last executing test programs: 2m1.538876422s ago: executing program 4 (id=1808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)={0x2cc, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x7f, 0x8, "f49fa83590fe0fb368f3669c0b24977c943e603a184a014af505d77cd3638a11718714285f70f4dadf5ab794d7bacff6ab1c74615cdb62c2b9b679adb9b7d4f85c95eb41d669951a87e2a3d2be0c4412a4d75e95f37f9e17c4118f53b4cf458faeeb7f74f93aed753be1ac278bc9226934368ad1032b46ba05f1d6"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x4e, 0x8, "90a715df51aa4818185e20256e765e159d8f468690e3d7f04fa120564d37802cb1abd6d7eed8d50d8531a8171735269046cc532ebc11d4a47c924c7c08df4a0b666d1ba06caa95a352a1"}, @NFTA_OBJ_USERDATA={0xf2, 0x8, "d86b031d93b4a23b2882dc99b149468e3237c10eb497f046274f1cd58f17952961c58893a0d1403f3334ab0b846b081a266ccd2b217b0a62521089224e4d0fc30c271391c07991d330754be868d2c21197fa3654cb76b5801dbc26ce6a089cfbf118bda83d6da8cc2633ed8fff597056c94ee40d1ec4cf56c099ff90a6bd8c3db4044042c23fbc427479f2523a09b9297c1b52013136744e205115ddc5c31353ea18ed156bce2d3329f299a1afd2ef8d64b9611fe6df257f7ab475132e1f60ff684c3ad6e8c6759636ff57deb5182d2c57c3a41f547451f73284895658f5d182d93510c6c6ca9f9ab1ed542c4513"}, @NFTA_OBJ_USERDATA={0x30, 0x8, "837264345959ccb9b0e9554627f7452f0d671b55da3c7878f5c2e57c1714df00bacf58f592aeb774fd28c4cc"}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_USERDATA={0x9d, 0x8, "fbc6192a6430ec29d69ca60f0bad573fee95eb13b1cde2b3c0c24eeb8bd48a13f9a0f56a9c7a3d8d4a058ab3faab7293918aae61e73a9fc54c9bb066800ca0b4bc2031f78a09d1d9043cf1ee723e0da97c3f8b31f94614e5c3f569ce8f8fb570f5311ba14c665abc5181d4b40b9c3c54af2f54982565bc48e6d53479754dba9df3aea1adc4cf3bc4d8509d53f57c1295a944de661ad7bbd881"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8044}, 0x24008010) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xe4}, 0x94) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44010}, 0x40088d4) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fedbdf2510000000", @ANYRES32=0x0, @ANYBLOB="24020000002005002c0012800b00010065727370616e00001c00028004001200040012000500160002000000050017"], 0x4c}}, 0x8000) unshare(0x20000400) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r6}) (async) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ppoll(&(0x7f00000005c0)=[{r7, 0xc242}, {r9, 0x2248}, {r5, 0x31}, {r3}, {r10, 0x8}, {r0, 0x500}, {r11, 0x10}, {r1, 0x6101}, {r3, 0x88}, {r4, 0x1}], 0xa, &(0x7f0000000700)={r12, r13+10000000}, &(0x7f0000000740)={[0x9]}, 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x800) sendmmsg$inet(r8, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="f0", 0x1}], 0x1}}], 0x1, 0x24044c41) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000030000010002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) 2m0.580754619s ago: executing program 4 (id=1820): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000009640)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000009680)=0x3, 0x12) sendfile(r1, r1, 0x0, 0x970b) 2m0.472481146s ago: executing program 4 (id=1822): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) socket(0x10, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x4, 0x4, 0x9c34, 0xc0}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="0b158858204667fd0a545d89540c02bd7b0e3d17d265e9c592ab7e089b7c1f03116f8ee3e1ee0405fa34ab9bb30a39f9a60d8fe03e3888c3f0d8cb6efb4b5ab5cf7dc373538af38a09a9f8d6fdcb9d1bbeccfc36997ba4f5f51801d82a20e33c274904e289daa960ea05bff8969743680335f8f17cbdd58d474a6a0d2fc12fbfe5e550", @ANYRESDEC=r2], 0x10}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1d, 0x0, &(0x7f0000000180), &(0x7f00000003c0)='GPL\x00', 0x81, 0xe1, &(0x7f00000007c0)=""/225, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x80001}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xb, 0x6, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[r5, r5, r5, r5, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x3, 0x0, 0x0, 0xb7, 0xffffffff, 0xff7fffff, 0x1}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x0, 0x24004000) (async) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000001a00000000080009000100000005000200fc00fe00080005007200000008000500010000000500060003000000"], 0x54}}, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2m0.074196017s ago: executing program 4 (id=1826): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffffffffedc}, 0x40000142) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r3, 0x100, 0xfffffffffffffffe, 0xd}) recvmsg$unix(r6, &(0x7f0000001980)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000580)=""/14, 0xe}, {&(0x7f0000001600)=""/44, 0x2c}, {&(0x7f0000001640)=""/41, 0x29}, {&(0x7f0000001680)=""/208, 0xd0}], 0xa, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}, 0x21) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) close(r4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) shutdown(r4, 0x0) (async) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffffffffedc}, 0x40000142) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r3, 0x100, 0xfffffffffffffffe, 0xd}) (async) recvmsg$unix(r6, &(0x7f0000001980)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000580)=""/14, 0xe}, {&(0x7f0000001600)=""/44, 0x2c}, {&(0x7f0000001640)=""/41, 0x29}, {&(0x7f0000001680)=""/208, 0xd0}], 0xa, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}, 0x21) (async) 1m51.88610915s ago: executing program 1 (id=1862): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24080804) shutdown(r0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x2, {0x0, 0x2, 0x4, 0x1, 0x0, 0x48, 0x0, [@loopback]}}}}}]}, 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x1}, 0x8) 1m51.677912179s ago: executing program 1 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000100)=0xf, 0x4) sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x88aef0a5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffeb1}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x8000) 1m51.018260964s ago: executing program 1 (id=1865): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/73, 0x49}, 0x2001) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r2, 0x4690}, {r2, 0x8143}], 0x4c, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c0002800600010004000000080005", @ANYRES32=r0, @ANYBLOB="0000000080", @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) 1m48.556871452s ago: executing program 1 (id=1875): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @local, 'veth1_to_hsr\x00'}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="3a9cbf7910df27b5647f10bb51b6429b51c8ab5bbab7207f18d77926008170f83c4398abf271f4cc53b03c5721156b4c588cf3ccc4147a59c017d5e264fd8c33035cbb9f60452718884f450acdf5dd6722969191f4ce84deb05ac665801966355ef9c5a9cfaae3e10c6a902645127d1a2f360bd32c03576edd904dfa65cf1d492b23e5cbc495f78b9aae8a233188433f644f30eecbabc3270774", 0x9a}, {&(0x7f0000000140)="e367b94dcd8f0138a06039bcb5b3359983a9759c452d3e1b64a6247240197cefec58d58a3906071317a4728dee68aa1a8fcd6a52eea09b7eac11c41d88b04acade576538806c2149686800d766c48a99b8419b59ad7c8113c7d2a1f4118bafc6dc3753fc54b8dc7e1d99201aa425bd9689ab7957e5b8f09e3215407762b8eddda45393c9ad0888acd56eeb36007f8fefb0539bdd42a5c2e3a5d49f769614bbf6018a6d1c92bc00be998c26aa56f286c26e2d6555d4d0d0c5b0009b23475039f8870662a9692286b66e48", 0xca}, {&(0x7f0000000240)="f6df260f2cbf33422b", 0x9}], 0x3, &(0x7f00000002c0)=[{0x110, 0x114, 0x6, "bb82dd36f8ccbf8bb86d0ad1aae7f0e1c64d3548ca0613429dc13ae8948ed14b3d2ef29370f8eb0ca77613ac69ea2a8d8e57ec843855e3d25cd784b3eb5632f09a3165528acd09882774814e5924c479207857d2817304524619ade3038075d334b0e679e950bce6ffa06a542563de59ff3da7ca8306f6957407ae8848feac5d1a45da7027cae784624c1100006c6053374cdfef3d35da474d95dc1d140e98920b33885641433f87c6911f6ff23fd5d9c3f61e05dfe1aeff7150a53ae610fbd9744ab53f1510adadd58a72077b7345e746502c4eb61b8118eafa85086702154ee0afed66651a3302a2f03b23572a54c5dd3ed7ee60884130f7"}], 0x110}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="ee1d8270776a1a4f7b6dd0b87be957330dbdd0fd37f60fa1a2efb5f93dd506a290410b744ed0194c1d0f929fa20a2b2062400bb2d143cbbe518dc1dd490b63afd35c393bce91a3e60a186f559fe32261051d9d88d32f1b1b04edf792cb7a7c0a8f3eb570e36d2ffd2883cf5dec4853b1639fe0740e815d6b78b0e20723a1f2f3df919f9ee18638b92b2ef7b024258e2ceb787fecfee267e464734fa4e78b3a7268664ef1517d2c9e8462dc63476f03ae3410b7444c74c9f48952a5e985a873acf6232c5e1fdc45a639992a", 0xcb}, {&(0x7f0000000500)="948d7dec3b1d5733269b5c74b1c2c504d02c226564ea4c695a403eaf74a6ff5f4dba06ec13c52dddc7d221e04643ceec0433dd71b2adc3256107d020a7b332e5aba98ed1c35710ee012e0a716e5b25987c1333cc575d23e14d0228645ee25e93aad77355f20c1071176a86169699014b744da719ae5462984dc29d789ced9c7c4d8ec0500750a5e1b5efa157470020df241b1d88", 0x94}, {&(0x7f00000005c0)="9fefa6d371f8c93cb26a5ed0dd73fe3aea81729be9beb8f27b199fef919273e4076c6a13efc48f710dcc7f82377e24d6366a0b1503b3ab9c7b577fc71cded176ccecef0cd9f59efe0c50b393e0bd2172c5817ee59e0fc066c8e5d7e2e5f7312d9c30aff32abcfa0ee886cdab34caf6e225d3db1a4047b2da4041f1a8c3c7ac4422", 0x81}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000780)="f16cd7696c2c6a27afc68fac067f1f4e4e6d", 0x12}, {&(0x7f00000007c0)="cd89b26096d15421c8056a36d301bebb2df17d7dc1decf65a6a13e9c855ea9bab8012233af94d14b0cf9a3b207772ed05e7159f6de3593bcf823b557a97ba6c500c8be6e460f6e7fa11660c8e9c6981bb0e4cae76f3639fcc5fa53ba1fa6f55f7dabdd93b3c216f2aa9d61b142890149d60d6f9ad16cbbee3aa1cbcd355a658b46ff304aa813189369f6f46bc9ca481ac85092e96233e7bfbdb517c78bab366b43958e4f", 0xa4}], 0x6}}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x5, @multicast1}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000980)="cd6a847933b3dafae596392651f038ba61d6cca77482d8e7bd65468c8c10145e93c06def77225a69da08363e0d1ff51b992465a3ed68805d9edd70a9e2e726f402bdbd8de72fe8334948f926927b9c125815ec4c7a8eb038ae46d4d25b53d20667152b9d9ce6959e12e8aeab5e0e7f58d05d38aa6de57665eccb1815d567ac654d41568d47b820792138063a00513ebba1a9681adbe0c9296e0c1295c852100c75a3f183f7bf78e0e95934eee153889678fa0af02d68d356513b941f5896", 0xbe}, {&(0x7f0000000a40)="63434b86698667af957106f1086af2cf8541a4ce38c8e5caf8d65de7767f7f8ce05bb62a7341d2eb93eb5b8cd701cc3406d1b8b84b70962a852c0492d6812b6146371809d2240fc1b162c7d95e9bc631dd2d6ef046e6b4e76ac803b79282ce43cb0c6bebc97d78c40f2616e0c3af958d1d202f0c139e3a651f6cedeed3ddedf06532ff78ab085d19112a2623ff5d4a795b104c4cc48c8498eefafab87a6b7916c3d604c6906ea280ffe863751efdd5bb63113458162f0b616cee613666b8df2e023dd4ab494bd6b1bf7795", 0xcb}, {&(0x7f0000000b40)="b6783ead2ef6b3e48ba0d1ff95e706d05e09ef17a61780ae52dbcfa2e3eaea1b1577ac77f342b2ed695e671a12bd46f929d4157f689ae820d57885eb29f1a4a2700f7e6abb7a57c7f7c1a573a79aae018ea8272ebd4a943890a3383ee5cc661795df54ca224e", 0x66}, {&(0x7f0000000bc0)="9dd3022194899dfc20ef2677ad18c81b73be39ee1b85801f8d1389c01a53a9327f5b82cf82c7", 0x26}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="fa7549a50a7d9c75d1c30cf1e22331a03f220e93912594ec1522b2c6839918bf2fb84b9dded31f5e1beccef24434201e481af26a04af188116f04e1fefb194beff726fc4cccca2f949155023189b04ac1cd6a52753776779e66201f796bc73c2bf0168b89636e84f6610e40eb7562ee52e16e80e672ee25693781af60562b1f8a2516c4071651425d344eb15b4fe11b445aa32c686c2ca3b573bf584c96b13aead53c7ef16d66c96fe662e", 0xab}, {&(0x7f0000001cc0)="fc57c47fd38398e8a9b5339aa83a9ffc540dc57008d77437bc14d3542fcaa5083e9217329a4e9545fe739bf7dd42942fffb3d0129e89315c90f33f66ca7d461cfa1830ee75d95bee4d72924e512c326e6ad6fa6c6a564d14f25d044dfca81e35a120ce3eed7df98cf93e33dd45069b602e30088fda6910c258a53049321e243647ea1d76477c726a654333dda2196eb4a898ba2cbf18161d59162f2c5f83cb37b8ef7e0a45ed0b917edbeab15e45008c523f16b8b51f2872eb9f03847d92d07dc5b17e", 0xc3}], 0x7, &(0x7f0000001e40)=[{0x28, 0x10a, 0x7, "115f8ee58c603322c54c9450ffa6b26bfb1c7e"}, {0xc8, 0x115, 0x6, "9862e127fdd5b74830e336c9fd48b9c895d154344a7a8aef22c9f58e6878dde75603df71988a695a3a6977c78d7f9d5bc2f0f4493fd0e29ac606a54c7b7dd513912464ef5eab82022c2ad0fc6c2c9d5a47256efa5facd807052a6252189f739a1414e8cd3b7dce0265cc81d042b220e795e1f9183645e3edb9fa838bf1866b84591cc3f976a05efe775062b5fcfd0a184dd881def7b9aaf20ad4a31862a76142ec57ba48d44759cf306ee8d6fba1a10b00c91f4f3942dc"}, {0x78, 0x1e, 0x8001, "312c9261254b4745bc5e00c2b54a012ce93cf56aca14a5ffd83b6acf6e1983b91f325a798150910f4ba4dc3de26fef584729fa8fed3a48df2c8cebcfd0c7cf33678e43d47bdf9ba84bb0b05f49b05e524517f44be2428559b144f5785cec9eac31c4a0ae7278c269"}], 0x168}}], 0x3, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002080)={r0, 0x3, 0xfff, 0xffffffffffff49a4}) connect$unix(r1, &(0x7f00000020c0)=@file={0x1, './file0\x00'}, 0x6e) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000002140)={0x0, @in6={{0xa, 0x4e24, 0x3, @private1, 0x10}}, 0x7, 0x2, 0x5, 0x0, 0x2}, &(0x7f0000002200)=0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002240)={r2, @in={{0x2, 0x4e23, @remote}}}, 0x84) socket$rds(0x15, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000002300)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000002340)={r3, r4/1000+60000}, 0x10) recvmsg$can_raw(r1, &(0x7f0000002a80)={&(0x7f0000002380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002400)=""/211, 0xd3}, {&(0x7f0000002500)=""/177, 0xb1}, {&(0x7f00000025c0)=""/15, 0xf}, {&(0x7f0000002600)=""/111, 0x6f}, {&(0x7f0000002680)=""/135, 0x87}, {&(0x7f0000002740)=""/97, 0x61}, {&(0x7f00000027c0)=""/135, 0x87}, {&(0x7f0000002880)=""/103, 0x67}], 0x8, &(0x7f0000002980)=""/211, 0xd3}, 0x2060) r6 = socket$netlink(0x10, 0x3, 0x15) connect$inet6(0xffffffffffffffff, &(0x7f0000002ac0)={0xa, 0x4e20, 0x5f3, @mcast2, 0x887}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002b00), r7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002b40)={0x3, 'ip6_vti0\x00', {0x5}, 0xe95}) syz_genetlink_get_family_id$tipc2(&(0x7f0000002b80), r5) accept4$vsock_stream(r5, &(0x7f0000002bc0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r8) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r9, 0x8008f512, &(0x7f0000002c40)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000003c80)={'wg0\x00', 0x0}) recvfrom$packet(r5, &(0x7f0000002c80)=""/4096, 0x1000, 0xe0dfe930e1fdd272, &(0x7f0000003cc0)={0x11, 0x19, r10, 0x1, 0x2, 0x6, @remote}, 0x14) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003d40), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x48, r11, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x801) sendmsg$NL802154_CMD_SET_PAN_ID(r7, 0xfffffffffffffffd, 0x4000080) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000004080)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000004180)=0xe8) sendmsg$netlink(r1, &(0x7f00000042c0)={&(0x7f0000003e80)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc, &(0x7f0000004280)=[{&(0x7f0000003ec0)={0x188, 0x25, 0x300, 0x70bd27, 0x25dfdbfc, "", [@nested={0x169, 0x84, 0x0, 0x1, [@nested={0x4, 0xea}, @generic="8ad6e3e63ebc8486e5e2e254be92f1adadf72e97731338aec8967ac87ccf14ea7efcfa0ad8e8650070ca4eaab1df92e1849cd041a6fd1c6f5d8029bed853651a53e1bbb6edb55f02abd41dda8a6a800f165abd3a4558a2db7d26fcdea23eed177c3e737812a704c773f00f5ad6dbbe71fcc1d2a043", @generic, @nested={0x4, 0x21}, @nested={0x4, 0x132}, @nested={0x4, 0x123}, @typed={0x8, 0xed, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x50}, @generic="29146590eb11b31b226a7e6bcb8fc4957413ec08f30ebfc41bd1dd05ebbc2fcf508bede141a5f5f03963289506a7ac79655e2c54738479999415863034f65b1825529eacfc9518a0c2eb3e3b8dc643d77691a494e840a0e5d0a2e0050c24e5d9b6a8d171bf6845cc462a02c385c10c4d41cffae811ef6fd8d8dc3a8fca69eed7fed50c2c10a0aac2d393eb83e6ec90e4cba6b74b6b950cb8631fbb3f418fa4769d4e8cbba1fd7c30ec6a83691798c45a28b3f45c73add3ae20ad482c65f897bb9c4b0d700365b8799bbcb536d5236d5e0cd6487c"]}, @typed={0xc, 0x63, 0x0, 0x0, @u64=0x7fffffff}]}, 0x188}, {&(0x7f00000041c0)={0xa4, 0x26, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x135, 0x0, 0x0, @uid=r12}, @generic="be5568f92e8b9103b5d936215c54f582e8c9b0c91e9dbe622d099fe189cdf30b1de00d16cc344e06b651c4fa60594d020ae115b5b14443ce3006d60c673e7342d0756f60c7352a55eeda2f695ff4e24b41bc9555750bceff61e8ca64129c2f3cb9b392600dbdcf7723882b3d30", @nested={0x8, 0x4d, 0x0, 0x1, [@nested={0x4, 0x5b}]}, @typed={0x14, 0xe0, 0x0, 0x0, @ipv6=@mcast2}]}, 0xa4}], 0x2, 0x0, 0x0, 0x20004080}, 0x10) accept4$inet6(r5, &(0x7f0000004300)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000004340)=0x1c, 0x40800) 1m48.286015458s ago: executing program 1 (id=1877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x4040001) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff0000000071102e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="620ac4ff0000000071102e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket(0x22, 0x7, 0x21) (async) socket(0x22, 0x7, 0x21) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r2, 0xeac1}, &(0x7f0000000080)=0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xb) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x3a, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000083a6486b49be26c2d654010f00250a016c27aa5943090e220100000000000000000000000000000004d302203c11"], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x16c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x4e26, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x4, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa763c9a18bf448c5d9f5459"}}, @encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e21, @in6=@mcast2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 1m48.166515222s ago: executing program 4 (id=1878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f, 0x1, 0xa9, 0x9, 0x5, 0xfffe, 0x2, 0x100]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d4a45f97b0e53acdff527c9b2e8638b5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000850) 1m47.681911742s ago: executing program 1 (id=1880): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000001300)=ANY=[@ANYBLOB="88030000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ff010000390000000800030089b62e54857849d0bbdfb127b67d2682b1da8300513953394786e1c8caa10a69b1995e980a8b3cf78e79d8fe2f667a77dd645e476b59564da2d80f7808eede167580bcaca3a03aa2e54b3840e4827b9601cec420d1774963e9fc74d6e395af807ca79f6d8b059c34a91b36074a9bfea8b768b4eda97efd17daa87da0cc075cc46980b60f5db93aaf4d32", @ANYRES32=r7, @ANYBLOB="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"], 0x388}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x40000) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000680)=ANY=[@ANYBLOB="010a020e000000000000000000000000000000000000000100000000000000000000000000000001fc01000000000000000000000000000000000000000000000000ffff6401010000000000000000000000000000000000d2d9aab008978729cc24bde9b1cf2f2cf2cfbf987f610bc09bb8d273771796a67311b177788a12496fc83b06ec25a3660377f8e00c15ef04adcfaaed0302ebe323268f56a0507ed0059de9be0e04e28288f57f2bafe86678054cf041fc0dcb0764a5e49c68"], 0x58) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x8863}, @val={0x0, 0x4, 0x1, 0x0, 0x5, 0xe96}, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "c4", "fbeae0", 0x201, "13f1735669cbee8887d94fbefdc96817d1858b5c97f98e820affc470bd61c67610007502b7e0b00747d6613e881c56b0c06b7fa58f5fb82e823ea18439a2f9"}}}}}}, 0x63) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @broadcast}, 0x4, 0x4, 0x1, 0x4}}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x31, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @broadcast}}]}, 0x58}}, 0x0) recvmmsg(r8, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1, &(0x7f0000000ac0)=""/23, 0x17}, 0xe}], 0x1, 0x40002080, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200), 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4ea3, @empty}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r12, 0x8004745a, &(0x7f0000005280)) 1m47.169759982s ago: executing program 32 (id=1880): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000001300)=ANY=[@ANYBLOB="88030000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ff010000390000000800030089b62e54857849d0bbdfb127b67d2682b1da8300513953394786e1c8caa10a69b1995e980a8b3cf78e79d8fe2f667a77dd645e476b59564da2d80f7808eede167580bcaca3a03aa2e54b3840e4827b9601cec420d1774963e9fc74d6e395af807ca79f6d8b059c34a91b36074a9bfea8b768b4eda97efd17daa87da0cc075cc46980b60f5db93aaf4d32", @ANYRES32=r7, @ANYBLOB="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"], 0x388}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x40000) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000680)=ANY=[@ANYBLOB="010a020e000000000000000000000000000000000000000100000000000000000000000000000001fc01000000000000000000000000000000000000000000000000ffff6401010000000000000000000000000000000000d2d9aab008978729cc24bde9b1cf2f2cf2cfbf987f610bc09bb8d273771796a67311b177788a12496fc83b06ec25a3660377f8e00c15ef04adcfaaed0302ebe323268f56a0507ed0059de9be0e04e28288f57f2bafe86678054cf041fc0dcb0764a5e49c68"], 0x58) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x8863}, @val={0x0, 0x4, 0x1, 0x0, 0x5, 0xe96}, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "c4", "fbeae0", 0x201, "13f1735669cbee8887d94fbefdc96817d1858b5c97f98e820affc470bd61c67610007502b7e0b00747d6613e881c56b0c06b7fa58f5fb82e823ea18439a2f9"}}}}}}, 0x63) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @broadcast}, 0x4, 0x4, 0x1, 0x4}}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x31, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @broadcast}}]}, 0x58}}, 0x0) recvmmsg(r8, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1, &(0x7f0000000ac0)=""/23, 0x17}, 0xe}], 0x1, 0x40002080, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200), 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4ea3, @empty}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r12, 0x8004745a, &(0x7f0000005280)) 1m47.101636791s ago: executing program 4 (id=1884): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$isdn(0x22, 0x2, 0x11) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000100)=0x4) bind$isdn(r1, &(0x7f0000000000)={0x22, 0x1, 0xe, 0x0, 0xb}, 0x6) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x48}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x48}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000000) 1m46.889285006s ago: executing program 33 (id=1884): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$isdn(0x22, 0x2, 0x11) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000100)=0x4) bind$isdn(r1, &(0x7f0000000000)={0x22, 0x1, 0xe, 0x0, 0xb}, 0x6) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x48}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x48}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000000) 20.592579519s ago: executing program 0 (id=2341): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept(r0, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0xc72f, 0x4, 0xc, 0x1, 0x0, 0x6, 0x625a, 0x66a, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x5}, &(0x7f0000000180)=0x8) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x17, 0x9, 0x2, 0x4, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d6, 0x38, 0x6, 0x47, 0x2, 0xb0000001}]}, 0x20}}, 0x8010) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @loopback}}, 0x5, 0xaf, 0xfffffbff, 0x6, 0x2}, &(0x7f0000000380)=0x98) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000003c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x2, 0x6, 0x4, 0x6, "fb426cd1cd1dd41c9616f25148b435f86c9fcd76d8d7550c2c83d1fa854db40a5acd27dc2ed9534e7d96bb6eff1f00fc105dde548a793b3c3cb88ae02add6d98541dfb2da49ab6fbf810a422e7b18a458e9e43094128589d731927336870df398fd9ab16bd71344d8494c26c15e61bd2a5ccc1d8d63b043a84407b97e669db95"}) (async) recvmsg$qrtr(r1, &(0x7f0000001cc0)={&(0x7f0000000480), 0xc, &(0x7f0000001940)=[{&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000680)=""/6, 0x6}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/195, 0xc3}, {&(0x7f0000001840)=""/168, 0xa8}, {&(0x7f0000001900)=""/12, 0xc}], 0x8, &(0x7f00000019c0)=[{0xb0, 0x0, 0x0, ""/156}, {0xe0, 0x0, 0x0, ""/204}, {0x70, 0x0, 0x0, ""/90}, {0x68, 0x0, 0x0, ""/86}, {0x40, 0x0, 0x0, ""/42}, {0x30, 0x0, 0x0, ""/25}], 0x2d8, 0x42}, 0x38, 0x100) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001d80)={'syztnl1\x00', &(0x7f0000001d00)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x9, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1d2c98b45e7478b1, 0x20, 0x0, 0x7}}) connect(r1, &(0x7f0000001dc0)=@xdp={0x2c, 0x4, r4, 0x40}, 0x80) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001e40)={r2, 0x8}, 0x8) sendmsg$tipc(r1, &(0x7f0000002100)={&(0x7f0000001e80)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}}}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000001ec0)="6971d75205b68e4259ffadfbe9fa00224eabbadac79263fd70a25784e0006770fe066bab7b3e44df9b5d92b005e6d4f586fff8abc5808031f90b278c8f0c82b014db86cdf73d499b10081d0d98608c4f5e89e99e783a7a552c447b2ec8bf63bd984b05d93342e6f7df3c1685d2e875fbb317e535f51af58130b1dbfa9e0f8c1712c06d6be7cff0c949333bfe07e4b8fdf18d326f04d894524db64bb2b2c4552a428daf929c7dc0f7691727873163ce8005e55f888d879aaf9537beb9329ec243fa745b502c028b1d7d", 0xc9}, {&(0x7f0000001fc0)="91b168874a01e0ec0b8a09463e863dd07d34d95cbdf0b1248e1650835bdae8cb92ffa356c16848", 0x27}, {&(0x7f0000002000)="b3afe37d9256c5c535be20e22990efc309e17b4fb35e3a2321c7d3c33efe2e338fe191d796696ae819011e5e08982f510b9e3aad5be2640aded508522367d820d9fbda936e36d2ec985f3a159d3cb407a9d8cf6d254ebff87d61e9a4b432e3b4ae7ee9959ce079ae47a8210456aa764e767f90b085f7c5ae293f52ec2b2bfb9c7c8c2d53b992a834d7b57debd2da7c5c21337191f7f06a4b3e4f2b2268", 0x9d}], 0x3, 0x0, 0x0, 0x20004000}, 0x6004c0c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002140)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)=@ipv6_deladdr={0x3c, 0x15, 0x4, 0x70bd26, 0x25dfdbfd, {0xa, 0x10, 0x80, 0xfd, r4}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x24004850) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000002280), 0x4) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002300), r1) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0x84, r6, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000885) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000002480)={r2, 0x10000}, &(0x7f00000024c0)=0x8) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x85ede02264d4111e}, 0x4000004) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000002600), r1) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000028c0)={0x6, 0x1b, &(0x7f0000002640)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x0, 0x2, 0x3, 0x30, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb4d4}}], &(0x7f0000002740)='GPL\x00', 0x6, 0x42, &(0x7f0000002780)=""/66, 0x40f00, 0x33, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002800)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000002840)=[{0x1, 0x2, 0xf, 0x5}, {0x5, 0x2, 0xb, 0x5}, {0x1, 0x5, 0xa, 0xa}, {0x5, 0x5, 0xe, 0x5}, {0x0, 0x2, 0x0, 0xf196bee32ff35c6e}, {0x3, 0x5, 0xf, 0x5}], 0x10, 0x2}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000002980)=r8, 0x4) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a00), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x78, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc93e}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}]}, 0x78}, 0x1, 0x0, 0x0, 0x44444}, 0x804) (async) sendmsg$nl_route(r1, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)=@newneigh={0x78, 0x1c, 0x100, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, r5, 0x20, 0x20, 0x3}, [@NDA_IFINDEX={0x8, 0x8, r5}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0x4, 0x8, 0x8001}}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_VNI={0x8, 0x7, 0xe87}, @NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x78}}, 0x4) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x4) socket$unix(0x1, 0x0, 0x0) 20.44601898s ago: executing program 5 (id=2343): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={0x1024, 0x1f, 0x107, 0x0, 0x25dfdbfb, {0x3, 0x7c}, [@generic="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", @nested={0xd, 0x1, 0x0, 0x1, [@generic="169fc4f5f2e0e303ef"]}]}, 0x1024}, 0x1, 0x0, 0x0, 0x10}, 0x4010) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) (rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESHEX=r3], 0x27) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010020000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002"], 0xa0}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x10001, 0x0}, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r9 = socket$unix(0x1, 0x2, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)=""/70, 0x46}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000780)=""/195, 0xc3}], 0x7}, 0x40002102) (async) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r10, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) (async, rerun: 64) bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (rerun: 64) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r8, 0x4) 20.270192979s ago: executing program 0 (id=2346): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x2a, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000e"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 20.18148672s ago: executing program 5 (id=2347): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[], 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[], 0x114}], 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@updsa={0x164, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x71, 0x14, {{'xcbc(aes)\x00'}, 0x128, 0x0, "000000000000000000000000000000003fe380589cc8d6d2287e1ad94098733cb609bf729c"}}]}, 0x164}}, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x3, 0x20000000000001bb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)=[{&(0x7f0000000540)=""/96, 0x60}], 0x1, &(0x7f0000000ac0)=[{0xd8, 0x0, 0x0, ""/195}, {0x100, 0x0, 0x0, ""/239}, {0x78, 0x0, 0x0, ""/98}, {0x90, 0x0, 0x0, ""/126}, {0x108, 0x0, 0x0, ""/242}, {0x70, 0x0, 0x0, ""/90}], 0x458, 0x12021}, 0x38, 0x40000041) (async) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)=[{&(0x7f0000000540)=""/96, 0x60}], 0x1, &(0x7f0000000ac0)=[{0xd8, 0x0, 0x0, ""/195}, {0x100, 0x0, 0x0, ""/239}, {0x78, 0x0, 0x0, ""/98}, {0x90, 0x0, 0x0, ""/126}, {0x108, 0x0, 0x0, ""/242}, {0x70, 0x0, 0x0, ""/90}], 0x458, 0x12021}, 0x38, 0x40000041) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, '\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) (async) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) 19.722114643s ago: executing program 5 (id=2352): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}, 0x1}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300, 0x0, 0x0, 0x40040}, 0x24004801) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r3, r1, &(0x7f0000000080)=0x1, 0x5) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) 19.690685488s ago: executing program 2 (id=2354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x4004001) 19.582019013s ago: executing program 2 (id=2355): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x28}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)="d13c9633909a", 0x0, 0x1, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x980, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0xfff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000d80)=[r3, r2, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x5, 0xd, 0x9}, {0x4, 0x1, 0x9, 0xc}, {0x4, 0x2, 0x4, 0x7}, {0x5, 0x1, 0xd, 0x1}, {0x2, 0x5, 0x1, 0x6}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r6 = socket(0x10, 0x80003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x9, 0x27, &(0x7f0000000680)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x66}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2fbace5a}}, @tail_call], &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x42, &(0x7f0000000800)=""/66, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x21, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000004000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000182a0000", @ANYRES32=r2, @ANYBLOB="0000000007000000852000000300000018260000", @ANYRES32=r4, @ANYBLOB="f4a434fca62cf85366c8a4797ebb9c5678a27d3c7de307c7681fbb86b6fb7eed404625a276891ea3e4de84c371d3730928a8803451f7931d85eb9876b00c50d1d939ab1da88f4bd4543d627d38f01e7292b87e4bc2739a895aec190513a23fd8f826b9c77d966a028313efec030b5cf69f2e921376c829892f95b5dcbf161384c49a423090499f931137f6748bd62730b322af4f6857d367fd775df59b0f8016c7996457f47bdc6036501c01ae9fcf4cb2e755a3e97c008bf7400c4e59e42e8af3", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x66, &(0x7f0000000300)=""/102, 0x41000, 0x0, '\x00', r8, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x4, 0x0, &(0x7f00000009c0)=[{0x3, 0x4, 0xc}, {0x2, 0x4, 0xe}, {0x5, 0x2, 0x4, 0x5}, {0x0, 0x1, 0x7, 0x9}], 0x10, 0x10000}, 0x94) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@rand_addr=0xffffffff, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x671}, {0x800, 0x0, 0x4}, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xc5) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x400, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) epoll_create(0xf) 19.516952486s ago: executing program 5 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d3000000000000014080080100001800c0003001000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40840) 19.40215536s ago: executing program 2 (id=2359): r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x24, 0x0, 0xdf, 0xe8}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001080)={'ipvlan0\x00', @remote}) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4067, &(0x7f0000000040)=0xfe3) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x57) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001100)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001140)={0x0}, &(0x7f0000001180)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0)={0x0}, &(0x7f0000001200)=0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001240)=0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001280)=0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@RTM_GETNSID={0x4c, 0x5a, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r9}]}, 0x4c}}, 0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="150100008120000008001c00", @ANYRES32, @ANYBLOB="6f23ea3a8b236b3c47d678326a32aba782804ce73a4bbed796bb7667f2"], 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x28000000) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) pipe(&(0x7f00000003c0)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32=r11], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r12}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000b00)={'wpan0\x00'}) 19.281365869s ago: executing program 5 (id=2361): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x8c5d47e95537ac9b) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x58, 0x4a, 0x300, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x1f, 0x0, r3, 0x8}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8}]}, 0x58}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) 19.117752177s ago: executing program 0 (id=2362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0xc0b0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r5, @ANYBLOB="000000000000000014004000000001006261746164760000040002800c001a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x81}}]}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x20, 0x8, 0x6, 0x2, {{0x11, 0x4, 0x0, 0x0, 0x44, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@empty, 0x8000}, {@multicast1, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x4, 0x9, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x8, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x700, 0x17f10, 0x3ea, 0xffffffab, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x66, 0x0, 0xc9, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x7}]}, @timestamp={0x44, 0x14, 0xbc, 0x0, 0x9, [0x1, 0x6, 0x9, 0xcf]}, @rr={0x7, 0x2b, 0xca, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @loopback, @private=0xa010101, @loopback, @private=0xa010101, @private=0xa010101, @remote]}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r17, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)={0x578, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x2, 0xda, 0x7}, {0x9, 0xf6, 0x9, 0x2}, {0x494, 0xfb, 0x4, 0xd7}, {0x6b6a, 0x0, 0x9, 0x7}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x578}, 0x1, 0x0, 0x0, 0x40804}, 0x40) r18 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r18, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688140032000103000aff3f000057fc5ad90200bb6a88003cd6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5f7", 0xb8) ioctl$sock_SIOCETHTOOL(r18, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f0000000080)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r19, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r19, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 18.823181004s ago: executing program 2 (id=2364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x10, @loopback}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x812, 0xffffffffffffffff, 0xfc66b000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000000, 0x10, 0xffffffffffffffff, 0x1d567000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, 0x0) 18.709380729s ago: executing program 0 (id=2365): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000005000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000dfffffff008e5e48ac0000000000000000000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000040), 0x0}, 0x20) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYBLOB="67b1fe736a60b66b27c994da70e5c8315efcca8e2995d208f727a90ad4286171c0fc4ef3e119cdba4e87d72a03"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) (async, rerun: 32) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000180)={'caif0\x00', 0x7}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') unshare(0x400) (async) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) (async, rerun: 32) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000140)=0x2c) (rerun: 32) 18.61012791s ago: executing program 0 (id=2366): r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000024c0)="438dc77642449e6e17553493f7aeb57e36375ae9e2b947bee5b08bc1af2ca68b357310dce47d455f52765e1a97c5da42a110cfc487f25a4407c4ba", 0x3b}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008011}, 0x4040004) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/11, 0xb}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYRESOCT=r3], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}}, 0x0) 18.53860899s ago: executing program 0 (id=2367): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x1, 0xce3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(0xffffffffffffffff) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) recvfrom$unix(r4, &(0x7f0000000240)=""/272, 0x37, 0x62, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) r13 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 18.376026026s ago: executing program 5 (id=2368): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @bcast, 0xa}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffc0000}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd556d7000fddbdf250b080000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0}, &(0x7f0000001780)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000080), 0x8, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xc, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r6], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000017c0)={'wg0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000001900)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000001b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0c020000170000032bbd7000fddbdf25ffffffff000000000000000000000000000004d432000000fc020000000000000000000000000001ff020000000000000000000000000001fc0200000000000000000000000000004e2400074e24000c020000803a000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0a010100000000000000000000000000fc0200000000000000000000000000014e2300814e2400000a00b00034000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="5f0100000000000097410000000000003800000000000000ac000000000000000100000000000000ffff00000000000005000000000000000400000000000000070000000000000022050000000000000700000000000000080000000000000004000000b96b6e00020000000000000005000000010000004d0000002dbd7000e4000600ff0100000000000000080000000084d9e734cd864bdcc6c1cef8cf08350001ac1e00010000000000000000000000004e2000014e2000060a0080a073000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="ffffffff000000000000000000000000000004d62b000000fe8000000000000000000000000000bb070000000000000080208829000000000000000000e00100040000000000000001000000000000000000010000000000ffffffff000000000800000000000000f9ffffffffffffff0100000000000000ff0f00000000000001000000000000009cc6000007000000060000002abd700002350000020004014000000000000000"], 0x20c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8051) r11 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r12 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 18.030252911s ago: executing program 3 (id=2370): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@canfd={{0x1, 0x0, 0x0, 0x1}, 0x16, 0x1, 0x0, 0x0, "cb4e7a6247c87ce46c6e0b4c34084a966bb536a9662dbc29116abae21b6bc17e020624b6797fb37a7cfac646666803dbfd257590c15dd9caa804935379b2be87"}, 0x48}}, 0x44001) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80) 17.978736648s ago: executing program 3 (id=2371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x48) 17.885996368s ago: executing program 2 (id=2372): r0 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@isdn, &(0x7f00000003c0)=0x80, 0x80000) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000431d35268ea7fd94f98f31532fb53ad588d50a988bd12958a142ec323973424a3d6c57c05b91631e8e11af0e38cd8711132eb9b70a711ee246d8029c89d3562c461866e9343047a0d88e0878067f4742291335ef5f36ee41f0e489f2136ab839b9019e4e11effb15724ada2d5696cbbc7f2bbf76ec7475f2ecd08eeb849a7e248a1ca434ed76d80078fb88b44bed8334f2042961ee2b3a0ee51d0de815559400ff642b85fe70bed644a67de31e24"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x2000000000000050, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000fdffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0600000000000000d4e1000008000000850000006a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001000000085000000061000009500000000000000", @ANYRESHEX=r1], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) unshare(0x62040200) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000000ad009500000000400000"], &(0x7f0000000480)='GPL\x00'}, 0x80) write$tun(0xffffffffffffffff, 0x0, 0x3e) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x5, 0x3, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x202, 0x12002}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x0) unshare(0x40800) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r8, 0x8947, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x6, 0xfffffffd, @mcast2, 0x7}], 0x1c) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 17.885006385s ago: executing program 3 (id=2373): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x3, 0x6, @random="c1c49741bee9"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="c6fdbca655e778437ea983bd6ac4efd9a439601ab0741ae70d5b9d061c677e2884a179bfd6f6ca72457010b06ce32c7c8100", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x48051) epoll_create1(0x80000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r9}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r7, @ANYRES64=r4, @ANYRES16=r8, @ANYRES16=r9, @ANYRESHEX], 0x0, 0x45, 0x0, 0x1, 0x3}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r10, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 17.821462751s ago: executing program 3 (id=2374): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llx}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x36, 0x0, &(0x7f0000000000)="e30080670000ec67838717bd86ddd5e91bac95b46d673f459dd48008b875d61d2bc505de08101356192a359e8ac94149db023f8146f0", 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006f617461647600000400028008000a00", @ANYRES32=r1, @ANYBLOB="0a0001000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 17.608333569s ago: executing program 3 (id=2375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eaea7110be000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4, 0x0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x2, 0x5e2e3ca, 0x400000, 0x20080, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xd}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xe, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x5, 0x9, 0x7, 0x3cb9, 0x9}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, &(0x7f0000000180), 0x41100, 0x2, '\x00', 0x0, @fallback=0x10, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x8, 0xd, 0xf26a, 0xff}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r4, r5], 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c, &(0x7f0000001780)}}], 0x1, 0x0) shutdown(r7, 0x1) r8 = socket$inet(0x2, 0x80001, 0x84) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x3) ioctl$sock_TIOCOUTQ(r9, 0x5411, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r10, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={r10, 0x4aab6641}, 0x8) 17.469833899s ago: executing program 3 (id=2376): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x6a98047402e98331, 0x70bd2a, 0xffffffff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x40010) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r3, @ANYRESDEC=r0], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockname$packet(r8, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r6, @ANYRES32=r7, @ANYBLOB="0c0023800500070001000000", @ANYRESDEC=r8, @ANYRES16=r2], 0x28}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="f78d9ca38fff", 0x6}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30}], 0x1, 0x40800) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x98, 0x10, 0x403, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vti={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0xc}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5d56}, @IFLA_VTI_LINK={0x8, 0x1, r11}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x54e}, @IFLA_VTI_OKEY={0x8, 0x3, 0x80}, @IFLA_VTI_LINK={0x8, 0x1, r3}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7fff}, @IFLA_VTI_OKEY={0x8, 0x3, 0xbf14}], @IFLA_VTI_REMOTE={0x8, 0x5, @remote}, @IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r14 = socket(0x1a, 0x80000, 0x94) sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) 17.383907808s ago: executing program 2 (id=2377): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f}}, 0x18}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c4}, 0x34040884) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppoe(0x18, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x7, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r8, 0x0, 0x0}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r6}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000340)=@raw=[@ldst={0x1, 0x1, 0x3, 0x4, 0x3, 0x100, 0x10}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xb, 0x1580000, 0x2}, 0x10, 0x2ae8f, r8, 0x1, &(0x7f00000007c0)=[r0, r0, r10, r0, r0], &(0x7f0000000800)=[{0x2, 0x3, 0x10, 0xb}], 0x10, 0xfffffffa}, 0x94) r11 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r11, &(0x7f0000000080)={0x80000002}) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000081}, 0x20040000) 16.418271036s ago: executing program 6 (id=2378): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="fb2c54d949e9002f37dd75c13bdb4e060b738722f773d9623a70c5d8fe95afa2d1493da77baa9d9e5ea8a617d7eca7710842f6ef65d0506da7a6c0514b7633d161088a", 0x43) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/152, 0x98}], 0x1, &(0x7f0000000240)=""/30, 0x1e}, 0x2042) socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x8, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @local}) 15.494180093s ago: executing program 6 (id=2379): ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@remote, 0x0, 0x0, 0x20, 0x0, [{@multicast2}, {@remote}]}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0600000000000004"], 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffe, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x10, 0x20, 0x11518449, 0x4}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x329f, 0x4, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x7, 0x3, 0xb, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x0, 0x4, 0x5, 0xc, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) r4 = socket(0xa, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x34, 0x0, &(0x7f0000000040)=0x1) recvmmsg(r3, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) 15.408297398s ago: executing program 6 (id=2380): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x5f]}}, 0x0, 0x61}, 0x28) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x43000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112ca000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd27, 0x25dfdc00, {0x60, 0x0, 0x0, r7, {0xf}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4044011) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f00000002c0)="ef6af6b4889d80988216277a56136b46531a0f77d1c236bad2e7c31adbb3b391fc1c45d278aa6a74ed931910d01ea08a79a046b034b316012eaa3fd7b76b6428749f3b96f9b46e379b78a92b29ca8da1a6cc8b608386b395408fd926f26e7af060c8e1dd10e299d7971b0047d7e3560173683c39c2610327b84b56aecf846a314c1c621f5d92d5c300874c9c7c4a00bd45b4a599e26b7a007f0c1b670e2b7970f74636066c06ddad92de4fc5c5edc93d8978c88669ef5f00a401cf6299c9fbe6da374b099f2c00000000000000", &(0x7f0000000500)=""/178, 0x4}, 0x20) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000003c0)={0x9, {{0xa, 0x4e24, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x88) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) 15.313015521s ago: executing program 6 (id=2381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 15.202257256s ago: executing program 6 (id=2382): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd}}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x50}}, 0x0) 15.189614055s ago: executing program 6 (id=2383): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x121, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x8, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x5c}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x9}}, @enum64={0x9, 0x3, 0x0, 0x13, 0x1, 0x3, [{0x3, 0x20000, 0x6}, {0xb, 0x3, 0x713}, {0xa, 0x9, 0x200}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x7}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0xe, 0x1}, {0x10, 0x5}, {0xe, 0x1}, {0xe, 0x4}, {0xb, 0x2}, {0x2, 0x1}, {0xe, 0x2}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x5f, 0x30, 0x61, 0x61, 0x30]}}, &(0x7f00000002c0)=""/175, 0xe0, 0xaf, 0x1, 0xb, 0x10000, @value=r3}, 0x28) r4 = accept4(r0, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80, 0x80000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x65}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r5) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x8000) (async, rerun: 32) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r0, 0x4) (async, rerun: 32) r7 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0) (rerun: 32) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r9, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x88c4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='ext4_alloc_da_blocks\x00', 0xffffffffffffffff, 0x0, 0x85}, 0x18) (async, rerun: 32) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), r4) (rerun: 32) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x180}, 0x10) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000001dc0)={0x0, 0x9, 0x20, 0x9}, &(0x7f0000001e00)=0x18) sendmsg$inet_sctp(r4, &(0x7f0000001f00)={&(0x7f0000000ac0)=@in={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000000b00)="bc89e84cda6fff2351724118aede4ad3095c29ab9e200a64dfac6c604eca1e30350ef45e7d87f0c1b00c6e1981743ac846710aa4659aa77a6b14cdc3e3b753a1ae95f387a392ee899328f2a435ff232092a1109550030ead1bb3f9ad7cb7bc7cdb16da0fac465bba1352f83eb453c06d14a232e97898275aa8d8dfd5b27dd8e27c21f16da3d4d675efc91f6c7f73dfc0c71c93c472dda7f6b98adbb9fbe86d14da247756d6de4f6ce6b4509c49bfd4bd885428216df1bfc6a2374866fbfc16d348a3ed09d7eb3c47e99e06b16537e15b971af050062739e86843de2a427d02919199fa4f9eb635921669", 0xea}, {&(0x7f0000000c00)="032aba4a0c7e5e8ec9b60c20c52363aa942ac98b733324db81d9f78cb4a9188620391e38066d63fee42fea0079555d6c0abafd46b95f5c5192f0e2472b0d0378fdf44c2d7494394218d575b78366bc44b1c18c40380d610e2fb38a564d7361bede71f7c1f0de6dbd4b5085783a5704263a9736ee50c760cbccac462a701964d5394eefd5e07e1d1313c2f03c08e23e66dc49258979e3583303ef0cced8980d1af785dbc773538b404e10ef", 0xab}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="836602212b6a181db34eaa9f48e0e0e269158d0fc0b1bb2f407272d708b7bc56288c59a17cedf2fb8a9926585399e46a8a5c2ae1a2285a3a39dff93ecf9beb634b29d5255fc386850422f273a6efecd13bf3a79394f7e5ccd5173333a4aa0485343f6cbeb47957fd816a7999025c93032a98193fb44a05d68c488d6febc9f8df0688498324b6823c", 0x88}], 0x4, &(0x7f0000001e40)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xd}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x4, 0x9, 0x8, 0x5, 0x80000000, 0x8, 0x1ff, r11}}], 0xa0, 0x20004800}, 0x40001) (async, rerun: 64) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000001f40)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x18, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}) (rerun: 64) bind$alg(r7, &(0x7f0000001fc0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r13, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002180)={r11, 0x3795}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000002200)={0xdc, 0x18, '\x00', 0x0, &(0x7f00000021c0)=[0x0, 0x0, 0x0]}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002280)=0x18) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x84, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000001) 3.162051008s ago: executing program 34 (id=2367): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x1, 0xce3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(0xffffffffffffffff) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) recvfrom$unix(r4, &(0x7f0000000240)=""/272, 0x37, 0x62, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) r13 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.127430083s ago: executing program 35 (id=2368): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @bcast, 0xa}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$netrom(r0, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffc0000}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd556d7000fddbdf250b080000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0}, &(0x7f0000001780)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000080), 0x8, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xc, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r6], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000017c0)={'wg0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000001900)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000001b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0c020000170000032bbd7000fddbdf25ffffffff000000000000000000000000000004d432000000fc020000000000000000000000000001ff020000000000000000000000000001fc0200000000000000000000000000004e2400074e24000c020000803a000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0a010100000000000000000000000000fc0200000000000000000000000000014e2300814e2400000a00b00034000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="5f0100000000000097410000000000003800000000000000ac000000000000000100000000000000ffff00000000000005000000000000000400000000000000070000000000000022050000000000000700000000000000080000000000000004000000b96b6e00020000000000000005000000010000004d0000002dbd7000e4000600ff0100000000000000080000000084d9e734cd864bdcc6c1cef8cf08350001ac1e00010000000000000000000000004e2000014e2000060a0080a073000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="ffffffff000000000000000000000000000004d62b000000fe8000000000000000000000000000bb070000000000000080208829000000000000000000e00100040000000000000001000000000000000000010000000000ffffffff000000000800000000000000f9ffffffffffffff0100000000000000ff0f00000000000001000000000000009cc6000007000000060000002abd700002350000020004014000000000000000"], 0x20c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8051) r11 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r12 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.079120634s ago: executing program 36 (id=2377): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f}}, 0x18}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x13}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000c4}, 0x34040884) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppoe(0x18, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x7, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r8, 0x0, 0x0}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r6}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000340)=@raw=[@ldst={0x1, 0x1, 0x3, 0x4, 0x3, 0x100, 0x10}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xb, 0x1580000, 0x2}, 0x10, 0x2ae8f, r8, 0x1, &(0x7f00000007c0)=[r0, r0, r10, r0, r0], &(0x7f0000000800)=[{0x2, 0x3, 0x10, 0xb}], 0x10, 0xfffffffa}, 0x94) r11 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r11, &(0x7f0000000080)={0x80000002}) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000081}, 0x20040000) 2.046062646s ago: executing program 37 (id=2376): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x6a98047402e98331, 0x70bd2a, 0xffffffff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x40010) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r3, @ANYRESDEC=r0], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockname$packet(r8, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r6, @ANYRES32=r7, @ANYBLOB="0c0023800500070001000000", @ANYRESDEC=r8, @ANYRES16=r2], 0x28}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="f78d9ca38fff", 0x6}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30}], 0x1, 0x40800) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x98, 0x10, 0x403, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vti={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0xc}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5d56}, @IFLA_VTI_LINK={0x8, 0x1, r11}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x54e}, @IFLA_VTI_OKEY={0x8, 0x3, 0x80}, @IFLA_VTI_LINK={0x8, 0x1, r3}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7fff}, @IFLA_VTI_OKEY={0x8, 0x3, 0xbf14}], @IFLA_VTI_REMOTE={0x8, 0x5, @remote}, @IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r14 = socket(0x1a, 0x80000, 0x94) sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) 0s ago: executing program 38 (id=2383): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x121, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x8, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x5c}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x9}}, @enum64={0x9, 0x3, 0x0, 0x13, 0x1, 0x3, [{0x3, 0x20000, 0x6}, {0xb, 0x3, 0x713}, {0xa, 0x9, 0x200}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x7}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0xe, 0x1}, {0x10, 0x5}, {0xe, 0x1}, {0xe, 0x4}, {0xb, 0x2}, {0x2, 0x1}, {0xe, 0x2}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30, 0x5f, 0x30, 0x61, 0x61, 0x30]}}, &(0x7f00000002c0)=""/175, 0xe0, 0xaf, 0x1, 0xb, 0x10000, @value=r3}, 0x28) r4 = accept4(r0, &(0x7f0000000400)=@phonet, &(0x7f0000000480)=0x80, 0x80000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x65}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r5) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x8000) (async, rerun: 32) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r0, 0x4) (async, rerun: 32) r7 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0) (rerun: 32) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r9, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x88c4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='ext4_alloc_da_blocks\x00', 0xffffffffffffffff, 0x0, 0x85}, 0x18) (async, rerun: 32) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), r4) (rerun: 32) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x180}, 0x10) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000001dc0)={0x0, 0x9, 0x20, 0x9}, &(0x7f0000001e00)=0x18) sendmsg$inet_sctp(r4, &(0x7f0000001f00)={&(0x7f0000000ac0)=@in={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000000b00)="bc89e84cda6fff2351724118aede4ad3095c29ab9e200a64dfac6c604eca1e30350ef45e7d87f0c1b00c6e1981743ac846710aa4659aa77a6b14cdc3e3b753a1ae95f387a392ee899328f2a435ff232092a1109550030ead1bb3f9ad7cb7bc7cdb16da0fac465bba1352f83eb453c06d14a232e97898275aa8d8dfd5b27dd8e27c21f16da3d4d675efc91f6c7f73dfc0c71c93c472dda7f6b98adbb9fbe86d14da247756d6de4f6ce6b4509c49bfd4bd885428216df1bfc6a2374866fbfc16d348a3ed09d7eb3c47e99e06b16537e15b971af050062739e86843de2a427d02919199fa4f9eb635921669", 0xea}, {&(0x7f0000000c00)="032aba4a0c7e5e8ec9b60c20c52363aa942ac98b733324db81d9f78cb4a9188620391e38066d63fee42fea0079555d6c0abafd46b95f5c5192f0e2472b0d0378fdf44c2d7494394218d575b78366bc44b1c18c40380d610e2fb38a564d7361bede71f7c1f0de6dbd4b5085783a5704263a9736ee50c760cbccac462a701964d5394eefd5e07e1d1313c2f03c08e23e66dc49258979e3583303ef0cced8980d1af785dbc773538b404e10ef", 0xab}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="836602212b6a181db34eaa9f48e0e0e269158d0fc0b1bb2f407272d708b7bc56288c59a17cedf2fb8a9926585399e46a8a5c2ae1a2285a3a39dff93ecf9beb634b29d5255fc386850422f273a6efecd13bf3a79394f7e5ccd5173333a4aa0485343f6cbeb47957fd816a7999025c93032a98193fb44a05d68c488d6febc9f8df0688498324b6823c", 0x88}], 0x4, &(0x7f0000001e40)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xd}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x4, 0x9, 0x8, 0x5, 0x80000000, 0x8, 0x1ff, r11}}], 0xa0, 0x20004800}, 0x40001) (async, rerun: 64) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000001f40)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x18, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}) (rerun: 64) bind$alg(r7, &(0x7f0000001fc0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r13, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002180)={r11, 0x3795}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000002200)={0xdc, 0x18, '\x00', 0x0, &(0x7f00000021c0)=[0x0, 0x0, 0x0]}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002280)=0x18) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x84, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000001) kernel console output (not intermixed with test programs): 026][T11108] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 352.175648][T11108] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 352.697516][T11138] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1307'. [ 352.857163][T11146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1309'. [ 352.894357][T11146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1309'. [ 353.398504][T11163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.457366][T11168] netlink: 'syz.2.1317': attribute type 10 has an invalid length. [ 353.471275][T11168] bond0: (slave wlan1): Opening slave failed [ 353.959916][T11193] syzkaller0: entered promiscuous mode [ 353.975238][T11193] syzkaller0: entered allmulticast mode [ 354.033785][ T30] audit: type=1800 audit(1758743152.559:4): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1320" name="cgroup.controllers" dev="tmpfs" ino=1380 res=0 errno=0 [ 354.187435][T11205] netlink: 'syz.4.1324': attribute type 10 has an invalid length. [ 354.522081][T11221] __nla_validate_parse: 4 callbacks suppressed [ 354.522104][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 354.604261][T11227] netlink: 'syz.1.1330': attribute type 30 has an invalid length. [ 354.749818][T11231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1332'. [ 356.292854][T11245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.748908][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 356.847599][T11275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1345'. [ 356.894289][T11276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1345'. [ 356.962807][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1347'. [ 357.229348][T11300] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1353'. [ 357.374445][T11304] tipc: Enabled bearer , priority 0 [ 357.406075][T11304] syzkaller0: entered promiscuous mode [ 357.422737][T11304] syzkaller0: entered allmulticast mode [ 357.461401][T11304] tipc: Resetting bearer [ 357.487825][T11303] tipc: Resetting bearer [ 357.494529][T11316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1359'. [ 357.578023][T11303] tipc: Disabling bearer [ 357.620829][T11325] IPv6: Can't replace route, no match found [ 357.629641][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 357.700186][T11327] 8021q: VLANs not supported on ipvlan0 [ 358.109513][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 358.310637][T11347] syz_tun: entered allmulticast mode [ 358.428696][T11351] tipc: Enabling of bearer rejected, media not registered [ 358.438363][T11351] netlink: 'syz.1.1367': attribute type 23 has an invalid length. [ 358.717818][T11356] netlink: 'syz.3.1370': attribute type 10 has an invalid length. [ 358.745701][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.753188][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.813302][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.820749][T11356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.829610][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.837260][T11356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.917079][T11356] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 358.987710][T11357] bridge_slave_1: left allmulticast mode [ 359.002805][T11357] bridge_slave_1: left promiscuous mode [ 359.020321][T11357] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.033885][T11357] bridge_slave_0: left allmulticast mode [ 359.059757][T11357] bridge_slave_0: left promiscuous mode [ 359.095263][T11357] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.209452][T11357] bond0: (slave bridge0): Releasing backup interface [ 359.528876][T11374] __nla_validate_parse: 2 callbacks suppressed [ 359.528895][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1372'. [ 359.565148][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1372'. [ 359.898657][T11360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.365657][T11346] syz_tun: left allmulticast mode [ 360.519873][ T995] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.542037][ T995] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.569292][ T995] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.588434][ T995] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.659358][T11397] IPVS: set_ctl: invalid protocol: 27767 48.0.0.0:0 [ 360.757349][T11407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1378'. [ 360.764339][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 360.783565][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 360.796369][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 360.901374][T11404] macvlan4: entered promiscuous mode [ 360.909499][T11405] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 360.920969][T11405] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 361.354489][T11417] tipc: Enabled bearer , priority 0 [ 361.362935][T11417] syzkaller0: entered promiscuous mode [ 361.369965][T11417] syzkaller0: entered allmulticast mode [ 361.428044][T11419] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 361.453661][T11420] tipc: Resetting bearer [ 361.481060][T11417] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 361.568784][T11417] tipc: Resetting bearer [ 361.622194][T11417] tipc: Disabling bearer [ 362.059978][T11445] siw: device registration error -23 [ 362.086001][T11366] mpoa:mpoad_close: () going down [ 362.086694][T11445] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1390'. [ 362.275965][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1392'. [ 362.315972][T11455] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 362.579216][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 363.698843][T11441] netlink: 'syz.2.1389': attribute type 2 has an invalid length. [ 364.398630][T11509] sctp: [Deprecated]: syz.3.1406 (pid 11509) Use of int in max_burst socket option deprecated. [ 364.398630][T11509] Use struct sctp_assoc_value instead [ 364.447897][T11511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1408'. [ 364.633219][T11519] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 365.042470][T11529] pim6reg: entered allmulticast mode [ 365.102098][T11528] netlink: 'syz.3.1413': attribute type 11 has an invalid length. [ 365.121289][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 365.195168][T11530] netlink: 'syz.3.1413': attribute type 7 has an invalid length. [ 365.231761][T11530] netlink: 'syz.3.1413': attribute type 8 has an invalid length. [ 365.324064][T11534] pimreg: entered allmulticast mode [ 365.370376][T11534] pimreg: left allmulticast mode [ 366.228161][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1418'. [ 366.288471][T11555] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1418'. [ 367.313813][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 367.466823][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 367.524819][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 367.564793][T11607] netlink: 'syz.4.1423': attribute type 11 has an invalid length. [ 368.317016][T11622] nbd0: detected capacity change from 0 to 63 [ 368.347888][ T9426] block nbd0: Send control failed (result -22) [ 368.367297][ T9426] block nbd0: Request send failed, requeueing [ 368.399344][ T11] block nbd0: Dead connection, failed to find a fallback [ 368.408980][ T11] block nbd0: shutting down sockets [ 368.415021][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.425839][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 368.434371][ T9426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.444031][ T9426] Buffer I/O error on dev nbd0, logical block 1, async page read [ 368.452631][ T9426] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.462023][ T9426] Buffer I/O error on dev nbd0, logical block 2, async page read [ 368.470473][ T9426] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.479729][ T9426] Buffer I/O error on dev nbd0, logical block 3, async page read [ 368.488337][ T9426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.498088][ T9426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 368.512788][ T9426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.526578][ T9426] Buffer I/O error on dev nbd0, logical block 1, async page read [ 368.536510][ T9426] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.551942][ T9426] Buffer I/O error on dev nbd0, logical block 2, async page read [ 368.560414][ T9426] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.573674][ T9426] Buffer I/O error on dev nbd0, logical block 3, async page read [ 368.582013][ T9426] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.591656][ T9426] Buffer I/O error on dev nbd0, logical block 0, async page read [ 368.599966][ T9426] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.609609][ T9426] Buffer I/O error on dev nbd0, logical block 1, async page read [ 368.622923][ T9426] ldm_validate_partition_table(): Disk read failed. [ 368.633429][ T9426] Dev nbd0: unable to read RDB block 0 [ 368.643148][ T9426] nbd0: unable to read partition table [ 368.679657][ T9426] ldm_validate_partition_table(): Disk read failed. [ 368.711909][ T9426] Dev nbd0: unable to read RDB block 0 [ 368.760319][ T9426] nbd0: unable to read partition table [ 368.889107][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1430'. [ 369.665274][T11660] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 370.021804][T11668] !: renamed from dummy0 (while UP) [ 370.111504][T11673] netlink: 'syz.2.1438': attribute type 39 has an invalid length. [ 370.777383][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 371.260789][T11701] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 371.545329][T11716] netlink: 'syz.2.1451': attribute type 1 has an invalid length. [ 371.815209][T11722] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 371.870782][T11722] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 371.917875][T11722] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 372.691987][T11768] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1461'. [ 374.664034][T11821] bridge_slave_0: invalid flags given to default FDB implementation [ 374.839343][T11829] openvswitch: netlink: Message has 8 unknown bytes. [ 374.896677][T11825] IPv6: sit3: Disabled Multicast RS [ 374.958666][T11827] syzkaller1: entered promiscuous mode [ 374.964372][T11827] syzkaller1: entered allmulticast mode [ 374.971033][T11839] sctp: [Deprecated]: syz.2.1476 (pid 11839) Use of int in max_burst socket option deprecated. [ 374.971033][T11839] Use struct sctp_assoc_value instead [ 375.079838][T11840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1476'. [ 375.480718][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 375.518772][T11853] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1480'. [ 375.907064][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 376.017742][T11870] netlink: 'syz.2.1484': attribute type 13 has an invalid length. [ 376.028551][T11863] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 376.040325][T11870] netlink: 'syz.2.1484': attribute type 17 has an invalid length. [ 376.165847][T11871] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1483'. [ 376.186458][T11870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.275040][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1483'. [ 376.320052][T11880] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1485'. [ 376.420149][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 376.465291][T11880] erspan0: entered promiscuous mode [ 376.755216][T11895] netlink: 'syz.2.1489': attribute type 8 has an invalid length. [ 376.786041][T11899] netlink: 'syz.2.1489': attribute type 8 has an invalid length. [ 376.794010][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 376.794427][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 376.902726][T11904] netlink: 'syz.0.1493': attribute type 83 has an invalid length. [ 376.933146][T11899] bond0: entered promiscuous mode [ 376.973385][T11899] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 377.035518][T11899] debugfs: 'hsr0' already exists in 'hsr' [ 377.041567][T11899] Cannot create hsr debugfs directory [ 377.061556][T11899] hsr0: entered promiscuous mode [ 377.286402][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 377.665864][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1502'. [ 378.409387][T11960] tap0: tun_chr_ioctl cmd 1074025677 [ 378.418899][T11960] tap0: linktype set to 790 [ 378.603122][T11966] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 378.950710][T11971] tipc: Enabling of bearer rejected, failed to enable media [ 379.288061][T11979] 8021q: VLANs not supported on nlmon0 [ 379.618928][T11988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1512'. [ 381.121172][T12052] __nla_validate_parse: 3 callbacks suppressed [ 381.121194][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 381.419272][T12056] netlink: 'syz.0.1531': attribute type 30 has an invalid length. [ 381.922862][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 382.717430][ T1114] tipc: Resetting bearer [ 383.182501][T12112] netlink: 'syz.0.1544': attribute type 1 has an invalid length. [ 383.512592][T12112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.534327][T12114] vlan0: entered promiscuous mode [ 383.539653][T12114] bond3: entered promiscuous mode [ 383.545402][T12114] vlan0: entered allmulticast mode [ 383.551177][T12114] bond3: entered allmulticast mode [ 383.573976][T12115] bond3: (slave gretap1): making interface the new active one [ 383.582164][T12115] gretap1: entered promiscuous mode [ 383.589273][T12115] gretap1: entered allmulticast mode [ 383.600541][T12115] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 384.747972][T12139] delete_channel: no stack [ 385.059135][T12168] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1557'. [ 385.088440][T12168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1557'. [ 385.120387][T12169] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1558'. [ 386.459921][T12178] netlink: 'syz.1.1560': attribute type 13 has an invalid length. [ 386.582016][T12178] tipc: Resetting bearer [ 386.720888][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1561'. [ 386.776176][T12187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1561'. [ 386.885786][T12188] netlink: 'syz.1.1562': attribute type 8 has an invalid length. [ 386.893665][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 386.999529][T12190] netlink: 'syz.1.1562': attribute type 8 has an invalid length. [ 387.040339][T12188] bond0: entered promiscuous mode [ 387.055035][T12188] bond_slave_0: entered promiscuous mode [ 387.065355][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 387.072158][T12188] bond_slave_1: entered promiscuous mode [ 387.124144][T12188] bond0: left promiscuous mode [ 387.148690][T12188] bond_slave_0: left promiscuous mode [ 387.151819][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1564'. [ 387.168281][T12188] bond_slave_1: left promiscuous mode [ 387.211899][T12190] bond0: entered promiscuous mode [ 387.217954][T12190] bond_slave_0: entered promiscuous mode [ 387.224993][T12190] bond_slave_1: entered promiscuous mode [ 387.257446][T12190] bond0: left promiscuous mode [ 387.272026][T12190] bond_slave_0: left promiscuous mode [ 387.291165][T12190] bond_slave_1: left promiscuous mode [ 387.457227][T12193] 8021q: adding VLAN 0 to HW filter on device bond7 [ 387.635335][ T30] audit: type=1800 audit(1758743186.169:5): pid=12197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1565" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1645 res=0 errno=0 [ 388.286019][T12213] batadv0: entered promiscuous mode [ 388.300880][T12213] vlan0: entered promiscuous mode [ 388.634370][T12217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 388.771386][T12224] tipc: Enabling of bearer rejected, already enabled [ 389.160653][T12240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.255356][T12240] macvlan2: entered promiscuous mode [ 389.260901][T12240] macvlan2: entered allmulticast mode [ 389.287791][T12240] veth0: entered allmulticast mode [ 389.297466][T12240] veth0: entered promiscuous mode [ 389.317480][T12240] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 389.421245][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 389.423142][T12225] delete_channel: no stack [ 389.615556][T12250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1582'. [ 389.858371][T12253] pim6reg1: entered promiscuous mode [ 389.886004][T12253] pim6reg1: entered allmulticast mode [ 390.205485][T12270] netlink: 'syz.3.1585': attribute type 1 has an invalid length. [ 390.243890][ T9426] udevd[9426]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 390.256048][T12270] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 390.533894][T12288] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1589'. [ 391.031509][T12291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.064042][T12291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.081361][T12291] bond0 (unregistering): Released all slaves [ 391.717327][T12325] netlink: 'syz.4.1602': attribute type 10 has an invalid length. [ 391.726420][T12324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.236306][T12351] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 392.255061][T12351] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1608'. [ 392.765727][T12376] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 392.765944][T12374] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 392.787123][T12376] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1618'. [ 392.885868][T12376] IPVS: Error connecting to the multicast addr [ 392.962176][T12382] gretap1: entered allmulticast mode [ 392.977334][T12382] bond3: (slave gretap1): making interface the new active one [ 392.994438][T12382] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 393.036974][T12387] FAULT_INJECTION: forcing a failure. [ 393.036974][T12387] name failslab, interval 1, probability 0, space 0, times 0 [ 393.094807][T12387] CPU: 1 UID: 0 PID: 12387 Comm: syz.4.1622 Not tainted syzkaller #0 PREEMPT(full) [ 393.094838][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.094856][T12387] Call Trace: [ 393.094864][T12387] [ 393.094873][T12387] dump_stack_lvl+0x189/0x250 [ 393.094902][T12387] ? __pfx____ratelimit+0x10/0x10 [ 393.094933][T12387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.094955][T12387] ? __pfx__printk+0x10/0x10 [ 393.094988][T12387] ? __pfx___might_resched+0x10/0x10 [ 393.095022][T12387] should_fail_ex+0x414/0x560 [ 393.095061][T12387] should_failslab+0xa8/0x100 [ 393.095090][T12387] __kmalloc_noprof+0xcb/0x4f0 [ 393.095113][T12387] ? sk_prot_alloc+0xe7/0x220 [ 393.095142][T12387] sk_prot_alloc+0xe7/0x220 [ 393.095163][T12387] ? sk_alloc+0x24/0x370 [ 393.095188][T12387] sk_alloc+0x3a/0x370 [ 393.095208][T12387] ? bpf_ctx_init+0x167/0x1d0 [ 393.095233][T12387] bpf_prog_test_run_skb+0x2ed/0x1560 [ 393.095252][T12387] ? __fget_files+0x2a/0x420 [ 393.095296][T12387] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 393.095319][T12387] bpf_prog_test_run+0x2c7/0x340 [ 393.095350][T12387] __sys_bpf+0x581/0x870 [ 393.095377][T12387] ? __pfx___sys_bpf+0x10/0x10 [ 393.095418][T12387] ? ksys_write+0x22a/0x250 [ 393.095461][T12387] ? __pfx_ksys_write+0x10/0x10 [ 393.095483][T12387] ? rcu_is_watching+0x15/0xb0 [ 393.095512][T12387] __x64_sys_bpf+0x7c/0x90 [ 393.095535][T12387] do_syscall_64+0xfa/0x3b0 [ 393.095553][T12387] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.095580][T12387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.095600][T12387] ? clear_bhb_loop+0x60/0xb0 [ 393.095624][T12387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.095641][T12387] RIP: 0033:0x7f77b018eec9 [ 393.095660][T12387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.095677][T12387] RSP: 002b:00007f77ae3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.095697][T12387] RAX: ffffffffffffffda RBX: 00007f77b03e5fa0 RCX: 00007f77b018eec9 [ 393.095711][T12387] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 393.095723][T12387] RBP: 00007f77ae3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.095735][T12387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.095747][T12387] R13: 00007f77b03e6038 R14: 00007f77b03e5fa0 R15: 00007ffc8cbea8c8 [ 393.095781][T12387] [ 393.543800][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1624'. [ 394.347627][T12417] netlink: 'syz.0.1631': attribute type 29 has an invalid length. [ 394.364814][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 394.970122][T12434] FAULT_INJECTION: forcing a failure. [ 394.970122][T12434] name failslab, interval 1, probability 0, space 0, times 0 [ 395.013701][T12434] CPU: 0 UID: 0 PID: 12434 Comm: syz.1.1635 Not tainted syzkaller #0 PREEMPT(full) [ 395.013731][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.013743][T12434] Call Trace: [ 395.013751][T12434] [ 395.013759][T12434] dump_stack_lvl+0x189/0x250 [ 395.013787][T12434] ? __pfx____ratelimit+0x10/0x10 [ 395.013823][T12434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.013845][T12434] ? __pfx__printk+0x10/0x10 [ 395.013877][T12434] ? __pfx___might_resched+0x10/0x10 [ 395.013903][T12434] ? fs_reclaim_acquire+0x7d/0x100 [ 395.013938][T12434] should_fail_ex+0x414/0x560 [ 395.013971][T12434] should_failslab+0xa8/0x100 [ 395.014000][T12434] __kmalloc_noprof+0xcb/0x4f0 [ 395.014024][T12434] ? security_sk_alloc+0x52/0x390 [ 395.014051][T12434] security_sk_alloc+0x52/0x390 [ 395.014077][T12434] sk_prot_alloc+0x101/0x220 [ 395.014099][T12434] ? sk_alloc+0x24/0x370 [ 395.014123][T12434] sk_alloc+0x3a/0x370 [ 395.014144][T12434] ? bpf_ctx_init+0x167/0x1d0 [ 395.014168][T12434] bpf_prog_test_run_skb+0x2ed/0x1560 [ 395.014188][T12434] ? __fget_files+0x2a/0x420 [ 395.014233][T12434] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 395.014255][T12434] bpf_prog_test_run+0x2c7/0x340 [ 395.014287][T12434] __sys_bpf+0x581/0x870 [ 395.014314][T12434] ? __pfx___sys_bpf+0x10/0x10 [ 395.014354][T12434] ? ksys_write+0x22a/0x250 [ 395.014381][T12434] ? __pfx_ksys_write+0x10/0x10 [ 395.014401][T12434] ? rcu_is_watching+0x15/0xb0 [ 395.014428][T12434] __x64_sys_bpf+0x7c/0x90 [ 395.014457][T12434] do_syscall_64+0xfa/0x3b0 [ 395.014474][T12434] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.014502][T12434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.014521][T12434] ? clear_bhb_loop+0x60/0xb0 [ 395.014546][T12434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.014564][T12434] RIP: 0033:0x7fde6238eec9 [ 395.014583][T12434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.014600][T12434] RSP: 002b:00007fde63267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.014622][T12434] RAX: ffffffffffffffda RBX: 00007fde625e5fa0 RCX: 00007fde6238eec9 [ 395.014634][T12434] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 395.014645][T12434] RBP: 00007fde63267090 R08: 0000000000000000 R09: 0000000000000000 [ 395.014656][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.014667][T12434] R13: 00007fde625e6038 R14: 00007fde625e5fa0 R15: 00007fff9c6c5db8 [ 395.014707][T12434] [ 395.039806][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 395.286174][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 396.009821][T12457] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1642'. [ 396.351775][ T5914] IPVS: starting estimator thread 0... [ 396.472015][T12461] IPVS: using max 24 ests per chain, 57600 per kthread [ 396.500604][T12463] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 396.717516][T12466] netlink: 'syz.3.1644': attribute type 13 has an invalid length. [ 396.756353][T12466] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1644'. [ 396.967603][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1644'. [ 397.002746][T12466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.084987][T12466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.211934][T12473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.253388][T12479] C: renamed from team_slave_0 [ 397.263191][T12479] netlink: 'syz.2.1648': attribute type 2 has an invalid length. [ 397.273157][T12479] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1648'. [ 397.294558][T12479] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 397.403332][T12483] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1648'. [ 398.013984][T12497] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 398.022663][T12497] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1654'. [ 398.033454][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1654'. [ 398.044067][T12497] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 398.052249][T12497] NCSI netlink: No device for ifindex 0 [ 398.172917][T12502] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 398.223662][T12506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1658'. [ 398.245485][T12506] netlink: 'syz.4.1658': attribute type 1 has an invalid length. [ 398.258103][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1658'. [ 398.446414][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1659'. [ 398.551855][T12512] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1659'. [ 398.586372][T12518] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 398.594177][T12518] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1661'. [ 398.902743][T12542] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 399.010290][T12535] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 399.175937][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 399.215554][T12552] netlink: 'syz.3.1671': attribute type 32 has an invalid length. [ 399.887144][T12584] netlink: 'syz.2.1680': attribute type 10 has an invalid length. [ 402.691915][T12616] __nla_validate_parse: 2 callbacks suppressed [ 402.691937][T12616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1689'. [ 402.793596][T12627] xt_l2tp: unknown flags: 51 [ 402.938818][T12635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1693'. [ 402.950748][T12635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1693'. [ 403.398384][T12616] netlink: 'syz.4.1689': attribute type 23 has an invalid length. [ 403.628079][T12645] tipc: Resetting bearer [ 403.719388][T12656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1702'. [ 403.746156][T12658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1701'. [ 403.765705][ T5944] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec [ 403.875064][ T7940] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 403.883917][ T7940] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 403.904067][ T7940] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 403.916133][ T7940] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 404.033747][T12676] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1709'. [ 404.049451][T12677] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1709'. [ 404.203684][T12684] Bluetooth: MGMT ver 1.23 [ 404.219895][T12684] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 404.239720][T12684] netlink: 'syz.2.1711': attribute type 13 has an invalid length. [ 404.257114][T12684] netlink: 'syz.2.1711': attribute type 17 has an invalid length. [ 404.361267][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.378982][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.517466][ T5955] syz0: Port: 1 Link DOWN [ 404.520196][T11383] syz1: Port: 1 Link DOWN [ 404.787618][T12699] netlink: 'syz.1.1716': attribute type 10 has an invalid length. [ 404.966233][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 405.054372][T12718] pim6reg: entered allmulticast mode [ 405.064082][T12719] bond5 (unregistering): Released all slaves [ 405.267269][T12731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1726'. [ 405.316002][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1726'. [ 405.437616][T12739] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 405.445829][T12739] netlink: 'syz.1.1728': attribute type 2 has an invalid length. [ 405.455274][T12739] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 405.464914][T12739] netlink: 'syz.1.1728': attribute type 2 has an invalid length. [ 405.509456][T12739] openvswitch: netlink: IP tunnel dst address not specified [ 407.640893][T12806] pim6reg: left allmulticast mode [ 407.784150][T12808] __nla_validate_parse: 7 callbacks suppressed [ 407.784173][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1743'. [ 407.853614][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1743'. [ 407.888879][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1743'. [ 407.928858][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1743'. [ 408.178472][T12799] netlink: 'syz.3.1739': attribute type 6 has an invalid length. [ 408.235001][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1743'. [ 408.244429][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1743'. [ 408.625711][ T1114] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 408.761929][T12841] pimreg1: tun_chr_ioctl cmd 1074025677 [ 408.768275][T12841] pimreg1: linktype set to 270 [ 408.876312][T12843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1750'. [ 410.604107][T12868] veth0: entered promiscuous mode [ 410.690828][T12868] veth0: left promiscuous mode [ 410.976417][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 410.997203][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'. [ 411.839065][T12884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1761'. [ 413.618853][T12919] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1771'. [ 413.635575][T12919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1771'. [ 413.673391][T12919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1771'. [ 413.718732][T12920] dvmrp8: entered allmulticast mode [ 413.851331][T12920] netlink: 'syz.0.1771': attribute type 23 has an invalid length. [ 414.195695][T12930] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1773'. [ 414.377807][T12930] batadv1: entered promiscuous mode [ 414.383080][T12930] batadv1: entered allmulticast mode [ 414.503138][T12918] dvmrp8: left allmulticast mode [ 414.802186][T12938] ip6tnl1: entered promiscuous mode [ 414.808823][T12938] ip6tnl1: entered allmulticast mode [ 414.835492][T12938] team0: Device ip6tnl1 is of different type [ 416.258272][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1786'. [ 416.275232][T12979] IPVS: set_ctl: invalid protocol: 112 224.0.0.2:20000 [ 416.289937][T12979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1786'. [ 416.372704][T12984] netlink: 'syz.3.1786': attribute type 10 has an invalid length. [ 416.443093][T12984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.459522][T12979] netlink: 'syz.3.1786': attribute type 10 has an invalid length. [ 416.490361][T12984] batadv_slave_0: entered allmulticast mode [ 416.516431][T12984] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 416.537071][T12979] bond0: left allmulticast mode [ 416.542174][T12979] bond_slave_0: left allmulticast mode [ 416.554866][T12979] bond_slave_1: left allmulticast mode [ 416.560419][T12979] batadv_slave_0: left allmulticast mode [ 416.583354][T12979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.593298][T12979] bond0: entered promiscuous mode [ 416.599225][T12979] bond_slave_0: entered promiscuous mode [ 416.606075][T12979] bond_slave_1: entered promiscuous mode [ 416.612100][T12979] batadv_slave_0: entered promiscuous mode [ 416.618637][T12979] bond0: entered allmulticast mode [ 416.624050][T12979] bond_slave_0: entered allmulticast mode [ 416.630577][T12979] bond_slave_1: entered allmulticast mode [ 416.637056][T12979] batadv_slave_0: entered allmulticast mode [ 416.644118][T12979] team0: Port device bond0 added [ 416.651555][T12988] caif0: left allmulticast mode [ 416.795795][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 416.826096][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 417.321075][T13006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1792'. [ 417.411269][T13009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1790'. [ 418.062145][T13023] netlink: 'syz.3.1797': attribute type 3 has an invalid length. [ 418.074751][T13023] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 418.213046][T13013] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 418.803271][T13044] __nla_validate_parse: 5 callbacks suppressed [ 418.803293][T13044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1802'. [ 418.953086][T13052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1805'. [ 419.015587][T13056] netlink: 'syz.3.1806': attribute type 16 has an invalid length. [ 419.217742][T13069] ªªªªªª: renamed from wg2 [ 419.236409][T13064] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 419.244463][T13064] netlink: 'syz.4.1808': attribute type 2 has an invalid length. [ 419.292914][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 419.535677][T13085] tun0: tun_chr_ioctl cmd 2147767521 [ 419.706188][T13091] dvmrp8: entered allmulticast mode [ 419.732751][T13092] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.1815'. [ 419.864011][T13097] netlink: 'syz.3.1815': attribute type 32 has an invalid length. [ 419.885633][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 419.906666][T13097] (unnamed net_device) (uninitialized): Setting coupled_control to on (1) [ 420.011363][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1819'. [ 420.025159][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'. [ 420.034564][T13103] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1819'. [ 425.137519][T13138] vlan3: entered promiscuous mode [ 425.240688][T13148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.319407][T13153] netlink: 'syz.1.1829': attribute type 16 has an invalid length. [ 425.328957][T13153] netlink: 'syz.1.1829': attribute type 17 has an invalid length. [ 425.615678][T13153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.627637][T13153] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.656878][T13153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.119475][T13170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1836'. [ 426.168452][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'. [ 426.239416][T13179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.305094][T13179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.075872][T13197] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1846'. [ 427.077117][T13194] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1845'. [ 427.918519][T13215] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1851'. [ 428.411192][T13228] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1856'. [ 429.032218][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1863'. [ 429.086016][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 429.291035][T13256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.747881][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 429.757521][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 429.815726][T13266] netlink: 'syz.1.1865': attribute type 13 has an invalid length. [ 429.823654][T13266] netlink: 'syz.1.1865': attribute type 11 has an invalid length. [ 429.933769][T13273] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 429.946932][T13273] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 430.110554][T13282] FAULT_INJECTION: forcing a failure. [ 430.110554][T13282] name failslab, interval 1, probability 0, space 0, times 0 [ 430.184254][T13282] CPU: 1 UID: 0 PID: 13282 Comm: syz.3.1869 Not tainted syzkaller #0 PREEMPT(full) [ 430.184285][T13282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.184297][T13282] Call Trace: [ 430.184312][T13282] [ 430.184321][T13282] dump_stack_lvl+0x189/0x250 [ 430.184347][T13282] ? __pfx____ratelimit+0x10/0x10 [ 430.184376][T13282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.184397][T13282] ? __pfx__printk+0x10/0x10 [ 430.184425][T13282] ? __pfx___might_resched+0x10/0x10 [ 430.184452][T13282] ? fs_reclaim_acquire+0x7d/0x100 [ 430.184482][T13282] should_fail_ex+0x414/0x560 [ 430.184515][T13282] should_failslab+0xa8/0x100 [ 430.184542][T13282] __kmalloc_cache_noprof+0x70/0x3d0 [ 430.184564][T13282] ? alloc_pipe_info+0xe9/0x4d0 [ 430.184594][T13282] alloc_pipe_info+0xe9/0x4d0 [ 430.184626][T13282] splice_direct_to_actor+0xa5d/0xcc0 [ 430.184653][T13282] ? __lock_acquire+0xab9/0xd20 [ 430.184690][T13282] ? __pfx_aa_file_perm+0x10/0x10 [ 430.184709][T13282] ? __lock_acquire+0xab9/0xd20 [ 430.184732][T13282] ? __pfx_direct_splice_actor+0x10/0x10 [ 430.184756][T13282] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 430.184793][T13282] do_splice_direct+0x181/0x270 [ 430.184822][T13282] ? __pfx_do_splice_direct+0x10/0x10 [ 430.184849][T13282] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 430.184889][T13282] ? rw_verify_area+0x255/0x4d0 [ 430.184916][T13282] do_sendfile+0x4da/0x7e0 [ 430.184935][T13282] ? __pfx_vfs_write+0x10/0x10 [ 430.184964][T13282] ? __pfx_do_sendfile+0x10/0x10 [ 430.184981][T13282] ? __fget_files+0x3a0/0x420 [ 430.185019][T13282] __se_sys_sendfile64+0x13e/0x190 [ 430.185050][T13282] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 430.185073][T13282] ? rcu_is_watching+0x15/0xb0 [ 430.185095][T13282] ? do_syscall_64+0xbe/0x3b0 [ 430.185113][T13282] do_syscall_64+0xfa/0x3b0 [ 430.185126][T13282] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.185147][T13282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.185162][T13282] ? clear_bhb_loop+0x60/0xb0 [ 430.185180][T13282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.185194][T13282] RIP: 0033:0x7fb87d38eec9 [ 430.185208][T13282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.185221][T13282] RSP: 002b:00007fb87e1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 430.185238][T13282] RAX: ffffffffffffffda RBX: 00007fb87d5e5fa0 RCX: 00007fb87d38eec9 [ 430.185249][T13282] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 430.185258][T13282] RBP: 00007fb87e1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 430.185267][T13282] R10: 000000000000970b R11: 0000000000000246 R12: 0000000000000001 [ 430.185276][T13282] R13: 00007fb87d5e6038 R14: 00007fb87d5e5fa0 R15: 00007ffcd1daf288 [ 430.185310][T13282] [ 433.556281][T13326] __nla_validate_parse: 1 callbacks suppressed [ 433.556304][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1882'. [ 433.617369][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1882'. [ 434.107289][T13344] FAULT_INJECTION: forcing a failure. [ 434.107289][T13344] name failslab, interval 1, probability 0, space 0, times 0 [ 434.174854][T13344] CPU: 0 UID: 0 PID: 13344 Comm: syz.2.1890 Not tainted syzkaller #0 PREEMPT(full) [ 434.174892][T13344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.174904][T13344] Call Trace: [ 434.174913][T13344] [ 434.174921][T13344] dump_stack_lvl+0x189/0x250 [ 434.174951][T13344] ? __pfx____ratelimit+0x10/0x10 [ 434.174982][T13344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.175002][T13344] ? __pfx__printk+0x10/0x10 [ 434.175035][T13344] ? __pfx___might_resched+0x10/0x10 [ 434.175062][T13344] ? fs_reclaim_acquire+0x7d/0x100 [ 434.175096][T13344] should_fail_ex+0x414/0x560 [ 434.175129][T13344] should_failslab+0xa8/0x100 [ 434.175158][T13344] __kmalloc_noprof+0xcb/0x4f0 [ 434.175180][T13344] ? copy_splice_read+0x143/0xa50 [ 434.175209][T13344] copy_splice_read+0x143/0xa50 [ 434.175248][T13344] ? __pfx_copy_splice_read+0x10/0x10 [ 434.175270][T13344] ? look_up_lock_class+0x74/0x170 [ 434.175301][T13344] ? register_lock_class+0x51/0x320 [ 434.175331][T13344] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 434.175374][T13344] ? alloc_pipe_info+0x374/0x4d0 [ 434.175399][T13344] ? __pfx_copy_splice_read+0x10/0x10 [ 434.175422][T13344] splice_direct_to_actor+0x4a9/0xcc0 [ 434.175472][T13344] ? __pfx_direct_splice_actor+0x10/0x10 [ 434.175498][T13344] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 434.175536][T13344] do_splice_direct+0x181/0x270 [ 434.175566][T13344] ? __pfx_do_splice_direct+0x10/0x10 [ 434.175591][T13344] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 434.175625][T13344] ? rw_verify_area+0x255/0x4d0 [ 434.175654][T13344] do_sendfile+0x4da/0x7e0 [ 434.175673][T13344] ? __pfx_vfs_write+0x10/0x10 [ 434.175704][T13344] ? __pfx_do_sendfile+0x10/0x10 [ 434.175722][T13344] ? __fget_files+0x3a0/0x420 [ 434.175761][T13344] __se_sys_sendfile64+0x13e/0x190 [ 434.175792][T13344] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 434.175817][T13344] ? rcu_is_watching+0x15/0xb0 [ 434.175840][T13344] ? do_syscall_64+0xbe/0x3b0 [ 434.175863][T13344] do_syscall_64+0xfa/0x3b0 [ 434.175879][T13344] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.175906][T13344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.175925][T13344] ? clear_bhb_loop+0x60/0xb0 [ 434.175948][T13344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.175966][T13344] RIP: 0033:0x7fe10958eec9 [ 434.175984][T13344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.176001][T13344] RSP: 002b:00007fe10a47e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 434.176023][T13344] RAX: ffffffffffffffda RBX: 00007fe1097e5fa0 RCX: 00007fe10958eec9 [ 434.176037][T13344] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 434.176048][T13344] RBP: 00007fe10a47e090 R08: 0000000000000000 R09: 0000000000000000 [ 434.176060][T13344] R10: 000000000000970b R11: 0000000000000246 R12: 0000000000000001 [ 434.176071][T13344] R13: 00007fe1097e6038 R14: 00007fe1097e5fa0 R15: 00007ffeaee8ebd8 [ 434.176105][T13344] [ 434.657406][T13353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 434.668413][T13353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 434.677384][T13353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 434.687828][T13353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 434.696466][T13353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.870143][T13353] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.890769][T13353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.900541][T13353] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.914038][T13353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.922423][T13353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.252258][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.263055][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.273113][ T995] bond0 (unregistering): Released all slaves [ 435.289643][ T995] bond1 (unregistering): Released all slaves [ 435.405436][ T995] bond2 (unregistering): Released all slaves [ 435.572074][ T995] tipc: Disabling bearer [ 435.623767][ T995] tipc: Left network mode [ 435.708883][T13371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1896'. [ 435.893659][T13375] ip6gre2: entered allmulticast mode [ 436.167807][T13394] netlink: 'syz.0.1903': attribute type 74 has an invalid length. [ 436.251484][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 436.281303][T13396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1904'. [ 436.418168][T13401] netlink: 'syz.2.1905': attribute type 6 has an invalid length. [ 436.490315][T13401] netlink: 'syz.2.1905': attribute type 12 has an invalid length. [ 436.503657][T13401] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1905'. [ 436.669174][T13413] openvswitch: netlink: Message has -2 unknown bytes. [ 436.738859][ T5869] Bluetooth: hci0: command tx timeout [ 436.908219][T13347] chnl_net:caif_netlink_parms(): no params data found [ 436.965006][ T5869] Bluetooth: hci1: command tx timeout [ 437.165661][T13434] netlink: 'syz.0.1911': attribute type 13 has an invalid length. [ 437.188057][T13434] netlink: 'syz.0.1911': attribute type 17 has an invalid length. [ 437.272413][ T995] hsr_slave_0: left promiscuous mode [ 437.280426][ T995] hsr_slave_1: left promiscuous mode [ 437.315723][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.334046][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.443679][T13440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.482279][ T995] pimreg (unregistering): left allmulticast mode [ 437.489809][T13440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.615924][T13455] Bluetooth: MGMT ver 1.23 [ 438.095073][ T995] team0 (unregistering): Port device team_slave_1 removed [ 438.147911][ T995] team0 (unregistering): Port device C removed [ 438.587393][T13434] erspan0: left promiscuous mode [ 438.638074][T13434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.792184][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.805498][ T5869] Bluetooth: hci0: command tx timeout [ 438.823065][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.835105][T13347] bridge_slave_0: entered allmulticast mode [ 438.853924][T13347] bridge_slave_0: entered promiscuous mode [ 438.865767][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.873256][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.880941][T13347] bridge_slave_1: entered allmulticast mode [ 438.889755][T13347] bridge_slave_1: entered promiscuous mode [ 439.011149][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.043059][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.055581][ T5869] Bluetooth: hci1: command tx timeout [ 439.149102][T13347] team0: Port device team_slave_0 added [ 439.180419][T13347] team0: Port device team_slave_1 added [ 439.286151][T13473] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 439.320222][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.327982][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.355474][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.369613][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.377424][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.405181][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.437096][T13473] 8021q: adding VLAN 0 to HW filter on device bond5 [ 439.462863][ T995] IPVS: stop unused estimator thread 0... [ 439.533810][T13476] bond5: (slave geneve3): making interface the new active one [ 439.561780][T13476] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 439.619807][T13477] bond5: entered promiscuous mode [ 439.628488][T13477] geneve3: entered promiscuous mode [ 439.657750][T13475] veth0: left allmulticast mode [ 439.663381][T13475] veth0: left promiscuous mode [ 439.734361][T13363] chnl_net:caif_netlink_parms(): no params data found [ 439.763251][ T50] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 439.772949][ T50] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 439.928558][ T7943] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 439.945069][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 439.950303][ T7943] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 439.963488][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1920'. [ 440.031337][T13347] hsr_slave_0: entered promiscuous mode [ 440.040193][T13347] hsr_slave_1: entered promiscuous mode [ 440.048636][T13347] debugfs: 'hsr0' already exists in 'hsr' [ 440.054835][T13347] Cannot create hsr debugfs directory [ 440.249535][ T995] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.275208][ T995] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.351847][T13498] netlink: 'syz.3.1922': attribute type 30 has an invalid length. [ 440.390317][ T995] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.400579][ T995] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.484285][T13363] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.493191][T13363] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.501326][T13363] bridge_slave_0: entered allmulticast mode [ 440.509163][T13363] bridge_slave_0: entered promiscuous mode [ 440.519035][T13363] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.526955][T13363] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.534462][T13363] bridge_slave_1: entered allmulticast mode [ 440.543013][T13363] bridge_slave_1: entered promiscuous mode [ 440.559641][ T995] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.570603][ T995] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.693578][ T995] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.703827][ T995] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.740937][T13363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.759913][T13363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.885824][ T5869] Bluetooth: hci0: command tx timeout [ 440.958128][T13363] team0: Port device team_slave_0 added [ 440.975186][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'. [ 441.027413][T13363] team0: Port device team_slave_1 added [ 441.051864][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1923'. [ 441.125276][ T5869] Bluetooth: hci1: command tx timeout [ 441.231428][T13363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.241750][T13363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.272908][T13363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.310632][T13363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.317993][T13363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.345257][T13363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.372418][T13517] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 441.384493][T13517] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 441.399490][T13526] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1930'. [ 441.416192][T13526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1930'. [ 441.444135][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 441.456397][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 441.468397][T13525] netlink: 'syz.2.1929': attribute type 15 has an invalid length. [ 441.561471][T13363] hsr_slave_0: entered promiscuous mode [ 441.578494][T13363] hsr_slave_1: entered promiscuous mode [ 441.584522][T13531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1931'. [ 441.604056][T13363] debugfs: 'hsr0' already exists in 'hsr' [ 441.619194][T13363] Cannot create hsr debugfs directory [ 441.675134][ T995] tipc: Resetting bearer [ 441.720228][T13539] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 441.720443][ T995] bond_slave_0: left promiscuous mode [ 441.731033][T13539] netlink: 'syz.0.1933': attribute type 6 has an invalid length. [ 441.737526][ T995] bond_slave_1: left promiscuous mode [ 441.750434][T13539] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1933'. [ 441.790622][T13541] sctp: [Deprecated]: syz.0.1933 (pid 13541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.790622][T13541] Use struct sctp_sack_info instead [ 442.269920][ T995] tipc: Disabling bearer [ 442.555751][ T995] bond6 (unregistering): (slave macvlan0): Removing an active aggregator [ 442.565679][ T995] bond6 (unregistering): (slave macvlan0): Releasing backup interface [ 442.580217][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.592099][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.602641][ T995] bond0 (unregistering): Released all slaves [ 442.741941][ T995] bond1 (unregistering): (slave batadv1): Releasing active interface [ 442.752554][ T995] bond1 (unregistering): Released all slaves [ 442.881692][ T995] bond2 (unregistering): Released all slaves [ 442.896005][ T995] bond3 (unregistering): Released all slaves [ 442.974830][ T5869] Bluetooth: hci0: command tx timeout [ 443.026938][ T995] bond4 (unregistering): Released all slaves [ 443.040581][ T995] bond5 (unregistering): Released all slaves [ 443.158551][ T995] bond6 (unregistering): Released all slaves [ 443.220985][ T5869] Bluetooth: hci1: command tx timeout [ 443.287134][ T995] bond7 (unregistering): Released all slaves [ 443.384574][T13347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.498780][T13556] sctp: [Deprecated]: syz.2.1938 (pid 13556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.498780][T13556] Use struct sctp_sack_info instead [ 443.546791][T13347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 443.598089][T13347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 443.636947][ T995] tipc: Left network mode [ 443.637540][T13347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.666085][ T995] IPVS: stopping backup sync thread 7223 ... [ 444.426751][T13363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 444.448015][T13363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 444.495846][T13363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 444.524707][T13363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 444.574287][ T995] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 444.660366][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.869226][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.984681][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.992255][ T7943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.059906][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.067425][ T7940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.310658][T13363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.389386][T13363] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.558936][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.566478][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.663853][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.671641][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.780882][ T995] hsr_slave_0: left promiscuous mode [ 445.800729][ T995] hsr_slave_1: left promiscuous mode [ 445.821024][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.843614][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.863851][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.872839][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.884572][ T995] batman_adv: batadv0: Removing interface: ipvlan0 [ 445.924179][ T995] veth1_macvtap: left promiscuous mode [ 445.936438][ T995] veth0_macvtap: left promiscuous mode [ 446.373607][ T995] team0 (unregistering): Port device team_slave_1 removed [ 446.422104][ T995] team0 (unregistering): Port device team_slave_0 removed [ 447.062036][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.627021][T13363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.013983][T13347] veth0_vlan: entered promiscuous mode [ 448.065979][T13347] veth1_vlan: entered promiscuous mode [ 448.176804][T13347] veth0_macvtap: entered promiscuous mode [ 448.207446][T13347] veth1_macvtap: entered promiscuous mode [ 448.310304][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.372990][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.453999][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.503205][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.528379][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.547443][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.610530][T13646] tipc: Enabling of bearer rejected, already enabled [ 448.630567][T13646] tipc: Resetting bearer [ 448.720060][ T995] IPVS: stop unused estimator thread 0... [ 448.985449][ T12] tipc: Resetting bearer [ 449.064941][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.072905][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.183575][ T7946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.201035][ T7946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.251231][T13363] veth0_vlan: entered promiscuous mode [ 449.300438][T13363] veth1_vlan: entered promiscuous mode [ 449.464010][T13363] veth0_macvtap: entered promiscuous mode [ 449.538200][T13363] veth1_macvtap: entered promiscuous mode [ 449.622798][T13363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.670818][T13363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.724880][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.782493][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.808868][T13681] netlink: 'syz.5.1966': attribute type 2 has an invalid length. [ 449.816604][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.824774][T13681] __nla_validate_parse: 2 callbacks suppressed [ 449.824793][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1966'. [ 449.862555][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.032197][T13670] netlink: 'syz.2.1963': attribute type 1 has an invalid length. [ 450.046933][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 450.149852][ T7943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.162935][ T7943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.253891][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.274329][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.394009][T13709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1972'. [ 451.412246][T13707] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1971'. [ 451.622068][T13711] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 451.674248][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 451.854396][T13717] syz_tun: entered promiscuous mode [ 451.892870][T13723] gretap2: entered promiscuous mode [ 451.902816][T13723] bond6: (slave gretap2): making interface the new active one [ 451.913664][T13723] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 451.997962][T13735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1978'. [ 451.999966][T13736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1978'. [ 452.178200][T13744] IPVS: set_ctl: invalid protocol: 255 172.20.20.60:20003 [ 452.689783][T13762] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 452.717179][T13762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1985'. [ 452.792749][T13766] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1987'. [ 452.875432][T13770] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 452.881870][T13770] syzkaller1: linktype set to 6 [ 452.949427][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'. [ 453.017217][T13775] dvmrp8: entered allmulticast mode [ 453.130392][T13773] dvmrp8: left allmulticast mode [ 453.623985][T13793] syz_tun: left promiscuous mode [ 453.730069][T13793] bridge1: left promiscuous mode [ 453.735323][T13793] bridge1: left allmulticast mode [ 453.746057][T13793] vlan0: left promiscuous mode [ 453.751552][T13793] bond3: left promiscuous mode [ 453.756501][T13793] gretap1: left promiscuous mode [ 453.762030][T13793] vlan0: left allmulticast mode [ 453.775109][T13793] bond3: left allmulticast mode [ 453.817228][T13793] gretap1: left allmulticast mode [ 453.837809][T13793] ip6gre2: left allmulticast mode [ 454.167007][T13353] Bluetooth: hci1: command 0x0405 tx timeout [ 454.295254][T13800] batadv_slave_1: entered promiscuous mode [ 454.320785][T13798] batadv_slave_1: left promiscuous mode [ 454.473292][T13810] sctp: [Deprecated]: syz.0.1997 (pid 13810) Use of int in max_burst socket option. [ 454.473292][T13810] Use struct sctp_assoc_value instead [ 458.155004][T13904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.155011][T13905] netlink: 'syz.3.2025': attribute type 4 has an invalid length. [ 458.241813][T13904] vxcan3: entered allmulticast mode [ 458.787643][T13918] can: request_module (can-proto-4) failed. [ 459.167172][T13936] tipc: Enabled bearer , priority 0 [ 459.182586][T13936] syzkaller0: entered promiscuous mode [ 459.203088][T13936] syzkaller0: entered allmulticast mode [ 459.334478][T13945] netlink: 'syz.2.2037': attribute type 4 has an invalid length. [ 459.739083][ T7943] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.751977][ T7943] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.777421][T13968] __nla_validate_parse: 3 callbacks suppressed [ 459.777444][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2043'. [ 459.835347][T13968] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.028243][T13978] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2048'. [ 460.041119][T13968] bridge_slave_0 (unregistering): left allmulticast mode [ 460.071020][T13968] bridge_slave_0 (unregistering): left promiscuous mode [ 460.125621][T13968] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.247386][ T7943] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.280268][ T7943] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.297577][ T979] tipc: Node number set to 592590911 [ 460.833358][T13993] IPVS: Error connecting to the multicast addr [ 461.263563][T14009] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2057'. [ 461.308568][T14009] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2057'. [ 487.995485][T14013] IPVS: Scheduler module ip_vs_ not found [ 488.007200][T14013] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2063'. [ 488.083852][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2060'. [ 488.130750][T14027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2060'. [ 488.286721][T14035] netlink: 'syz.2.2064': attribute type 9 has an invalid length. [ 488.868398][T14048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2069'. [ 489.902019][T14086] ipip0: entered promiscuous mode [ 490.201904][ T5869] Bluetooth: hci1: link tx timeout [ 490.208713][ T5869] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.231726][T13353] Bluetooth: hci1: link tx timeout [ 490.237855][T13353] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.253713][T13353] Bluetooth: hci1: link tx timeout [ 490.259225][T13353] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.267236][T13353] Bluetooth: hci1: link tx timeout [ 490.272657][T13353] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.280816][T13353] Bluetooth: hci1: link tx timeout [ 490.286780][T13353] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.815047][T14118] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2084'. [ 491.790832][T14126] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 492.245507][T13353] Bluetooth: hci1: command 0x0405 tx timeout [ 492.436332][ T30] audit: type=1800 audit(1758743290.969:6): pid=14132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2087" name="memory.events" dev="tmpfs" ino=2259 res=0 errno=0 [ 493.242759][T14147] netlink: 'syz.3.2093': attribute type 14 has an invalid length. [ 493.563744][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2095'. [ 493.628319][T14155] netlink: 'syz.6.2095': attribute type 1 has an invalid length. [ 494.006559][T14157] gretap1: entered promiscuous mode [ 494.513188][T14180] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 494.536277][T14178] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2100'. [ 494.650718][T14182] bond0: (slave gretap0): Opening slave failed [ 495.216829][T14185] tipc: Enabling of bearer rejected, already enabled [ 495.245457][T14189] vlan2: entered allmulticast mode [ 495.254127][T14189] bridge_slave_0: entered allmulticast mode [ 496.222939][T14218] netlink: 'syz.6.2107': attribute type 1 has an invalid length. [ 496.640775][T14217] bond1: (slave gretap1): making interface the new active one [ 496.650131][T14217] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 496.696865][T14220] vlan2: entered allmulticast mode [ 496.714974][T14220] bond1: entered allmulticast mode [ 496.720745][T14220] gretap1: entered allmulticast mode [ 496.746752][T14220] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 497.362077][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 497.551779][T14249] netlink: 766 bytes leftover after parsing attributes in process `syz.6.2114'. [ 497.739456][T14255] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2116'. [ 497.808207][T14255] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2116'. [ 497.827023][T14255] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2116'. [ 497.863516][T14255] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2116'. [ 497.897758][T14255] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2116'. [ 497.907834][T14258] netlink: 'syz.2.2117': attribute type 1 has an invalid length. [ 497.926762][T14255] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2116'. [ 498.023116][T14255] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.086990][T14258] bond6: entered promiscuous mode [ 498.092798][T14258] 8021q: adding VLAN 0 to HW filter on device bond6 [ 498.171609][T14264] netlink: 'syz.6.2118': attribute type 7 has an invalid length. [ 498.244754][T14264] netlink: 'syz.6.2118': attribute type 8 has an invalid length. [ 498.252947][T14265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.367732][T14264] netlink: 'syz.6.2118': attribute type 1 has an invalid length. [ 499.051602][T14291] macsec0: entered promiscuous mode [ 499.057169][T14291] macsec0: entered allmulticast mode [ 499.081850][T14291] veth1_macvtap: entered allmulticast mode [ 499.116521][T14291] macsec0: left promiscuous mode [ 499.154567][T14291] macsec0: left allmulticast mode [ 499.160026][T14291] veth1_macvtap: left allmulticast mode [ 499.547281][T14300] team0: Device ipip1 is of different type [ 500.907614][T14343] __nla_validate_parse: 23 callbacks suppressed [ 500.908468][T14343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2137'. [ 501.470738][T14354] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2141'. [ 501.527380][ T5955] IPVS: starting estimator thread 0... [ 501.625706][T14366] netlink: 'syz.0.2144': attribute type 303 has an invalid length. [ 501.635955][T14361] IPVS: using max 27 ests per chain, 64800 per kthread [ 502.000792][T14382] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2150'. [ 502.148291][T14392] netlink: 'syz.0.2152': attribute type 10 has an invalid length. [ 502.545065][T14402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2155'. [ 502.779297][T14408] syzkaller1: entered promiscuous mode [ 502.799881][T14408] syzkaller1: entered allmulticast mode [ 502.819554][T14414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2159'. [ 502.950057][T14419] syzkaller1: entered promiscuous mode [ 502.964834][T14419] syzkaller1: entered allmulticast mode [ 503.003016][T14423] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2163'. [ 503.142087][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2167'. [ 503.172531][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2165'. [ 503.182631][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2165'. [ 503.202972][T14431] netlink: 'syz.0.2165': attribute type 6 has an invalid length. [ 503.647133][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2172'. [ 503.677324][T14450] syzkaller0: entered promiscuous mode [ 503.691187][T14450] syzkaller0: entered allmulticast mode [ 505.708451][T14466] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 506.507113][T14510] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2186'. [ 507.288208][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.296729][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.299350][T14558] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 507.469356][T14570] netlink: 'syz.3.2196': attribute type 4 has an invalid length. [ 507.513938][T14570] xt_policy: neither incoming nor outgoing policy selected [ 508.066214][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2211'. [ 508.132148][T14618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2213'. [ 508.147566][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 508.236356][T14624] tipc: Failed to remove unknown binding: 66,1,1/1634970673:2310750526/2310750528 [ 508.730836][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 509.805595][T14662] syzkaller1: entered allmulticast mode [ 509.828093][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2222'. [ 509.830759][T14667] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2225'. [ 509.882114][T14667] netlink: 'syz.3.2225': attribute type 21 has an invalid length. [ 509.976228][T14667] netlink: 'syz.3.2225': attribute type 1 has an invalid length. [ 510.024536][T14669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2225'. [ 510.034146][T14667] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2225'. [ 510.388072][T14677] tipc: Enabling of bearer rejected, already enabled [ 510.763258][T14689] openvswitch: netlink: Message has 4 unknown bytes. [ 510.918871][T14693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2235'. [ 511.160201][T14712] netlink: 'syz.2.2243': attribute type 4 has an invalid length. [ 511.250699][T14723] netlink: 'syz.2.2243': attribute type 3 has an invalid length. [ 511.312178][T14724] tipc: Resetting bearer [ 511.373979][T14724] syzkaller0: left promiscuous mode [ 511.400225][T14724] syzkaller0: left allmulticast mode [ 511.810269][T14751] tipc: Started in network mode [ 511.837038][T14751] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 511.954471][T14751] tipc: Enabled bearer , priority 10 [ 512.248340][T14763] netlink: 'syz.0.2253': attribute type 21 has an invalid length. [ 512.282176][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 512.328509][T14763] netlink: 'syz.0.2253': attribute type 21 has an invalid length. [ 512.367602][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 512.568172][T14771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2255'. [ 512.997882][T14789] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2261'. [ 513.018770][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2260'. [ 513.067979][ T5955] tipc: Node number set to 4269801488 [ 513.123218][T14793] tipc: Enabling of bearer rejected, already enabled [ 513.139644][T14787] syzkaller0: entered promiscuous mode [ 513.145383][T14787] syzkaller0: entered allmulticast mode [ 513.159973][T14795] netlink: 'syz.6.2262': attribute type 1 has an invalid length. [ 513.168590][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2262'. [ 513.181843][T14795] nbd: illegal input index 813332851 [ 513.202457][T14787] tipc: Resetting bearer [ 513.359628][T14800] IPVS: length: 136 != 8 [ 513.538584][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2267'. [ 514.064677][T14827] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2271'. [ 514.607306][ T6740] IPVS: starting estimator thread 0... [ 514.638579][T14861] pim6reg: entered allmulticast mode [ 514.694952][T14862] IPVS: using max 25 ests per chain, 60000 per kthread [ 514.710968][T14861] pim6reg: left allmulticast mode [ 515.298587][T14896] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2291'. [ 516.231271][T14909] lo: left allmulticast mode [ 516.243352][T14909] tunl0: left allmulticast mode [ 516.256587][T14909] gre0: left allmulticast mode [ 516.263943][T14909] gretap0: left allmulticast mode [ 516.279846][T14909] erspan0: left promiscuous mode [ 516.285641][T14909] erspan0: left allmulticast mode [ 516.294221][T14909] ip_vti0: left allmulticast mode [ 516.301639][T14909] ip6_vti0: left allmulticast mode [ 516.309319][T14909] sit0: left allmulticast mode [ 516.320220][T14909] ip6tnl0: left allmulticast mode [ 516.330764][T14909] ip6gre0: left allmulticast mode [ 516.337440][T14909] syz_tun: left allmulticast mode [ 516.344855][T14909] ip6gretap0: left allmulticast mode [ 516.351618][T14909] vcan0: left allmulticast mode [ 516.359363][T14909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.369042][T14909] team0: left allmulticast mode [ 516.374218][T14909] team_slave_0: left allmulticast mode [ 516.380084][T14909] team_slave_1: left allmulticast mode [ 516.385790][T14909] bond0: left allmulticast mode [ 516.390853][T14909] bond_slave_0: left allmulticast mode [ 516.397027][T14909] bond_slave_1: left allmulticast mode [ 516.402749][T14909] batadv_slave_0: left allmulticast mode [ 516.410449][T14909] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.418787][T14909] !: left allmulticast mode [ 516.425370][T14909] nlmon0: left allmulticast mode [ 516.431501][T14909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.690595][T14926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.725742][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 516.741421][ T5869] block nbd2: Receive control failed (result -107) [ 516.829915][T14929] nbd2: detected capacity change from 0 to 32 [ 517.399083][T14956] netlink: 'syz.5.2304': attribute type 4 has an invalid length. [ 517.670697][T14968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2307'. [ 517.731684][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2307'. [ 517.786709][T14968] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 518.173468][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2311'. [ 518.241128][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 518.261139][T14985] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2311'. [ 518.287489][T14986] syzkaller1: entered promiscuous mode [ 518.298543][T14986] syzkaller1: entered allmulticast mode [ 518.377348][T14993] netlink: 'syz.5.2312': attribute type 61 has an invalid length. [ 518.435489][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2314'. [ 518.483990][T14998] geneve2: entered promiscuous mode [ 518.515339][T14998] geneve2: entered allmulticast mode [ 518.529344][ T12] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 60948 - 0 [ 518.570744][ T12] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 60948 - 0 [ 518.599591][ T12] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 60948 - 0 [ 518.669671][ T12] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 60948 - 0 [ 518.985845][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2326'. [ 518.995254][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2326'. [ 519.113042][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 519.161865][T15045] sch_tbf: burst 5 is lower than device lo mtu (1294) ! [ 519.259247][T15049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2332'. [ 519.389869][T15053] macsec1: entered promiscuous mode [ 519.395570][T15053] macsec0: entered promiscuous mode [ 519.401288][T15053] macsec1: entered allmulticast mode [ 519.410286][T15053] macsec0: entered allmulticast mode [ 519.434897][T15053] veth1_macvtap: entered allmulticast mode [ 520.368035][T15107] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 521.182807][T15146] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 521.501223][T15154] bridge_slave_1: left allmulticast mode [ 521.511381][T15154] bridge_slave_1: left promiscuous mode [ 521.530922][T15154] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.677243][T15170] netlink: 'syz.0.2362': attribute type 64 has an invalid length. [ 521.769598][T15164] team0: No ports can be present during mode change [ 521.843625][T15167] xt_limit: Overflow, try lower: 271964/0 [ 521.999435][T15185] netlink: 'syz.0.2366': attribute type 2 has an invalid length. [ 522.127081][T15188] nbd: nbd0 already in use [ 522.132727][T15188] block nbd0: NBD_DISCONNECT [ 522.137905][T15188] block nbd0: Send disconnect failed -22 [ 522.501696][T15197] vcan0: Master is either lo or non-ether device [ 523.286776][T15220] vti0: entered allmulticast mode [ 537.831650][T13353] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 537.841334][T13353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 537.850884][T13353] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 537.858615][T13353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 537.860517][T15253] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 537.868655][T13353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 537.875964][T15253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 537.882092][T13353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 537.889393][T15253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 537.907098][ T5869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.304415][T15250] chnl_net:caif_netlink_parms(): no params data found [ 538.434049][T15250] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.441668][T15250] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.449130][T15250] bridge_slave_0: entered allmulticast mode [ 538.456868][T15250] bridge_slave_0: entered promiscuous mode [ 538.470077][T15250] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.477452][T15250] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.485182][T15250] bridge_slave_1: entered allmulticast mode [ 538.492456][T15250] bridge_slave_1: entered promiscuous mode [ 538.623145][T15250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.653027][T15250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.801630][T15250] team0: Port device team_slave_0 added [ 538.891009][T15250] team0: Port device team_slave_1 added [ 539.023273][ T5869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 539.036169][T15250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.043748][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.045708][ T5869] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 539.080778][T15250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.094184][T15250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.101587][ T5869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 539.109001][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.137087][T15250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.149477][T15252] chnl_net:caif_netlink_parms(): no params data found [ 539.155071][ T5869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 539.164765][ T5869] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 539.252975][T14102] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 539.262985][T14102] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 539.272128][T14102] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 539.293134][T14102] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 539.302933][T14102] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 539.386551][T15250] hsr_slave_0: entered promiscuous mode [ 539.393911][T15250] hsr_slave_1: entered promiscuous mode [ 539.452835][T15252] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.461300][T15252] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.469348][T15252] bridge_slave_0: entered allmulticast mode [ 539.477859][T15252] bridge_slave_0: entered promiscuous mode [ 539.508469][T15252] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.517754][T15252] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.526891][T15252] bridge_slave_1: entered allmulticast mode [ 539.535862][T15252] bridge_slave_1: entered promiscuous mode [ 539.623043][T15252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.654168][T15252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.783984][T15252] team0: Port device team_slave_0 added [ 539.795425][T15252] team0: Port device team_slave_1 added [ 539.912774][T15252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.920426][T15252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.947660][ T5869] Bluetooth: hci5: command tx timeout [ 539.953485][T15252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.955789][ T5869] Bluetooth: hci6: command tx timeout [ 539.967444][T15252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.977109][T15252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.003869][T15252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.096977][T15252] hsr_slave_0: entered promiscuous mode [ 540.103699][T15252] hsr_slave_1: entered promiscuous mode [ 540.109936][T15252] debugfs: 'hsr0' already exists in 'hsr' [ 540.116203][T15252] Cannot create hsr debugfs directory [ 540.451045][T15266] chnl_net:caif_netlink_parms(): no params data found [ 540.580921][T15268] chnl_net:caif_netlink_parms(): no params data found [ 540.669306][T15266] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.677341][T15266] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.684975][T15266] bridge_slave_0: entered allmulticast mode [ 540.693506][T15266] bridge_slave_0: entered promiscuous mode [ 540.728109][T15266] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.736274][T15266] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.744222][T15266] bridge_slave_1: entered allmulticast mode [ 540.752907][T15266] bridge_slave_1: entered promiscuous mode [ 540.867101][T15266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.915696][T15266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.969037][T15268] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.978474][T15268] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.986340][T15268] bridge_slave_0: entered allmulticast mode [ 540.995241][T15268] bridge_slave_0: entered promiscuous mode [ 541.019467][T14102] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 541.029732][T14102] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 541.033118][T15266] team0: Port device team_slave_0 added [ 541.039631][T14102] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 541.043934][T15268] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.054625][T14102] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 541.060018][T15268] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.068243][T14102] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 541.073254][T15268] bridge_slave_1: entered allmulticast mode [ 541.076302][T15268] bridge_slave_1: entered promiscuous mode [ 541.097978][T15266] team0: Port device team_slave_1 added [ 541.149638][T15268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.173310][T15266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.181481][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.208601][T14102] Bluetooth: hci7: command tx timeout [ 541.212965][T15266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.228350][T15268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.255416][T15266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.262750][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.290134][T15266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.328685][T15268] team0: Port device team_slave_0 added [ 541.338286][T15268] team0: Port device team_slave_1 added [ 541.365085][T14102] Bluetooth: hci8: command tx timeout [ 541.464472][T15266] hsr_slave_0: entered promiscuous mode [ 541.472979][T15266] hsr_slave_1: entered promiscuous mode [ 541.480372][T15266] debugfs: 'hsr0' already exists in 'hsr' [ 541.487194][T15266] Cannot create hsr debugfs directory [ 541.493844][T15268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.501866][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.530328][T15268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.567440][T15268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.575146][T15268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.602198][T15268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.723245][T15268] hsr_slave_0: entered promiscuous mode [ 541.729997][T15268] hsr_slave_1: entered promiscuous mode [ 541.736709][T15268] debugfs: 'hsr0' already exists in 'hsr' [ 541.743179][T15268] Cannot create hsr debugfs directory [ 542.005002][T14102] Bluetooth: hci6: command tx timeout [ 542.010582][T14102] Bluetooth: hci5: command tx timeout [ 542.066624][T15286] chnl_net:caif_netlink_parms(): no params data found [ 542.155145][T15286] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.162665][T15286] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.170763][T15286] bridge_slave_0: entered allmulticast mode [ 542.180102][T15286] bridge_slave_0: entered promiscuous mode [ 542.190475][T15286] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.198241][T15286] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.206583][T15286] bridge_slave_1: entered allmulticast mode [ 542.213945][T15286] bridge_slave_1: entered promiscuous mode [ 542.269518][T15286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.290802][T15286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.351249][T15286] team0: Port device team_slave_0 added [ 542.360996][T15286] team0: Port device team_slave_1 added [ 542.435101][T15286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.442438][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.469749][T15286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.492256][T15286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.499926][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.528456][T15286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.577419][T15286] hsr_slave_0: entered promiscuous mode [ 542.584314][T15286] hsr_slave_1: entered promiscuous mode [ 542.591553][T15286] debugfs: 'hsr0' already exists in 'hsr' [ 542.598094][T15286] Cannot create hsr debugfs directory [ 543.125021][T14102] Bluetooth: hci9: command tx timeout [ 543.285061][T14102] Bluetooth: hci7: command tx timeout [ 543.444924][T14102] Bluetooth: hci8: command tx timeout [ 544.085007][T14102] Bluetooth: hci5: command tx timeout [ 544.085015][ T5869] Bluetooth: hci6: command tx timeout [ 545.205544][T14102] Bluetooth: hci9: command tx timeout [ 545.365060][T14102] Bluetooth: hci7: command tx timeout [ 545.525054][T14102] Bluetooth: hci8: command tx timeout [ 546.165252][T14102] Bluetooth: hci6: command tx timeout [ 546.165264][ T5869] Bluetooth: hci5: command tx timeout [ 547.285299][ T5869] Bluetooth: hci9: command tx timeout [ 547.455015][ T5869] Bluetooth: hci7: command tx timeout [ 547.604899][ T5869] Bluetooth: hci8: command tx timeout [ 549.365344][ T5869] Bluetooth: hci9: command tx timeout [ 560.164905][T14102] Bluetooth: hci0: command 0x0406 tx timeout [ 597.992431][T14102] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 598.003290][T14102] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 598.011549][T13353] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 598.012912][T14102] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 598.021637][T13353] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 598.027570][T14102] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 598.035868][T13353] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 598.043163][T14102] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 598.050441][T13353] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 598.067236][T14102] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 598.481599][T15296] chnl_net:caif_netlink_parms(): no params data found [ 598.613675][T15296] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.622221][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.629722][T15296] bridge_slave_0: entered allmulticast mode [ 598.637198][T15296] bridge_slave_0: entered promiscuous mode [ 598.652766][T15296] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.660477][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.668014][T15296] bridge_slave_1: entered allmulticast mode [ 598.675615][T15296] bridge_slave_1: entered promiscuous mode [ 598.797151][T15296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.851887][T15296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.022641][T15296] team0: Port device team_slave_0 added [ 599.093065][T15296] team0: Port device team_slave_1 added [ 599.175429][T15253] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 599.186566][T15253] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 599.198153][T15253] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 599.206768][T15253] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 599.217662][T15253] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 599.233425][T13353] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 599.249773][T14102] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 599.256741][T15296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.258842][T14102] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 599.264202][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.297017][T14102] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 599.299835][T15296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.307342][T14102] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 599.327164][T15298] chnl_net:caif_netlink_parms(): no params data found [ 599.343719][T15296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.350878][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.378068][T15296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.495303][T15296] hsr_slave_0: entered promiscuous mode [ 599.502794][T15296] hsr_slave_1: entered promiscuous mode [ 599.510918][T15296] debugfs: 'hsr0' already exists in 'hsr' [ 599.517840][T15296] Cannot create hsr debugfs directory [ 599.704689][T15298] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.712909][T15298] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.720557][T15298] bridge_slave_0: entered allmulticast mode [ 599.730458][T15298] bridge_slave_0: entered promiscuous mode [ 599.763663][T15298] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.772666][T15298] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.781737][T15298] bridge_slave_1: entered allmulticast mode [ 599.790333][T15298] bridge_slave_1: entered promiscuous mode [ 599.925106][T15298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.964218][T15298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.055770][T15298] team0: Port device team_slave_0 added [ 600.066026][T15298] team0: Port device team_slave_1 added [ 600.086923][T15253] Bluetooth: hci10: command tx timeout [ 600.093254][T14102] Bluetooth: hci11: command tx timeout [ 600.150894][T15298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.158616][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.185903][T15298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.218445][T15298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.226152][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.252823][T15298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.403084][T15298] hsr_slave_0: entered promiscuous mode [ 600.410807][T15298] hsr_slave_1: entered promiscuous mode [ 600.418620][T15298] debugfs: 'hsr0' already exists in 'hsr' [ 600.424524][T15298] Cannot create hsr debugfs directory [ 600.447177][T15311] chnl_net:caif_netlink_parms(): no params data found [ 600.690059][T15311] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.697880][T15311] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.705502][T15311] bridge_slave_0: entered allmulticast mode [ 600.712985][T15311] bridge_slave_0: entered promiscuous mode [ 600.747867][T15311] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.755693][T15311] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.763066][T15311] bridge_slave_1: entered allmulticast mode [ 600.772865][T15311] bridge_slave_1: entered promiscuous mode [ 600.856253][T15313] chnl_net:caif_netlink_parms(): no params data found [ 600.871454][T15311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.902920][T15311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.979182][T15311] team0: Port device team_slave_0 added [ 600.999518][T15311] team0: Port device team_slave_1 added [ 601.088936][T15311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.096525][T15311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.122933][T15311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.137494][T15311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.144736][T15311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.171638][T15311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.184113][T15313] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.193273][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.201974][T15313] bridge_slave_0: entered allmulticast mode [ 601.210872][T15313] bridge_slave_0: entered promiscuous mode [ 601.260565][T15313] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.267967][T15313] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.275781][T15313] bridge_slave_1: entered allmulticast mode [ 601.285214][T14102] Bluetooth: hci12: command tx timeout [ 601.285303][T15313] bridge_slave_1: entered promiscuous mode [ 601.365705][T14102] Bluetooth: hci13: command tx timeout [ 601.375608][T15311] hsr_slave_0: entered promiscuous mode [ 601.382829][T15311] hsr_slave_1: entered promiscuous mode [ 601.397115][T15311] debugfs: 'hsr0' already exists in 'hsr' [ 601.402993][T15311] Cannot create hsr debugfs directory [ 601.443448][T15313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.498159][T15313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.552800][T15253] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 601.562880][T15253] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 601.571595][T15253] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 601.581515][T15253] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 601.591649][T15253] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 601.641640][T15313] team0: Port device team_slave_0 added [ 601.678644][T15313] team0: Port device team_slave_1 added [ 601.733846][T15313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.741370][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.768822][T15313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.805769][T15313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.812752][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.839505][T15313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.963008][T15313] hsr_slave_0: entered promiscuous mode [ 601.970692][T15313] hsr_slave_1: entered promiscuous mode [ 601.978157][T15313] debugfs: 'hsr0' already exists in 'hsr' [ 601.983942][T15313] Cannot create hsr debugfs directory [ 602.165651][T14102] Bluetooth: hci10: command tx timeout [ 602.167873][T15253] Bluetooth: hci11: command tx timeout [ 602.418036][T15331] chnl_net:caif_netlink_parms(): no params data found [ 602.531076][T15331] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.538681][T15331] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.547608][T15331] bridge_slave_0: entered allmulticast mode [ 602.555706][T15331] bridge_slave_0: entered promiscuous mode [ 602.578476][T15331] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.585858][T15331] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.593083][T15331] bridge_slave_1: entered allmulticast mode [ 602.601866][T15331] bridge_slave_1: entered promiscuous mode [ 602.641542][T15331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.658769][T15331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.707038][T15331] team0: Port device team_slave_0 added [ 602.718593][T15331] team0: Port device team_slave_1 added [ 602.783283][T15331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.790823][T15331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.817594][T15331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.838839][T15331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.846029][T15331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.872770][T15331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.935442][T15331] hsr_slave_0: entered promiscuous mode [ 602.942261][T15331] hsr_slave_1: entered promiscuous mode [ 602.948796][T15331] debugfs: 'hsr0' already exists in 'hsr' [ 602.954858][T15331] Cannot create hsr debugfs directory [ 603.365162][T15253] Bluetooth: hci12: command tx timeout [ 603.445125][T15253] Bluetooth: hci13: command tx timeout [ 603.685064][T15253] Bluetooth: hci14: command tx timeout [ 604.244779][T15253] Bluetooth: hci11: command tx timeout [ 604.244914][T14102] Bluetooth: hci10: command tx timeout [ 605.445035][T15253] Bluetooth: hci12: command tx timeout [ 605.525101][T15253] Bluetooth: hci13: command tx timeout [ 605.765059][T15253] Bluetooth: hci14: command tx timeout [ 606.324961][T15253] Bluetooth: hci10: command tx timeout [ 606.327500][T14102] Bluetooth: hci11: command tx timeout [ 607.525114][T14102] Bluetooth: hci12: command tx timeout [ 607.605004][T14102] Bluetooth: hci13: command tx timeout [ 607.844908][T14102] Bluetooth: hci14: command tx timeout [ 609.925029][T14102] Bluetooth: hci14: command tx timeout [ 616.485060][T15253] Bluetooth: hci1: command 0x0405 tx timeout [ 658.093396][T15253] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 658.103877][T15253] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 658.110175][ T5869] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 658.112164][T15253] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 658.122713][ T5869] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 658.128904][T15253] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 658.134876][ T5869] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 658.141508][T15253] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 658.150931][ T5869] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 658.169489][ T5869] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 658.576781][T15341] chnl_net:caif_netlink_parms(): no params data found [ 658.715828][T15341] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.723189][T15341] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.731463][T15341] bridge_slave_0: entered allmulticast mode [ 658.741256][T15341] bridge_slave_0: entered promiscuous mode [ 658.749925][T15341] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.758463][T15341] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.765951][T15341] bridge_slave_1: entered allmulticast mode [ 658.774462][T15341] bridge_slave_1: entered promiscuous mode [ 658.885623][T15341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.911084][T15341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.145300][T15341] team0: Port device team_slave_0 added [ 659.177471][T15341] team0: Port device team_slave_1 added [ 659.225282][ T5869] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 659.237258][ T5869] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 659.247625][ T5869] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 659.272049][ T5869] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 659.282815][ T5869] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 659.321412][T15343] chnl_net:caif_netlink_parms(): no params data found [ 659.340115][T15341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.348125][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.377204][T15341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.385132][ T5869] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 659.398062][ T5869] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 659.408021][ T5869] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 659.416863][ T5869] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 659.425459][ T5869] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 659.426004][T15341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.447673][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.474503][T15341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.594412][T15341] hsr_slave_0: entered promiscuous mode [ 659.607002][T15341] hsr_slave_1: entered promiscuous mode [ 659.613839][T15341] debugfs: 'hsr0' already exists in 'hsr' [ 659.620441][T15341] Cannot create hsr debugfs directory [ 659.695787][T15343] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.703239][T15343] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.711686][T15343] bridge_slave_0: entered allmulticast mode [ 659.720100][T15343] bridge_slave_0: entered promiscuous mode [ 659.773716][T15343] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.781197][T15343] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.789048][T15343] bridge_slave_1: entered allmulticast mode [ 659.798050][T15343] bridge_slave_1: entered promiscuous mode [ 659.880080][T15343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.893919][T15343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.033499][T15343] team0: Port device team_slave_0 added [ 660.071874][T15343] team0: Port device team_slave_1 added [ 660.151975][T15343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.159353][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.165978][ T5869] Bluetooth: hci15: command tx timeout [ 660.186847][T15343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.211611][T15343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.219875][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.246615][T15343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.258672][ T5869] Bluetooth: hci16: command tx timeout [ 660.360516][T15343] hsr_slave_0: entered promiscuous mode [ 660.367954][T15343] hsr_slave_1: entered promiscuous mode [ 660.376059][T15343] debugfs: 'hsr0' already exists in 'hsr' [ 660.381813][T15343] Cannot create hsr debugfs directory [ 660.695691][T15356] chnl_net:caif_netlink_parms(): no params data found [ 660.836114][T15358] chnl_net:caif_netlink_parms(): no params data found [ 660.917264][T15356] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.925294][T15356] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.932883][T15356] bridge_slave_0: entered allmulticast mode [ 660.941024][T15356] bridge_slave_0: entered promiscuous mode [ 660.950033][T15356] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.957725][T15356] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.965465][T15356] bridge_slave_1: entered allmulticast mode [ 660.973361][T15356] bridge_slave_1: entered promiscuous mode [ 661.045864][T15356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.083769][T15356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.093950][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.101722][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.109444][T15358] bridge_slave_0: entered allmulticast mode [ 661.117179][T15358] bridge_slave_0: entered promiscuous mode [ 661.126583][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.134092][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.141774][T15358] bridge_slave_1: entered allmulticast mode [ 661.149899][T15358] bridge_slave_1: entered promiscuous mode [ 661.188141][T15356] team0: Port device team_slave_0 added [ 661.211670][T15356] team0: Port device team_slave_1 added [ 661.269153][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.299102][T15356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.306344][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.333009][T15356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.347600][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.365181][T15365] Bluetooth: hci17: command tx timeout [ 661.374102][T15356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.381526][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.410071][T15356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.445211][T15365] Bluetooth: hci18: command tx timeout [ 661.500055][T15358] team0: Port device team_slave_0 added [ 661.538526][T15358] team0: Port device team_slave_1 added [ 661.568007][T15356] hsr_slave_0: entered promiscuous mode [ 661.575196][T15356] hsr_slave_1: entered promiscuous mode [ 661.581782][T15356] debugfs: 'hsr0' already exists in 'hsr' [ 661.587749][T15356] Cannot create hsr debugfs directory [ 661.638091][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.645489][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.672138][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.708895][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.716360][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.743801][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.930921][T15358] hsr_slave_0: entered promiscuous mode [ 661.938519][T15358] hsr_slave_1: entered promiscuous mode [ 661.945474][T15358] debugfs: 'hsr0' already exists in 'hsr' [ 661.951598][T15358] Cannot create hsr debugfs directory [ 662.149399][ T5873] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 662.159812][ T5873] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 662.171596][ T5873] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 662.181768][ T5873] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 662.192421][ T5873] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 662.245897][ T5873] Bluetooth: hci15: command tx timeout [ 662.324770][ T5873] Bluetooth: hci16: command tx timeout [ 662.576549][ T5873] Bluetooth: hci5: command 0x0406 tx timeout [ 662.576832][T15253] Bluetooth: hci7: command 0x0406 tx timeout [ 662.582810][ T5873] Bluetooth: hci8: command 0x0406 tx timeout [ 662.589096][T15253] Bluetooth: hci6: command 0x0406 tx timeout [ 662.650781][T15377] chnl_net:caif_netlink_parms(): no params data found [ 662.800259][T15377] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.809638][T15377] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.817581][T15377] bridge_slave_0: entered allmulticast mode [ 662.825375][T15377] bridge_slave_0: entered promiscuous mode [ 662.834886][T15377] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.843046][T15377] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.850782][T15377] bridge_slave_1: entered allmulticast mode [ 662.859077][T15377] bridge_slave_1: entered promiscuous mode [ 662.927242][T15377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.951345][T15377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.995622][T15377] team0: Port device team_slave_0 added [ 663.004052][T15377] team0: Port device team_slave_1 added [ 663.035264][T15377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.042240][T15377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.069970][T15377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.083599][T15377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.090612][T15377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.117335][T15377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.165943][T15377] hsr_slave_0: entered promiscuous mode [ 663.172664][T15377] hsr_slave_1: entered promiscuous mode [ 663.179628][T15377] debugfs: 'hsr0' already exists in 'hsr' [ 663.185749][T15377] Cannot create hsr debugfs directory [ 663.445018][T13353] Bluetooth: hci17: command tx timeout [ 663.539951][T13353] Bluetooth: hci18: command tx timeout [ 664.245018][T13353] Bluetooth: hci19: command tx timeout [ 664.325030][T14102] Bluetooth: hci15: command tx timeout [ 664.404907][T13353] Bluetooth: hci16: command tx timeout [ 665.524934][T13353] Bluetooth: hci17: command tx timeout [ 665.607353][ T5869] Bluetooth: hci18: command tx timeout [ 666.324926][ T5869] Bluetooth: hci19: command tx timeout [ 666.404917][ T5869] Bluetooth: hci15: command tx timeout [ 666.484827][ T5869] Bluetooth: hci16: command tx timeout [ 667.604888][ T5869] Bluetooth: hci17: command tx timeout [ 667.685005][T14102] Bluetooth: hci18: command tx timeout [ 667.692259][ T5869] Bluetooth: hci9: command 0x0406 tx timeout [ 668.404897][T15253] Bluetooth: hci19: command tx timeout [ 670.485063][T15253] Bluetooth: hci19: command tx timeout [ 678.404996][ T31] INFO: task syz.0.2367:15188 blocked for more than 143 seconds. [ 678.413308][ T31] Not tainted syzkaller #0 [ 678.418413][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 678.427335][ T31] task:syz.0.2367 state:D stack:24384 pid:15188 tgid:15187 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 678.440551][ T31] Call Trace: [ 678.444142][ T31] [ 678.447176][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 678.451870][ T31] ? validate_chain+0x897/0x2140 [ 678.457091][ T31] ? __lock_acquire+0xab9/0xd20 [ 678.461992][ T31] ? __pfx___schedule+0x10/0x10 [ 678.467166][ T31] ? schedule+0x91/0x360 [ 678.471473][ T31] schedule+0x165/0x360 [ 678.475856][ T31] schedule_timeout+0x9a/0x270 [ 678.480658][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 678.493455][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.498874][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.504685][ T31] ? wait_for_completion+0x267/0x5d0 [ 678.510194][ T31] wait_for_completion+0x2bf/0x5d0 [ 678.515470][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 678.521152][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 678.527325][ T31] ? check_flush_dependency+0x88/0x400 [ 678.544619][ T31] __flush_workqueue+0x6f7/0x14b0 [ 678.549739][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 678.575710][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.581155][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 678.605066][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 678.611079][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 678.616757][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 678.622372][ T31] nbd_genl_disconnect+0x485/0x570 [ 678.627617][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 678.633293][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 678.639938][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 678.645680][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 678.651959][ T31] ? stack_trace_save+0x9c/0xe0 [ 678.656873][ T31] genl_rcv_msg+0x60e/0x790 [ 678.661568][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.666656][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 678.672453][ T31] netlink_rcv_skb+0x208/0x470 [ 678.677414][ T31] ? __lock_acquire+0xab9/0xd20 [ 678.682365][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.687704][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.693204][ T31] ? down_read+0x1ad/0x2e0 [ 678.697839][ T31] genl_rcv+0x28/0x40 [ 678.701954][ T31] netlink_unicast+0x82f/0x9e0 [ 678.707114][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 678.712654][ T31] ? netlink_sendmsg+0x642/0xb30 [ 678.717779][ T31] ? skb_put+0x11b/0x210 [ 678.722044][ T31] netlink_sendmsg+0x805/0xb30 [ 678.726944][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.732237][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 678.737485][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.742818][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.748226][ T31] __sock_sendmsg+0x21c/0x270 [ 678.753029][ T31] ____sys_sendmsg+0x505/0x830 [ 678.757967][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.763404][ T31] ? import_iovec+0x74/0xa0 [ 678.767985][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 678.772661][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.778050][ T31] ? __fget_files+0x2a/0x420 [ 678.782865][ T31] ? __fget_files+0x3a0/0x420 [ 678.787714][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 678.792671][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.798747][ T31] ? rcu_is_watching+0x15/0xb0 [ 678.803617][ T31] ? do_syscall_64+0xbe/0x3b0 [ 678.808691][ T31] do_syscall_64+0xfa/0x3b0 [ 678.813325][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.818630][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.824848][ T31] ? clear_bhb_loop+0x60/0xb0 [ 678.829642][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.835596][ T31] RIP: 0033:0x7f8cbb38eec9 [ 678.840182][ T31] RSP: 002b:00007f8cbc211038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.848915][ T31] RAX: ffffffffffffffda RBX: 00007f8cbb5e5fa0 RCX: 00007f8cbb38eec9 [ 678.857087][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000009 [ 678.865187][ T31] RBP: 00007f8cbb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 678.873209][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.881371][ T31] R13: 00007f8cbb5e6038 R14: 00007f8cbb5e5fa0 R15: 00007ffee8fc39b8 [ 678.889776][ T31] [ 678.892856][ T31] INFO: task syz.0.2367:15189 blocked for more than 143 seconds. [ 678.900864][ T31] Not tainted syzkaller #0 [ 678.906273][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 678.915568][ T31] task:syz.0.2367 state:D stack:27104 pid:15189 tgid:15187 ppid:5865 task_flags:0x400040 flags:0x00004004 [ 678.927895][ T31] Call Trace: [ 678.931570][ T31] [ 678.934643][ T31] __schedule+0x1798/0x4cc0 [ 678.939643][ T31] ? __lock_acquire+0xab9/0xd20 [ 678.945059][ T31] ? __lock_acquire+0xab9/0xd20 [ 678.950026][ T31] ? __pfx___schedule+0x10/0x10 [ 678.954978][ T31] ? schedule+0x91/0x360 [ 678.959249][ T31] schedule+0x165/0x360 [ 678.963521][ T31] schedule_preempt_disabled+0x13/0x30 [ 678.969131][ T31] __mutex_lock+0x7e6/0x1350 [ 678.973740][ T31] ? __mutex_lock+0x5bb/0x1350 [ 678.978563][ T31] ? genl_rcv_msg+0x10d/0x790 [ 678.983421][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 678.988597][ T31] ? stack_trace_save+0x9c/0xe0 [ 678.993664][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 678.999499][ T31] ? radix_tree_lookup+0x240/0x290 [ 679.005070][ T31] genl_rcv_msg+0x10d/0x790 [ 679.009698][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.015345][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.020486][ T31] netlink_rcv_skb+0x208/0x470 [ 679.025541][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.030427][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.035514][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.040839][ T31] ? down_read+0x1ad/0x2e0 [ 679.045443][ T31] genl_rcv+0x28/0x40 [ 679.049431][ T31] netlink_unicast+0x82f/0x9e0 [ 679.054369][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 679.059814][ T31] ? netlink_sendmsg+0x642/0xb30 [ 679.064977][ T31] ? skb_put+0x11b/0x210 [ 679.069220][ T31] netlink_sendmsg+0x805/0xb30 [ 679.073982][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.079322][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 679.084262][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.089678][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.095234][ T31] __sock_sendmsg+0x21c/0x270 [ 679.100119][ T31] __sys_sendto+0x3bd/0x520 [ 679.104814][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 679.110034][ T31] ? count_memcg_event_mm+0x21/0x260 [ 679.115382][ T31] ? exc_page_fault+0x76/0xf0 [ 679.120071][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 679.125716][ T31] __x64_sys_sendto+0xde/0x100 [ 679.130594][ T31] do_syscall_64+0xfa/0x3b0 [ 679.135331][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.140791][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.146989][ T31] ? clear_bhb_loop+0x60/0xb0 [ 679.151718][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.157760][ T31] RIP: 0033:0x7f8cbb390d5c [ 679.162194][ T31] RSP: 002b:00007f8cbc1eeec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 679.170801][ T31] RAX: ffffffffffffffda RBX: 00007f8cbc1eefc0 RCX: 00007f8cbb390d5c [ 679.179022][ T31] RDX: 0000000000000020 RSI: 00007f8cbc1ef010 RDI: 000000000000000c [ 679.187244][ T31] RBP: 0000000000000000 R08: 00007f8cbc1eef14 R09: 000000000000000c [ 679.195416][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 679.203474][ T31] R13: 00007f8cbc1eef68 R14: 00007f8cbc1ef010 R15: 0000000000000000 [ 679.211742][ T31] [ 679.214886][ T31] INFO: task syz.5.2368:15192 blocked for more than 144 seconds. [ 679.222633][ T31] Not tainted syzkaller #0 [ 679.227661][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.237249][ T31] task:syz.5.2368 state:D stack:27040 pid:15192 tgid:15191 ppid:13347 task_flags:0x400140 flags:0x00004004 [ 679.249653][ T31] Call Trace: [ 679.253035][ T31] [ 679.256034][ T31] __schedule+0x1798/0x4cc0 [ 679.260730][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.265721][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.270775][ T31] ? __pfx___schedule+0x10/0x10 [ 679.275726][ T31] ? schedule+0x91/0x360 [ 679.280022][ T31] schedule+0x165/0x360 [ 679.284225][ T31] schedule_preempt_disabled+0x13/0x30 [ 679.290002][ T31] __mutex_lock+0x7e6/0x1350 [ 679.294700][ T31] ? __mutex_lock+0x5bb/0x1350 [ 679.299595][ T31] ? genl_rcv_msg+0x10d/0x790 [ 679.304280][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 679.309548][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 679.315058][ T31] ? radix_tree_lookup+0x240/0x290 [ 679.320342][ T31] genl_rcv_msg+0x10d/0x790 [ 679.325083][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.330390][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 679.335535][ T31] ? __asan_memcpy+0x40/0x70 [ 679.340333][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 679.345945][ T31] netlink_rcv_skb+0x208/0x470 [ 679.350884][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.355843][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.361478][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.367411][ T31] ? down_read+0x1ad/0x2e0 [ 679.371915][ T31] genl_rcv+0x28/0x40 [ 679.375991][ T31] netlink_unicast+0x82f/0x9e0 [ 679.380782][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 679.386117][ T31] ? netlink_sendmsg+0x642/0xb30 [ 679.391058][ T31] ? skb_put+0x11b/0x210 [ 679.395517][ T31] netlink_sendmsg+0x805/0xb30 [ 679.400478][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.405819][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 679.410766][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.416231][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.421528][ T31] __sock_sendmsg+0x21c/0x270 [ 679.426250][ T31] __sys_sendto+0x3bd/0x520 [ 679.430754][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 679.435823][ T31] ? count_memcg_event_mm+0x21/0x260 [ 679.441211][ T31] ? exc_page_fault+0x76/0xf0 [ 679.445956][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 679.451354][ T31] __x64_sys_sendto+0xde/0x100 [ 679.456709][ T31] do_syscall_64+0xfa/0x3b0 [ 679.461330][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.466598][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.472750][ T31] ? clear_bhb_loop+0x60/0xb0 [ 679.477551][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.483439][ T31] RIP: 0033:0x7efe12990d5c [ 679.487984][ T31] RSP: 002b:00007efe13796ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 679.496663][ T31] RAX: ffffffffffffffda RBX: 00007efe13796fc0 RCX: 00007efe12990d5c [ 679.505034][ T31] RDX: 0000000000000024 RSI: 00007efe13797010 RDI: 0000000000000005 [ 679.513295][ T31] RBP: 0000000000000000 R08: 00007efe13796f14 R09: 000000000000000c [ 679.521663][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 679.533270][ T31] R13: 00007efe13796f68 R14: 00007efe13797010 R15: 0000000000000000 [ 679.541509][ T31] [ 679.544620][ T31] INFO: task syz.5.2368:15193 blocked for more than 144 seconds. [ 679.552463][ T31] Not tainted syzkaller #0 [ 679.560593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.569562][ T31] task:syz.5.2368 state:D stack:26176 pid:15193 tgid:15191 ppid:13347 task_flags:0x400040 flags:0x00004004 [ 679.581815][ T31] Call Trace: [ 679.585189][ T31] [ 679.588518][ T31] __schedule+0x1798/0x4cc0 [ 679.593125][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.598072][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.602953][ T31] ? __pfx___schedule+0x10/0x10 [ 679.608559][ T31] ? schedule+0x91/0x360 [ 679.612945][ T31] schedule+0x165/0x360 [ 679.617260][ T31] schedule_preempt_disabled+0x13/0x30 [ 679.622985][ T31] __mutex_lock+0x7e6/0x1350 [ 679.627807][ T31] ? __mutex_lock+0x5bb/0x1350 [ 679.632676][ T31] ? genl_rcv_msg+0x10d/0x790 [ 679.637621][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 679.642672][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 679.648120][ T31] ? radix_tree_lookup+0x240/0x290 [ 679.653241][ T31] genl_rcv_msg+0x10d/0x790 [ 679.658002][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.663242][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 679.668357][ T31] ? __asan_memcpy+0x40/0x70 [ 679.672976][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 679.678805][ T31] netlink_rcv_skb+0x208/0x470 [ 679.683635][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.688779][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.693923][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.699325][ T31] ? down_read+0x1ad/0x2e0 [ 679.703834][ T31] genl_rcv+0x28/0x40 [ 679.707948][ T31] netlink_unicast+0x82f/0x9e0 [ 679.713127][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 679.718734][ T31] ? netlink_sendmsg+0x642/0xb30 [ 679.723979][ T31] ? skb_put+0x11b/0x210 [ 679.728372][ T31] netlink_sendmsg+0x805/0xb30 [ 679.733273][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.738882][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 679.743827][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.749338][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.754957][ T31] __sock_sendmsg+0x21c/0x270 [ 679.759916][ T31] __sys_sendto+0x3bd/0x520 [ 679.764887][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 679.769980][ T31] ? count_memcg_event_mm+0x21/0x260 [ 679.775501][ T31] ? exc_page_fault+0x76/0xf0 [ 679.780286][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 679.786008][ T31] __x64_sys_sendto+0xde/0x100 [ 679.790953][ T31] do_syscall_64+0xfa/0x3b0 [ 679.795679][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.800966][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.807399][ T31] ? clear_bhb_loop+0x60/0xb0 [ 679.812186][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.818473][ T31] RIP: 0033:0x7efe12990d5c [ 679.823003][ T31] RSP: 002b:00007efe13775ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 679.831649][ T31] RAX: ffffffffffffffda RBX: 00007efe13775fc0 RCX: 00007efe12990d5c [ 679.839985][ T31] RDX: 0000000000000020 RSI: 00007efe13776010 RDI: 0000000000000003 [ 679.848300][ T31] RBP: 0000000000000000 R08: 00007efe13775f14 R09: 000000000000000c [ 679.856462][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 679.864648][ T31] R13: 00007efe13775f68 R14: 00007efe13776010 R15: 0000000000000000 [ 679.872657][ T31] [ 679.875775][ T31] INFO: task syz.5.2368:15194 blocked for more than 144 seconds. [ 679.883762][ T31] Not tainted syzkaller #0 [ 679.888735][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.897959][ T31] task:syz.5.2368 state:D stack:27104 pid:15194 tgid:15191 ppid:13347 task_flags:0x400040 flags:0x00004004 [ 679.909918][ T31] Call Trace: [ 679.913198][ T31] [ 679.916181][ T31] __schedule+0x1798/0x4cc0 [ 679.920698][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.925785][ T31] ? __lock_acquire+0xab9/0xd20 [ 679.930817][ T31] ? __pfx___schedule+0x10/0x10 [ 679.935813][ T31] ? schedule+0x91/0x360 [ 679.940106][ T31] schedule+0x165/0x360 [ 679.944478][ T31] schedule_preempt_disabled+0x13/0x30 [ 679.950049][ T31] __mutex_lock+0x7e6/0x1350 [ 679.954708][ T31] ? __mutex_lock+0x5bb/0x1350 [ 679.959474][ T31] ? genl_rcv_msg+0x10d/0x790 [ 679.964240][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 679.969493][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 679.974928][ T31] ? radix_tree_lookup+0x240/0x290 [ 679.980234][ T31] genl_rcv_msg+0x10d/0x790 [ 679.984985][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.990037][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 679.995139][ T31] ? __asan_memcpy+0x40/0x70 [ 679.999905][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 680.005815][ T31] netlink_rcv_skb+0x208/0x470 [ 680.010800][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.016099][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.021157][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.026675][ T31] ? down_read+0x1ad/0x2e0 [ 680.031266][ T31] genl_rcv+0x28/0x40 [ 680.035323][ T31] netlink_unicast+0x82f/0x9e0 [ 680.040117][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 680.045575][ T31] ? netlink_sendmsg+0x642/0xb30 [ 680.050520][ T31] ? skb_put+0x11b/0x210 [ 680.054890][ T31] netlink_sendmsg+0x805/0xb30 [ 680.059896][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.065307][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 680.070554][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 680.076013][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.081409][ T31] __sock_sendmsg+0x21c/0x270 [ 680.086308][ T31] __sys_sendto+0x3bd/0x520 [ 680.090918][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 680.096182][ T31] ? count_memcg_event_mm+0x21/0x260 [ 680.101494][ T31] ? exc_page_fault+0x76/0xf0 [ 680.106250][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 680.111539][ T31] __x64_sys_sendto+0xde/0x100 [ 680.116871][ T31] do_syscall_64+0xfa/0x3b0 [ 680.121369][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.126619][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.132878][ T31] ? clear_bhb_loop+0x60/0xb0 [ 680.137709][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.143618][ T31] RIP: 0033:0x7efe12990d5c [ 680.148082][ T31] RSP: 002b:00007efe13754ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 680.156644][ T31] RAX: ffffffffffffffda RBX: 00007efe13754fc0 RCX: 00007efe12990d5c [ 680.164869][ T31] RDX: 0000000000000020 RSI: 00007efe13755010 RDI: 0000000000000003 [ 680.172968][ T31] RBP: 0000000000000000 R08: 00007efe13754f14 R09: 000000000000000c [ 680.181008][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 680.189116][ T31] R13: 00007efe13754f68 R14: 00007efe13755010 R15: 0000000000000000 [ 680.197273][ T31] [ 680.200345][ T31] INFO: task syz.5.2368:15195 blocked for more than 145 seconds. [ 680.208169][ T31] Not tainted syzkaller #0 [ 680.213131][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.222059][ T31] task:syz.5.2368 state:D stack:26504 pid:15195 tgid:15191 ppid:13347 task_flags:0x400140 flags:0x00004004 [ 680.234830][ T31] Call Trace: [ 680.238170][ T31] [ 680.241120][ T31] __schedule+0x1798/0x4cc0 [ 680.245835][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.250711][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.255657][ T31] ? __pfx___schedule+0x10/0x10 [ 680.260637][ T31] ? schedule+0x91/0x360 [ 680.265049][ T31] schedule+0x165/0x360 [ 680.269212][ T31] schedule_preempt_disabled+0x13/0x30 [ 680.274986][ T31] __mutex_lock+0x7e6/0x1350 [ 680.279770][ T31] ? __mutex_lock+0x5bb/0x1350 [ 680.284759][ T31] ? genl_rcv_msg+0x10d/0x790 [ 680.289561][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 680.294719][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 680.299871][ T31] ? radix_tree_lookup+0x240/0x290 [ 680.305124][ T31] genl_rcv_msg+0x10d/0x790 [ 680.309732][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.314827][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 680.319946][ T31] ? __asan_memcpy+0x40/0x70 [ 680.324805][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 680.330309][ T31] netlink_rcv_skb+0x208/0x470 [ 680.335303][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.340362][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.345890][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.351557][ T31] ? down_read+0x1ad/0x2e0 [ 680.356545][ T31] genl_rcv+0x28/0x40 [ 680.360673][ T31] netlink_unicast+0x82f/0x9e0 [ 680.365781][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 680.371096][ T31] ? netlink_sendmsg+0x642/0xb30 [ 680.376281][ T31] ? skb_put+0x11b/0x210 [ 680.380679][ T31] netlink_sendmsg+0x805/0xb30 [ 680.385675][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.391350][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 680.396769][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 680.402088][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.408002][ T31] __sock_sendmsg+0x21c/0x270 [ 680.412835][ T31] __sys_sendto+0x3bd/0x520 [ 680.418143][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 680.423243][ T31] ? fd_install+0x97/0x540 [ 680.427828][ T31] ? fd_install+0x30d/0x540 [ 680.432359][ T31] __x64_sys_sendto+0xde/0x100 [ 680.437318][ T31] do_syscall_64+0xfa/0x3b0 [ 680.441924][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.447187][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.453427][ T31] ? clear_bhb_loop+0x60/0xb0 [ 680.458428][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.464341][ T31] RIP: 0033:0x7efe12990d5c [ 680.469132][ T31] RSP: 002b:00007efe107f2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 680.477786][ T31] RAX: ffffffffffffffda RBX: 00007efe107f2fc0 RCX: 00007efe12990d5c [ 680.486062][ T31] RDX: 0000000000000020 RSI: 00007efe107f3010 RDI: 000000000000000d [ 680.494138][ T31] RBP: 0000000000000000 R08: 00007efe107f2f14 R09: 000000000000000c [ 680.502759][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 680.511652][ T31] R13: 00007efe107f2f68 R14: 00007efe107f3010 R15: 0000000000000000 [ 680.520028][ T31] [ 680.523265][ T31] INFO: task syz.3.2376:15218 blocked for more than 145 seconds. [ 680.531227][ T31] Not tainted syzkaller #0 [ 680.536280][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.545154][ T31] task:syz.3.2376 state:D stack:26112 pid:15218 tgid:15217 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 680.557118][ T31] Call Trace: [ 680.560396][ T31] [ 680.563362][ T31] __schedule+0x1798/0x4cc0 [ 680.571360][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.576615][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.581586][ T31] ? __pfx___schedule+0x10/0x10 [ 680.586506][ T31] ? schedule+0x91/0x360 [ 680.591019][ T31] schedule+0x165/0x360 [ 680.595271][ T31] schedule_preempt_disabled+0x13/0x30 [ 680.600898][ T31] __mutex_lock+0x7e6/0x1350 [ 680.605589][ T31] ? __mutex_lock+0x5bb/0x1350 [ 680.610412][ T31] ? genl_rcv_msg+0x10d/0x790 [ 680.615372][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 680.620415][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 680.625699][ T31] ? radix_tree_lookup+0x240/0x290 [ 680.630988][ T31] genl_rcv_msg+0x10d/0x790 [ 680.635583][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.640614][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 680.646008][ T31] ? __asan_memcpy+0x40/0x70 [ 680.650610][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 680.656121][ T31] netlink_rcv_skb+0x208/0x470 [ 680.660998][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.665975][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.671019][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.676627][ T31] ? down_read+0x1ad/0x2e0 [ 680.681060][ T31] genl_rcv+0x28/0x40 [ 680.685375][ T31] netlink_unicast+0x82f/0x9e0 [ 680.690151][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 680.695720][ T31] ? netlink_sendmsg+0x642/0xb30 [ 680.700737][ T31] ? skb_put+0x11b/0x210 [ 680.705059][ T31] netlink_sendmsg+0x805/0xb30 [ 680.709846][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.715433][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 680.720675][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 680.726151][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.731642][ T31] __sock_sendmsg+0x21c/0x270 [ 680.736439][ T31] __sys_sendto+0x3bd/0x520 [ 680.741341][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 680.746584][ T31] ? count_memcg_event_mm+0x21/0x260 [ 680.751914][ T31] ? exc_page_fault+0x76/0xf0 [ 680.756667][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 680.761971][ T31] __x64_sys_sendto+0xde/0x100 [ 680.766781][ T31] do_syscall_64+0xfa/0x3b0 [ 680.771279][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.776617][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.782872][ T31] ? clear_bhb_loop+0x60/0xb0 [ 680.787625][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.793640][ T31] RIP: 0033:0x7fb87d390d5c [ 680.798748][ T31] RSP: 002b:00007fb87e1ecec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 680.807755][ T31] RAX: ffffffffffffffda RBX: 00007fb87e1ecfc0 RCX: 00007fb87d390d5c [ 680.815995][ T31] RDX: 0000000000000020 RSI: 00007fb87e1ed010 RDI: 0000000000000007 [ 680.824093][ T31] RBP: 0000000000000000 R08: 00007fb87e1ecf14 R09: 000000000000000c [ 680.832229][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 680.840484][ T31] R13: 00007fb87e1ecf68 R14: 00007fb87e1ed010 R15: 0000000000000000 [ 680.848721][ T31] [ 680.851960][ T31] INFO: task syz.2.2377:15223 blocked for more than 145 seconds. [ 680.860003][ T31] Not tainted syzkaller #0 [ 680.864990][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 680.873914][ T31] task:syz.2.2377 state:D stack:26920 pid:15223 tgid:15221 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 680.886148][ T31] Call Trace: [ 680.889583][ T31] [ 680.892634][ T31] __schedule+0x1798/0x4cc0 [ 680.897248][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.902273][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.907581][ T31] ? __pfx___schedule+0x10/0x10 [ 680.912541][ T31] ? schedule+0x91/0x360 [ 680.916844][ T31] schedule+0x165/0x360 [ 680.921093][ T31] schedule_preempt_disabled+0x13/0x30 [ 680.926773][ T31] __mutex_lock+0x7e6/0x1350 [ 680.931458][ T31] ? __mutex_lock+0x5bb/0x1350 [ 680.936461][ T31] ? genl_rcv_msg+0x10d/0x790 [ 680.941231][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 680.946335][ T31] ? stack_trace_save+0x9c/0xe0 [ 680.951489][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 680.956918][ T31] ? radix_tree_lookup+0x240/0x290 [ 680.962213][ T31] genl_rcv_msg+0x10d/0x790 [ 680.968687][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.973574][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.978692][ T31] netlink_rcv_skb+0x208/0x470 [ 680.983454][ T31] ? __lock_acquire+0xab9/0xd20 [ 680.988514][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.993721][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.999253][ T31] ? down_read+0x1ad/0x2e0 [ 681.004032][ T31] genl_rcv+0x28/0x40 [ 681.008403][ T31] netlink_unicast+0x82f/0x9e0 [ 681.013184][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 681.018754][ T31] ? netlink_sendmsg+0x642/0xb30 [ 681.023795][ T31] ? skb_put+0x11b/0x210 [ 681.028505][ T31] netlink_sendmsg+0x805/0xb30 [ 681.033423][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.039029][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 681.044000][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.049796][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.056700][ T31] __sock_sendmsg+0x21c/0x270 [ 681.061588][ T31] __sys_sendto+0x3bd/0x520 [ 681.066276][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 681.071403][ T31] ? count_memcg_event_mm+0x21/0x260 [ 681.076963][ T31] ? exc_page_fault+0x76/0xf0 [ 681.081695][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 681.087180][ T31] __x64_sys_sendto+0xde/0x100 [ 681.092180][ T31] do_syscall_64+0xfa/0x3b0 [ 681.096862][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 681.102085][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.108227][ T31] ? clear_bhb_loop+0x60/0xb0 [ 681.113083][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.119176][ T31] RIP: 0033:0x7fe109590d5c [ 681.123616][ T31] RSP: 002b:00007fe10a47cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 681.132371][ T31] RAX: ffffffffffffffda RBX: 00007fe10a47cfc0 RCX: 00007fe109590d5c [ 681.140862][ T31] RDX: 0000000000000020 RSI: 00007fe10a47d010 RDI: 0000000000000005 [ 681.149086][ T31] RBP: 0000000000000000 R08: 00007fe10a47cf14 R09: 000000000000000c [ 681.157280][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 681.165629][ T31] R13: 00007fe10a47cf68 R14: 00007fe10a47d010 R15: 0000000000000000 [ 681.173846][ T31] [ 681.177012][ T31] INFO: task syz.2.2377:15224 blocked for more than 146 seconds. [ 681.184997][ T31] Not tainted syzkaller #0 [ 681.189943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.198745][ T31] task:syz.2.2377 state:D stack:26248 pid:15224 tgid:15221 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 681.211010][ T31] Call Trace: [ 681.214294][ T31] [ 681.217381][ T31] __schedule+0x1798/0x4cc0 [ 681.221920][ T31] ? __lock_acquire+0xab9/0xd20 [ 681.227039][ T31] ? __lock_acquire+0xab9/0xd20 [ 681.231916][ T31] ? __pfx___schedule+0x10/0x10 [ 681.236964][ T31] ? schedule+0x91/0x360 [ 681.241217][ T31] schedule+0x165/0x360 [ 681.245597][ T31] schedule_preempt_disabled+0x13/0x30 [ 681.251069][ T31] __mutex_lock+0x7e6/0x1350 [ 681.255817][ T31] ? __mutex_lock+0x5bb/0x1350 [ 681.260686][ T31] ? genl_rcv_msg+0x10d/0x790 [ 681.265550][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 681.270692][ T31] ? stack_trace_save+0x9c/0xe0 [ 681.275718][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 681.281099][ T31] ? radix_tree_lookup+0x240/0x290 [ 681.286574][ T31] genl_rcv_msg+0x10d/0x790 [ 681.291086][ T31] ? __lock_acquire+0xab9/0xd20 [ 681.296045][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 681.301130][ T31] netlink_rcv_skb+0x208/0x470 [ 681.306079][ T31] ? __lock_acquire+0xab9/0xd20 [ 681.311033][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 681.316263][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 681.321730][ T31] ? down_read+0x1ad/0x2e0 [ 681.326341][ T31] genl_rcv+0x28/0x40 [ 681.330368][ T31] netlink_unicast+0x82f/0x9e0 [ 681.335253][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 681.340657][ T31] ? netlink_sendmsg+0x642/0xb30 [ 681.345652][ T31] ? skb_put+0x11b/0x210 [ 681.349898][ T31] netlink_sendmsg+0x805/0xb30 [ 681.354989][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.360589][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 681.365882][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.371589][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.377139][ T31] __sock_sendmsg+0x21c/0x270 [ 681.381942][ T31] ____sys_sendmsg+0x505/0x830 [ 681.386972][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.392260][ T31] ? import_iovec+0x74/0xa0 [ 681.397006][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 681.401690][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.407515][ T31] ? __fget_files+0x2a/0x420 [ 681.412420][ T31] ? __fget_files+0x3a0/0x420 [ 681.417464][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 681.422784][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.428523][ T31] ? rcu_is_watching+0x15/0xb0 [ 681.433396][ T31] ? do_syscall_64+0xbe/0x3b0 [ 681.438436][ T31] do_syscall_64+0xfa/0x3b0 [ 681.443113][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 681.449372][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.455977][ T31] ? clear_bhb_loop+0x60/0xb0 [ 681.460693][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.467449][ T31] RIP: 0033:0x7fe10958eec9 [ 681.471987][ T31] RSP: 002b:00007fe10a45d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.480810][ T31] RAX: ffffffffffffffda RBX: 00007fe1097e6090 RCX: 00007fe10958eec9 [ 681.489011][ T31] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 681.497236][ T31] RBP: 00007fe109611f91 R08: 0000000000000000 R09: 0000000000000000 [ 681.505582][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.513657][ T31] R13: 00007fe1097e6128 R14: 00007fe1097e6090 R15: 00007ffeaee8ebd8 [ 681.521845][ T31] [ 681.525214][ T31] INFO: task syz.6.2383:15244 blocked for more than 146 seconds. [ 681.533061][ T31] Not tainted syzkaller #0 [ 681.538154][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.547184][ T31] task:syz.6.2383 state:D stack:26120 pid:15244 tgid:15243 ppid:13363 task_flags:0x400040 flags:0x00004004 [ 681.559173][ T31] Call Trace: [ 681.562548][ T31] [ 681.565717][ T31] __schedule+0x1798/0x4cc0 [ 681.570688][ T31] ? __lock_acquire+0xab9/0xd20 [ 681.575862][ T31] ? __lock_acquire+0xab9/0xd20 [ 681.580719][ T31] ? __pfx___schedule+0x10/0x10 [ 681.585861][ T31] ? schedule+0x91/0x360 [ 681.590217][ T31] schedule+0x165/0x360 [ 681.594495][ T31] schedule_preempt_disabled+0x13/0x30 [ 681.600140][ T31] __mutex_lock+0x7e6/0x1350 [ 681.610676][ T31] ? __mutex_lock+0x5bb/0x1350 [ 681.616417][ T31] ? genl_rcv_msg+0x10d/0x790 [ 681.621235][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 681.626627][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 681.631978][ T31] ? radix_tree_lookup+0x240/0x290 [ 681.637487][ T31] genl_rcv_msg+0x10d/0x790 [ 681.642035][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 681.647397][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 681.652482][ T31] ? __asan_memcpy+0x40/0x70 [ 681.657524][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 681.662933][ T31] netlink_rcv_skb+0x208/0x470 [ 681.667959][ T31] ? __lock_acquire+0xab9/0xd20 [ 681.673042][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 681.678266][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 681.683774][ T31] ? down_read+0x1ad/0x2e0 [ 681.688603][ T31] genl_rcv+0x28/0x40 [ 681.692642][ T31] netlink_unicast+0x82f/0x9e0 [ 681.697621][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 681.703004][ T31] ? netlink_sendmsg+0x642/0xb30 [ 681.708182][ T31] ? skb_put+0x11b/0x210 [ 681.712436][ T31] netlink_sendmsg+0x805/0xb30 [ 681.717359][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.722887][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 681.728122][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.733718][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.739225][ T31] __sock_sendmsg+0x21c/0x270 [ 681.744040][ T31] __sys_sendto+0x3bd/0x520 [ 681.748612][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 681.753650][ T31] ? count_memcg_event_mm+0x21/0x260 [ 681.759090][ T31] ? exc_page_fault+0x76/0xf0 [ 681.763784][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 681.769325][ T31] __x64_sys_sendto+0xde/0x100 [ 681.774261][ T31] do_syscall_64+0xfa/0x3b0 [ 681.778988][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 681.784269][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.790506][ T31] ? clear_bhb_loop+0x60/0xb0 [ 681.795245][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.801164][ T31] RIP: 0033:0x7f72bbb90d5c [ 681.805892][ T31] RSP: 002b:00007f72bc9bbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 681.814659][ T31] RAX: ffffffffffffffda RBX: 00007f72bc9bbfc0 RCX: 00007f72bbb90d5c [ 681.823090][ T31] RDX: 0000000000000020 RSI: 00007f72bc9bc010 RDI: 0000000000000003 [ 681.831206][ T31] RBP: 0000000000000000 R08: 00007f72bc9bbf14 R09: 000000000000000c [ 681.839301][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 681.847399][ T31] R13: 00007f72bc9bbf68 R14: 00007f72bc9bc010 R15: 0000000000000000 [ 681.855951][ T31] [ 681.859013][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 681.868370][ T31] INFO: task syz.6.2383:15245 blocked for more than 146 seconds. [ 681.876803][ T31] Not tainted syzkaller #0 [ 681.882042][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 681.890853][ T31] task:syz.6.2383 state:D stack:27688 pid:15245 tgid:15243 ppid:13363 task_flags:0x400140 flags:0x00004004 [ 681.902910][ T31] Call Trace: [ 681.906424][ T31] [ 681.909529][ T31] __schedule+0x1798/0x4cc0 [ 681.914108][ T31] ? __lock_acquire+0xab9/0xd20 [ 681.919473][ T31] ? __lock_acquire+0xab9/0xd20 [ 681.924354][ T31] ? __pfx___schedule+0x10/0x10 [ 681.929341][ T31] ? schedule+0x91/0x360 [ 681.933780][ T31] schedule+0x165/0x360 [ 681.938073][ T31] schedule_preempt_disabled+0x13/0x30 [ 681.943882][ T31] __mutex_lock+0x7e6/0x1350 [ 681.948526][ T31] ? __mutex_lock+0x5bb/0x1350 [ 681.953340][ T31] ? genl_rcv_msg+0x10d/0x790 [ 681.958159][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 681.963269][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 681.968556][ T31] ? radix_tree_lookup+0x240/0x290 [ 681.973936][ T31] genl_rcv_msg+0x10d/0x790 [ 681.978593][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 681.983797][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 681.988868][ T31] ? __asan_memcpy+0x40/0x70 [ 681.993471][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 681.999029][ T31] netlink_rcv_skb+0x208/0x470 [ 682.003896][ T31] ? __lock_acquire+0xab9/0xd20 [ 682.008821][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.014159][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.019494][ T31] ? down_read+0x1ad/0x2e0 [ 682.023911][ T31] genl_rcv+0x28/0x40 [ 682.028137][ T31] netlink_unicast+0x82f/0x9e0 [ 682.032992][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 682.038538][ T31] ? netlink_sendmsg+0x642/0xb30 [ 682.043730][ T31] ? skb_put+0x11b/0x210 [ 682.048095][ T31] netlink_sendmsg+0x805/0xb30 [ 682.053007][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.058481][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 682.063647][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.069511][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.074961][ T31] __sock_sendmsg+0x21c/0x270 [ 682.079954][ T31] __sys_sendto+0x3bd/0x520 [ 682.084779][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 682.089843][ T31] ? count_memcg_event_mm+0x21/0x260 [ 682.095511][ T31] ? exc_page_fault+0x76/0xf0 [ 682.100662][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 682.106386][ T31] __x64_sys_sendto+0xde/0x100 [ 682.111492][ T31] do_syscall_64+0xfa/0x3b0 [ 682.116264][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.121517][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.127704][ T31] ? clear_bhb_loop+0x60/0xb0 [ 682.132755][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.138966][ T31] RIP: 0033:0x7f72bbb90d5c [ 682.143559][ T31] RSP: 002b:00007f72bc99aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 682.152389][ T31] RAX: ffffffffffffffda RBX: 00007f72bc99afc0 RCX: 00007f72bbb90d5c [ 682.160565][ T31] RDX: 0000000000000020 RSI: 00007f72bc99b010 RDI: 0000000000000004 [ 682.169109][ T31] RBP: 0000000000000000 R08: 00007f72bc99af14 R09: 000000000000000c [ 682.177332][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 682.185705][ T31] R13: 00007f72bc99af68 R14: 00007f72bc99b010 R15: 0000000000000000 [ 682.193907][ T31] [ 682.197245][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 682.206903][ T31] [ 682.206903][ T31] Showing all locks held in the system: [ 682.215081][ T31] 3 locks held by kworker/u8:0/12: [ 682.220359][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 682.230534][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 682.239550][ T31] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 682.250760][ T31] 1 lock held by khungtaskd/31: [ 682.255788][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 682.266161][ T31] 2 locks held by getty/5623: [ 682.271106][ T31] #0: ffff88814e1630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 682.281130][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 682.291959][ T31] 2 locks held by kworker/u9:5/5875: [ 682.297457][ T31] #0: ffff888024da6948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 682.309046][ T31] #1: ffffc9000430fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 682.320948][ T31] 3 locks held by syz.0.2367/15188: [ 682.326303][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.334496][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.343735][ T31] #2: ffff888024da2a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 682.355090][ T31] 2 locks held by syz.0.2367/15189: [ 682.360372][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.368763][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.377923][ T31] 2 locks held by syz.5.2368/15192: [ 682.383443][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.392045][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.401650][ T31] 2 locks held by syz.5.2368/15193: [ 682.407160][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.415786][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.424954][ T31] 2 locks held by syz.5.2368/15194: [ 682.430254][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.438701][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.448146][ T31] 2 locks held by syz.5.2368/15195: [ 682.453526][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.462053][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.471695][ T31] 2 locks held by syz.3.2376/15218: [ 682.477241][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.486582][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.496153][ T31] 2 locks held by syz.2.2377/15223: [ 682.501539][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.510810][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.520436][ T31] 2 locks held by syz.2.2377/15224: [ 682.526128][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.534641][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.544784][ T31] 2 locks held by syz.6.2383/15244: [ 682.550394][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.558983][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.568153][ T31] 2 locks held by syz.6.2383/15245: [ 682.573437][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.582081][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.591180][ T31] 2 locks held by syz-executor/15250: [ 682.596649][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.605324][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.614727][ T31] 2 locks held by syz-executor/15252: [ 682.620172][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.628689][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.638458][ T31] 2 locks held by syz-executor/15266: [ 682.643841][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.655811][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.665126][ T31] 2 locks held by syz-executor/15268: [ 682.670700][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.679416][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.688632][ T31] 2 locks held by syz-executor/15286: [ 682.694357][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.702794][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.712444][ T31] 2 locks held by syz-executor/15296: [ 682.717926][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.726470][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.735827][ T31] 2 locks held by syz-executor/15298: [ 682.741539][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.750302][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.759791][ T31] 2 locks held by syz-executor/15311: [ 682.765247][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.773808][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.783287][ T31] 2 locks held by syz-executor/15313: [ 682.788878][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.797570][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.806992][ T31] 2 locks held by syz-executor/15331: [ 682.812832][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.821387][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.830750][ T31] 2 locks held by syz-executor/15341: [ 682.836432][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.844965][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.854166][ T31] 2 locks held by syz-executor/15343: [ 682.859853][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.868552][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.877981][ T31] 2 locks held by syz-executor/15356: [ 682.883574][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.892342][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.902126][ T31] 2 locks held by syz-executor/15358: [ 682.907700][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.916799][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.926170][ T31] 2 locks held by syz-executor/15377: [ 682.931674][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.940109][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 682.949541][ T31] [ 682.951918][ T31] ============================================= [ 682.951918][ T31] [ 682.960989][ T31] NMI backtrace for cpu 0 [ 682.961002][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 682.961015][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 682.961022][ T31] Call Trace: [ 682.961028][ T31] [ 682.961034][ T31] dump_stack_lvl+0x189/0x250 [ 682.961053][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.961066][ T31] ? __pfx__printk+0x10/0x10 [ 682.961087][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 682.961104][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 682.961120][ T31] ? __pfx__printk+0x10/0x10 [ 682.961136][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 682.961154][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 682.961170][ T31] watchdog+0xf93/0xfe0 [ 682.961187][ T31] ? watchdog+0x1de/0xfe0 [ 682.961204][ T31] kthread+0x70e/0x8a0 [ 682.961219][ T31] ? __pfx_watchdog+0x10/0x10 [ 682.961233][ T31] ? __pfx_kthread+0x10/0x10 [ 682.961247][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 682.961262][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.961277][ T31] ? __pfx_kthread+0x10/0x10 [ 682.961290][ T31] ret_from_fork+0x439/0x7d0 [ 682.961303][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 682.961316][ T31] ? __switch_to_asm+0x39/0x70 [ 682.961329][ T31] ? __switch_to_asm+0x33/0x70 [ 682.961341][ T31] ? __pfx_kthread+0x10/0x10 [ 682.961354][ T31] ret_from_fork_asm+0x1a/0x30 [ 682.961375][ T31] [ 682.961380][ T31] Sending NMI from CPU 0 to CPUs 1: [ 683.112495][ C1] NMI backtrace for cpu 1 [ 683.112514][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 683.112531][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 683.112540][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 683.112567][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 49 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 683.112580][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 683.112596][ C1] RAX: a9e845b07a40bd00 RBX: ffffffff819683f8 RCX: a9e845b07a40bd00 [ 683.112607][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b06ab RDI: ffffffff8be33f00 [ 683.112617][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 683.112628][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa2ee30 [ 683.112639][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a57b40 [ 683.112649][ C1] FS: 0000000000000000(0000) GS:ffff888125d3d000(0000) knlGS:0000000000000000 [ 683.112661][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.112680][ C1] CR2: 0000560e46c22000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 683.112696][ C1] Call Trace: [ 683.112702][ C1] [ 683.112708][ C1] default_idle+0x13/0x20 [ 683.112724][ C1] default_idle_call+0x74/0xb0 [ 683.112742][ C1] do_idle+0x1e8/0x510 [ 683.112765][ C1] ? __pfx_do_idle+0x10/0x10 [ 683.112793][ C1] cpu_startup_entry+0x44/0x60 [ 683.112813][ C1] start_secondary+0x101/0x110 [ 683.112832][ C1] common_startup_64+0x13e/0x147 [ 683.112857][ C1] [ 683.113578][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 683.285573][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 683.294785][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 683.305115][ T31] Call Trace: [ 683.308597][ T31] [ 683.311710][ T31] dump_stack_lvl+0x99/0x250 [ 683.316574][ T31] ? __asan_memcpy+0x40/0x70 [ 683.321345][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.326650][ T31] ? __pfx__printk+0x10/0x10 [ 683.331261][ T31] vpanic+0x281/0x750 [ 683.335247][ T31] ? __pfx_vpanic+0x10/0x10 [ 683.340015][ T31] ? preempt_schedule+0xae/0xc0 [ 683.344907][ T31] ? preempt_schedule_common+0x83/0xd0 [ 683.350404][ T31] panic+0xb9/0xc0 [ 683.354135][ T31] ? __pfx_panic+0x10/0x10 [ 683.358555][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 683.364041][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 683.370220][ T31] watchdog+0xfd2/0xfe0 [ 683.374496][ T31] ? watchdog+0x1de/0xfe0 [ 683.378853][ T31] kthread+0x70e/0x8a0 [ 683.383024][ T31] ? __pfx_watchdog+0x10/0x10 [ 683.387893][ T31] ? __pfx_kthread+0x10/0x10 [ 683.392514][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 683.397751][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.403054][ T31] ? __pfx_kthread+0x10/0x10 [ 683.407761][ T31] ret_from_fork+0x439/0x7d0 [ 683.412379][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 683.417606][ T31] ? __switch_to_asm+0x39/0x70 [ 683.422466][ T31] ? __switch_to_asm+0x33/0x70 [ 683.427323][ T31] ? __pfx_kthread+0x10/0x10 [ 683.432019][ T31] ret_from_fork_asm+0x1a/0x30 [ 683.436801][ T31] [ 683.439978][ T31] Kernel Offset: disabled [ 683.444407][ T31] Rebooting in 86400 seconds..