ 555.256838][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.265088][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.274823][ T31] 2 locks held by syz-executor/18815: [ 555.280367][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.288833][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.297863][ T31] [ 555.300484][ T31] ============================================= [ 555.300484][ T31] [ 555.309081][ T31] NMI backtrace for cpu 1 [ 555.309099][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 555.309123][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.309136][ T31] Call Trace: [ 555.309145][ T31] [ 555.309154][ T31] dump_stack_lvl+0x189/0x250 [ 555.309192][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.309224][ T31] ? __pfx__printk+0x10/0x10 [ 555.309262][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 555.309292][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 555.309329][ T31] ? __pfx__printk+0x10/0x10 [ 555.309358][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 555.309395][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 555.309425][ T31] watchdog+0xf60/0xfa0 [ 555.309453][ T31] ? watchdog+0x1e2/0xfa0 [ 555.309483][ T31] kthread+0x711/0x8a0 [ 555.309517][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.309539][ T31] ? __pfx_kthread+0x10/0x10 [ 555.309571][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.309600][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.309629][ T31] ? __pfx_kthread+0x10/0x10 [ 555.309659][ T31] ret_from_fork+0x4bc/0x870 [ 555.309686][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.309718][ T31] ? __switch_to_asm+0x39/0x70 [ 555.309736][ T31] ? __switch_to_asm+0x33/0x70 [ 555.309753][ T31] ? __pfx_kthread+0x10/0x10 [ 555.309782][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.309819][ T31] [ 555.309828][ T31] Sending NMI from CPU 1 to CPUs 0: [ 555.459679][ C0] NMI backtrace for cpu 0 [ 555.459710][ C0] CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(full) [ 555.459731][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.459743][ C0] RIP: 0010:prepare_to_swait_event+0x245/0x380 [ 555.459774][ C0] Code: 89 df e8 ee 4c 8b 00 4c 89 33 48 8b 6c 24 18 0f 1f 44 00 00 4c 89 e7 48 83 c7 18 be 04 00 00 00 e8 80 4e 8b 00 45 87 7c 24 18 <31> db 4c 8b 74 24 08 e9 e5 00 00 00 4d 8d 67 08 4c 89 e7 e8 73 60 [ 555.459791][ C0] RSP: 0018:ffffc90000157ae0 EFLAGS: 00000056 [ 555.459808][ C0] RAX: 1ffff11003955e01 RBX: ffff88801caaf288 RCX: ffffffff819a79a0 [ 555.459822][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88801caadad8 [ 555.459834][ C0] RBP: ffffffff8df42f58 R08: ffff88801caadadb R09: 1ffff11003955b5b [ 555.459848][ C0] R10: dffffc0000000000 R11: ffffed1003955b5c R12: ffff88801caadac0 [ 555.459862][ C0] R13: 1ffff9200002af81 R14: ffffffff819a795b R15: 0000000000000000 [ 555.459876][ C0] FS: 0000000000000000(0000) GS:ffff888126139000(0000) knlGS:0000000000000000 [ 555.459891][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.459904][ C0] CR2: 000055c9ba22cf40 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 555.459919][ C0] Call Trace: [ 555.459926][ C0] [ 555.459940][ C0] rcu_gp_fqs_loop+0x2cc/0x1540 [ 555.459966][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 555.459984][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.460011][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 555.460028][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 555.460057][ C0] ? finish_swait+0xcd/0x1f0 [ 555.460083][ C0] rcu_gp_kthread+0x99/0x390 [ 555.460102][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 555.460120][ C0] ? __kthread_parkme+0x7b/0x200 [ 555.460142][ C0] ? __kthread_parkme+0x1a1/0x200 [ 555.460167][ C0] kthread+0x711/0x8a0 [ 555.460193][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 555.460211][ C0] ? __pfx_kthread+0x10/0x10 [ 555.460243][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.460267][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.460292][ C0] ? __pfx_kthread+0x10/0x10 [ 555.460317][ C0] ret_from_fork+0x4bc/0x870 [ 555.460337][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 555.460360][ C0] ? __switch_to_asm+0x39/0x70 [ 555.460376][ C0] ? __switch_to_asm+0x33/0x70 [ 555.460389][ C0] ? __pfx_kthread+0x10/0x10 [ 555.460415][ C0] ret_from_fork_asm+0x1a/0x30 [ 555.460441][ C0]