last executing test programs: 1m12.585449006s ago: executing program 2 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1c000000190081054e81f782db4cb904022008000300000000000007", 0x1c}], 0x1}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x38, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xab}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1m12.236137465s ago: executing program 2 (id=1655): socket$netlink(0x10, 0x3, 0x8) 1m12.097818538s ago: executing program 2 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x2e, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x58, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x22}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x1e}}]}}}]}, 0x58}, 0x1, 0xba01}, 0x810) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r11 = socket(0x10, 0x803, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r13}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r14 = socket(0x10, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000c40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1828000003000000000000000200000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd0000000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r15, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01"], 0x3c}}, 0x0) 1m11.784900618s ago: executing program 2 (id=1662): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x4, 0x6, 0x500, 0x7, 0x200000}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000b40)={{r1}, r3, 0x16, @unused=[0x1, 0x9f7, 0x4, 0x3], @name="e63767d266095ac0fdaa155ed298e5057b06f63e75119c7eb7d94b7de3825a9e10153a10ef71bf2526a6af05da788b500add612bd8e8321aba48d717613a6683f48b457edd8ab682096353307ff718bc838c1f21a722b9fd62de5ed6e754b71b74184ab424efb2e6a239dab1d59b461f49e049366882b4d6e676a41324acd603f4b17b72dfc5f8e0310803675d95cc36e66d0267a9d269d087b3e70e3dd654c2c08e24f9c0bc07fd2fcaa7d6b8b0cc802c3e9c94e3a363d3c08598f55ad0668df3f315d7d0c45cd57de9e1dcd606f393084169e09b5f65ac20ca7116c0910eeaa4e9a489d9d65fe63c48c31ea8d56c2bcf91720e029d2ec2c7f220b24e811330c2a35fed50cd02d157d411aff5cbd7d0c835262703cd4a898b6fb3c02c4a845f66643837767efcb33c286f3521f0e6e3a7f9b1d8577b10e58aa88b797924b201c1b30494dcea062162adb62590369cf1b687cb401222bf7005e1f7ed3723cb340a3bd9e2e9a7a29de7917147906bad544dffc8394e4c8f9d5ef3486828c249cede3a2a8dee178dbf56fa6d9c7acecb6031860b2a34ae798a00de291bc4a236eef339a4dedc08093f7fd0712e106918a75fa9bb102b876296d5d2e072af0df989adcecfc7111cea9c7d2731f2413faf46dda8f3490b6036bd5bf78c9e03556fb18995e57457b17d4b4a21d73dc632c9497b57263b2cc31fb1d5cfec1ae9388a8d51221389d96540a904b36ee501aca18d427e8fcd1a1d68d0ab42a6d701e117aae21d2dde1d004a05907ed9d182606cf6d565feca703276e2171fc46408695bbdc855a9a995c541ae29858159c08b1cabcd1d120ec68046203e94adc9b44ebf83281d5a324a6ce3bd1b1b3fc9851c28473b007a4ff485265976330f55caeb0abd698810b7ab0d71b5430ef923e0b31353ab3f660376203148072d12ced6e151bfec7705e8b4ea3182ed540ea912dc5fba7a135a4b0095056c1edda75883c7848dbfaa5edfffde6e04cfb084b60ef52c426af6043849c6f2d013213a569e1742a3f8591bd30f034067c65f5ee933d08b561e8bfd8f47c18105ff323014141af48ad7a051e6f833c04e7b7da5a5cbb6b9b6ccedb6f62d3d38012e9ca9c9b6673995805756609277f3e5b98d1f7ddef57420ec4cfec93d83ac6ad001949963914b11df7aefd8a0d018b22bda3d6c3975952a4e3b63ab46c48709a14a37cfdbd3bbde4f2d0a63dbc9529df45044a2958b1e88b84f455dff94f56f2ccedb6b130a7b8fab7337f1cdf1396281e6693045b0ceb1b61b606733bcf2fb5dcf87734793b4d407b0d342ed7c4294f5be53a30473d20847b8b7170a745a3763e44145cdde1169f654f544f3a233edfe902537c3311cd28c87e4ac2b8f7bcdf81718ac7858c40a7c9584f24fd78548cb80bdb4256978742a03834f81888e4145ef7a228c6abf7f8fc269d997500100d57061407e2cc2543393b07d6d5ac996215cf054b2c43f66859bb5c71217d9b528608feb0865ae163d74a161c0c8354fdd452b23d34ea6feb5d2c1567abbcff78ca73f5bcc2ddac76905b51b9bc082ed8218f427a5c402e64c62c53d10876d8cbc1030397b7d60fe5ddefa25814399fde09b284684ac3601a6e62e625d4a9a86ed06a05ecc800051f5a93da82343d35081464a719aa16d970660c4f62d746a1c81de2847fe643e82f11abe9ac3349d8128a38707f1c4f7fb25a2ea0283ee317652a2aec762f5254c6970a3eaca19fcaa210de5ef23cdee865a9c3f8fb99d45bfdbf13af9608cac704ae398fa13801f8d76de4e9495772965eb2feb3739b30a7c9554998dfeeb253992ea0e6a6f9dbd1fde7dc8e40802ba81fe9172b05bdc5e9946a512ff4adf07aa5d8ad3ff8e05e8edd762b62d034a09a6705847b165012ffbae3b2f5ff45fa4c589b3610817fbc1ce29bdbc5475c0b7b267baecad4f5c0efd6b27bdbfdd5e7bced40258f27a49889c2965d9e6a0b512e156b33e8d9d7529538a0019063bf9cd224da5af6be50ab56b8882a004ef1891e0cce482de793bf6fe2abfb384e62fcbbcd26a0b0abab57e0c67b8ae041bb9428eaffc7d996315d191d16d461c930f4caf4a6affea97795d5e442e0ec2d1dd85d1bfa16271db037c7e908a3e2b9ff17fa5a1ba04734bac99a38e6264828c1560b3201e2586775615154bc9815308687f711da246f6ac94ea6e60d79a666b0f541b8d882f010da28bbcaf03b48c1525d54609e33e9e40d7a956b15f528b570fea8440e17d23d6134eb46d9417dc967bbf33a9f3a8c939f34375eb295dbbcab3de3488f38df95919fc973e8afd3a803715eb4617375a0719f2305a5b7c70831dc5006a89ca6b0a54feb1fdb851e14c4fcc5056f815ff55d2c40698b624ec54e1f783f40efb2927b5024213c7dd6c31cadffae581001d9efc2978161ee75848e916181e97a81c9228413a1d97f22a817cb8a06daa22ffddfd12b22df9b4cbc9c911f39578cd5d3532004a65e58cdb42d12f7a7bfd4a85b5ae53fec4dbfcd8cc0d88860565b131e8b6c91a82b7aa62e6cb9752cedfb8e9ba14d73eb8d2d17317ff63a41308a5cae4dd0b3d110f9efc5c915cbe8c3072f91a094cacca95f3d85a04ab30e34972f73b85968448ec58b217037f3567d9dc91a4f6a0c492bc29ac53c0e1aa63952be27c446fd9c984b75ca6efed711f965dfc961638da14076f063d3bb9147db9c8933666b339d66d5ac7508ac8228b3e895870f341d614b4e5542c56f53ca99da97a0185ce7341c716184bf9a7813656161325e8832cffd01b532de87d46b5d22f4f79adfa94a0d4dec4b7c3b8ea1b768a23651bc46ba0f67e92df945e0f54ac37bf7406509db34600efc597ec5e9845e4b368ea9d88cc05e97cf3d3b1fb5efddcc4c1abad7ebe785fe30897c95bf111706be666c330d330bbc51c2959474f4b791cfe8ca6a9abffef648264afae0f13f23c44413c4f6c20d170d9e1621b60eea24efd9788dd3608c093c9daa94debe7bcbea4d52824e7ad6ee4c878b7a0538c5f53e7b90beb8e140f3114d231fe4da98cd77767b3d0b063ea236cfb0b7af94e976b9f21d3e8dec994852b1381c3f7bb57086ae0bd649828f8b1d63a0f08030861606cbea7af6b2b907cd0eb8a9f305167e36e44fab99c9f83e0cc2a2d2f75c34f702c2180c1b6fd0a9c8b43d3c35eed2c37696cdd54f01c4461e27cc42274e5e2947764ccc223f1d8cbe2ace4b40769ab8d92380de953d73355d1bd1ae16d936e0c686a2cb14faa721a47d2ce977d5e1a7bc0ea24c49da5d0a8cc1eb0e8f3992d029328a0e0c7c55b3d42d5c9c6f2714b561a113fd4a35fcab92e93574527dd71286e448ca135f8fb1342095bdd19ab7357fd51954db832e18ca05261aeb29c19a5756defabdc920f55af5fcb857f0c761a68bff7c4be6087263178774506f27470b582a4c5df4f5f46b4c8ba97ab6c48b274ebcd9d7ed1a1ee89d743650d6ab3938d01650650f1db10b5567076e2e09906560c83396b94d8e33db196ed355b33e328dd1ec43e54fc2ad0b99b4cc5d2c0e68665fc94c9260348d74457507d2680629d1ca6b3c14ae494ecaa9f5061fd3e5387b93ae07609460521d7e88d52b0e3ad1261ab4fb069ef7e4e783e503784a694f5ec962c816bfda003c4198469acae9428ba7fc4987b6a886b8408cb5e7dbd921e579441d745583bd1a0e41d722a30bf5d6baef21aa44f8f501af2ef8a0c91d9130ccc59a71e75efe7f404badbf56f3503aacf53c51715e9246aad52bf2307000b389dc2dc97582c7e09a71ad1f92974a60e69a3c3aec4098be0278758f92fb8b2f1d210e5b1bf392717e41b864dba4649fdc904a63e646bc932242e4dca285768b6264cb3bfd5a3896cf6c303423381bf62f8124d7ac6ecb66eafe397c132aa4adbaecf2728776825dc33959b5c3e5f075a4dda5d5dab2f5b59084f0cd42feb435b803fdcbafcbacffbb3a358c35daa122f68a50c068616f1ab7718dfb99352f20d1a48ee344abca87ca8b31487f4d3b575ad4d298c0888e4d788787196e31801060f6fe1dddd4c0530a77cb1411234f6ea1ab833af113ae7b654eb871eb7c3f86a5401c94df9214c6afb5f83f918f94340bd1c031a39bcc1b58b8119f671301f276f6df896bfe207d552a1eced259a28ac19658737d49a0248cf998c1c4f4485e6e20c038e67f39de2254e65c9219dfc3f920709e1c4014283f5fec6faa5b797df4a813788cb05bd2ae1d7cb666f9dc4576202dec314850355f276d0795c9b41b626b772d4a1f7652db4b6d60c32e72cefa08e1e876f2b31e074df01e30fb34bd5f8cbacfe4c35079ebf15b9bf68bdeca861d130b8cbb2113f729583f2c9b4b79568d339e4eac3c78799ac74129cbb3010d1589ceb5e1b7543c96d86d56d7b38b10977732dd4e0cd3c28059ff2f98134a7bad1bac571c9f7a480097aef949aee31cb90c179b53211d044a69c6bcbca24a4b9056bb9cc489a8bbb32e42a8d0ee5da6c3f8700ba3d81db39f52dc78a99eb9fec07e8631e2b670fa0b11ea97f43f2bceef0abe072a63ae66642c3bddcadaf34d8fdb0521db80d90d2af5af6a334aac99839267ed0abf5473ed0f4362fa86267330f994d71f0706b7ca1fad3667bd6621a3e9936ef938eaa70c36ff9ed03aaaa59ea6537de2cd78cb50db005c4e5d9fe00863fdec1964316fbfa2dbc2959b015da9e0a116915682bcd0cdfe216d17412f51490065c541e080375d7b6748816b0a8b64d00d1a032776b316da6bde797dedff981145384f7a9d864cac43575d5868c67d41f5c2f3ad58b34dacede3cdcb5e7968bb68041c5aa47d9ccd79aa6c956d6d897488fa6de89e823602fbdbdd73feca839b67574c5423fd0b9d8fd4283932795cb90889e140953ab8c11e08ba0fa0ecde5c5af235c0e8c51f230de762e0c7421a0bc1a5a5c8ed2ed607b80d4180335a24baa746a2309f056a973f0e67467e59c535f3b926181c857c665664fd0d1d42ca5592f79c5c30c688e1f6d8f27efc7a2756ed1f1dc5e44fce0bf3e73e98db65c78cd2a7c0ffddb1ad7d1a3c1246b06096703df031a3814c2f4d273c138fa961126d616273f490299724e80db28d614d4d7a58b5faa107ed4ee3452b53f3d671a8beff737cee62d413da08eead7376dfe80f04085646c88da48da77814acd523865205463cef9ea45f3438bcbe43d86174f576992813740cacc958c513c322910bc810b572d77355d36fdebedcea898899397d1ebb88eb0c6a5275336f48d0b9bc2a07056db3c0ff29e859314335acbc993578fa6c8dc18064187cbcca8fa9d369a55ef2c2aa0356e582b45a578d209a15c18f30ef6de3cd4803681d6c0e1a76d9c0e9dbc6d9b77f61f51ff51eebcd9bd8fc484978966742b120e63604c16df7382e8150bd842a007b9bc6deda7c18b67af9686380de2ad35117a064d8abda52c8837afd54a580908f8247bd6286b0a305e98c68792bbebfc6cd9c9573d4314ae0ac7381a0a1ad4eecedc37fc5f9828cd52691bcfc384f3dd47018568e9d7bdacdc4187839b6066b59671332896246c5c49cf35bc8f9b05ca280a14ffddd952171eabab879a84ad1881401ea301e4e877108e223dce98a8a304f3e482cbada2199ee71bc99491f27b8bda9c28bc80f4dfba1fcfaa2b6671eac17cc16fca1bf15780149855510fb6e4dedb2d94227ed234"}) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="2a40040008440000300012800b00010067656e65766500002000028005000c0001000000140007000000000000000000000000000000000108000a00", @ANYRES32=r5, @ANYBLOB="b85135aef6ac7e790569e87773fd25adb1c6c1460307"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m11.27438287s ago: executing program 2 (id=1664): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0x60) socket(0x2, 0x80805, 0x0) accept$nfc_llcp(r0, &(0x7f0000000300), &(0x7f0000000140)=0x60) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x73, 0x80801, 0x10001) r1 = socket$tipc(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00'}) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x44}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl(r4, 0x8916, &(0x7f0000000380)) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket(0x22, 0x2, 0x23) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="140004006e696376663000ffffffff00000000000800050008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) syz_emit_ethernet(0x56, &(0x7f0000000380)=ANY=[@ANYRES16=r5], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRESDEC=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m10.727525844s ago: executing program 2 (id=1669): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) unshare(0x6020480) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000080)={0x6, 'ip_vti0\x00', {0xd2}, 0x5}) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x40000) 1m10.321876873s ago: executing program 32 (id=1669): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) unshare(0x6020480) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000080)={0x6, 'ip_vti0\x00', {0xd2}, 0x5}) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x40000) 20.703439472s ago: executing program 3 (id=2044): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) r1 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x101}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x30) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4326e408, 0x4, 0xffffffff, 0x4000, 0x1, 0x6028, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x7, &(0x7f00000005c0)=@raw=[@tail_call, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x6, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7], &(0x7f0000000a40)=[{0x2, 0x2, 0x1, 0x2}], 0x10, 0xa}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109000, 0x0) close(r10) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0x9, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x401}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) (async) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000680)="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", 0x129}, {&(0x7f0000000500)="050000005bcffe6c14ab9a3831573d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1edb46e28c6b1902fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06", 0xffffffffffffffdb}, {&(0x7f0000000240)="d21e96a9f6be3d72e3f91fa2db455d6b88df49377d7988389bd1ecc97042b565d013ec3fcee93a43afdf71b3751d0f53e4ca87fd4b71713fcc3b729c601778385e68ae4e55370c965ca8189dcf4f4e8c70fc343965f9c540163a19215f1d988f1bf6b6f57ce74575d0a1223da74c72adeed27d968bfdcd14597ebe90fc5167cbc1f5856d6b387bc5c419db52f682bcf13ce9e1d6110291bce668", 0x9a}], 0x3) 20.439111826s ago: executing program 3 (id=2048): r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b', 0x1}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x281, 0x5, {0x77359400}, {r6, r7/1000+60000}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "1568c9276b7f8801"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="db000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250900000008003900e306000008000300", @ANYRES32=r5, @ANYBLOB="05003700000000000500350007000000080039000600000008003a00030000000500330001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f000000c940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x28004044}}], 0x2, 0x4000000) 20.426203773s ago: executing program 0 (id=2049): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x4046814}, 0x2404c880) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'vcan0\x00'}}, 0x1e) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) socket$pppoe(0x18, 0x1, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) accept4(r1, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x4046814}, 0x2404c880) (async) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'vcan0\x00'}}, 0x1e) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) (async) 20.313341845s ago: executing program 1 (id=2050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) sendmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000003400)='?', 0x1}, {0x0}], 0x2}}], 0x1, 0x20000084) (async) r2 = socket$inet(0x2, 0x3, 0x30) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="176b0db5d25446463f74d3740a70f6e0249ca79eab579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e", 0x60}, {&(0x7f0000000700)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9b859dc1b8a2ecca66132bd68a90f03f10f1fb3b2d7c3ef20dc1074a4ab268b17ab3ea31489aead9ab69a3b779e83c259279904a6ef330e637c994178ffc1922e96", 0xb0}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) (async) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000000840)=""/190, 0xbe}], 0x2}, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000080)) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 20.224829194s ago: executing program 1 (id=2051): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x438, 0x3f4, 0x400, 0x70bd27, 0x25dfdbfb, {0x2, 0x2, 0x34, [0x9, 0x3b761fa3, 0xfffff800, 0x1, 0xc8, 0x80000001, 0x3, 0xfffff87c, 0xe, 0xff, 0xecf, 0x2, 0x0, 0x8001, 0x7730, 0xffffff63, 0x400, 0x5, 0x8, 0x0, 0x0, 0x6, 0xffffffff, 0x2, 0xcc, 0x10, 0x8, 0x3, 0xc, 0x457, 0xd, 0x1000, 0x7fffffff, 0xbf0d, 0x20000, 0x1, 0x6, 0x9, 0x8, 0x5, 0xf6, 0x6, 0xd6, 0x1edb135d, 0x5, 0x3, 0xfffffff6, 0x2, 0x7, 0x7, 0x0, 0x8000003, 0x8, 0xffff, 0x3, 0xa, 0x8, 0x66, 0x1, 0x8, 0x6, 0x4, 0xe, 0xe5e], [0x200, 0x9, 0x2, 0x7fff, 0x0, 0x1, 0x40, 0x10006, 0xfffffffb, 0x7, 0x4, 0x8, 0x2, 0x3, 0x60120c76, 0x7, 0x800000, 0x4, 0x4, 0x4, 0x81, 0x6, 0xfa, 0x3, 0x81, 0x8001, 0x9, 0xffffffca, 0x5, 0x1ff, 0x4, 0x7, 0x200, 0x6e, 0xb, 0xcad9, 0x8, 0x7, 0x4, 0x5, 0x10000, 0x5, 0xdaa, 0x0, 0x6, 0x2adf, 0x0, 0x81, 0x1, 0x1, 0x1, 0x1, 0x80, 0x1, 0x400, 0x7ff, 0x6b50, 0x1, 0x2, 0x7f, 0x9, 0x2c, 0x9, 0x7fff], [0x0, 0x7, 0x10001, 0x2, 0x10, 0x9b, 0x1, 0x2, 0x0, 0x8, 0x47f, 0x7, 0xbff, 0x6, 0xaf, 0x239edf6b, 0x89, 0x3, 0x5, 0x7, 0x8, 0x100, 0x80000000, 0x6, 0x5, 0x0, 0xffffffff, 0x5, 0x9, 0x81, 0xffffffff, 0x3, 0x38000, 0x1, 0x6, 0xe254, 0x19, 0x3a1a, 0x0, 0x800, 0x881, 0x40, 0x2, 0x8, 0x8, 0x5, 0xfffffffc, 0x9, 0x1, 0x8, 0x6, 0xf, 0x7fff, 0x81, 0x3, 0x10, 0x10, 0x2f9, 0x5, 0x6, 0x48, 0x7ff, 0x7fffffff, 0x5], [0x40, 0x200, 0x200, 0xfffffffb, 0xfffffffd, 0x7fffffff, 0x1, 0x2, 0x0, 0x8, 0x3, 0x6b02108b, 0x7, 0xff, 0x5, 0x7, 0x85, 0x7489f470, 0x60, 0xf, 0x80000000, 0x6, 0x1, 0x10, 0xca12, 0x6, 0x7, 0x8, 0x2000002, 0xfff, 0x1, 0x1, 0x5, 0x6, 0x8, 0x7d, 0x4, 0x8, 0x401, 0x2, 0x2, 0x2, 0x1, 0x1, 0x5, 0x9, 0x2, 0x9, 0x7ff, 0x9, 0x1, 0x10000, 0x2, 0xbd, 0x3, 0xa0, 0x0, 0xe9df, 0x8, 0x184dc94a, 0xfff, 0x5, 0x12, 0xa], 0x17, ['vlan\x00', 'vlan\x00', '@&,\'\x00', '\x00', '\']\x00', '@%!\x00']}, ["", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000b00)={0xa, 0xfdfe, 0xfffefff7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x8}, 0x7, 0x0, 0x2, 0xf, 0x25, 'syz0\x00', "a11ffcbf1f7fb8b535a0cb6543b89e4b119cf834fa2818bfbbc372d3437005f6", "fa109367f61369632a91395dda6b5ec1f352918a3a960d47a34ab369ee80b8b0", [{0x45f, 0x5, {0x2, 0xfffff5e0}}, {0x88c2, 0x60e, {0x0, 0x7}}, {0x7, 0x2, {0x0, 0xa0c}}, {0x3ff, 0x1, {0x1, 0x2}}, {0xb, 0x9, {0x1, 0x2}}, {0x3, 0x8ca, {0x2, 0xc000}}, {0x0, 0x81, {0x1, 0x10000}}, {0x5, 0x8, {0x2, 0x8}}, {0x2, 0x8, {0x1, 0x6}}, {0x8000, 0x400, {0x2, 0x5}}, {0xb9a, 0x7f, {0x3}}, {0x10, 0xfff3, {0x3, 0x7c745e24}}, {0x8000, 0x83, {0x3, 0x1}}, {0xd, 0x8, {0x1, 0x3336cf4c}}, {0x328, 0x0, {0x0, 0x5}}, {0x1, 0xff75, {0xff631663b720b3cd, 0x2}}, {0x9, 0x2, {0x3, 0x5}}, {0x0, 0x7fff, {0x3, 0x6}}, {0x1, 0x1, {0x0, 0xfffffffe}}, {0x9, 0x8000, {0x2, 0x4}}, {0x98c5, 0x8000, {0x2, 0x1}}, {0x1, 0x3, {0x3, 0x7}}, {0x2, 0xf329, {0x0, 0xda7b}}, {0x7ff, 0xfff1, {0x3, 0x800}}, {0x8, 0x5, {0x0, 0x7f}}, {0x7, 0x401, {0x2, 0x13ad}}, {0xf, 0x3, {0x2}}, {0x6, 0x1, {0x3, 0x100}}, {0x0, 0x4, {0x2, 0x5}}, {0x8, 0x2, {0x1, 0x4}}, {0x5, 0x0, {0x1, 0x3}}, {0xf811, 0xa999, {0x3, 0x8}}, {0x800, 0x1, {0x0, 0x5}}, {0x9, 0x25, {0x2, 0x3}}, {0x101, 0x7, {0x2, 0x7}}, {0x3, 0xc, {0x3, 0x4}}, {0x10, 0xff, {0x0, 0x1000}}, {0x4, 0x7f, {0x0, 0x5}}, {0x6, 0x1, {0x0, 0x2}}, {0x8df, 0x5, {0x2, 0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000100), 0x4) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r12, 0x80111500, &(0x7f0000006380)) setsockopt$inet6_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000000400)=@gcm_256={{0x304}, "f27b606ed7d138a2", "3f045c6f0300000000e8ffff8367cdfa97e88c6ee37f000ef3de00002000", "61ded5ac", "e9c53676f7f0e0dc"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x908b, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 19.907133189s ago: executing program 1 (id=2052): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xffffffff], [], 'macvlan0\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x7, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2c8) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000714010000000000000000000500600004"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20080, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000340)) 19.751972534s ago: executing program 1 (id=2054): unshare(0x6020480) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$rxrpc(0x21, 0x2, 0x2) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r0 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000)) unshare(0x26020480) 19.663345787s ago: executing program 5 (id=2056): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x5, [@remote, @rand_addr, @rand_addr]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000)="f0e2b8ca91d83d7bf1086a077092fec7b5f52041ced3edef7fe74a62cde53d27ddab3c47bb92729c1c1573e378961e2b3acfaa49319cf1208237a51dc6b515eaa83b3bf95c042b2b253810356d7a48f429934a58ce01efca95e9", &(0x7f0000000080)=@udp6=r1, 0x1}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x6}, 0x8) 19.492925929s ago: executing program 5 (id=2057): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010025bd7000dfdbdf2524000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24048844) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r4, 0xffffe000) close(r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000ffdb00005c00000008000300", @ANYRES32=r6, @ANYBLOB="08006b00f000000008006b003700000008006b005a00000008006b001c02000008006b006e00000008006b003c00000008006b003c00000008006b003600000008006b00f000000008006b005a000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x801) 19.490328539s ago: executing program 3 (id=2058): r0 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r0], 0x28}}, 0x802) 19.277616393s ago: executing program 3 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x77d7e4b11f267ee1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'veth0_vlan\x00', @broadcast}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x12) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff00004824ca945f64009400ff0325010e00"/56, 0x38}, {&(0x7f0000000300)="cb19f81a4e809d9d4f73dab00e82e481394817f37643439369db7d955ad0b945", 0x20}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r3 = socket(0x10, 0x1, 0x6) bind$can_j1939(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00800000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYRES16=r4, @ANYRES32=r4], 0x40}}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f0000000100)={@remote, @dev}, &(0x7f0000000140)=0xc) 18.858786209s ago: executing program 4 (id=2063): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x2018, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x76, 0x64, {{0xd, 0x4, 0x0, 0x32, 0x34, 0x66, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x5, 0xa, "4fa99d789c18df64"}, {0x0, 0xe, "d746d246e8b90cfdc73b9aa3"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfc}]}, 0x70}, 0x1, 0x0, 0x0, 0x2404c000}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x0, 0x2, 0x0, 0x2, 0x2, 0x3}, &(0x7f0000000300)=0x20) pselect6(0x40, &(0x7f0000000340)={0x5, 0x4, 0x5, 0x9, 0x9, 0xfffffffffffffd60, 0x10, 0x50}, &(0x7f0000000380)={0x2, 0xfffffffffffffff8, 0x80000, 0x2, 0x5, 0x9, 0x2, 0x999f}, &(0x7f00000003c0)={0x8001, 0x80000000, 0x4, 0x1, 0x3, 0x3, 0x8000, 0x2}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x5]}, 0x8}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0xa, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x68}}, 0x20048010) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = socket(0xb, 0x4, 0xe09) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r7) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000780)={'bond_slave_0\x00', {0x2, 0x4e20, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000800)={'sit0\x00', &(0x7f00000007c0)={@remote, @rand_addr=0x64010101, 0x19, 0x12}}) preadv(r9, &(0x7f0000000940)=[{&(0x7f0000000840)=""/67, 0x43}, {&(0x7f00000008c0)=""/76, 0x4c}], 0x2, 0x9, 0x1) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000980)={0x21, 0x4, 0x1, 0xb, 0x0, [@dev={0xfe, 0x80, '\x00', 0x30}, @rand_addr=' \x01\x00']}, 0x28) syz_genetlink_get_family_id$team(&(0x7f00000009c0), r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000a00)='9p_client_res\x00', 0xffffffffffffffff, 0x0, 0x4d}, 0x18) socket$inet6(0xa, 0x627bb70ffa7cd545, 0x4) connect$can_bcm(r7, &(0x7f0000000a80)={0x1d, r3}, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x114, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8001}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x7c, r11, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r8, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88}, 0x4040014) socket$vsock_stream(0x28, 0x1, 0x0) 18.725637866s ago: executing program 4 (id=2064): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, 0x0, 0x10000) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000080)={0x0, 0xea60}, 0x10) read(r2, &(0x7f0000000240)=""/60, 0x3c) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xc, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x61, 0x5f, 0x0, 0x5f, 0x30, 0x61, 0x2e, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000080)=""/50, 0x34, 0x32, 0x0, 0x5, 0x10000, @value=r3}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, r4}, 0x94) 18.599653569s ago: executing program 5 (id=2065): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000007c0)={0xffffffffffffffff, 0x2, 0x2, 0xfff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0xff, 0x7, 0x1, r1, 0x0, '\x00', r0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x42000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r4, 0x400454e2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 18.465437716s ago: executing program 4 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000203030000000000000800000000000008000100010000000dc470e6a039fdbb20ad28a40d7dec60d1b5e9821658655163be8cfed15f6a57d7c88bc2f3366124c6bfc84906b5bfd724eb8a1abcc0dbf29cb4cbdbb3a2b37b573b7acbb672ebbc692c"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000980)={&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/37, 0x25}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000300)=""/162, 0xa2}], 0x3, &(0x7f0000000800)=[@cswp={0x58, 0x114, 0x7, {{0x3, 0x2}, &(0x7f00000003c0)=0x7fffffff, &(0x7f0000000440), 0x4041, 0x5, 0xffffffff, 0x5, 0x11, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000540)=""/109, 0x6d}, &(0x7f0000000480), 0x17}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000005c0)=""/173, 0xad}, &(0x7f0000000680), 0x64}}, @rdma_dest={0x18, 0x114, 0x2, {0x81, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0xdfa3, 0x3}, &(0x7f00000006c0)=0x1, &(0x7f0000000700)=0xb, 0x8000, 0xfffffffffffffffa, 0x6, 0x7, 0x51, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000740)=""/67, 0x43}, &(0x7f00000007c0), 0x2d}}], 0x158, 0x12}, 0x8095) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40440c0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@remote, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000740)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_lookup=0x24}, 0x94) 18.328827933s ago: executing program 5 (id=2067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x62, 0x7, 0x1, 0x0, "d920b0fb38f1293c67471cb00ca11db57fc74f0c2bfa303cb71233ed3cdc6ff6f0c677baf3a625d69af9e36812f12fccf4ca4805d7521429fe6fd9130f83d560be0fcb53034315f4b097586e9e8f20cbf912fc58456c4c1c03f9b6fb4384"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0xc0, 0x18, 0xa, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x370, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "7e9c549e1ac9e1312357dfefb5427ce3f443f134dec49384f988c049da237f62a61e58e3e0ccb39a651ce62cf4ce563401f3974cff951e8aa7a191305b75b498d7433d9a7189719e253c5e2dab06b3177afe68bc36da612a92738f22acec99fbb0a34f37896d14eeb4b41f167e785c7fffbc8d533b211f1a3b5649002c93426faedafc133409208729cf9d72501675bd75816f0ef52d862bf2f12895de9bb60b9c6cb6de9c2320a12431caec5f0b79e3149c5127fb2c1166b58090aea54e350c8ba4be21c1e8663cd8e44032926f8a2f98d8b68995f260f24e5e94dd11c3ee23"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xd3, 0x6, "c4ad50437d2825e7da7cbb049f6526a039a62d50bfb1331e4bfcec1bd8618f48aebd4ff962a6452cb3d7fc33c2d6345d419a2ccb6adf86f12381dc9a389c6f6eabbdda2297f07d5adfaf7a5460702648f902716caf90577cd0ddf9787726c139f5f8bc62c1959c9856791640dff3f0f4e9f55983ae9454d1b8492a1b8f54abede06f4302d272ec41c8de1e85578c6b02d51d4c620775225d514bfa978502e0ffcfa6f625316265f376eba06c0712b8427ab3e62d7dafe4909140f7815c903a73bfa1b81cac09543446241d74291093"}, @NFTA_TABLE_USERDATA={0x7f, 0x6, "e13881412b557d07232335d1020cfbbb427e6c8596cf9940789867dbc481d707950a3f63ef6d48ce459b3a2283f8e43590efced11e272f1d6c4e9ca1788c5a4ddbfb0da5db28792e991b60b09bbae3eb194e30cc3d189601019a0c322b57a44d969eb03005223a369af4988dc1730c8641078793e2fd83463ddf18"}, @NFTA_TABLE_USERDATA={0xfa, 0x6, "e3d8f0425a6255aaba4cacbe9cd67f70d2dd94984ac5a45d8d93128643f2b9f378452f58bcc3e833e61dd41e17328edc9101244d9af1fac946c3500fb56dd80927f5d2ecdb8c8e5e9a211ce180921cc4ef82a6704c1dd9243d69187f97d088a251a497a6201f8db7ab36e9c08ea842581fb3ece31a5840dec2f72b25319abd09535ca296d0a9104ffa9bfbb97e4ffd3882826dbf97edb5fe2049060b2c82e5121bdfd6ad4457b6fa0875d1f10802fa8732d4428b24546ab25218bea618865ac1b9bb3129a1123108a0c49da49dc0035c8cbb4a2a5d85ba3dda8271842020c4fe8f635eada3c59ada5195c71db7979bf4328e41c8105d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x414, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0xd4, 0x8, "6dfada0d521add8c752d881f6ccb7479f22ff0212acd13e93efd9d24b25d6e9c5ce90960a68721e5e80033c7b7b8a14a325c02d587610b8ecc72d80eeda1e9fa1e970d56ce1cf9ccd9153469de1b67e4779a101377ac04ba9755e279faa24acf7b37c645204d05fafd981ddb86e771e2fa223cace66c46fd032ea0ad4e837d19f2c178ec84a4166e376e92755bfdbc4cdec0fc9930adeea24fa1ed928bc729569f1c5ec72a530a356aaf6dbaa0e5d72f5a3a347f79c73723d2667ef9859db811c83181a9f00fdc8e6c40639f31842632"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x6f, 0x8, "56b198cb084c222a94a9a305f564a2ef8524a13ac756be419c643feca28057891e2596aad88f6efc751a85453431c2c327cf9cd096b429c9e5b9b78f86f6c53fa4ac453f6b1fa227e9796c5e0c49182115aa90a9e4a495b1ac8fd30dca2ba2f248e0ca368245e33b6ae462"}, @NFTA_OBJ_USERDATA={0xe0, 0x8, "244bc0a03a8243fa958122d2cae3be0bfbc697696d328f8ce49d15af6b7026037cb95ebd87b19b460788287e954b659cd129ed650f9b9c2aeebd960607f635c7ff94626cfd4eb3446797ae31f7e345b23fb30c70f75d3c89227e2f66056c760efd886e00044a837915c2f1a12163b67c070b77a8b5e77fc93915e8bbee2575ba105bd47650a416657687071fa11fd3d3b09bae20df02084b7f6a487e2be2bc106cc9f5a95e5433346e40a99324a54b11e0eb6525dc797f77e7b071c2a11b87ad88f5587b5409d6c7b04d63ecc85eb75a5ede99a7125553042779e1f1"}, @NFTA_OBJ_USERDATA={0x62, 0x8, "2a65af2976e176b320d32f1d74496d398d259940fc77707939fb97bcb49fc2a47c20f18e85c1efa4ac98eb3bf3559d3def915bac110d7ebf1f6fef951c7998228173ced817adca8616e23227dea5c6ebbbbf5c38fc5296549b56a3380686"}, @NFTA_OBJ_USERDATA={0x58, 0x8, "23ba96ab3a70d5512ee40bfd7c11c56048222f041470dde7fc0e2f44363d7e8a8f1c7cc784e1f35d80df82913cb030efc012c62042ceb23af920fd3820a26b23e0a74c574e648173765d399472e9d5c45419d6a8"}, @NFTA_OBJ_USERDATA={0x100, 0x8, "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"}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x12c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x103, 0x6, "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"}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0x86, 0xd, 0x1, 0x0, "967eec4021141b38ebb8e753182e527c6e5519d64a9eb39b17f4fdc729632d01dcf4c023098d1b93e93f978eb79173ac4e26e97885594cdb2996bf48b3955532404cf4a7f6181115a08306ca5387df6690c3118682a7ecfa60d72cd7be0b5e93dfdb9d4b161c7049e95a5707530269e25385f032bb42e778711bc4753a096f66383d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb40}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) (async) socketpair(0x2a, 0x5, 0x4, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000c40)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000d00)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000d40)={r3, 0x7f}, 0x8) (async) bind$inet(r2, &(0x7f0000000d80)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000dc0)={r3, 0x9}, &(0x7f0000000e00)=0x8) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), r1) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000e80)={0x21, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @private1}]}, 0x30) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000ec0)={r4}, 0x8) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001000), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000010c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], 0x0, 0x8a, &(0x7f0000001180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x2, &(0x7f00000013c0)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000001400)='syzkaller\x00', 0x7, 0x67, &(0x7f0000001440)=""/103, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x3, 0x6846}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0xd, 0x8, 0xd5c1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001580)=[{0x3, 0x5, 0x9, 0x7}, {0x1, 0x4, 0x2, 0xc}, {0x0, 0x2, 0x7, 0x6}, {0x2, 0x5, 0xc, 0x9}, {0x1, 0x5}, {0x4, 0x1, 0x5, 0x4}], 0x10, 0xfffffff8}, 0x94) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x3, 0x3, 0x4}, 0x50) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x19, 0x9c0, 0x0, 0x8, 0x2301, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r5, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)='%ps \x00'}, 0x20) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001900)={0x0, 0x5, 0x8}, 0xc) (async) r15 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x12, 0xfffffff7, 0xc7e, 0x8, 0x41, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) (async) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001ac0)=@generic={&(0x7f0000001a80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x18, 0x6, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xb0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000f40)='syzkaller\x00', 0x7, 0x52, &(0x7f0000000f80)=""/82, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2, r6, 0x8, &(0x7f0000001040)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x5, 0x9, 0x5, 0xfffffffa}, 0x10, r8, r9, 0x2, &(0x7f0000001b00)=[r10, r11, r12, r13, r14, r15, r16, r17, 0xffffffffffffffff, r18], &(0x7f0000001b40)=[{0x0, 0x1, 0x8, 0x89b90822fa9726f2}, {0x2, 0x5, 0x10, 0x6}], 0x10, 0x3}, 0x94) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r19 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), r15) (async) getpeername$packet(r15, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001d00)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000001d40)={@dev, @initdev, 0x0}, &(0x7f0000001d80)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0xb8, r19, 0xa14780ea2cb34d39, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$can_raw(r9, &(0x7f0000002080)={&(0x7f0000001f80), 0x10, &(0x7f0000002040)={&(0x7f0000001fc0)=@canfd={{0x3, 0x1, 0x1}, 0x15, 0x2, 0x0, 0x0, "86422f01e396cb0bc8093b969d1393b942a989c63bf4da99e0769ac0b5a7fac7b6716e391031b6d33d49392cda617006aea44c36716f32c003fc4c30a792e8dc"}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 18.281833276s ago: executing program 4 (id=2068): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x104}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x80, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWTABLE={0xec, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x55, 0x6, "70a1331ce60624c53be651ad64acf5ec930e55f53fd748ea847da448504845d78f318cd177febc298aa6bf36dc3070f8e6bbc0e0c68e21ca264cabfe1f5791a15d9042c6d9f91404260b08170c35b3a7af"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x28, 0x6, "0ea49caed2aae87ba88bb960d938829e8fb7a646affb95eb9263602778ecf866e1dfcbac"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x210}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@const={0x8, 0x0, 0x0, 0xa, 0x1}, @volatile={0xe, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x0, 0x30]}}, &(0x7f0000000380)=""/80, 0x37, 0x50, 0x0, 0x3, 0x10000, @value=r2}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.memory_pressure\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40054}, 0x4000) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000600)={'security\x00', 0x39, "85d6d7ffa49f2ef10f0f44b47e2a0345113cd67870b51dd081af7d25f298859756391c868d7256da4f21cc8472d0af2da790f0208f526eab96"}, &(0x7f0000000680)=0x5d) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000740)={{r3}, 0x0, 0x10, @inherit={0x50, &(0x7f00000006c0)={0x0, 0x1, 0x1, 0x6f, {0x4, 0x6, 0xc, 0x5, 0x800}, [0x7]}}, @name="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"}) syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$sock_netdev_private(r4, 0x89fe, &(0x7f0000001740)="f4940ca3542ffbd95c29968f24778de6eaaead4b8df17320238c6dcc065b94391cf1d484ac9b07350716d9") ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001780)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000017c0)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@loopback}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000018c0)=0xe8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000001900)={0x0, 0x3c, "201bd1e4aa2cba9cc47bd1845774c383cfc4112342349b655fb7827c1c6d2456e2a53d28fde7b9afa082301b68a8f8a8930af5f5aced15b77b94de02"}, &(0x7f0000001980)=0x44) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001a00)={r6, 0x38, &(0x7f00000019c0)=[@in6={0xa, 0x4e22, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e23, 0x8001, @remote, 0xa6}]}, &(0x7f0000001a40)=0x10) connect$802154_dgram(r0, &(0x7f0000001a80)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000001ac0)={0x3, 'veth0_to_team\x00', {0x6}, 0xf}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001b40), r4) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x30, r8, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1b, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008840}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r4) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x20, r9, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x8}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, r10, 0x8, 0x70bd26, 0x4658, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x797d3f66eebf94d0}, 0x8040) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$l2tp6(r4, &(0x7f0000001ec0)={0xa, 0x0, 0x9, @empty, 0x1ff, 0x3}, 0x20) getpeername$packet(r4, &(0x7f0000001f00), &(0x7f0000001f40)=0x14) 18.184913223s ago: executing program 5 (id=2069): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000400ffff14000780080012400000000505001500020000000500010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x24}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}], 0x1, 0x48800) recvmsg(r7, 0x0, 0x0) poll(&(0x7f0000000400), 0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xe, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f0000000140)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 18.055612922s ago: executing program 5 (id=2070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x200}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) 18.008936469s ago: executing program 4 (id=2071): socket$phonet(0x23, 0x2, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffff74b}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) 17.949082479s ago: executing program 1 (id=2072): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1412, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc0d4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa0c0001}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@setneightbl={0x24, 0x43, 0x200, 0x70bd2a, 0x25dfdbfc, {0xa}, [@NDTA_THRESH3={0x8, 0x4, 0xb49}, @NDTA_THRESH2={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xd}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004011}, 0x20008800) socket$inet_icmp(0x2, 0x2, 0x1) r5 = accept(r2, &(0x7f0000000400)=@rc, &(0x7f0000000480)=0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r6, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x6a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000891}, 0x8001) pwritev(r1, &(0x7f0000000b80)=[{&(0x7f0000000640)="cfe1b2ee766038fa4edd00212672ddf9a8a7b8efad506b09138596c87172cfbdfc05a80af74578c8b6ea0286a4363f099d511f85ba34c3fd5c04669b53c119551c6748c568ffa7cc44368e2c923803e3ce7a73da6820d57a44c8bb3d412d3976a53f50758b0273683e71ba0825e54a821414150cd4a4f31f44559091c91d4ccd4368431ea282dfe8e8e40f2b474143cb132b9aac2f4f65d7629215a9a34f6de297e2fb57f26c5c31d6d5fe21f5cb00a874dbb42e886e98cc6577a224f3e75f4766c252bc667ba78e9c79c2d538dbb78ab47c9d63b1e1da7bce206044145faf4fda286478a8abd262c0b61dc1b3dbf8c3cbf182312a2b79d6", 0xf8}, {&(0x7f0000000740)}, {&(0x7f0000000780)="1010924fa8c9ecb75dd2579f08930f7d336c56ed9f048d3fc4a996a507dbd799d40445f6303a5256a26618fe355ae2a37084f4afc3efd7e776a05c5070a52ac24b5a1b8ee374890b90d5b2367eb180d7", 0x50}, {&(0x7f0000000800)="3f24561e293048f5e4dedad226789acbe12dd925e4e576e0acd4fc8a01fd95d80101724ca315b41b8915a9bc9a786f342635d4fbf8ab799fafa68edace988e59e497a4a5c8e6ad9f34cd34e3b66e6c31ef764bda4c651b1c46e44bb9fa4513aeb02791f2d7b7e43d571b88b5d100e9f46563e6311f0f76371eee87d06954f9b77ad78a9cdf05ad28878afe50d36069f994fef7c8b7b2fa5bd608d24ba579c58ddd2854c73a4c7cb628acc6b4fb3f22ca3140fdf3db40411a0ba3a580cdf9811abea05a96e59c7b82988f0f598bfbd7d335ee59d82dbd0bbc4aafd886fecacc183188f2881b", 0xe5}, {&(0x7f0000000900)="fa9ee2a1ce26ca10928c6c9750a67f427a5bb41369c9a101630bd49bb69686335e34eead0dcfa16e97", 0x29}, {&(0x7f0000000940)="57237f26f505044caf1f204183d0db2991eef9fb7675456e5abffa9a810cf8b7c46bcc9f1e10b9e0fba316c153acef09bef5077d064bf950f323b4f5a1aaffa44c942be42e61606ce6993ce6a5cadf6bb0c7aae3d7832679f271ea53ff26b2946640f555f75f416eff5314fe0971378b253e53ccc8afb7a51d369762fb997a0c7bc7ee9137b3d13f939e739593412d462d8e148c707fac21b98710a888341ac1246b2352b54aa192b4a3b3fd7e5fc96b8ca7a5b9bd30", 0xb6}, {&(0x7f0000000a00)="1560436c7a07d53e7439f5456dc8eb1015af537099a03bb2a98b2b1c8ec437354ea5f57ca9319e5b7d741847bc52be9a91f2bc92c3b798112798264cd6d00423795cf0aa2cf88cf989ed263bf2436ce17a268f0d9bbbda7b01ba242dd0dd9e20b4651771bd2331cbf807f731d157e8dfdeb4aa5e70e4e02d64c81c10c33b7c2b56bea4a4c736fb9994a83efbb7cbd1228009f41af8c829d595890fc2083486e580651e147ef0c45126a756b7d30e28768749ec54717255aa1a5b7f6ba11bdbe76f873b34de6d2f379ede03725689863dac907cf99f3e42f32966235f6c9687ae", 0xe0}, {&(0x7f0000000b00)="0bdf1b7aac49ab5b71bc38a767cc36c1cf1927f27808a97a6d3dff73929e9819606591e87b03dec3a8440001e2d9ccda1bf717e6dbeb9cc17f43be9b4b7a0f4451676257edac046134efda69b1fbdb821dd1716bebd8349dc50d704dfdbc5b23fc8fb7", 0x63}], 0x8, 0x40, 0x3) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000c00), &(0x7f0000000c40)=0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000c80)={0x0, 0x4, 0x1, [0x5, 0x6, 0x3, 0x5, 0x80], [0x9, 0x8, 0x7, 0x6, 0x7fff, 0xfffffffffffffff4, 0x9, 0x5, 0x4, 0x2, 0xd0, 0x81d4, 0x1, 0x4, 0x8, 0xa9b750a, 0x8, 0x0, 0x5, 0x3, 0x1, 0x1, 0x7, 0x8, 0x3, 0x12000, 0x9, 0x7, 0x280000000000000, 0x1127b33, 0x100, 0x8, 0x7, 0xb9c, 0x6, 0xfffffffffffffffe, 0x5, 0xfffffffffffff001, 0xe, 0x5d, 0x5, 0x0, 0xdc, 0x3, 0x100000001, 0x800, 0x4, 0xb5, 0x80000000, 0x9, 0x7, 0x1ff, 0x3, 0x800, 0x645, 0xffffffffffffffc0, 0x526, 0x5d0, 0x6, 0xbb4, 0x2, 0x80, 0x1, 0x5a6, 0x400, 0xffffffffffffff76, 0x400, 0x0, 0x37bc, 0x5, 0x6, 0x7, 0x5, 0x6, 0x5, 0x8000, 0x7, 0x8, 0x5, 0x4, 0x200, 0x1ff, 0x8001, 0x3, 0x1, 0xf, 0x7fffffffffffffff, 0x10001, 0x4, 0x8, 0x1, 0x4, 0x0, 0x6, 0x6, 0xfd0, 0xffff, 0x2, 0xbd8a, 0x9, 0x7, 0x6, 0x100000001, 0x4, 0x8000000000000001, 0x1, 0x3f6, 0x0, 0x40, 0x5, 0x7ff, 0xc4d, 0x1, 0x80, 0x8, 0xfffffffffffffff0, 0x7, 0x1847, 0xbe70, 0x8000, 0x6]}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000010c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x10, 0x3fb, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x22008880}, 0x0) bind$inet6(r5, &(0x7f0000001240)={0xa, 0x4e21, 0x8f, @empty, 0x1}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001280)) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmsg(r7, &(0x7f0000003580)={&(0x7f00000012c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001340)="9de42d33f7dc46b0e28f9b8f0d61e8057ac0396ffff832b7ec41af5c6ed6d937e552590d8b8938c9affb54638030e88acca75a4847a7e2e990e700033176e5c53037fd6834f7e0f416090c0e1a1b2868f89dc8bb9c4439556612f1272d22602e44478f6f7b483374cbe913eae3b9e58b853cee6e77430028240c52c55d10479c472ae1d684802533746fb5685e2661ea6b290213f70207f505c5cc8314eb68c7635ad06854efbc30ab4c795a22dc1859bcb1fc56bd63d182b15d71f4fc416d4604a21249555f64011a82d730c0eef1b73e805053601b339de52664bae694863c03c64f4816b0499d2cbfd7824cd3fc2fe36c65c6b81c5e8aa9fd669900c9b32766aa94077660346985726597abf2cf4a830ae51cbbfc6c47cc94cc890afe59f57ca9f50838111f95c7adc2ecc90d9a781d563921ac3d4588d1c28382360135e5d8102d1a47e9ccb34d41af27b4108131b5d704cccc9a999e8d035913b0b6d7ffcf5be6bf87d2268ca0a924a72c70ee6bbe58b576ea41a986c2d1f4c48d6b8dd58e8730cdfc63970999fd1cc2323af18c3539c6cd9944ef1d1f0f0f174e732fdbcd047eab30cc2e3eb8d556645177f2e5b62667daf9f3188724146f65c295c63909612a8c6f2a5eefb15d99200cc7eadee21d290c658ddfb508e6ee13e3c6022dfaa5c5f11de0799e921192c135e4b5ea82d7acf12276db9e4f5e8caec86292b144125f00a104650923a53d93196b8d4b617eaee9495cf815465a5ac12bb8ff36125d0ad9cde665b3817bdbe086afda396a93fd1c88bbfec9bed3b37da742ad317a83fdd44733ee9770b4d65d1273d42e5f5db099f25349e6a3541a0a7218ca1f15e20afca8124b7c2d2893677499bb51c009cae6b8ba8912ce5006927d05a8d3bd18654100220b5982163574f475f55a7de9cf7875df4c28f09a014e3917ff21c333a2fbc57a3805262b1e293376db287996bf1aef6a219550a9fd8386b2a6372c4595e2232c67e47037ff531fa8204c75f7cfa2d06f5282fb0422f73153643109c4f3ad8c8bc15424be4f4d3a44b06e56fdb8bcf425d67e635e94a6ad9dab1944533f01e0dea687eac9b8af8ae0bc4f6240681c6473871666949939d487b191ed74c80348ad5e13981d8a1baf1c703db662b06af401834bd9e536c2750decddffbadb14ccd2592b889656ff51a471919edf4ab5f1a5bd9795d74dd627c69a3bd8f46427fa26bdcf5908ecc5fd42624d29fbfec5f9145a1710f9b29e66ce8f38fbb61102f8d74f50c0913dcfa0177ec629f73a127f46aadc1b05996b762a5bce6aaa03166141929a6aa0c1b55fbb49b4f8c8ff6e965f18c508803ecfdf0a76ab835f5547ec15f7c23f74502af4751d658fe2bc8024cdb32ab664fc8cbead7dafd3a6c5cc056779ec8018c6543122df996bcf928df17ba8e06333d69dc06a207e72d4a8e98922638f54bac2e61ea083613fac2e39f4f966cb9b5a2f7b44501ac5b08dcdd846c262387300b4a501bf6594ae16802d91286266fa87316ee1b2496be27b54ce4a6d9f155c6ca76ba62bf86eb5acabfe8aa870a98914441f62e456b6a3fde0ecba56afe13dd26a6742b411fcb987ddad83f33c0429b4c9177efc7875ab33d4cbac5fc8db93ecd9394d4007f9cbf8d399bef6a00e24730fe5114d48f84927cc81456ddd1b91f163abde4a58bb2b1b44f56aab2835ee84aa34cd29da5e9603c4a780e1db45ee9ce7b3689b5b36b44d460d017527c5134507ce2f9c48db7ef524bda230263541ebd9f102b407fb98a21e3aab528f69868266006c3144a2cd0dca57082a81cf0c825d09139c92991431ef9854aab8b438523e4999c4d7afa7d48f51665cded6039aad4e23659c90bd802f9d4899455e3d95f8e6f966f16e58a2c40db8527c872549d46bb29220a0699b3848f321eb0373f112550952443dc2f4ad8cdc312f5b7242c3ceff1e33b8f70c1a445f416d1675d60b3feef345ff70818a265ae206d421b4cf7934ef3a2ed85b9dc8cc2faba2c1c9ae4f46391d07b3a70ca06b172128a57b72608a83dee6d893ddbd27030572f2dec88a72798531af90423e1c287a823edb49a7763076045a95c9bebbdbf8ec3fa13a4d82f7d356ecc5503ee451c6e7565014a7e5ae6372d3b807a3034d0d423ada574f1b5d8372a59bb97f7c3decfa094838c5bbb5e53c6acc7b60b720ef8a4f4a513c13894815f96979dcad4b6cf729897c32beb62966926455b41f1987953bff276cfca1146f36824c3505c185c67604ea2909d8005d3eea30b5886133e0bafbe695d5d31092751185c16b56b040be36d831f58cb483e9f02ea28642fccab5a1bd081f19e4e445c5e56107c27ae0172a7c0dff5488f316f1af1b4ebd49005c5223b12c7d5b1daa2c2ae8366c45070e6935557a3fa8d2b35fa59748dcc1ab3de99ad445e03a82e4b87f9814d6e442445d460a3e84753fb88d3dc631592ca43708f3c8a4eea521372e60751d83b78bd819da878e89f09f4fbf5f0f348460eb5b663626f52ea6ac9aa03a4c11e1689e339e8636997318ae8eea91232ba473db7eb47c06ef95147c402f73fc419366dd2637febad86fc0fc633f767a51d510803c3057accf0792a85bb722f7e4454ec98014f02921039cac1154bdf787952b0c49dd04575a4d7bcd6a094238e00a303f631704f932676c24c464a9d96b230be992fc8071f5cc3c5c58794294fe6519ff6563f0e06ebbaaa26475622dfa4d21b8760f107573f0c3e096dafe686ecb446e4930bed5434c1ec4b8e2741d0a2170b9f921be3ea8be7c6ac760eb82c9773733ed01b89af37898318efefddfd981ed5a19509c34fe8483e6c142b398a8372e4e59078127b8de1d7d7dd5f72da5c8267855876821c1ab90a4465c5fcb2756ad0567cdc6c0a9d3157e40775e625017535b7dfc28f8af1ea4c83ed028ae4ca527b2b7c85bf33665996e1209ed2fd73a7fa57f608580b1acc6adc2b47e5bcc18bd67d050d83d5a327a6560625b2545f18889a4d8640c86a4764148cbd43935748f355481a3bf0c408ae599e669fa59cf947f8ab45417837a7d668e3e405724d81a34730e2e3f281f33cfc1ad2d61ad86fa55ff8ccfec81822be024b0aa68ef801398bc6038194d734e01cbc69087caa1abff692fc693a854df93d63da3df74ba622eefd152b3ca5c42665bf50272c5c642edd5ab0ad7b4d75ddef7735f05a254620484955d9c88867799d7715e0256f1378aa17cb8ada513fbc7aaa7be2d99ead034e28adde260697e4304ebf4a8a8e802ebee02a20ca0e455f937c00f7238355a98b8c306677c255e5c567c975a0778495ebaaa9100e2dc87d19d737f0bb28fc558bf59e8130aa24b156c22c3b2e02c0418cd0776cd6b01df14069baf6d06ae8fbb272a0efd7f9f52042cdaefffdda9500de9d187925520bdca150ce3ab8dc0adbab7886e2d874476e1a504b9922c35585665cbbafe47bac78f86e3a511a7fb4f7b6af0b5f0f01d2f3c35e2a831fd1a8c5c75c0b89367c840b80a0efe7091fae10e176e29f8fb1578a3f880170f027fa3f42a7042478007b99adf9d8a01d7dfc6a851c58b78935e7ac15359a15a52c30cd813950ad18d4c660e73d5d9cccd9a5f81ba5f51fcfac3d7b4aa1ec5c84f0aa3ca55a1c885a1ddd446a4f06ebd20e01befeda79c95843916e4f734a0e9f4268f73e855f804eb000b1f9f0a143f9135c6a2653cd249deff5905a794a024d4d9071bdf277baabf9a479171ccedea098d316be694c720a1807f1f8b64fd00845a090db84f23bd1c246891d554893ba5055b07d645c5bdf8ef8fcfd4023bbbe60d662c1b3c0820d94df13995235f85aaea9c29a73d081530c12028f2e208ea032f85f353cefc3c95675f7808091bdda68d4fe1de1880c4d4f1aeda9f74085840257a6bc36b85ad72797b06e238d73be81db4170259b06a67b3d67a470cff3787d134c53421b20dfbbe3f9e72fdc290da665cc8394caf5745db4e32d4045da36d799ac9b081f3fa50d957adf14dfe3983b138939ba75593e2e3432f3ca662338462cef09af87f516de2170d585739423e562a130846f1808a6399e290fd0c6a31c9bf671e1dea775cd9c704ad65c13a0fa50deaa5bc0adc143dde4b7d657596d20b79206d89a06805f779b7e09bd63635def2c1d0beb6a0e27a81be0e6caf90b3ef6316b26745a79a7fc12c43540eee4aac652586045013c225625e5b59d640b2af036a301e0b731610d626c3a14f0f9892ebad1e61cc7cdce86c8b53f709f987f69b39b365abd5e591bcc3e782209618ede031f432990cf1e95b210b9bcb0470407319e2bd57f7252f435d5eed1ea733d64c9fb6ea12a32b2bfb74801a2fc0ab67c3d189f1df162086945841d374ee9e4f88b137da79ef10c97d4f2d085d01b927a56204deefd59b9b7e23cdc6a73a124a0a1fb6267012b0e8a36b67f9b18c064a2f3ea913187fcdf1710db86ac9da05914b7ac6701ae43b348d7122722e1044b26f638b6e42acb9e883833ceb239576eefb66c80a1f25a11bdb71ec8084cb5cc552db17c8c3a2a0ee9a21c822ac41c67a91c85284b023a7f48568c0e379e3c852c7444c01ae0fad09b7d42a4944e0cde31ae9fff83eadf3962f618ac1a2d469a2a0a3fc411fe8a1447941e0dc32aefee2fe717e7823a3c5756190c6233d06a37e1afc6efd53735ae223f1446b2076ee0d6a1b57ead288b84557353f67d721d7b8caa06db227a70a8aa3037e9cf8d64dfb49a1ea09b6b407cf6033cd492bb41418ba4c1dbd87ec688bcf5f880544451e6d3ea8bbb44957897116c62fcdfd2f0b47103f4069336cd0ef861669298a8bf26213688a586b5d5a1b244511150d3754a05afbfbba6b6abe92e17fbf21acb1c27c460b0be0012490fd18bf299e1fa7f744df965e475c8d07b92834c826c3c22187d85b2209494e053ad12a1ed58ddd0a85e1b0e63dfc0cfd6ff832ce821e8888d53c6c0157ddc24c8c55353aa0df16ec47048872a06043a46c4d0ffd61f7d8b35c647062b3e10263220387ae8f6ce69d61f8b0d8c320bd2286a1a4e5d51287b208a3a000be101598bc407f4a1babd225f2789b39625de8988e6c1bd78f7670b4c365e8013a2f048f7616f6fa88967fcce834fc0795df9c45c49247b6eee043a2f44aae7fb6ca78d6c4acdbfa5309b5859286206613ab6e86cccf74b34d74300658e6c62a520c5e97cb63073099e936f3b6349d5a6a6e8be3ee7465188604ac86dc5192d674a97b333be10f881c2365d867df4aeafab69dc00e20e685d1d932f1026395bccf590c75ab258f2e79b2c90d50c5816e3a88164076478994e8b0936e5500a821012138418ae11ba5fc93633bf739c8da440397abd00f91215d355604e7aecc9291c6025f80dd3990822c549d05377b39265582f0fd43ccaa5ad032602f2a4b3588e7c7b1a8ee62885eb8dad9794df0a2afcdbe1f4f906bc88efb79b63fdb77937810507ec8f0f6dc7963df12546762292122d04809b8f7d22d379462cb59b2752a38a411a754596af3f484c2bcf0b8abd229245bf9b5f1461bc9f8c2f0aede0a399c64b4de010fdb8a6e4ce9d0f9547851fa17e93acee2a4286f37313c571ea6101e765a432241af443a18c441286f505d611207039b6914cc6141d316109bfe3352400ed6d44fb38301e4790142a4fff03b29fbfbc18eb8b805a52c21b950dad997e23164bc599fa21f0433c851fb628d6be0ca220aa03c51ad55e0810344a8dc689494c390393040042d9ae47d0d14ef1ecebc87b4a5", 0x1000}, {&(0x7f0000002340)="4edb7660598482745bbcc12762a13837dbb842e011883295e437a9dabce4a7e640af16e64f487f721a4a7584ca0ba8a5e7c0bbc84e18f4bcb4bdccd8ee58d451173b77c5c9", 0x45}, {&(0x7f00000023c0)="85f34c9166873f13d4f65a7c317695e85b2ab24b392e7c7ba78c665df177bbe8c2e19b", 0x23}], 0x3, &(0x7f0000002440)=[{0x38, 0x112, 0x4, "34f321fad99e52fb230f4fb8fa8ea856898e0031c96a3aa83c1f65385eb486ac643a"}, {0x1010, 0x87, 0x3, "37d6b4df96bd1e82e7d45a3676aeaaa2d90ddd4b879d28b4073d60c76cf70b4ed2f55f03f227a2eef85b60be13ba48657ad1a6c9d4dfa34ea6e0855b27700c099f1cac3192bc5fb786bdbfcced3f5f7929a2b4a9160b0972f62ffe793adc6dfb9379e116e21f111c529fa0f8ce930d99b4d1034bbc4a51cba531b8ea0212aa6ad66f18c47fb9780a2138e9dec0934c171deb5a07a62841feaacf6e885be0def71b349a0568708528ef1c73f2feef6c8d138237183cc05772730421a6b1ba5d5d9a031914d498e6565521da57ffa1457908127207418f086ba52fc6b21f6051b7a1fde418d75202310e7776b2e21bb1789f9246f703f6a1ce0a077918ad89ed2abd0b8f47f6cc24144a99fdc79b7a4f3f32318ba526b1861644d7823841af4a0e57b70fed26120c749dd736b540bef123380dc341a81b96d92034b27f6524d9bfc0bef3e879191abc13e709f4ab85d11e11a3b715465f1ea18a9ccd5acb21919f880076045d990deeecf871a3792a1897f78f3b70cf9b24b7497458f0d2a82aefcb198d5deb5e6a56ff6e83b34d907e8a35f97ab801d167cdeaa33b2d879dfce0abe17b9437e62d6e998e4d7b9c4affacb3a3e94065bbb5d304657ccc778164c749d4aa99ba74f7332ab6e5322ee450429444ded6f97b7e27066b07299f7f135fc47d973d12ea34f02c60f714ca141c05756dd5d270aba4196d853c40c9ee3e376ceb24ad7e430976c56583aa8e437248557057c9757348cba1b1f6ee3f56621120ceaa8bb318a076017f636a79a8d17f0178b2e88b780d2f84ed903144e8147ab1383e8cace2c3d3f9866d1133ecd13dfaad49cb1808a1f6c822d7b11ac65b09f4c5824ed264e10575e4d3430975c46aad664bfea1854d142c4cc0de9a8579eb8c56932e98728a1c12a9336cab1b0da5c171e3623c8fad113684c9aa245a991da6e12b0d756088ed8aaa70296ce6172583608b91a04159249d980887580a46922695b9cc5f77d80873a45d4b60851a18994d2066e40c409d64e3a1e844d84e27b2ac095e8f7185a05ff04ac8bdec96314a1f843d6553e8dfc09be952f5a90b383a0f733d42f5d49336e1783a2f357c52baa304606dd6b57d7be60b3565eca00c4b6e842b615cca9ded7b08f58f84d06a2393d5eb1abc8445a5c83283caca60727ce590893b8eaa1ca6fb9f734df561b30df82f42824db1cdda729e1b9b20168e4989f53f983c1cec8fc6ea722c69058e3a806ba8ff597a26ddf81d14f353841c22bc537210aefaebec6302019c8ba8b1f850983b492f4caa51c529999185dacd63b4595c7b564bc1f840797530f678abc05ef7716c9302138a58043b4bfd869f25fa64e82aad2f451c0f3b81b271a13d2261068967842e217ccc952ff48b75e63226ab0bc54f623f0be897ee78c26384202c640a2ff63e70439b1dd166b9cd4212c6b4bc2393c2826d0d17859df455bfdb2450d8f9f8c9d8f8b3aeefbb94fdc627653dbed46509e03361183a1ab62e34502a447da6e083d109f4a5a875a3e395e8bbd0e8d54facb0a69ddcfd98e7d0d5df52b80135dfa818a1e33b68628c2dcd9e31a5ae858cc376335e1d2d5e0d696cffa0536ab2e008bd9d86b529c98e7b265ce50c1ec1a0d07ca6416296bdc4d38595d4a4dfeb1edd7ed87c9446eab1065ae936dd451e0d024530bed65c8562c2d47bac8071651d4d14e3cff2933b8cff6d7043accad54e9978f75d9b0db11068340671f8066e78c25c92ddedd5072b5c2e94b68f9efcf1a140cab039404a013036571589e79a736099c4d593bb4912e00a654b39da6bb8e3c91ab3c58ab87ddf50a29e5755fd7cb7601a76946f8fe3877c5595f0b04fd1003d7d55fe0e74d6ac961447cb21cb14026ec3d4495d1368dde1e05988d4ef2c80e2c154bd62940bd42eb56cf8363cbe2e6c4b8fefd1a6a31f0be55390faf70973defa191d6b9ededfe770a39112843b093f5d3e948219fe19b5db83cbb5c67c7ef539a67b45ad9af99fb931d026da45e67544d9c52d611e37506b265ddf6d963a847978f0e23c4b64145219786092cfdadcb7cfd9727d9bf10c5e70ec19ae820adddace421efc401a3aeddcebac234f75777014728e61352d8af059e309b46863aebf94de8a61afdc547e2df2d9ce489cf205f449cac524cf93eab171053ee63459da3d4bc3b1c1bda1685cbca66e6dcb6e211eef10873f1d044a068682032dc2d46f56f846e03120a9dd5b1f57347ef27d091285f39ae9bcdfbdbf5391702d540e565ac3c22076edfd0d4564b7ca2d9cc37ede25231b624de7f469291bc9fe419c7a62158dc6fc63fa2f352b8af2c1e26b91a809d9ff9ca4064cad6166778e1b3da07678ae3848326adf1f017295494d88eade4ef0e8912fe15a8a19a67687f68c1221d65d1432f417a2232793bf15afdc67b5e1526f69190346f7c7feec56460d3bd4fc377fe708f0acb1db9ef9b73fa76390f70bad7867761ff9faac4cf3cc1bb8d3ab305334bbc25e9538ce2792e73c2b54dbc83b6809c68b5b7210e6d08dcdb0dc51ce2c88f94b406b23d6238cfa1828ccd0864fb12f2ee4142691f507e6c3ccbd2ca021f0732375430df5fac58955b15d2cff723d5fb4606dfa1b49d5bebd2d4253cff4ca2014f447a7ee05d1c719e4ea160cd401805249471fd070aef7b6774368dea0fab2ef854cbf2798815e5c130fd2a5704d78b88f20e67b5bf3fe60c190b77eb0ac33b84e18cf2d7b7afddf11e9d38b17162913c467f4f09e152c0fdca741e3fcbdc0e54e52c15665a5f4411c02f37d01333ed96a331e1f9d32f4a9f5852080314e518aa6d80a4c39f695a34ccf571635999ce3747866a21b78ac794ddfd5a5a5a61720a7f020d5f2326911f57e010d4e8a8427e8bc74a665621661b41b361714a07c5cdf03bc04e0c1ad449d894ece6a1d9558bc2c84d1582d6ad5e76beacdc76aeb1c0ad0c04ae16a7f57d83f4b8dd54e7a637c594cc15d5d7348e990e88daf4f91dee25246c863e6c7c4b1770d19f4c45e0bc6664ce5d43a2aa1572fadc7ce92a2e8af06ed8d3e3c1c18d56654f01dbdfffdf60ccec2545b55ceb20b55b3d691f65614ae781af94e710772468351686c8bf077a1aa405bd088543ad5abf40204143758291fbe1e3ad9aaed02ca5d4549a5b44e786e8b54a7426ea4328fb97a642e6d0f95bd11e07f9e8552ff5e1f1cd5559e38083e82da55333519c57d8f5f68047b0376eafcec690097589ccfbe37d58871abc197965ce8bf7c32cbdb153f42a1274a105034bc143e7d16966ea6812ea3c254a702a85b27cfe81899c1ceb6720e410a97cb7e8898d4cd65df7698452ee00b16047d0d3eae86382a836f9ec29110d9f8b528745445999f9cc55923f5b8151c3a54632d98f0b378a0024539a2ee109e76ea3c6f72cf53536d28b6fd78fdc086fdd598e29524ffe9d5010775e190e175400301c887deb0072cde0bc8f0364657c40ec9c2f0b80c9e4ac616781c888180371f8fb01122e96d3e50e180f582565d7e78f9906d15f051ee56e06b58f8392b000e9f070cb303557d77d70006f21cbe8ef5111904dedf5f160a7d0ecb4f8ea3b70735b9fdd835451fed5094a6897bc8e3f76788111878dd3e9980cb7cf7bad7c46c17fd3c512adc7e2649dc497d1c0b5b692fed66b0be340237169ff5d3b84a9a5ff43c9ef0ca1bb76fb0f768525682b97139e6f7351222ac3b841c3f5d4f88fc37da6f40a7bf7bb62c90be2947b8f9966d5b8dd76aa74ebbd3dc6dc37215f520f65943ee46355102efd1b0573746cccafbbb959cdca43abe58f57d67641aca57be207a4d157bd728218fddc45bf35ece8dc55f26fb279a97146cba17821528aa0bd62da8b87cbe1657df0b3d7a9348e6840564ea3cc4409deb18b013976b05646c0637cc892ec6b84247fd2958f53037cfd0f4626282b661d32bae91fd49306c06100a6775e652a6995ce57b574006446248908a862c701acbe15398bac0d4f203b685c2ebc366e009f7c51521ac094f32f76ca47ebfcf0e0edfc34177eb2ba1187a0f6d04361133615632754a71f052d9e1cf92d226e4e035ff10606cce59f8a46d2650f8cd6abf7cf9bcf2c7cefb4a93ce3758ff23f1479242d000ca6f030ae6a118a215e7bde4297a5e9b6735699d239fb46abd2e4eebc3be872365785064957a442e71aa0a1935f03bac487031cfd4cb5e28d44da65b97c0526ed535ec13f70219a5bf9ac35ff03861732c9f507c0d386f1e5c301dc15c9182f94d190a3223f377333e8f326853e991add31e69dbfc4e9b5ccb7304c8bfb8288e0acd3533399757d21369ae946c9b1ce5d7540d3f36c800c274143019bd11786efdd77725d41259b373f36ac1fb4bd7d6ef183f4ceb93239bb33cb1bdc0754fbe4f4cad17ee390420a7d33d46e50ee6b65e357920b3317fee4c644c1bb070228104ed29f78893dea7c81745d231c9a599db35b2515f2c7e3ec9d50b043f4875b3ad9e926761910a8882dca217906e8b4e1cd6ca6c39d308c8614aeaf5fac96f3154b1cfc8915f3da535d8e6be9bbb26da79e832c19e7c717a409456459e522f98fbd06c68a9440b06e85003d2ec55e99927cecb5a6f85d9834c0e55973c5efcd48822bf47d55126b553ad330c920ce9b93f1ae305eeb89054d7784d8a5ed150f5c89e7627fc769cb1d7a39b25589d7c8482689cc3f998bd52f9ad01c20027b29efafffe18166471b93f322a88f9c84ff30145bdfc2a38fd9577b49056d9ac5e6e41f47cab52235fadca79f4f405be9ea7b37f847ce7e29c66a25d351172949fe3ff8ea28030bd99f5d49f0be57796eb79c10a318b3f191d65d3383111b48462605ab027b507e5ef69022fb515fb055e975fb6eec55fce35884851eab0f754b003394878e3e749400dfe727d4b4b2c3fb9a34404a9aa60f110cb1ab91bbdab1b92a9d3e1d72ec4cd6947ab53d33f5a44f767f61a0036e19c0b2ada989514bd56b4092ad8b2fc8727ef6b0af27f119afa6309f2bfe2e689bbe3e4a198f7ca1a2f4e32907e798033e702fee192837b997d9965f96e4af25a9f71fe7eff32e6aa0b51ba6e7c93c5133d7decbd0df2fb629adf3e4a7b0c508682cdea5cf3861a7bc29c0c0b77e0f0a26b3c25a91de33f6a59328dabd079faee7f2b20ce42b3ac2e4ca975e9b3bd133fb5afd050f2a2ad8e7977380dced94931800d0905b9c8f7f004e9513930059e99cc91583df92d5c8b5a517899fc13492a81a2a6b4ed768a4bc4ade30dcedcfe63eedd5c8598d0bfdd0a0e39b3692b1467378d714b8d2ebb6eae43a6cc3b8d3c8908b92711eceae56345f7c75b244103ad03963f53af931bb40df196fa5e7c9140691fe7cdf22904a00b738bd39712850450883956ffed4880cb4e15d9bb5142242ef1bcca6034b2f1f5a93765511df6f1ad2796552730d5ab327969d162188ffe6187c10251ec88cf44332085c8ec189f978a8b42554950f7372302fe91515d773bd67b1d698693033401b6f011659981f642b472347bb5905f22d003d2ccf0979f57cfbbf49a5029b2ce1211acac56d191ae5dd113f3c9602d73763725e43dbaeac03f348eb29146e3052e0e355b3e9c2f4445e993d2d9bbfa9c45f4454f36a9d84b1c9aa9f23429f3772c6789b6bf9aca903a91960a645fc10a9cdb3499e9ae5c0c2d7c3005c4a7e8704ed8587ba659eedbf25922a16f47c49fa7ef112c26f21705c6f569ab997a4b6da884bfbe4ac6c9b171d27de97db4a445bb03b67f5bc6114ffbb7a14b1a883a6f931a82"}, {0xf0, 0x29, 0x8, "cd839e7c183c80e2c35af5d3ea28668a19a2997084d298f92c0a8b615a9866a9de844d5ef937c474408e02947ec166e34b5a4015c1e178da195b2078141434a1c3516692356991988183f42447f5af153229c51c3f4ec5278f089ed6ceeeda445c7a6c3d8fa572bf944f7e6c6ac30e56633f6bbef243766bbf88d41d33bba82d53e3f011a6ef26fda9d854ee62cdd33d33ee8747166e3f3eb6d4f81a5f4e552181d26860df259df5744a9ae12d334499ded6fa186bb57dcb6abb6611e64528f5c99039aa7fddf61573eb4619eb867f2cc9983c39a4025a57a795bdbab46bf3"}], 0x1138}, 0x24040810) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000003680)={@private, @dev, 0x0}, &(0x7f00000036c0)=0xc) sendto$packet(r5, &(0x7f00000035c0)="beeebaed5b0cf861cb8125c54bfaa159402de55a9a49827e441a980b3893cf0163d9624bf15853839c07b4511020f60bbdc9c4c9c859936c0ae7af9a7019d012239c090a17ead848c625966c89cce3535f8346a819494b77cb5a47ac93977e57ddc38817caa027ba76aa89909af2057bbe11561edac0c1b314058d8641695043a1eda69604f186b94fab62559ae0230c89a7f3ec8dc722dd82639d56bf8a1ae25ed6dd0ea3b30ef9", 0xa8, 0x40000, &(0x7f0000003700)={0x11, 0x0, r8, 0x1, 0xe, 0x6, @multicast}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000003740)={0x0, 0xcd, "803245eb208fb22e18be6606b3bd528d4c2aa213bcc4d63d0051abf90d13d7756784da14c47ffbde8692211e2d8a9c35c557d004168ed1f52894a935e9a108633523dd3c7c0472b102e4fde11c1769165009ce147924388e64542ed6ee932acaf0fe9f59b2598228976060cd9c034bc81eba48c70e1806bb5a12fcc8e7d04ab4a50a2ae811d4bdd2f3b58c6272fed8df0aeddf7be472a1e83efbf9408c74207f4c0fbd068f112f037661e332103e75b4bbb2c08a472e5647c62a53cae1653706d7c56b98a692fd80fb942aadad"}, &(0x7f0000003840)=0xd5) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000003880)={0x0, 0xe334aea}, &(0x7f00000038c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000003900)={r9, 0xfffffff8, 0xc, 0x4bd9, 0x0, 0x100, 0x8, 0xf, {r10, @in={{0x2, 0x4e23, @empty}}, 0xfffff484, 0x2, 0x5, 0x9, 0x8949}}, &(0x7f00000039c0)=0xb0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000003a40), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000003c80)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003ac0)={0x16c, r11, 0x200, 0x70bd2c, 0x3, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 17.915148041s ago: executing program 1 (id=2073): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004010}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001050500000000000008000a0000003c0002802c00018014000300ff0100000000000000000000000000011400e3fffe0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004"], 0xac}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) 17.788633016s ago: executing program 4 (id=2074): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@empty, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @algo_auth={0x48, 0x1, {{'hmac(sha256-avx2)\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x880}, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r4) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) 17.22945299s ago: executing program 3 (id=2075): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x4}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x99, &(0x7f0000001300)=""/153, 0x0, 0x44}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000013c0)={{0x0, 0x0, 0x0, 0x7, 0x5, 0x1, 0x6, 0x22, 0x7, 0x8, 0x3, 0x3, 0x8, 0x5, 0x7}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x0) 17.062594614s ago: executing program 3 (id=2076): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x19, 0x0, 0x3, 0x274e, 0x4, 0x3, 0x8, 0xe, 0x7, 0x0, 0x3, 0x1, 0x8, 0x4, 0x5, 0x0, [0xe, 0x3]}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0510530800000006"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x88, 0x20}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4810) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xa) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000010000000000000000010dc"}}}]}, 0x48}}, 0x0) 16.158199277s ago: executing program 0 (id=2077): unshare(0x8000800) (async) unshare(0x8000800) unshare(0x10000100) (async) unshare(0x10000100) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x124, 0x3e, 0x8, 0x70bd26, 0x25dfdbfe, {0x3}, [@typed={0xd9, 0x144, 0x0, 0x0, @binary="22be1a964d8e71cf9206f7bfdc03a72ddb255335058374ff4ca2815618b31bc1001178a594dfafbfa4ec2bb8ab6182d4ff390ef3d6e403331a964bce917c211fab51eff0544cd4d012612ba86c3f34f79d278ff1c1fcb340b543fe150b8adac7df1e7e4ff436c6dd5367f01f7154c5528f97674e7f61e4e8cd1192386a0c26d751821269638203ab5d4302b94e6c3554192fcacc3eca9585c051da9a67d4f40174fbff4167c68d2af2eba9cd9f5f54c6015d810b7ef1587dfaed7e4c7c5ecaf9625b54989ee5fcc490c4c59f340345ada41f32a759"}, @typed={0x8, 0x12f, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x75, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @nested={0x22, 0x8f, 0x0, 0x1, [@generic="31f2dcaead230da9a584", @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic]}]}, 0x124}}, 0x40) (async) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x124, 0x3e, 0x8, 0x70bd26, 0x25dfdbfe, {0x3}, [@typed={0xd9, 0x144, 0x0, 0x0, @binary="22be1a964d8e71cf9206f7bfdc03a72ddb255335058374ff4ca2815618b31bc1001178a594dfafbfa4ec2bb8ab6182d4ff390ef3d6e403331a964bce917c211fab51eff0544cd4d012612ba86c3f34f79d278ff1c1fcb340b543fe150b8adac7df1e7e4ff436c6dd5367f01f7154c5528f97674e7f61e4e8cd1192386a0c26d751821269638203ab5d4302b94e6c3554192fcacc3eca9585c051da9a67d4f40174fbff4167c68d2af2eba9cd9f5f54c6015d810b7ef1587dfaed7e4c7c5ecaf9625b54989ee5fcc490c4c59f340345ada41f32a759"}, @typed={0x8, 0x12f, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x75, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @nested={0x22, 0x8f, 0x0, 0x1, [@generic="31f2dcaead230da9a584", @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic]}]}, 0x124}}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x2, 0x7, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0, 0x70, 0x0, 0xcf, 0x1}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5e, 0x5e, 0x3, [@struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x6, [{0x5, 0x2, 0xcc9}]}, @datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x3, 0x3fc2}], '\"`'}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0x3, 0x1}, {0xc, 0x1}, {0x8, 0x3}]}]}, {0x0, [0x61]}}, &(0x7f0000000740)=""/81, 0x7b, 0x51, 0x1, 0xc4}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x16, 0x0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x200, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x20, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x0, 0x1, 0x4, 0x2, 0xa, 0xffffffffffffffc0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0xb, 0x0, 0xc, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x8, 0x47, &(0x7f0000000580)=""/71, 0x41100, 0x9, '\x00', r8, @fallback=0x25, r9, 0x8, &(0x7f0000000800)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x0, 0x7f, 0x3}, 0x10, r10, 0xffffffffffffffff, 0x4, &(0x7f0000000900)=[r11], &(0x7f0000000940)=[{0x0, 0x3, 0x2}, {0x0, 0x1, 0x0, 0xa}, {0x0, 0x4, 0x6, 0x9}, {0x0, 0x1, 0x10, 0x7}]}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x20, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x0, 0x1, 0x4, 0x2, 0xa, 0xffffffffffffffc0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0xb, 0x0, 0xc, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x8, 0x47, &(0x7f0000000580)=""/71, 0x41100, 0x9, '\x00', r8, @fallback=0x25, r9, 0x8, &(0x7f0000000800)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x0, 0x7f, 0x3}, 0x10, r10, 0xffffffffffffffff, 0x4, &(0x7f0000000900)=[r11], &(0x7f0000000940)=[{0x0, 0x3, 0x2}, {0x0, 0x1, 0x0, 0xa}, {0x0, 0x4, 0x6, 0x9}, {0x0, 0x1, 0x10, 0x7}]}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000a40)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000b40)={r12, r13, r14}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)="6ad64d80f838b5f849423bac04b9f64c871af622095359fb12526a38c63197f39840abf9b503520de0da599cd36fb4ef08ddfc560f110496e08e58c9607d2e0346c668e0d550d0a272187853215b7f06e34b66755cdfab1c6bff96e4bddec1efe265900e40323bdc2ca41f18ae1054464648ab5c2ad956466d91c7971dd57eff84342aaa91d3c527f0fb", 0x8a, 0x11, &(0x7f0000000c40)={0xa, 0x4e21, 0x6, @loopback, 0x1ff}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)="6ad64d80f838b5f849423bac04b9f64c871af622095359fb12526a38c63197f39840abf9b503520de0da599cd36fb4ef08ddfc560f110496e08e58c9607d2e0346c668e0d550d0a272187853215b7f06e34b66755cdfab1c6bff96e4bddec1efe265900e40323bdc2ca41f18ae1054464648ab5c2ad956466d91c7971dd57eff84342aaa91d3c527f0fb", 0x8a, 0x11, &(0x7f0000000c40)={0xa, 0x4e21, 0x6, @loopback, 0x1ff}, 0x1c) r15 = accept4$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @multicast2}, &(0x7f0000000cc0)=0x10, 0x800) setsockopt$inet_tcp_TLS_RX(r15, 0x11a, 0x2, &(0x7f0000000d00)=@ccm_128={{0x304}, "e424e531e70a8a3e", "05b2427a0e1968982fa90fec0aeee3af", "b1f9286f", "54cc0bf10e0d03dc"}, 0x28) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r16 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r16, 0x11b, 0x1, &(0x7f0000000d40), &(0x7f0000000dc0)=0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000e00)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r15, 0x6, 0x1d, &(0x7f0000001000), &(0x7f0000001040)=0x14) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r15, 0x6, 0x1d, &(0x7f0000001000), &(0x7f0000001040)=0x14) getsockname(r0, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000001100)=0x80) (async) getsockname(r0, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000001100)=0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0xd578, '\x00', r8, r9, 0x1, 0x5, 0x3}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0xd578, '\x00', r8, r9, 0x1, 0x5, 0x3}, 0x50) connect$bt_l2cap(r3, &(0x7f00000011c0)={0x1f, 0x0, @none, 0xb, 0x1}, 0xe) 16.097940007s ago: executing program 0 (id=2078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r0, 0x0, 0xd}, 0x18) r2 = socket$kcm(0x2d, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r3, 0x0, 0x9}, 0x18) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r1, 0x6, 0x437b18fc, 0x6}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r4, &(0x7f00000001c0), &(0x7f00000002c0)=0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="140004006e696376663000000000000000000000080005000a00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) (async) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1c3a3a14fca35acb}, 0x200000c5) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, 0x0, 0x0) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r8, 0x40047452, 0x0) (async) r9 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='net_dev_xmit\x00', r4, 0x0, 0x6}, 0x18) (async, rerun: 64) ioctl$sock_netdev_private(r9, 0x89fa, &(0x7f0000000040)="c779e5dcba96dfb4a2a548d1") (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="11000000700001002abd70000000000007"], 0x24}}, 0x80) 16.033454586s ago: executing program 0 (id=2079): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x3, 0x1, 0xd, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup=r3, r1, 0x8, 0x2, r0, @void, @value=r0, @void, @void, r2}, 0x20) 16.033127398s ago: executing program 0 (id=2080): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000180)=0x8) 16.009348275s ago: executing program 0 (id=2081): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.069901946s ago: executing program 33 (id=2073): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004010}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001050500000000000008000a0000003c0002802c00018014000300ff0100000000000000000000000000011400e3fffe0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004"], 0xac}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) 2.032997s ago: executing program 34 (id=2070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x200}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) 1.975941795s ago: executing program 35 (id=2074): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@empty, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @algo_auth={0x48, 0x1, {{'hmac(sha256-avx2)\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x880}, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r4) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44000) 1.049930817s ago: executing program 36 (id=2076): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x19, 0x0, 0x3, 0x274e, 0x4, 0x3, 0x8, 0xe, 0x7, 0x0, 0x3, 0x1, 0x8, 0x4, 0x5, 0x0, [0xe, 0x3]}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0510530800000006"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x88, 0x20}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4810) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xa) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000010000000000000000010dc"}}}]}, 0x48}}, 0x0) 0s ago: executing program 37 (id=2081): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) kernel console output (not intermixed with test programs): it: Overflow, try lower: 268435456/134217728 [ 222.628413][T10149] wg1 speed is unknown, defaulting to 1000 [ 222.817390][T10193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1078'. [ 223.352600][T10186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.190092][T10249] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 224.338926][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 224.378034][T10258] ipvlan2: entered promiscuous mode [ 224.417407][T10255] syzkaller0: entered promiscuous mode [ 224.431191][T10255] syzkaller0: entered allmulticast mode [ 224.482098][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 224.501422][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 224.600089][T10259] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1093'. [ 224.671464][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 225.265209][T10280] ÿ: renamed from bond_slave_0 (while UP) [ 225.460744][T10292] syzkaller0: entered promiscuous mode [ 225.501216][T10292] syzkaller0: entered allmulticast mode [ 225.537421][T10289] gre1: entered allmulticast mode [ 225.637908][T10301] x_tables: duplicate underflow at hook 1 [ 227.249017][T10300] tipc: Enabled bearer , priority 0 [ 227.312897][T10300] tipc: Disabling bearer [ 227.827330][T10309] wg1 speed is unknown, defaulting to 1000 [ 227.916820][T10354] vlan0: entered promiscuous mode [ 228.041728][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 228.395597][T10352] wg1 speed is unknown, defaulting to 1000 [ 228.609332][T10364] tipc: Enabling of bearer rejected, failed to enable media [ 228.742147][ T7406] tipc: Subscription rejected, illegal request [ 228.954662][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 229.123769][T10385] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 229.398658][T10390] x_tables: duplicate underflow at hook 1 [ 229.698719][T10402] netlink: 'syz.4.1127': attribute type 1 has an invalid length. [ 229.748112][T10404] raw_sendmsg: syz.4.1127 forgot to set AF_INET. Fix it! [ 229.867869][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'. [ 229.987207][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 230.009825][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 230.034117][T10417] ipt_REJECT: TCP_RESET invalid for non-tcp [ 230.166856][T10418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1132'. [ 230.435513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.710011][T10412] wg1 speed is unknown, defaulting to 1000 [ 230.907120][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 231.165642][T10451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.281620][T10458] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1142'. [ 231.362075][T10458] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.529145][T10465] pim6reg99999999: entered allmulticast mode [ 231.651173][T10457] wg1 speed is unknown, defaulting to 1000 [ 231.864716][ T7891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 232.031781][ T7399] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 232.361875][T10487] netlink: 'syz.3.1152': attribute type 8 has an invalid length. [ 232.751557][ T7893] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 232.805893][T10508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.987366][T10517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 233.048564][T10517] gretap1: entered promiscuous mode [ 233.073124][ T7394] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 233.088995][ T7394] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 233.177723][T10522] netlink: 'syz.2.1162': attribute type 3 has an invalid length. [ 233.191271][T10522] netlink: 'syz.2.1162': attribute type 3 has an invalid length. [ 233.233220][T10522] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 233.240247][T10522] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 233.255983][T10486] wg1 speed is unknown, defaulting to 1000 [ 233.322113][T10463] wg1 speed is unknown, defaulting to 1000 [ 233.451457][ T7903] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 234.124961][T10487] wg1 speed is unknown, defaulting to 1000 [ 234.539571][T10566] vlan2: entered promiscuous mode [ 234.555463][T10566] bond0: entered promiscuous mode [ 234.848152][T10577] sctp: [Deprecated]: syz.0.1176 (pid 10577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.848152][T10577] Use struct sctp_sack_info instead [ 235.329726][T10591] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 235.338460][T10591] pim6reg1: linktype set to 805 [ 235.383460][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.525409][T10598] SET target dimension over the limit! [ 235.757463][T10611] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 235.778775][T10593] wg1 speed is unknown, defaulting to 1000 [ 235.993312][T10622] netlink: 'syz.2.1190': attribute type 10 has an invalid length. [ 236.022616][T10627] xt_TCPMSS: Only works on TCP SYN packets [ 236.279033][T10644] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1194'. [ 236.339140][T10636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1194'. [ 236.414121][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1194'. [ 237.071149][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 237.651139][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 237.978918][T10705] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1210'. [ 238.135237][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 238.210337][T10672] wg1 speed is unknown, defaulting to 1000 [ 238.269481][T10712] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1213'. [ 238.342689][T10717] syzkaller0: entered promiscuous mode [ 238.348236][T10717] syzkaller0: entered allmulticast mode [ 238.398964][T10717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1215'. [ 238.716665][T10730] x_tables: duplicate underflow at hook 1 [ 239.590458][T10753] : entered promiscuous mode [ 239.662113][T10734] wg1 speed is unknown, defaulting to 1000 [ 240.042326][T10749] wg1 speed is unknown, defaulting to 1000 [ 240.544345][T10763] tipc: Enabled bearer , priority 0 [ 240.553438][T10763] syzkaller0: entered promiscuous mode [ 240.558953][T10763] syzkaller0: entered allmulticast mode [ 241.314850][T10764] tipc: Resetting bearer [ 241.332403][T10764] tipc: Disabling bearer [ 245.151195][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 256.034599][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 256.043640][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.791188][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 294.431176][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 301.687093][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 301.754824][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 301.784399][T10801] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 301.878466][T10795] netlink: 'syz.1.1232': attribute type 1 has an invalid length. [ 302.614826][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 302.643452][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 302.805911][T10841] hsr_slave_1 (unregistering): left promiscuous mode [ 302.822755][T10833] wg1 speed is unknown, defaulting to 1000 [ 303.147531][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 303.224160][T10866] trusted_key: syz.4.1251 sent an empty control message without MSG_MORE. [ 303.261947][T10869] netlink: 'syz.1.1253': attribute type 2 has an invalid length. [ 303.292651][T10854] block nbd0: server does not support multiple connections per device. [ 303.309425][T10854] block nbd0: shutting down sockets [ 303.337668][T10852] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 303.373484][T10852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.398735][T10852] bond0 (unregistering): (slave bond1): Releasing backup interface [ 303.431681][T10852] bond0 (unregistering): Released all slaves [ 303.464391][T10858] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 303.666484][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1256'. [ 304.639595][T10908] netlink: 'syz.1.1260': attribute type 10 has an invalid length. [ 304.648187][ T7891] wg1 speed is unknown, defaulting to 1000 [ 304.654431][ T7891] syz0: Port: 1 Link DOWN [ 304.677493][T10908] `: Port device syz_tun added [ 304.699807][ T7401] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.722360][ T7401] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.742651][ T7401] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.769197][ T7401] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.806453][ T7401] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.822897][ T7401] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.861396][ T7401] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.890794][ T7401] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.084165][T10926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.276862][T10939] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 305.320078][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 305.322427][T10939] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 305.539802][T10952] netlink: 'syz.0.1273': attribute type 21 has an invalid length. [ 305.562943][T10952] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1273'. [ 305.644275][T10956] syzkaller1: entered promiscuous mode [ 305.649820][T10956] syzkaller1: entered allmulticast mode [ 305.672130][T10952] ipt_rpfilter: unknown options [ 305.921289][T10962] block nbd0: server does not support multiple connections per device. [ 305.930832][T10962] block nbd0: shutting down sockets [ 306.212047][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 306.348280][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 306.436152][T10955] wg1 speed is unknown, defaulting to 1000 [ 306.753862][T10988] __nla_validate_parse: 1 callbacks suppressed [ 306.753883][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 307.202514][T11004] ip6gre1: entered promiscuous mode [ 307.235713][T11007] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1282'. [ 308.192750][T11046] IPv6: sit1: Disabled Multicast RS [ 308.351159][T11050] netlink: 'syz.2.1291': attribute type 29 has an invalid length. [ 308.510075][T11038] wg1 speed is unknown, defaulting to 1000 [ 308.551717][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1293'. [ 308.652086][T11058] sit0: left allmulticast mode [ 308.828813][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 308.850333][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1294'. [ 309.285782][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 309.833839][T11110] xt_TCPMSS: Only works on TCP SYN packets [ 309.991731][T11109] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.999508][T11109] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.175426][T11109] wg1: left allmulticast mode [ 310.280423][T11109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.296444][T11124] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 310.349717][T11125] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 310.375733][T11109] geneve2: left promiscuous mode [ 310.380816][T11109] geneve2: left allmulticast mode [ 310.389195][T11109] bridge1: left promiscuous mode [ 310.394456][T11109] bridge1: left allmulticast mode [ 310.422016][T11101] wg1 speed is unknown, defaulting to 1000 [ 310.432151][T11126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1306'. [ 310.500174][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 310.509083][ T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.754325][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 310.768669][ T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.795171][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 310.813073][ T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.832954][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 310.862772][ T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.927168][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.936970][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.954472][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.973223][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.182307][T11120] wg1 speed is unknown, defaulting to 1000 [ 311.835237][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 312.006242][T11180] syz_tun: entered allmulticast mode [ 312.073110][T11180] dvmrp6: entered allmulticast mode [ 312.113496][T11155] wg1 speed is unknown, defaulting to 1000 [ 312.155434][T11179] syz_tun: left allmulticast mode [ 312.866103][T11190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.875019][T11190] 8021q: adding VLAN 0 to HW filter on device ` [ 313.028263][T11190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.082364][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 313.085168][T11207] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1328'. [ 313.102893][T11207] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 313.103773][T11203] bridge5: entered allmulticast mode [ 313.266524][T11196] wg1 speed is unknown, defaulting to 1000 [ 314.073810][T11238] netlink: 'syz.3.1336': attribute type 30 has an invalid length. [ 314.081976][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 314.083201][T11191] wg1 speed is unknown, defaulting to 1000 [ 314.231570][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 314.261709][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 314.278057][T11244] sctp: [Deprecated]: syz.2.1337 (pid 11244) Use of int in maxseg socket option. [ 314.278057][T11244] Use struct sctp_assoc_value instead [ 314.589001][T11255] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1342'. [ 314.666119][T11255] netlink: 'syz.4.1342': attribute type 10 has an invalid length. [ 314.751632][T11255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1342'. [ 314.791291][T11255] dummy0: entered promiscuous mode [ 314.807497][T11255] dummy0: left allmulticast mode [ 314.836409][T11255] bridge0: port 1(dummy0) entered blocking state [ 314.843426][T11255] bridge0: port 1(dummy0) entered disabled state [ 314.911727][T11255] dummy0: entered allmulticast mode [ 315.633307][T11282] netlink: 'syz.0.1346': attribute type 13 has an invalid length. [ 315.656698][T11282] netlink: 'syz.0.1346': attribute type 17 has an invalid length. [ 315.691982][T11285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.850332][T11282] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.879815][T11282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.925962][T11284] netlink: 'syz.4.1349': attribute type 13 has an invalid length. [ 315.955042][T11284] netlink: 'syz.4.1349': attribute type 17 has an invalid length. [ 315.982565][T11297] bond0: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 315.998178][T11297] bond0 (unregistering): Released all slaves [ 316.034109][T11284] lo: left allmulticast mode [ 316.046793][T11284] tunl0: left allmulticast mode [ 316.054270][T11284] gre0: left allmulticast mode [ 316.069222][T11284] gretap0: left allmulticast mode [ 316.076792][T11284] erspan0: left allmulticast mode [ 316.086553][T11284] ip_vti0: left allmulticast mode [ 316.097319][T11284] ip6_vti0: left allmulticast mode [ 316.119071][T11284] ip6tnl0: left allmulticast mode [ 316.129322][T11284] ip6gre0: left allmulticast mode [ 316.138476][T11284] syz_tun: left allmulticast mode [ 316.179044][T11284] ip6gretap0: left allmulticast mode [ 316.188347][T11284] bridge0: port 1(dummy0) entered blocking state [ 316.195095][T11284] bridge0: port 1(dummy0) entered forwarding state [ 316.209634][T11284] bridge0: left allmulticast mode [ 316.217409][T11284] vcan0: left allmulticast mode [ 316.225561][T11284] bond0: left allmulticast mode [ 316.236257][T11284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.248555][T11284] team0: left allmulticast mode [ 316.255416][T11284] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.265067][T11284] nlmon0: left allmulticast mode [ 316.276369][T11284] caif0: left allmulticast mode [ 316.281717][T11284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.645460][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 316.646430][T11296] wg1 speed is unknown, defaulting to 1000 [ 316.809774][T11327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1358'. [ 316.839368][T11325] syzkaller0: entered promiscuous mode [ 316.847618][T11325] syzkaller0: entered allmulticast mode [ 316.877899][T11326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.218273][T11342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1359'. [ 317.439086][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1362'. [ 317.475842][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.491989][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.663674][T11366] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 317.851562][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1367'. [ 317.877260][T11372] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 318.148803][T11390] macsec1: entered allmulticast mode [ 318.155037][T11390] syz_tun: entered allmulticast mode [ 318.165657][T11390] syz_tun: left allmulticast mode [ 318.277331][T11379] wg1 speed is unknown, defaulting to 1000 [ 318.639144][T11406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1379'. [ 318.963213][T11418] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1381'. [ 319.224188][T11430] tipc: Enabled bearer , priority 0 [ 319.369534][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 319.801913][T11441] netlink: 'syz.3.1386': attribute type 83 has an invalid length. [ 321.190248][T11452] netlink: 'syz.1.1389': attribute type 13 has an invalid length. [ 321.205139][T11452] netlink: 'syz.1.1389': attribute type 17 has an invalid length. [ 321.324173][T11455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.367958][T11419] wg1 speed is unknown, defaulting to 1000 [ 322.399215][T11452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.429851][T11420] tipc: Resetting bearer [ 322.464253][T11420] tipc: Disabling bearer [ 322.756819][T11465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1391'. [ 322.970666][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1394'. [ 323.398302][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 323.429508][T11445] wg1 speed is unknown, defaulting to 1000 [ 323.461952][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 323.574139][T11494] netlink: 'syz.0.1399': attribute type 9 has an invalid length. [ 323.592686][T11494] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1399'. [ 323.704870][T11454] wg1 speed is unknown, defaulting to 1000 [ 323.750513][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 323.858647][T11497] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1400'. [ 324.500086][T11508] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 324.725443][T11512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1405'. [ 324.959173][T11522] netlink: 'syz.1.1406': attribute type 4 has an invalid length. [ 325.304740][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1411'. [ 325.404410][T11533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.680805][T11547] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 325.763804][T11552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1414'. [ 325.790125][T11554] rdma_op ffff888023fa79f0 conn xmit_rdma 0000000000000000 [ 326.461921][T11579] tipc: Enabled bearer , priority 0 [ 326.499305][T11546] wg1 speed is unknown, defaulting to 1000 [ 326.635771][T11579] syzkaller0: entered promiscuous mode [ 326.654434][T11579] syzkaller0: entered allmulticast mode [ 326.675717][T11579] tipc: Resetting bearer [ 327.066091][T11575] tipc: Resetting bearer [ 327.502189][ T7903] tipc: Node number set to 2836615618 [ 328.697125][T11575] tipc: Disabling bearer [ 329.039858][T11618] bond4: option mode: invalid value (254) [ 329.053554][T11618] bond4 (unregistering): Released all slaves [ 329.660326][T11647] tipc: Enabled bearer , priority 0 [ 329.715272][T11647] syzkaller0: entered promiscuous mode [ 329.731558][T11647] syzkaller0: entered allmulticast mode [ 330.101389][T11640] tipc: Resetting bearer [ 330.163270][T11640] tipc: Disabling bearer [ 330.428172][T11666] xt_hashlimit: invalid interval [ 330.473023][T11669] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 330.553509][T11673] tipc: New replicast peer: 255.255.255.255 [ 330.560474][T11673] tipc: Enabled bearer , priority 10 [ 330.575507][T11631] wg1 speed is unknown, defaulting to 1000 [ 330.813675][T11687] __nla_validate_parse: 2 callbacks suppressed [ 330.813697][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 330.873770][T11690] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1447'. [ 331.147658][T11651] wg1 speed is unknown, defaulting to 1000 [ 331.734110][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 332.148554][T11724] syzkaller0: entered promiscuous mode [ 332.189663][T11724] syzkaller0: entered allmulticast mode [ 332.210461][T11719] tipc: Enabled bearer , priority 0 [ 332.392732][T11719] tipc: Resetting bearer [ 334.033858][T11719] tipc: Disabling bearer [ 334.043232][T11730] tipc: Started in network mode [ 334.048277][T11730] tipc: Node identity e60a614ae879, cluster identity 4711 [ 334.055714][T11730] tipc: Enabled bearer , priority 0 [ 334.087693][T11729] tipc: Disabling bearer [ 334.365948][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 334.473738][T11778] : entered promiscuous mode [ 334.624251][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1472'. [ 334.984567][T11802] x_tables: duplicate underflow at hook 3 [ 335.153570][T11821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.270014][T11816] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 335.674368][T11848] tipc: Enabled bearer , priority 0 [ 335.702291][T11848] syzkaller0: entered promiscuous mode [ 335.716399][T11848] syzkaller0: entered allmulticast mode [ 335.736602][T11848] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 335.902255][T11861] tipc: Resetting bearer [ 335.979378][T11847] tipc: Resetting bearer [ 336.026646][T11847] tipc: Disabling bearer [ 336.403277][T11883] netlink: 'syz.0.1497': attribute type 13 has an invalid length. [ 336.412746][T11883] netlink: 'syz.0.1497': attribute type 17 has an invalid length. [ 336.428951][T11883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.549329][T11891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1498'. [ 336.647540][T11886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.743479][T11886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.864539][T11863] wg1 speed is unknown, defaulting to 1000 [ 337.253451][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1503'. [ 337.495573][T11870] wg1 speed is unknown, defaulting to 1000 [ 337.530477][T11925] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1508'. [ 337.891331][T11883] wg1 speed is unknown, defaulting to 1000 [ 337.907554][T11909] lo speed is unknown, defaulting to 1000 [ 337.914853][T11909] lo speed is unknown, defaulting to 1000 [ 337.926863][T11909] lo speed is unknown, defaulting to 1000 [ 337.967130][T11909] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 338.173167][T11909] lo speed is unknown, defaulting to 1000 [ 338.208275][T11909] lo speed is unknown, defaulting to 1000 [ 338.228438][T11909] lo speed is unknown, defaulting to 1000 [ 338.250617][T11909] lo speed is unknown, defaulting to 1000 [ 338.260113][T11909] lo speed is unknown, defaulting to 1000 [ 338.279305][T11909] lo speed is unknown, defaulting to 1000 [ 338.286513][T11909] lo speed is unknown, defaulting to 1000 [ 338.419543][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1512'. [ 338.451865][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 338.739408][T11943] sctp: [Deprecated]: syz.2.1513 (pid 11943) Use of int in max_burst socket option. [ 338.739408][T11943] Use struct sctp_assoc_value instead [ 338.999182][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1516'. [ 339.007566][T11957] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.1518'. [ 339.018163][T11955] SET target dimension over the limit! [ 339.045006][T11957] openvswitch: netlink: Message has 6 unknown bytes. [ 339.099924][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'. [ 339.249205][T11967] tipc: Enabled bearer , priority 0 [ 339.257484][T11967] syzkaller0: entered promiscuous mode [ 339.263336][T11967] syzkaller0: entered allmulticast mode [ 339.316484][T11967] tipc: Resetting bearer [ 339.324822][T11965] tipc: Resetting bearer [ 339.342544][T11965] tipc: Disabling bearer [ 339.443767][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 339.456415][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 339.702151][T11991] netlink: 'syz.4.1530': attribute type 2 has an invalid length. [ 340.083620][T12006] netlink: 'syz.4.1535': attribute type 7 has an invalid length. [ 340.225280][T12000] bond0 (unregistering): Released all slaves [ 340.717768][T12036] netlink: 'syz.2.1544': attribute type 16 has an invalid length. [ 340.737487][T12036] netlink: 'syz.2.1544': attribute type 17 has an invalid length. [ 341.522222][T12081] netlink: 'syz.3.1557': attribute type 6 has an invalid length. [ 341.534215][T12081] netlink: 'syz.3.1557': attribute type 6 has an invalid length. [ 341.753608][T12096] __nla_validate_parse: 8 callbacks suppressed [ 341.753629][T12096] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1563'. [ 341.971771][T12105] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1565'. [ 341.995257][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'. [ 342.225209][T12120] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1569'. [ 342.243601][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1569'. [ 342.588214][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 343.109579][T12161] netlink: 'syz.0.1579': attribute type 12 has an invalid length. [ 343.128223][T12161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1579'. [ 343.183322][T12122] wg1 speed is unknown, defaulting to 1000 [ 343.223324][T12122] lo speed is unknown, defaulting to 1000 [ 343.240949][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 343.260132][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'. [ 343.531757][T12159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.549102][T12150] wg1 speed is unknown, defaulting to 1000 [ 343.563066][T12150] lo speed is unknown, defaulting to 1000 [ 343.683039][T12172] nbd: couldn't find device at index 536870912 [ 343.788826][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 343.878016][T12165] wg1 speed is unknown, defaulting to 1000 [ 343.889837][T12165] lo speed is unknown, defaulting to 1000 [ 343.890458][T12176] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 344.497587][T12196] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 344.537296][T12196] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 344.723890][T12204] tipc: Enabled bearer , priority 0 [ 344.743919][T12204] syzkaller0: entered promiscuous mode [ 344.749508][T12204] syzkaller0: entered allmulticast mode [ 344.897824][T12203] tipc: Resetting bearer [ 344.949886][T12203] tipc: Disabling bearer [ 345.482984][T12232] syzkaller0: entered promiscuous mode [ 345.498886][T12232] syzkaller0: entered allmulticast mode [ 345.556474][T12232] tipc: Enabling of bearer rejected, failed to enable media [ 345.606409][T12227] wg1 speed is unknown, defaulting to 1000 [ 345.635689][T12227] lo speed is unknown, defaulting to 1000 [ 347.016577][T12303] veth0_to_bond: entered promiscuous mode [ 347.104234][T12305] veth0_to_bond: left promiscuous mode [ 347.120789][T12294] wg1 speed is unknown, defaulting to 1000 [ 347.130083][T12294] lo speed is unknown, defaulting to 1000 [ 347.167453][T12305] __nla_validate_parse: 8 callbacks suppressed [ 347.167469][T12305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1617'. [ 347.406870][T12303] wg1 speed is unknown, defaulting to 1000 [ 347.414958][T12303] lo speed is unknown, defaulting to 1000 [ 347.742508][ T1046] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 348.686938][T12347] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1626'. [ 348.708285][T12345] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1626'. [ 349.068849][T12361] x_tables: duplicate underflow at hook 2 [ 349.109934][T12361] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002 [ 349.156421][T12364] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 349.369074][T12379] tipc: Enabling of bearer rejected, failed to enable media [ 349.505435][T12385] sctp: [Deprecated]: syz.3.1633 (pid 12385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.505435][T12385] Use struct sctp_sack_info instead [ 349.607091][T12390] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1639'. [ 349.957114][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 349.981087][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 349.990100][T12392] netlink: 'syz.1.1637': attribute type 4 has an invalid length. [ 350.057382][T12399] veth0_to_team: entered promiscuous mode [ 350.071164][T12399] veth0_to_team: left allmulticast mode [ 350.372770][ T30] audit: type=1804 audit(1762193174.649:3): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1643" name="/newroot/330/cgroup.controllers" dev="tmpfs" ino=1707 res=1 errno=0 [ 350.408678][T12398] wg1 speed is unknown, defaulting to 1000 [ 350.421132][T12398] lo speed is unknown, defaulting to 1000 [ 350.429431][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 350.470686][ T30] audit: type=1800 audit(1762193174.649:4): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1643" name="cgroup.controllers" dev="tmpfs" ino=1707 res=0 errno=0 [ 350.835498][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'. [ 350.884281][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1648'. [ 351.090512][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 351.222695][T12451] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 351.709767][T12467] Bluetooth: MGMT ver 1.23 [ 351.905936][T12479] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 352.066715][T12479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.139572][T12480] bond0: (slave geneve3): making interface the new active one [ 352.204113][T12480] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 352.361773][ T30] audit: type=1800 audit(1762193176.649:5): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1661" name="memory.events" dev="tmpfs" ino=1745 res=0 errno=0 [ 352.490236][ T7399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.520250][ T7399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.540073][ T7399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.560657][ T7399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.715551][T12496] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 352.768035][T12495] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 352.805701][T12502] __nla_validate_parse: 4 callbacks suppressed [ 352.805722][T12502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1667'. [ 352.810020][T12498] netlink: 'syz.1.1667': attribute type 5 has an invalid length. [ 352.857572][T12498] sch_fq: defrate 151 ignored. [ 352.897963][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1666'. [ 352.928850][T12500] bond2: (slave veth5): Enslaving as an active interface with a down link [ 352.975126][ T7394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.132796][T12505] bond2 (unregistering): (slave veth5): Releasing active interface [ 353.170226][T12505] bond2 (unregistering): Released all slaves [ 353.358478][ T7394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.654569][T12522] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1673'. [ 353.671011][T12522] netlink: 'syz.0.1673': attribute type 9 has an invalid length. [ 353.691000][T12522] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1673'. [ 353.700127][T12522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1673'. [ 353.752655][ T7394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.817708][T12522] bridge_slave_0: left allmulticast mode [ 353.836966][T12522] bridge_slave_0: left promiscuous mode [ 353.857586][T12522] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.914667][T12522] bridge_slave_1: left allmulticast mode [ 353.985031][T12522] bridge_slave_1: left promiscuous mode [ 354.004122][T12522] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.018450][T12537] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1676'. [ 354.041750][T12522] team0: Port device team_slave_0 removed [ 354.050715][T12522] team0: Port device 26±ÿ removed [ 354.058727][T12522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.067160][T12522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.098883][T12539] wg2: left promiscuous mode [ 354.107130][T12539] wg2: left allmulticast mode [ 354.139846][T12539] bridge3: left promiscuous mode [ 354.167508][T12539] bridge3: left allmulticast mode [ 354.167990][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.183610][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.192149][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.198144][T12539] vxlan0: left promiscuous mode [ 354.201507][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.212112][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.235661][T12539] vxlan0: left allmulticast mode [ 354.243323][T12539] vlan0: left promiscuous mode [ 354.248144][T12539] geneve1: left promiscuous mode [ 354.253503][T12539] vlan0: left allmulticast mode [ 354.258389][T12539] geneve1: left allmulticast mode [ 354.266984][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 354.269520][T12539] ip6gre1: left promiscuous mode [ 354.286316][T12539] bridge5: left allmulticast mode [ 354.306156][ T7394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.337158][T12535] `: Port device syz_tun removed [ 354.347301][T12535] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.399096][T12548] hsr_slave_0: left promiscuous mode [ 354.415695][T12548] hsr_slave_1: left promiscuous mode [ 354.458281][T12549] tipc: Enabled bearer , priority 0 [ 354.476826][ T5890] lo speed is unknown, defaulting to 1000 [ 354.487969][T12535] syzkaller0: entered promiscuous mode [ 354.508314][T12535] syzkaller0: entered allmulticast mode [ 354.571877][T12535] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1677'. [ 354.582071][T12543] tipc: Resetting bearer [ 354.611723][T12534] tipc: Resetting bearer [ 354.653765][T12534] tipc: Disabling bearer [ 355.144943][T12571] netlink: 'syz.1.1684': attribute type 16 has an invalid length. [ 355.172011][T12571] netlink: 'syz.1.1684': attribute type 17 has an invalid length. [ 355.452052][ T7394] dvmrp6 (unregistering): left allmulticast mode [ 355.532020][ T7394] bond0 (unregistering): (slave geneve3): Releasing active interface [ 355.785127][ T7394] bond1 (unregistering): Released all slaves [ 355.892403][ T7394] bond2 (unregistering): Released all slaves [ 356.013005][ T7394] bond3 (unregistering): Released all slaves [ 356.133428][ T7394] bond0 (unregistering): Released all slaves [ 356.161625][T12542] wg1 speed is unknown, defaulting to 1000 [ 356.177428][T12589] netlink: 'syz.0.1688': attribute type 13 has an invalid length. [ 356.220718][ T7893] lo speed is unknown, defaulting to 1000 [ 356.231566][ T7891] lo speed is unknown, defaulting to 1000 [ 356.242058][ T7891] syz1: Port: 1 Link DOWN [ 356.243066][T12542] lo speed is unknown, defaulting to 1000 [ 356.275537][ T5828] Bluetooth: hci0: command tx timeout [ 356.413710][ T7394] tipc: Left network mode [ 356.449404][T12593] warn_alloc: 1 callbacks suppressed [ 356.449425][T12593] syz.4.1689: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 356.455751][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 356.484528][T12593] ,cpuset=/,mems_allowed=0-1 [ 356.489223][T12593] CPU: 1 UID: 0 PID: 12593 Comm: syz.4.1689 Not tainted syzkaller #0 PREEMPT(full) [ 356.489250][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.489262][T12593] Call Trace: [ 356.489270][T12593] [ 356.489278][T12593] dump_stack_lvl+0x189/0x250 [ 356.489315][T12593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.489343][T12593] ? __pfx__printk+0x10/0x10 [ 356.489364][T12593] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 356.489392][T12593] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 356.489419][T12593] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 356.489448][T12593] warn_alloc+0x214/0x310 [ 356.489485][T12593] ? __pfx_warn_alloc+0x10/0x10 [ 356.489526][T12593] ? __get_vm_area_node+0x28f/0x300 [ 356.489555][T12593] ? xskq_create+0xbf/0x170 [ 356.489584][T12593] __vmalloc_node_range_noprof+0x690/0x12d0 [ 356.489647][T12593] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 356.489680][T12593] ? __kasan_kmalloc+0x93/0xb0 [ 356.489718][T12593] vmalloc_user_noprof+0xad/0xf0 [ 356.489745][T12593] ? xskq_create+0xbf/0x170 [ 356.489769][T12593] xskq_create+0xbf/0x170 [ 356.489797][T12593] xsk_init_queue+0xb0/0x110 [ 356.489824][T12593] xsk_setsockopt+0x57b/0x8d0 [ 356.489850][T12593] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.489876][T12593] ? __pfx_aa_sk_perm+0x10/0x10 [ 356.489906][T12593] ? aa_sock_opt_perm+0xff/0x1b0 [ 356.489938][T12593] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 356.489957][T12593] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.489982][T12593] do_sock_setsockopt+0x17c/0x1b0 [ 356.490017][T12593] __x64_sys_setsockopt+0x13f/0x1b0 [ 356.490046][T12593] do_syscall_64+0xfa/0xfa0 [ 356.490069][T12593] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.490096][T12593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.490116][T12593] ? clear_bhb_loop+0x60/0xb0 [ 356.490141][T12593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.490160][T12593] RIP: 0033:0x7f10ffb8efc9 [ 356.490179][T12593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.490196][T12593] RSP: 002b:00007f110099f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 356.490217][T12593] RAX: ffffffffffffffda RBX: 00007f10ffde5fa0 RCX: 00007f10ffb8efc9 [ 356.490232][T12593] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 356.490245][T12593] RBP: 00007f10ffc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 356.490257][T12593] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 356.490270][T12593] R13: 00007f10ffde6038 R14: 00007f10ffde5fa0 R15: 00007ffebf6cf8a8 [ 356.490304][T12593] [ 356.490311][T12593] Mem-Info: [ 356.630391][T12597] gretap0: entered promiscuous mode [ 356.660927][T12593] active_anon:6693 inactive_anon:0 isolated_anon:0 [ 356.660927][T12593] active_file:3333 inactive_file:39984 isolated_file:0 [ 356.660927][T12593] unevictable:768 dirty:160 writeback:0 [ 356.660927][T12593] slab_reclaimable:12108 slab_unreclaimable:180567 [ 356.660927][T12593] mapped:30286 shmem:1363 pagetables:984 [ 356.660927][T12593] sec_pagetables:0 bounce:0 [ 356.660927][T12593] kernel_misc_reclaimable:0 [ 356.660927][T12593] free:1240406 free_pcp:12029 free_cma:0 [ 356.804256][T12566] wg1 speed is unknown, defaulting to 1000 [ 356.805821][T12593] Node 0 active_anon:26772kB inactive_anon:0kB active_file:13332kB inactive_file:159732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121144kB dirty:636kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13100kB pagetables:3784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 356.859899][T12566] lo speed is unknown, defaulting to 1000 [ 356.869458][T12593] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 356.935032][T12593] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.969169][T12593] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 357.007539][T12593] Node 0 DMA32 free:1045940kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26572kB inactive_anon:0kB active_file:13332kB inactive_file:159732kB unevictable:1536kB writepending:636kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:32512kB local_pcp:17368kB free_cma:0kB [ 357.066557][T12593] lowmem_reserve[]: 0 0 0 0 0 [ 357.073895][T12593] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.124837][T12593] lowmem_reserve[]: 0 0 0 0 0 [ 357.129630][T12593] Node 1 Normal free:3900408kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15264kB local_pcp:11872kB free_cma:0kB [ 357.174627][T12593] lowmem_reserve[]: 0 0 0 0 0 [ 357.196439][T12593] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 357.217819][T12593] Node 0 DMA32: 360*4kB (UME) 392*8kB (UME) 133*16kB (M) 524*32kB (UME) 540*64kB (UME) 125*128kB (UME) 68*256kB (UME) 36*512kB (UM) 16*1024kB (UME) 7*2048kB (UME) 221*4096kB (UM) = 1045808kB [ 357.239152][T12593] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 357.251535][T12593] Node 1 Normal: 194*4kB (UME) 48*8kB (UME) 39*16kB (UME) 138*32kB (UME) 41*64kB (UME) 11*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3900664kB [ 357.270516][T12542] chnl_net:caif_netlink_parms(): no params data found [ 357.303301][T12593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.321069][T12593] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.330648][T12593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.351098][T12593] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.360520][T12593] 44725 total pagecache pages [ 357.365899][T12593] 0 pages in swap cache [ 357.370170][T12593] Free swap = 124996kB [ 357.376417][T12593] Total swap = 124996kB [ 357.380667][T12593] 2097051 pages RAM [ 357.384954][T12593] 0 pages HighMem/MovableOnly [ 357.389909][T12593] 424117 pages reserved [ 357.394278][T12593] 0 pages cma reserved [ 357.666646][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 357.718564][T12606] wg1 speed is unknown, defaulting to 1000 [ 357.903081][T12606] lo speed is unknown, defaulting to 1000 [ 358.180231][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.187771][T12542] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.200057][T12542] bridge_slave_0: entered allmulticast mode [ 358.208405][T12542] bridge_slave_0: entered promiscuous mode [ 358.222222][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.229639][T12542] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.236973][T12542] bridge_slave_1: entered allmulticast mode [ 358.244775][T12542] bridge_slave_1: entered promiscuous mode [ 358.260666][ T7394] hsr_slave_0: left promiscuous mode [ 358.267515][ T7394] hsr_slave_1: left promiscuous mode [ 358.356985][ T5828] Bluetooth: hci0: command tx timeout [ 358.435021][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.188388][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 359.285189][T12542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.301922][T12542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.392723][T12639] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 359.400626][T12639] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1699'. [ 359.460628][T12542] team0: Port device team_slave_0 added [ 359.493173][T12639] bond5: entered promiscuous mode [ 359.498278][T12639] bond5: entered allmulticast mode [ 359.505511][T12639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 359.523920][T12542] team0: Port device team_slave_1 added [ 359.532360][T12641] hsr0: entered promiscuous mode [ 359.572446][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 359.645369][T12639] hsr_slave_0: left promiscuous mode [ 359.667753][T12639] hsr_slave_1: left promiscuous mode [ 359.685899][T12639] hsr0 (unregistering): left promiscuous mode [ 359.715120][T12542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.725397][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.753190][T12542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.807205][T12542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.831597][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.890013][T12542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.943358][ T7394] IPVS: stop unused estimator thread 0... [ 360.031724][T12633] lo speed is unknown, defaulting to 1000 [ 360.056306][T12542] hsr_slave_0: entered promiscuous mode [ 360.074948][T12542] hsr_slave_1: entered promiscuous mode [ 360.216140][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'. [ 360.361929][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 360.431720][ T5828] Bluetooth: hci0: command tx timeout [ 361.117341][T12542] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 361.141033][T12679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 361.195986][T12542] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 361.248111][T12542] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 361.277169][T12542] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 361.509980][T12698] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1712'. [ 361.548066][T12542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.609599][T12542] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.644415][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.651646][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.709962][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.717192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.749342][T12713] block nbd0: Unsupported socket: should be TCP or UNIX. [ 361.823260][T12713] bridge6: entered promiscuous mode [ 361.828677][T12713] bridge6: entered allmulticast mode [ 362.000202][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'. [ 362.012950][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1723'. [ 362.037657][T12723] chnl_net:caif_netlink_parms(): no params data found [ 362.323572][T12542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.512619][ T5828] Bluetooth: hci0: command tx timeout [ 362.733634][T12542] veth0_vlan: entered promiscuous mode [ 362.749745][T12542] veth1_vlan: entered promiscuous mode [ 362.804594][T12542] veth0_macvtap: entered promiscuous mode [ 362.819172][T12542] veth1_macvtap: entered promiscuous mode [ 362.940775][T12542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.959784][T12542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.978490][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.988227][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.018461][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.083360][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.129921][T12757] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 363.219008][T12762] netlink: 'syz.1.1727': attribute type 1 has an invalid length. [ 363.238285][T12762] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1727'. [ 363.248391][T12754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.272969][T12754] team0: Port device bond2 added [ 363.341492][T12766] Bluetooth: MGMT ver 1.23 [ 363.363604][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.404324][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.624986][ T7405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.636297][ T7405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.883697][T12766] lo speed is unknown, defaulting to 1000 [ 364.045991][T12783] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1734'. [ 364.087329][T12786] tipc: Enabling of bearer rejected, failed to enable media [ 364.512774][T12809] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1739'. [ 364.752480][T12768] lo speed is unknown, defaulting to 1000 [ 364.794005][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'. [ 365.292845][T12826] tipc: Enabled bearer , priority 0 [ 365.331398][T12827] syzkaller0: entered promiscuous mode [ 365.337132][T12827] syzkaller0: entered allmulticast mode [ 365.391099][ T5828] Bluetooth: hci0: command tx timeout [ 365.418413][T12810] lo speed is unknown, defaulting to 1000 [ 365.521570][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 365.535193][T12814] tipc: Resetting bearer [ 365.573937][T12814] tipc: Disabling bearer [ 365.683935][T12837] tipc: Enabled bearer , priority 0 [ 365.693366][T12837] syzkaller0: entered promiscuous mode [ 365.698928][T12837] syzkaller0: entered allmulticast mode [ 365.732794][T12837] tipc: Resetting bearer [ 365.743240][T12836] tipc: Resetting bearer [ 365.782387][T12836] tipc: Disabling bearer [ 365.899490][T12815] lo speed is unknown, defaulting to 1000 [ 366.107861][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 366.329465][T12851] netlink: 'syz.3.1752': attribute type 12 has an invalid length. [ 366.767559][T12868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.895696][T12872] xt_time: unknown flags 0xf4 [ 366.974612][T12874] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1758'. [ 367.035665][T12874] netlink: 'syz.4.1758': attribute type 8 has an invalid length. [ 367.044082][T12876] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 367.053414][T12876] netlink: 'syz.5.1759': attribute type 1 has an invalid length. [ 367.133561][T12874] nbd4: detected capacity change from 0 to 63 [ 367.155099][T12879] block nbd4: NBD_DISCONNECT [ 367.181113][T12879] block nbd4: Disconnected due to user request. [ 367.198361][T12879] block nbd4: shutting down sockets [ 367.253852][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.263338][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 367.287384][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.296607][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 367.304507][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.313608][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 367.321501][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.330573][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 367.340246][T11596] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.357141][T12874] bond6: option arp_validate: invalid value (2054) [ 367.358674][T11596] Buffer I/O error on dev nbd4, logical block 0, async page read [ 367.408837][T11596] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.426367][T12874] bond6 (unregistering): Released all slaves [ 367.432535][T11596] Buffer I/O error on dev nbd4, logical block 1, async page read [ 367.432748][T11596] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.432777][T11596] Buffer I/O error on dev nbd4, logical block 2, async page read [ 367.432931][T11596] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.432957][T11596] Buffer I/O error on dev nbd4, logical block 3, async page read [ 367.433115][T11596] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.491637][T11596] Buffer I/O error on dev nbd4, logical block 0, async page read [ 367.499779][T11596] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.510136][T11596] Buffer I/O error on dev nbd4, logical block 1, async page read [ 367.524604][T11596] ldm_validate_partition_table(): Disk read failed. [ 367.535727][T11596] Dev nbd4: unable to read RDB block 0 [ 367.546146][T11596] nbd4: unable to read partition table [ 367.642369][T11596] ldm_validate_partition_table(): Disk read failed. [ 367.669916][T11596] Dev nbd4: unable to read RDB block 0 [ 367.698676][T11596] nbd4: unable to read partition table [ 367.762191][T12896] tipc: Enabled bearer , priority 0 [ 367.803133][T12910] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 367.965590][T12915] netlink: 75 bytes leftover after parsing attributes in process `syz.5.1765'. [ 368.135513][T12896] syzkaller0: entered promiscuous mode [ 368.145392][T12896] syzkaller0: entered allmulticast mode [ 368.166502][T12896] tipc: Resetting bearer [ 368.409484][ T7406] tipc: Resetting bearer [ 368.435039][T12894] tipc: Resetting bearer [ 368.576727][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 368.586227][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1770'. [ 368.595314][T12946] netlink: 'syz.4.1770': attribute type 18 has an invalid length. [ 368.687954][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 368.861316][ T7903] tipc: Node number set to 1141995235 [ 370.535551][T12894] tipc: Disabling bearer [ 370.545775][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 370.555307][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 370.565330][T12943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.603136][T12910] lo speed is unknown, defaulting to 1000 [ 370.935350][T12965] block nbd0: Unsupported socket: should be TCP or UNIX. [ 370.957763][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1777'. [ 371.502356][T12988] netlink: 'syz.1.1781': attribute type 11 has an invalid length. [ 371.932513][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'. [ 371.935833][T13009] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 371.987785][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 372.014887][T13016] xt_hashlimit: max too large, truncated to 1048576 [ 372.018008][T13011] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 372.989943][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 373.010638][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 373.089765][T13047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1794'. [ 373.239677][T13056] xt_hashlimit: max too large, truncated to 1048576 [ 373.617282][T13068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1800'. [ 373.705566][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 373.946132][T13084] netlink: 'syz.1.1804': attribute type 21 has an invalid length. [ 373.989049][T13084] netlink: 'syz.1.1804': attribute type 1 has an invalid length. [ 374.324736][ T7405] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.338174][ T7405] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.397511][ T7405] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.407077][ T7405] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.551662][T13093] netlink: 'syz.3.1807': attribute type 2 has an invalid length. [ 374.622553][T13093] 9: entered promiscuous mode [ 375.628066][T13095] lo speed is unknown, defaulting to 1000 [ 375.842780][T13142] __nla_validate_parse: 6 callbacks suppressed [ 375.842816][T13142] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1816'. [ 375.905614][T13142] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1816'. [ 375.923944][T13138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1818'. [ 376.230217][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 376.797690][T13183] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 377.103408][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1832'. [ 377.121195][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.303781][T13198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.400137][T13173] lo speed is unknown, defaulting to 1000 [ 377.982285][T13214] tipc: Enabled bearer , priority 0 [ 377.998972][T13214] syzkaller0: entered promiscuous mode [ 378.005810][T13214] syzkaller0: entered allmulticast mode [ 378.048346][T13214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1836'. [ 378.145095][T13218] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1837'. [ 378.236094][T13216] tipc: Resetting bearer [ 378.370308][T13230] netlink: 'syz.5.1839': attribute type 4 has an invalid length. [ 378.394790][T13213] tipc: Resetting bearer [ 378.429018][T13231] netlink: 'syz.5.1839': attribute type 4 has an invalid length. [ 378.437887][T13213] tipc: Disabling bearer [ 378.541395][T13178] lo speed is unknown, defaulting to 1000 [ 378.639657][T13171] lo speed is unknown, defaulting to 1000 [ 378.642545][T13235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1840'. [ 378.672386][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 378.674410][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 378.769380][T13244] bridge0: failed insert local address into bridge forwarding table [ 378.782323][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1842'. [ 378.796447][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'. [ 378.859103][T13242] chnl_net:caif_netlink_parms(): no params data found [ 378.914717][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.929075][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.225018][T13250] netlink: 'syz.0.1844': attribute type 62 has an invalid length. [ 380.027934][T13276] tipc: Enabling of bearer rejected, failed to enable media [ 380.255983][T13285] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 380.852734][T13300] __nla_validate_parse: 1 callbacks suppressed [ 380.852757][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 380.871513][T13273] lo speed is unknown, defaulting to 1000 [ 380.891548][T13310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1860'. [ 380.935651][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 380.955245][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1861'. [ 381.147427][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1862'. [ 381.416782][T13321] bridge0: entered promiscuous mode [ 381.617406][T13307] lo speed is unknown, defaulting to 1000 [ 381.649251][T13302] lo speed is unknown, defaulting to 1000 [ 382.134573][T13341] sctp: [Deprecated]: syz.1.1869 (pid 13341) Use of int in maxseg socket option. [ 382.134573][T13341] Use struct sctp_assoc_value instead [ 382.564869][T13355] netlink: 'syz.4.1873': attribute type 58 has an invalid length. [ 382.575727][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1873'. [ 382.670467][T13359] tipc: Enabled bearer , priority 0 [ 382.696172][T13355] syzkaller0: entered promiscuous mode [ 382.711249][T13355] syzkaller0: entered allmulticast mode [ 382.792647][T13354] tipc: Resetting bearer [ 382.824142][T13367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.888885][T13354] tipc: Disabling bearer [ 382.924468][T13367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.010501][T13375] wg1: entered promiscuous mode [ 383.026584][T13375] wg1: entered allmulticast mode [ 383.353053][T13387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.470513][T13387] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 383.842794][T13415] tipc: Started in network mode [ 383.847835][T13415] tipc: Node identity 9a1645ba54bf, cluster identity 4711 [ 383.866506][T13415] tipc: Enabled bearer , priority 0 [ 383.903263][T13410] tipc: Disabling bearer [ 384.237919][T13438] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 384.246763][T13438] netlink: 'syz.3.1893': attribute type 3 has an invalid length. [ 384.256656][T13438] netlink: 'syz.3.1893': attribute type 7 has an invalid length. [ 384.266023][T13438] netlink: 'syz.3.1893': attribute type 8 has an invalid length. [ 384.277798][T13438] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1893'. [ 384.287638][T13438] NCSI netlink: No device for ifindex 131092 [ 384.333200][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1892'. [ 384.391782][T13445] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 384.396729][T13442] batadv1: left allmulticast mode [ 384.404022][T13442] batadv1: left promiscuous mode [ 384.409311][T13442] bridge0: port 3(batadv1) entered disabled state [ 384.723107][T13462] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1899'. [ 384.778426][T13466] x_tables: duplicate underflow at hook 3 [ 385.066518][T13487] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 386.021682][T13510] lo speed is unknown, defaulting to 1000 [ 386.255770][T13514] pim6reg1: entered promiscuous mode [ 386.303762][T13514] pim6reg1: entered allmulticast mode [ 386.612961][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'. [ 387.191011][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 387.236309][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 387.515698][T13560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.624642][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 387.647817][T13580] syzkaller0: entered promiscuous mode [ 387.666181][T13580] syzkaller0: entered allmulticast mode [ 387.674978][T13578] tipc: Enabled bearer , priority 0 [ 387.738271][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 387.765072][T13560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.832962][T13571] tipc: Resetting bearer [ 387.869625][T13571] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1924'. [ 387.897786][T13560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.935329][T13570] tipc: Resetting bearer [ 387.966173][T13557] infiniband syz2: set down [ 387.971672][T13557] infiniband syz2: added ip6_vti0 [ 387.977721][T13557] syz2: rxe_create_cq: returned err = -12 [ 387.984561][T13557] infiniband syz2: Couldn't create ib_mad CQ [ 387.992436][T13570] tipc: Disabling bearer [ 388.004452][T13557] infiniband syz2: Couldn't open port 1 [ 388.015342][ T7895] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.094556][T13560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.120761][T13557] RDS/IB: syz2: added [ 388.144460][T13557] smc: adding ib device syz2 with port count 1 [ 388.164911][T13557] smc: ib device syz2 port 1 has no pnetid [ 388.171545][ T5934] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.179227][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.403650][ T7406] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.413044][ T7406] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.463806][ T7394] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.508005][ T7394] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.527596][T13603] vlan0: entered promiscuous mode [ 388.541988][T13603] vlan0: entered allmulticast mode [ 388.547175][T13603] veth0_vlan: entered allmulticast mode [ 388.723457][T13610] : entered promiscuous mode [ 388.769508][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 388.805962][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.968336][T13626] netlink: 'syz.1.1937': attribute type 13 has an invalid length. [ 388.977044][T13626] netlink: 'syz.1.1937': attribute type 17 has an invalid length. [ 389.010113][T13626] gretap0: left promiscuous mode [ 389.045573][T13633] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1940'. [ 389.095544][T13626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.114555][T13626] 8021q: adding VLAN 0 to HW filter on device ` [ 389.156826][T13626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.184852][ T5934] lo speed is unknown, defaulting to 1000 [ 389.197263][ T5934] syz1: Port: 1 Link ACTIVE [ 389.476427][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1942'. [ 389.687082][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.014644][T13632] lo speed is unknown, defaulting to 1000 [ 390.129231][T13643] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 390.250651][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.519283][T13650] syzkaller0: entered promiscuous mode [ 390.533172][T13650] syzkaller0: entered allmulticast mode [ 390.553261][T13650] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 390.853446][T13636] lo speed is unknown, defaulting to 1000 [ 391.248019][T13636] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.607418][T13670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1950'. [ 391.636242][ T7394] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.646594][ T7394] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.670059][ T7394] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.678886][ T7394] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.698162][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1951'. [ 391.724115][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.985228][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1953'. [ 392.160192][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 392.214331][T13688] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1954'. [ 392.340091][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 392.502957][T13557] ip6_vti0 speed is unknown, defaulting to 1000 [ 392.587094][T13690] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 393.133889][T13706] nbd0: detected capacity change from 0 to 127 [ 393.158701][ T52] block nbd0: Receive control failed (result -104) [ 393.704877][T13698] delete_channel: no stack [ 393.750232][T13687] lo speed is unknown, defaulting to 1000 [ 393.855581][T13680] lo speed is unknown, defaulting to 1000 [ 394.406850][T13713] lo speed is unknown, defaulting to 1000 [ 394.414854][T13713] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.690244][T13734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1965'. [ 395.006600][ T30] audit: type=1107 audit(1762193219.299:6): pid=13743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 395.267852][T13749] netlink: 'syz.4.1968': attribute type 5 has an invalid length. [ 395.452200][T13752] netlink: 'syz.3.1969': attribute type 10 has an invalid length. [ 395.460129][T13752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1969'. [ 395.518624][T13752] dummy0: entered promiscuous mode [ 395.538932][T13752] bond0: (slave dummy0): Releasing backup interface [ 395.571632][T13752] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 395.667625][T13757] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 395.676099][T13756] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 395.741376][T13758] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 395.976209][T13757] dummy0: left promiscuous mode [ 396.009535][T13757] team0: Port device dummy0 added [ 396.024292][T13758] team0: Port device dummy0 removed [ 396.059434][T13758] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 396.422449][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1973'. [ 396.743097][T13768] bond4: Unable to set down delay as MII monitoring is disabled [ 396.788054][T13768] bond4 (unregistering): Released all slaves [ 396.825893][T13774] block nbd1: Unsupported socket: should be TCP or UNIX. [ 397.136454][T13781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1976'. [ 397.720792][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1982'. [ 397.725670][T13805] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 397.985652][T13815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1987'. [ 398.186115][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1984'. [ 398.199307][T13826] netlink: 'syz.5.1984': attribute type 1 has an invalid length. [ 398.211700][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1984'. [ 398.221532][T13826] netlink: 'syz.5.1984': attribute type 1 has an invalid length. [ 398.563957][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1993'. [ 398.827683][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 399.435036][T13880] netlink: 'syz.4.1999': attribute type 23 has an invalid length. [ 399.986945][T13901] netlink: 'syz.3.2008': attribute type 14 has an invalid length. [ 400.038101][T13904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2009'. [ 400.317764][T13914] ip6gre1: entered promiscuous mode [ 400.365943][T13921] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2010'. [ 400.593080][T13906] lo speed is unknown, defaulting to 1000 [ 400.620353][T13906] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.867506][T13936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2017'. [ 401.848159][T13969] 8021q: VLANs not supported on vxcan1 [ 402.000295][T13985] dvmrp1: entered allmulticast mode [ 402.237558][T13999] __nla_validate_parse: 3 callbacks suppressed [ 402.237582][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 402.254171][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 402.274605][T14000] tipc: Enabled bearer , priority 10 [ 402.805064][T14023] smc: net device bond0 applied user defined pnetid SYZ0 [ 403.017582][T14031] tipc: Enabled bearer , priority 0 [ 403.029997][T14032] tipc: Resetting bearer [ 403.086211][T14030] tipc: Disabling bearer [ 403.303657][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056617400: rx timeout, send abort [ 403.574862][T14065] netlink: 'syz.1.2051': attribute type 21 has an invalid length. [ 403.763352][T14070] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2052'. [ 403.813291][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056617400: abort rx timeout. Force session deactivation [ 403.983943][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 404.029042][T14079] netlink: 'syz.4.2055': attribute type 1 has an invalid length. [ 404.558761][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2060'. [ 404.737667][T14082] lo speed is unknown, defaulting to 1000 [ 404.760387][T14082] ip6_vti0 speed is unknown, defaulting to 1000 [ 405.334058][T14104] lo speed is unknown, defaulting to 1000 [ 405.425482][T14104] ip6_vti0 speed is unknown, defaulting to 1000 [ 405.737377][T14135] netlink: 'syz.1.2073': attribute type 3 has an invalid length. [ 405.746046][T14135] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2073'. [ 405.984857][T14143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2073'. [ 421.982435][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.992897][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.002952][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.013497][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.021921][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 422.212288][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 422.222734][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 422.231781][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 422.243244][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 422.253969][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 422.254048][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 422.270773][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 422.272186][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 422.280263][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 422.294663][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 422.416856][T14170] lo speed is unknown, defaulting to 1000 [ 422.425180][T14170] ip6_vti0 speed is unknown, defaulting to 1000 [ 422.816897][T14172] lo speed is unknown, defaulting to 1000 [ 422.840385][T14172] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.175262][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 423.186498][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 423.190691][T14170] chnl_net:caif_netlink_parms(): no params data found [ 423.195240][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 423.210768][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 423.235230][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 423.335870][T14174] lo speed is unknown, defaulting to 1000 [ 423.354318][T14174] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.464606][T14170] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.472230][T14170] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.479515][T14170] bridge_slave_0: entered allmulticast mode [ 423.488085][T14170] bridge_slave_0: entered promiscuous mode [ 423.519226][T14170] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.528191][T14170] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.535892][T14170] bridge_slave_1: entered allmulticast mode [ 423.544226][T14170] bridge_slave_1: entered promiscuous mode [ 423.731690][ T95] block nbd0: Possible stuck request ffff888025155080: control (read@0,1024B). Runtime 30 seconds [ 423.745690][ T95] block nbd0: Possible stuck request ffff888025155240: control (read@1024,1024B). Runtime 30 seconds [ 423.757494][ T95] block nbd0: Possible stuck request ffff888025155400: control (read@2048,1024B). Runtime 30 seconds [ 423.769053][ T95] block nbd0: Possible stuck request ffff8880251555c0: control (read@3072,1024B). Runtime 30 seconds [ 423.781779][T14170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.843684][T14170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.022204][T14170] team0: Port device team_slave_0 added [ 424.029065][T14180] lo speed is unknown, defaulting to 1000 [ 424.069051][T14170] team0: Port device team_slave_1 added [ 424.080099][T14180] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.121626][ T5830] Bluetooth: hci5: command tx timeout [ 424.159639][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 424.172429][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 424.180634][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 424.189298][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 424.197655][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 424.295651][T14170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.311172][T14170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.338042][T14170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.355017][ T5830] Bluetooth: hci7: command tx timeout [ 424.361149][ T5834] Bluetooth: hci6: command tx timeout [ 424.370098][T14170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.377267][T14170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.403687][T14170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.437504][T14172] chnl_net:caif_netlink_parms(): no params data found [ 424.565835][T14170] hsr_slave_0: entered promiscuous mode [ 424.572447][T14170] hsr_slave_1: entered promiscuous mode [ 424.578548][T14170] debugfs: 'hsr0' already exists in 'hsr' [ 424.584435][T14170] Cannot create hsr debugfs directory [ 424.855131][T14172] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.863334][T14172] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.871687][T14172] bridge_slave_0: entered allmulticast mode [ 424.880019][T14172] bridge_slave_0: entered promiscuous mode [ 424.918318][T14172] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.926530][T14172] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.934334][T14172] bridge_slave_1: entered allmulticast mode [ 424.941956][T14172] bridge_slave_1: entered promiscuous mode [ 424.948914][T14188] lo speed is unknown, defaulting to 1000 [ 424.978966][T14174] chnl_net:caif_netlink_parms(): no params data found [ 424.990653][T14188] ip6_vti0 speed is unknown, defaulting to 1000 [ 425.066389][T14172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.080704][T14172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.311439][ T5834] Bluetooth: hci8: command tx timeout [ 425.322764][T14172] team0: Port device team_slave_0 added [ 425.371341][T14172] team0: Port device team_slave_1 added [ 425.404725][T14180] chnl_net:caif_netlink_parms(): no params data found [ 425.415821][T14174] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.423440][T14174] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.430630][T14174] bridge_slave_0: entered allmulticast mode [ 425.438354][T14174] bridge_slave_0: entered promiscuous mode [ 425.477711][T14172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.485398][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.511601][T14172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.531661][T14172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.538662][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.566878][T14172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.586932][T14174] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.594978][T14174] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.602612][T14174] bridge_slave_1: entered allmulticast mode [ 425.609787][T14174] bridge_slave_1: entered promiscuous mode [ 425.703582][T14174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.723906][T14174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.842796][T14172] hsr_slave_0: entered promiscuous mode [ 425.849765][T14172] hsr_slave_1: entered promiscuous mode [ 425.856822][T14172] debugfs: 'hsr0' already exists in 'hsr' [ 425.863348][T14172] Cannot create hsr debugfs directory [ 425.877559][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.885563][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.893078][T14180] bridge_slave_0: entered allmulticast mode [ 425.900218][T14180] bridge_slave_0: entered promiscuous mode [ 425.908802][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.916081][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.923398][T14180] bridge_slave_1: entered allmulticast mode [ 425.931293][T14180] bridge_slave_1: entered promiscuous mode [ 425.941310][T14174] team0: Port device team_slave_0 added [ 425.950312][T14174] team0: Port device team_slave_1 added [ 426.036994][T14180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.052708][T14180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.062568][T14174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.069618][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.095778][T14174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.160626][T14174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.167668][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.191103][ T5834] Bluetooth: hci5: command tx timeout [ 426.194485][T14174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.225498][T14180] team0: Port device team_slave_0 added [ 426.235176][T14180] team0: Port device team_slave_1 added [ 426.271639][ T5834] Bluetooth: hci9: command tx timeout [ 426.288102][T14180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.295448][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.322003][T14180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.366701][T14180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.374042][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.401144][T14180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.431725][ T5830] Bluetooth: hci6: command tx timeout [ 426.437310][ T5834] Bluetooth: hci7: command tx timeout [ 426.524670][T14174] hsr_slave_0: entered promiscuous mode [ 426.531466][T14174] hsr_slave_1: entered promiscuous mode [ 426.537628][T14174] debugfs: 'hsr0' already exists in 'hsr' [ 426.544536][T14174] Cannot create hsr debugfs directory [ 426.589436][T14188] chnl_net:caif_netlink_parms(): no params data found [ 426.654205][T14180] hsr_slave_0: entered promiscuous mode [ 426.660760][T14180] hsr_slave_1: entered promiscuous mode [ 426.667540][T14180] debugfs: 'hsr0' already exists in 'hsr' [ 426.673827][T14180] Cannot create hsr debugfs directory [ 426.882001][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.889256][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.897088][T14188] bridge_slave_0: entered allmulticast mode [ 426.904754][T14188] bridge_slave_0: entered promiscuous mode [ 426.948240][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.956296][T14188] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.964068][T14188] bridge_slave_1: entered allmulticast mode [ 426.971548][T14188] bridge_slave_1: entered promiscuous mode [ 427.053166][T14188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.084106][T14188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.157043][T14188] team0: Port device team_slave_0 added [ 427.179410][T14188] team0: Port device team_slave_1 added [ 427.234391][T14188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.242161][T14188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.269033][T14188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.282727][T14188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.289702][T14188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.315995][T14188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.385662][T14188] hsr_slave_0: entered promiscuous mode [ 427.393420][ T5834] Bluetooth: hci8: command tx timeout [ 427.401592][T14188] hsr_slave_1: entered promiscuous mode [ 427.407706][T14188] debugfs: 'hsr0' already exists in 'hsr' [ 427.413944][T14188] Cannot create hsr debugfs directory [ 428.271960][ T5834] Bluetooth: hci5: command tx timeout [ 428.351088][ T5834] Bluetooth: hci9: command tx timeout [ 428.511109][ T5834] Bluetooth: hci7: command tx timeout [ 428.511290][ T5830] Bluetooth: hci6: command tx timeout [ 429.471942][ T5830] Bluetooth: hci8: command tx timeout [ 430.351520][ T5830] Bluetooth: hci5: command tx timeout [ 430.441610][ T5830] Bluetooth: hci9: command tx timeout [ 430.591608][ T5830] Bluetooth: hci6: command tx timeout [ 430.591626][ T5834] Bluetooth: hci7: command tx timeout [ 431.551236][ T5834] Bluetooth: hci8: command tx timeout [ 432.511431][ T5834] Bluetooth: hci9: command tx timeout [ 440.354225][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.363738][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.797496][ T95] block nbd0: Possible stuck request ffff888025155080: control (read@0,1024B). Runtime 60 seconds [ 453.808635][ T95] block nbd0: Possible stuck request ffff888025155240: control (read@1024,1024B). Runtime 60 seconds [ 453.819933][ T95] block nbd0: Possible stuck request ffff888025155400: control (read@2048,1024B). Runtime 60 seconds [ 453.831414][ T95] block nbd0: Possible stuck request ffff8880251555c0: control (read@3072,1024B). Runtime 60 seconds [ 454.919138][ T5197] udevd[5197]: worker [13028] /devices/virtual/block/nbd0 is taking a long time [ 457.791541][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 481.934859][ T5830] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 481.945896][ T5830] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 481.956896][ T5830] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 481.965575][ T5830] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 481.975763][ T5830] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 482.004174][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 482.016971][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 482.026918][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 482.036595][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 482.045341][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 482.193232][T14214] lo speed is unknown, defaulting to 1000 [ 482.201832][T14214] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.447467][T14216] lo speed is unknown, defaulting to 1000 [ 482.458625][T14216] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.776674][T14214] chnl_net:caif_netlink_parms(): no params data found [ 483.102454][ T5834] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 483.112517][ T5834] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 483.121714][ T5834] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 483.132047][ T5834] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 483.140004][ T5834] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 483.234533][T14214] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.242435][T14214] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.249736][T14214] bridge_slave_0: entered allmulticast mode [ 483.258138][T14214] bridge_slave_0: entered promiscuous mode [ 483.268087][T14214] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.275425][T14214] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.283083][T14214] bridge_slave_1: entered allmulticast mode [ 483.291788][T14214] bridge_slave_1: entered promiscuous mode [ 483.299197][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 483.316278][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 483.328207][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 483.352310][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 483.360258][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 483.409047][T14214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.423150][T14214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.436512][T14216] chnl_net:caif_netlink_parms(): no params data found [ 483.509096][T14214] team0: Port device team_slave_0 added [ 483.524759][T14214] team0: Port device team_slave_1 added [ 483.620177][T14214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.627283][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.653741][T14214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.667105][T14214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.674162][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.700258][T14214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.721483][T14227] lo speed is unknown, defaulting to 1000 [ 483.754382][T14227] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.873410][ T95] block nbd0: Possible stuck request ffff888025155080: control (read@0,1024B). Runtime 90 seconds [ 483.884994][ T95] block nbd0: Possible stuck request ffff888025155240: control (read@1024,1024B). Runtime 90 seconds [ 483.896696][ T95] block nbd0: Possible stuck request ffff888025155400: control (read@2048,1024B). Runtime 90 seconds [ 483.908597][ T95] block nbd0: Possible stuck request ffff8880251555c0: control (read@3072,1024B). Runtime 90 seconds [ 484.033928][T14216] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.041965][ T5828] Bluetooth: hci10: command tx timeout [ 484.051781][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.059153][T14216] bridge_slave_0: entered allmulticast mode [ 484.084147][T14216] bridge_slave_0: entered promiscuous mode [ 484.111700][ T5828] Bluetooth: hci11: command tx timeout [ 484.182680][T14214] hsr_slave_0: entered promiscuous mode [ 484.208063][T14214] hsr_slave_1: entered promiscuous mode [ 484.218161][ T5834] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 484.229031][ T5834] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 484.232570][T14214] debugfs: 'hsr0' already exists in 'hsr' [ 484.243048][ T5834] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 484.252846][ T5834] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 484.260506][T14214] Cannot create hsr debugfs directory [ 484.266307][ T5834] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 484.288057][T14216] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.308771][T14216] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.316379][T14216] bridge_slave_1: entered allmulticast mode [ 484.325626][T14216] bridge_slave_1: entered promiscuous mode [ 484.358105][T14230] lo speed is unknown, defaulting to 1000 [ 484.416879][T14230] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.428403][T14216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.444561][T14216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.547807][T14216] team0: Port device team_slave_0 added [ 484.579148][T14216] team0: Port device team_slave_1 added [ 484.650687][T14216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.657908][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.686676][T14216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.725668][T14216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.733593][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.761448][T14216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.982352][T14216] hsr_slave_0: entered promiscuous mode [ 484.989513][T14216] hsr_slave_1: entered promiscuous mode [ 484.996695][T14216] debugfs: 'hsr0' already exists in 'hsr' [ 485.002562][T14216] Cannot create hsr debugfs directory [ 485.045173][T14237] lo speed is unknown, defaulting to 1000 [ 485.105438][T14237] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.231566][ T5828] Bluetooth: hci12: command tx timeout [ 485.238124][T14227] chnl_net:caif_netlink_parms(): no params data found [ 485.471594][ T5828] Bluetooth: hci13: command tx timeout [ 485.575319][T14227] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.588714][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.596641][T14227] bridge_slave_0: entered allmulticast mode [ 485.606168][T14227] bridge_slave_0: entered promiscuous mode [ 485.623693][T14227] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.631845][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.639123][T14227] bridge_slave_1: entered allmulticast mode [ 485.646750][T14227] bridge_slave_1: entered promiscuous mode [ 485.698742][T14227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.721850][T14230] chnl_net:caif_netlink_parms(): no params data found [ 485.748448][T14227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.821373][T14227] team0: Port device team_slave_0 added [ 485.830748][T14227] team0: Port device team_slave_1 added [ 485.944661][T14227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.952288][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.978866][T14227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.016423][T14227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.023574][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.050312][T14227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.111647][ T5828] Bluetooth: hci10: command tx timeout [ 486.147260][T14230] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.154604][T14230] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.163103][T14230] bridge_slave_0: entered allmulticast mode [ 486.170362][T14230] bridge_slave_0: entered promiscuous mode [ 486.178877][T14230] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.186629][T14230] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.193802][ T5828] Bluetooth: hci11: command tx timeout [ 486.200202][T14230] bridge_slave_1: entered allmulticast mode [ 486.208017][T14230] bridge_slave_1: entered promiscuous mode [ 486.286735][T14227] hsr_slave_0: entered promiscuous mode [ 486.294748][T14227] hsr_slave_1: entered promiscuous mode [ 486.301487][T14227] debugfs: 'hsr0' already exists in 'hsr' [ 486.307290][T14227] Cannot create hsr debugfs directory [ 486.347251][T14237] chnl_net:caif_netlink_parms(): no params data found [ 486.352094][ T5828] Bluetooth: hci14: command tx timeout [ 486.363725][T14230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.398542][T14230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.499271][T14230] team0: Port device team_slave_0 added [ 486.509186][T14230] team0: Port device team_slave_1 added [ 486.576744][T14230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.585326][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.613042][T14230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.653331][T14230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.660415][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.687669][T14230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.759987][T14237] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.767816][T14237] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.775911][T14237] bridge_slave_0: entered allmulticast mode [ 486.784391][T14237] bridge_slave_0: entered promiscuous mode [ 486.793847][T14237] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.801919][T14237] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.809158][T14237] bridge_slave_1: entered allmulticast mode [ 486.816908][T14237] bridge_slave_1: entered promiscuous mode [ 486.909775][T14237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.923919][T14237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.983902][T14230] hsr_slave_0: entered promiscuous mode [ 486.990383][T14230] hsr_slave_1: entered promiscuous mode [ 486.997377][T14230] debugfs: 'hsr0' already exists in 'hsr' [ 487.003282][T14230] Cannot create hsr debugfs directory [ 487.064097][T14237] team0: Port device team_slave_0 added [ 487.107087][T14237] team0: Port device team_slave_1 added [ 487.165464][T14237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.173252][T14237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.200358][T14237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.218953][T14237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.226065][T14237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.252302][T14237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.311427][ T5828] Bluetooth: hci12: command tx timeout [ 487.365209][T14237] hsr_slave_0: entered promiscuous mode [ 487.372703][T14237] hsr_slave_1: entered promiscuous mode [ 487.378937][T14237] debugfs: 'hsr0' already exists in 'hsr' [ 487.384827][T14237] Cannot create hsr debugfs directory [ 487.553023][ T5828] Bluetooth: hci13: command tx timeout [ 488.191362][ T5828] Bluetooth: hci10: command tx timeout [ 488.271053][ T5828] Bluetooth: hci11: command tx timeout [ 488.431588][ T5828] Bluetooth: hci14: command tx timeout [ 489.391427][ T5828] Bluetooth: hci12: command tx timeout [ 489.632176][ T5828] Bluetooth: hci13: command tx timeout [ 490.271592][ T5828] Bluetooth: hci10: command tx timeout [ 490.351571][ T5828] Bluetooth: hci11: command tx timeout [ 490.511638][ T5828] Bluetooth: hci14: command tx timeout [ 491.471145][ T5828] Bluetooth: hci12: command tx timeout [ 491.553094][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 491.711288][ T5828] Bluetooth: hci13: command tx timeout [ 492.591202][ T5828] Bluetooth: hci14: command tx timeout [ 501.795961][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.805407][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.952134][ T95] block nbd0: Possible stuck request ffff888025155080: control (read@0,1024B). Runtime 120 seconds [ 513.963396][ T95] block nbd0: Possible stuck request ffff888025155240: control (read@1024,1024B). Runtime 120 seconds [ 513.975907][ T95] block nbd0: Possible stuck request ffff888025155400: control (read@2048,1024B). Runtime 120 seconds [ 513.987282][ T95] block nbd0: Possible stuck request ffff8880251555c0: control (read@3072,1024B). Runtime 120 seconds [ 524.360947][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.034207][ T5834] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 542.044312][ T5834] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 542.054520][ T5834] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 542.059030][ T52] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 542.064391][ T5834] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 542.078838][ T52] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 542.079281][ T5834] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 542.087838][ T52] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 542.104366][ T52] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 542.114560][ T52] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 542.289886][T14259] lo speed is unknown, defaulting to 1000 [ 542.299574][T14259] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.538007][T14261] lo speed is unknown, defaulting to 1000 [ 542.557040][T14261] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.885427][T14259] chnl_net:caif_netlink_parms(): no params data found [ 543.153216][T14259] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.158162][T14274] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 543.160444][T14259] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.171314][T14274] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 543.183907][T14274] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 543.191760][T14259] bridge_slave_0: entered allmulticast mode [ 543.193934][T14274] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 543.199734][T14259] bridge_slave_0: entered promiscuous mode [ 543.212649][T14274] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 543.245594][T14259] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.253157][T14259] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.260519][T14259] bridge_slave_1: entered allmulticast mode [ 543.268948][T14259] bridge_slave_1: entered promiscuous mode [ 543.349270][T14259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.382005][T14259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.392680][T14261] chnl_net:caif_netlink_parms(): no params data found [ 543.515730][T14259] team0: Port device team_slave_0 added [ 543.598890][T14259] team0: Port device team_slave_1 added [ 543.709227][ T5834] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 543.720020][ T5834] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 543.730690][ T5834] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 543.732255][T14259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.741874][ T5834] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 543.754426][ T5834] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 543.762431][T14259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.789113][T14259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.820053][T14273] lo speed is unknown, defaulting to 1000 [ 543.821347][T14259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.832957][T14259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.859141][T14259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.889990][T14273] ip6_vti0 speed is unknown, defaulting to 1000 [ 543.891741][T14261] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.903980][T14261] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.911440][T14261] bridge_slave_0: entered allmulticast mode [ 543.919977][T14261] bridge_slave_0: entered promiscuous mode [ 543.956396][T14261] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.963821][T14261] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.971348][T14261] bridge_slave_1: entered allmulticast mode [ 543.979687][T14261] bridge_slave_1: entered promiscuous mode [ 544.047725][ T95] block nbd0: Possible stuck request ffff888025155080: control (read@0,1024B). Runtime 150 seconds [ 544.060489][ T95] block nbd0: Possible stuck request ffff888025155240: control (read@1024,1024B). Runtime 150 seconds [ 544.072316][ T95] block nbd0: Possible stuck request ffff888025155400: control (read@2048,1024B). Runtime 150 seconds [ 544.084043][ T95] block nbd0: Possible stuck request ffff8880251555c0: control (read@3072,1024B). Runtime 150 seconds [ 544.111593][ T5834] Bluetooth: hci15: command tx timeout [ 544.121956][T14259] hsr_slave_0: entered promiscuous mode [ 544.141833][T14259] hsr_slave_1: entered promiscuous mode [ 544.148669][T14259] debugfs: 'hsr0' already exists in 'hsr' [ 544.156117][T14259] Cannot create hsr debugfs directory [ 544.165918][T14261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.194122][ T5834] Bluetooth: hci16: command tx timeout [ 544.238924][T14261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.462141][T14261] team0: Port device team_slave_0 added [ 544.483812][T14261] team0: Port device team_slave_1 added [ 544.568071][T14281] lo speed is unknown, defaulting to 1000 [ 544.584649][T14281] ip6_vti0 speed is unknown, defaulting to 1000 [ 544.635379][T14261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.644611][T14261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.672428][T14261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.743066][T14274] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 544.755387][T14261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.756691][T14274] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 544.772246][T14261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.772825][T14274] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 544.809402][T14274] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 544.818028][T14274] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 544.831101][T14261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.841900][ T5834] Bluetooth: hci7: command 0x0406 tx timeout [ 544.841986][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 544.842026][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 545.155343][T14261] hsr_slave_0: entered promiscuous mode [ 545.163796][T14261] hsr_slave_1: entered promiscuous mode [ 545.170109][T14261] debugfs: 'hsr0' already exists in 'hsr' [ 545.176057][T14261] Cannot create hsr debugfs directory [ 545.202649][T14273] chnl_net:caif_netlink_parms(): no params data found [ 545.311141][ T5828] Bluetooth: hci17: command tx timeout [ 545.546354][T14285] lo speed is unknown, defaulting to 1000 [ 545.570592][T14273] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.578492][T14273] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.586244][T14273] bridge_slave_0: entered allmulticast mode [ 545.594114][T14273] bridge_slave_0: entered promiscuous mode [ 545.623011][T14285] ip6_vti0 speed is unknown, defaulting to 1000 [ 545.635779][T14273] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.643541][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.653015][T14273] bridge_slave_1: entered allmulticast mode [ 545.662706][T14273] bridge_slave_1: entered promiscuous mode [ 545.731597][T14273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.747119][T14273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.791132][ T5828] Bluetooth: hci18: command tx timeout [ 545.903124][T14273] team0: Port device team_slave_0 added [ 545.913107][T14273] team0: Port device team_slave_1 added [ 546.019591][T14273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.027617][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.056276][T14273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.099002][T14273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.106378][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.133149][T14273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.152717][T14281] chnl_net:caif_netlink_parms(): no params data found [ 546.191468][ T5828] Bluetooth: hci15: command tx timeout [ 546.271099][ T5828] Bluetooth: hci16: command tx timeout [ 546.317118][T14273] hsr_slave_0: entered promiscuous mode [ 546.324283][T14273] hsr_slave_1: entered promiscuous mode [ 546.330466][T14273] debugfs: 'hsr0' already exists in 'hsr' [ 546.336709][T14273] Cannot create hsr debugfs directory [ 546.364855][T14281] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.372866][T14281] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.380188][T14281] bridge_slave_0: entered allmulticast mode [ 546.388586][T14281] bridge_slave_0: entered promiscuous mode [ 546.427454][T14281] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.436013][T14281] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.444880][T14281] bridge_slave_1: entered allmulticast mode [ 546.453292][T14281] bridge_slave_1: entered promiscuous mode [ 546.589072][T14281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.646020][T14281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.665965][T14285] chnl_net:caif_netlink_parms(): no params data found [ 546.739117][T14281] team0: Port device team_slave_0 added [ 546.780689][T14281] team0: Port device team_slave_1 added [ 546.860146][T14281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.867483][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.894607][T14281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.911112][ T5828] Bluetooth: hci19: command tx timeout [ 546.934626][T14281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.942586][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.969317][T14281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.997092][T14285] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.004662][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.012277][T14285] bridge_slave_0: entered allmulticast mode [ 547.019543][T14285] bridge_slave_0: entered promiscuous mode [ 547.047835][T14285] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.055751][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.063227][T14285] bridge_slave_1: entered allmulticast mode [ 547.070530][T14285] bridge_slave_1: entered promiscuous mode [ 547.147590][T14285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.168669][T14285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.213485][T14281] hsr_slave_0: entered promiscuous mode [ 547.220076][T14281] hsr_slave_1: entered promiscuous mode [ 547.227273][T14281] debugfs: 'hsr0' already exists in 'hsr' [ 547.233708][T14281] Cannot create hsr debugfs directory [ 547.287512][T14285] team0: Port device team_slave_0 added [ 547.298063][T14285] team0: Port device team_slave_1 added [ 547.401396][ T5828] Bluetooth: hci17: command tx timeout [ 547.408737][T14285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.415807][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.442112][T14285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.455168][T14285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.462219][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.488311][T14285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.631861][T14285] hsr_slave_0: entered promiscuous mode [ 547.638660][T14285] hsr_slave_1: entered promiscuous mode [ 547.645721][T14285] debugfs: 'hsr0' already exists in 'hsr' [ 547.651949][T14285] Cannot create hsr debugfs directory [ 547.872069][ T5830] Bluetooth: hci18: command tx timeout [ 548.272057][ T5830] Bluetooth: hci15: command tx timeout [ 548.351908][ T5830] Bluetooth: hci16: command tx timeout [ 548.991602][ T5830] Bluetooth: hci19: command tx timeout [ 549.471176][ T5830] Bluetooth: hci17: command tx timeout [ 549.950956][ T5830] Bluetooth: hci18: command tx timeout [ 549.956514][T14274] Bluetooth: hci9: command 0x0406 tx timeout [ 549.962668][ T5830] Bluetooth: hci8: command 0x0406 tx timeout [ 550.351839][ T52] Bluetooth: hci15: command tx timeout [ 550.431976][ T52] Bluetooth: hci16: command tx timeout [ 551.071789][ T52] Bluetooth: hci19: command tx timeout [ 551.074411][ T31] INFO: task syz.5.2070:14136 blocked for more than 143 seconds. [ 551.085461][ T31] Not tainted syzkaller #0 [ 551.090456][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.099242][ T31] task:syz.5.2070 state:D stack:28328 pid:14136 tgid:14128 ppid:12542 task_flags:0x400040 flags:0x00080002 [ 551.111461][ T31] Call Trace: [ 551.114766][ T31] [ 551.117704][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 551.122260][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.128726][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.134309][ T31] ? __pfx___schedule+0x10/0x10 [ 551.139226][ T31] ? schedule+0x91/0x360 [ 551.143626][ T31] schedule+0x165/0x360 [ 551.147831][ T31] schedule_preempt_disabled+0x13/0x30 [ 551.159912][ T31] __mutex_lock+0x7e6/0x1350 [ 551.164828][ T31] ? __mutex_lock+0x5bb/0x1350 [ 551.169665][ T31] ? genl_rcv_msg+0x10d/0x790 [ 551.174581][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 551.179680][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 551.185721][ T31] ? radix_tree_lookup+0x240/0x290 [ 551.191075][ T31] genl_rcv_msg+0x10d/0x790 [ 551.235399][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.240528][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 551.259506][ T31] ? __asan_memcpy+0x40/0x70 [ 551.264709][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 551.270144][ T31] netlink_rcv_skb+0x208/0x470 [ 551.275182][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.280076][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.285380][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.290732][ T31] ? down_read+0x1ad/0x2e0 [ 551.295819][ T31] genl_rcv+0x28/0x40 [ 551.299836][ T31] netlink_unicast+0x82f/0x9e0 [ 551.305170][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 551.310475][ T31] ? netlink_sendmsg+0x642/0xb30 [ 551.316504][ T31] ? skb_put+0x11b/0x210 [ 551.321520][ T31] netlink_sendmsg+0x805/0xb30 [ 551.326321][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.332029][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 551.336991][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 551.342692][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.347993][ T31] __sock_sendmsg+0x21c/0x270 [ 551.353034][ T31] __sys_sendto+0x3bd/0x520 [ 551.357555][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 551.363046][ T31] ? count_memcg_event_mm+0x21/0x260 [ 551.368351][ T31] ? exc_page_fault+0x82/0x100 [ 551.373481][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 551.378799][ T31] __x64_sys_sendto+0xde/0x100 [ 551.384036][ T31] do_syscall_64+0xfa/0xfa0 [ 551.388563][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.394399][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.400491][ T31] ? clear_bhb_loop+0x60/0xb0 [ 551.405625][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.411928][ T31] RIP: 0033:0x7f911df90e5c [ 551.416351][ T31] RSP: 002b:00007f911edaaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 551.425349][ T31] RAX: ffffffffffffffda RBX: 00007f911edaafc0 RCX: 00007f911df90e5c [ 551.433685][ T31] RDX: 0000000000000020 RSI: 00007f911edab010 RDI: 0000000000000005 [ 551.442070][ T31] RBP: 0000000000000000 R08: 00007f911edaaf14 R09: 000000000000000c [ 551.450042][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 551.458347][ T31] R13: 00007f911edaaf68 R14: 00007f911edab010 R15: 0000000000000000 [ 551.466906][ T31] [ 551.469961][ T31] INFO: task syz.1.2073:14135 blocked for more than 143 seconds. [ 551.478272][ T31] Not tainted syzkaller #0 [ 551.483715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.492787][ T31] task:syz.1.2073 state:D stack:24824 pid:14135 tgid:14134 ppid:5838 task_flags:0x480140 flags:0x00080002 [ 551.505303][ T31] Call Trace: [ 551.508623][ T31] [ 551.511900][ T31] __schedule+0x1798/0x4cc0 [ 551.516416][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.521709][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.526570][ T31] ? __pfx___schedule+0x10/0x10 [ 551.531884][ T31] ? schedule+0x91/0x360 [ 551.536133][ T31] schedule+0x165/0x360 [ 551.540390][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 551.546510][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 551.556454][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 551.561060][ T52] Bluetooth: hci17: command tx timeout [ 551.562756][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 551.574006][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 551.580263][ T31] nbd_set_size+0x47e/0x6a0 [ 551.585218][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 551.590260][ T31] ? nla_memcpy+0x5b/0xc0 [ 551.595032][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 551.600029][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 551.606054][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 551.612462][ T31] ? bpf_lsm_capable+0x9/0x20 [ 551.617302][ T31] ? security_capable+0x7e/0x2e0 [ 551.622792][ T31] ? radix_tree_lookup+0x240/0x290 [ 551.627984][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 551.633686][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 551.639430][ T31] ? rcu_is_watching+0x15/0xb0 [ 551.644749][ T31] ? __nla_parse+0x40/0x60 [ 551.649260][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 551.655997][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 551.661993][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 551.668074][ T31] ? stack_trace_save+0x9c/0xe0 [ 551.673362][ T31] genl_rcv_msg+0x60e/0x790 [ 551.677875][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.683321][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 551.689048][ T31] netlink_rcv_skb+0x208/0x470 [ 551.694233][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.699084][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.704602][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.709906][ T31] ? down_read+0x1ad/0x2e0 [ 551.715103][ T31] genl_rcv+0x28/0x40 [ 551.719115][ T31] netlink_unicast+0x82f/0x9e0 [ 551.724318][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 551.729609][ T31] ? netlink_sendmsg+0x642/0xb30 [ 551.734899][ T31] ? skb_put+0x11b/0x210 [ 551.739139][ T31] netlink_sendmsg+0x805/0xb30 [ 551.744330][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.749618][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 551.755038][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 551.760322][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.766027][ T31] __sock_sendmsg+0x21c/0x270 [ 551.770730][ T31] ____sys_sendmsg+0x505/0x830 [ 551.776026][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.781862][ T31] ? import_iovec+0x74/0xa0 [ 551.786372][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 551.791689][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.796931][ T31] ? __fget_files+0x2a/0x420 [ 551.802037][ T31] ? __fget_files+0x3a0/0x420 [ 551.806815][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 551.812095][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.817560][ T31] ? do_syscall_64+0xbe/0xfa0 [ 551.822906][ T31] do_syscall_64+0xfa/0xfa0 [ 551.827429][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.832957][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.839038][ T31] ? clear_bhb_loop+0x60/0xb0 [ 551.843953][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.849841][ T31] RIP: 0033:0x7f4c5a98efc9 [ 551.854307][ T31] RSP: 002b:00007f4c5b8b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.863121][ T31] RAX: ffffffffffffffda RBX: 00007f4c5abe5fa0 RCX: 00007f4c5a98efc9 [ 551.872013][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 551.880017][ T31] RBP: 00007f4c5aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 551.888442][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.896755][ T31] R13: 00007f4c5abe6038 R14: 00007f4c5abe5fa0 R15: 00007fffcf154bd8 [ 551.905216][ T31] [ 551.908250][ T31] INFO: task syz.1.2073:14138 blocked for more than 144 seconds. [ 551.916634][ T31] Not tainted syzkaller #0 [ 551.922012][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.930726][ T31] task:syz.1.2073 state:D stack:28328 pid:14138 tgid:14134 ppid:5838 task_flags:0x400040 flags:0x00080002 [ 551.943873][ T31] Call Trace: [ 551.947163][ T31] [ 551.950092][ T31] __schedule+0x1798/0x4cc0 [ 551.956186][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.962214][ T31] ? __lock_acquire+0xab9/0xd20 [ 551.967102][ T31] ? __pfx___schedule+0x10/0x10 [ 551.972090][ T31] ? schedule+0x91/0x360 [ 551.976339][ T31] schedule+0x165/0x360 [ 551.980515][ T31] schedule_preempt_disabled+0x13/0x30 [ 551.986045][ T31] __mutex_lock+0x7e6/0x1350 [ 551.990679][ T31] ? __mutex_lock+0x5bb/0x1350 [ 551.995730][ T31] ? genl_rcv_msg+0x10d/0x790 [ 552.000466][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 552.005587][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 552.011030][ T31] ? radix_tree_lookup+0x240/0x290 [ 552.016244][ T31] genl_rcv_msg+0x10d/0x790 [ 552.020790][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.025839][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 552.031027][ T52] Bluetooth: hci18: command tx timeout [ 552.031965][ T31] ? __asan_memcpy+0x40/0x70 [ 552.041570][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 552.046947][ T31] netlink_rcv_skb+0x208/0x470 [ 552.052231][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.057108][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.062286][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.067656][ T31] ? down_read+0x1ad/0x2e0 [ 552.072342][ T31] genl_rcv+0x28/0x40 [ 552.076356][ T31] netlink_unicast+0x82f/0x9e0 [ 552.081496][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 552.086828][ T31] ? netlink_sendmsg+0x642/0xb30 [ 552.092007][ T31] ? skb_put+0x11b/0x210 [ 552.096260][ T31] netlink_sendmsg+0x805/0xb30 [ 552.101083][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.106382][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.111718][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.117017][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.122350][ T31] __sock_sendmsg+0x21c/0x270 [ 552.127056][ T31] __sys_sendto+0x3bd/0x520 [ 552.131640][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 552.136718][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.141760][ T31] ? fd_install+0x97/0x540 [ 552.146180][ T31] ? fd_install+0x30d/0x540 [ 552.150684][ T31] __x64_sys_sendto+0xde/0x100 [ 552.155484][ T31] do_syscall_64+0xfa/0xfa0 [ 552.159989][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.165259][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.171401][ T31] ? clear_bhb_loop+0x60/0xb0 [ 552.176102][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.182223][ T31] RIP: 0033:0x7f4c5a990e5c [ 552.186647][ T31] RSP: 002b:00007f4c5b893ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 552.195878][ T31] RAX: ffffffffffffffda RBX: 00007f4c5b893fc0 RCX: 00007f4c5a990e5c [ 552.204033][ T31] RDX: 0000000000000028 RSI: 00007f4c5b894010 RDI: 0000000000000006 [ 552.212148][ T31] RBP: 0000000000000000 R08: 00007f4c5b893f14 R09: 000000000000000c [ 552.220143][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 552.228206][ T31] R13: 00007f4c5b893f68 R14: 00007f4c5b894010 R15: 0000000000000000 [ 552.236236][ T31] [ 552.239263][ T31] INFO: task syz.1.2073:14139 blocked for more than 144 seconds. [ 552.247307][ T31] Not tainted syzkaller #0 [ 552.252314][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.261019][ T31] task:syz.1.2073 state:D stack:26024 pid:14139 tgid:14134 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 552.273181][ T31] Call Trace: [ 552.276476][ T31] [ 552.279403][ T31] __schedule+0x1798/0x4cc0 [ 552.283957][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.288814][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.293903][ T31] ? __pfx___schedule+0x10/0x10 [ 552.298769][ T31] ? schedule+0x91/0x360 [ 552.303064][ T31] schedule+0x165/0x360 [ 552.307218][ T31] schedule_preempt_disabled+0x13/0x30 [ 552.312714][ T31] __mutex_lock+0x7e6/0x1350 [ 552.317310][ T31] ? __mutex_lock+0x5bb/0x1350 [ 552.322131][ T31] ? genl_rcv_msg+0x10d/0x790 [ 552.326834][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 552.332032][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 552.337433][ T31] ? radix_tree_lookup+0x240/0x290 [ 552.342829][ T31] genl_rcv_msg+0x10d/0x790 [ 552.347357][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.352869][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 552.357948][ T31] ? __asan_memcpy+0x40/0x70 [ 552.362586][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 552.367961][ T31] netlink_rcv_skb+0x208/0x470 [ 552.372764][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.377615][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.382696][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.388015][ T31] ? down_read+0x1ad/0x2e0 [ 552.392630][ T31] genl_rcv+0x28/0x40 [ 552.396611][ T31] netlink_unicast+0x82f/0x9e0 [ 552.401533][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 552.406863][ T31] ? netlink_sendmsg+0x642/0xb30 [ 552.411899][ T31] ? skb_put+0x11b/0x210 [ 552.416162][ T31] netlink_sendmsg+0x805/0xb30 [ 552.421011][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.426333][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.431543][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.436847][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.442349][ T31] __sock_sendmsg+0x21c/0x270 [ 552.447030][ T31] __sys_sendto+0x3bd/0x520 [ 552.451582][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 552.456634][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.461641][ T31] ? fd_install+0x97/0x540 [ 552.466066][ T31] ? fd_install+0x30d/0x540 [ 552.470574][ T31] __x64_sys_sendto+0xde/0x100 [ 552.475405][ T31] do_syscall_64+0xfa/0xfa0 [ 552.479942][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.485223][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.491566][ T31] ? clear_bhb_loop+0x60/0xb0 [ 552.496276][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.502241][ T31] RIP: 0033:0x7f4c5a990e5c [ 552.506653][ T31] RSP: 002b:00007f4c5b872ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 552.515360][ T31] RAX: ffffffffffffffda RBX: 00007f4c5b872fc0 RCX: 00007f4c5a990e5c [ 552.523398][ T31] RDX: 0000000000000020 RSI: 00007f4c5b873010 RDI: 0000000000000008 [ 552.531429][ T31] RBP: 0000000000000000 R08: 00007f4c5b872f14 R09: 000000000000000c [ 552.539422][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 552.547584][ T31] R13: 00007f4c5b872f68 R14: 00007f4c5b873010 R15: 0000000000000000 [ 552.555667][ T31] [ 552.558728][ T31] INFO: task syz.4.2074:14141 blocked for more than 144 seconds. [ 552.566486][ T31] Not tainted syzkaller #0 [ 552.571495][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.580215][ T31] task:syz.4.2074 state:D stack:26088 pid:14141 tgid:14140 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 552.592500][ T31] Call Trace: [ 552.595845][ T31] [ 552.598809][ T31] __schedule+0x1798/0x4cc0 [ 552.603438][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.608449][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.613448][ T31] ? __pfx___schedule+0x10/0x10 [ 552.618352][ T31] ? schedule+0x91/0x360 [ 552.622710][ T31] schedule+0x165/0x360 [ 552.626875][ T31] schedule_preempt_disabled+0x13/0x30 [ 552.632452][ T31] __mutex_lock+0x7e6/0x1350 [ 552.637049][ T31] ? __mutex_lock+0x5bb/0x1350 [ 552.642079][ T31] ? genl_rcv_msg+0x10d/0x790 [ 552.646758][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 552.651924][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 552.657319][ T31] ? radix_tree_lookup+0x240/0x290 [ 552.662822][ T31] genl_rcv_msg+0x10d/0x790 [ 552.667344][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.672892][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 552.677931][ T31] ? __asan_memcpy+0x40/0x70 [ 552.682719][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 552.688131][ T31] netlink_rcv_skb+0x208/0x470 [ 552.693212][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.698066][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.703141][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.708472][ T31] ? down_read+0x1ad/0x2e0 [ 552.712955][ T31] genl_rcv+0x28/0x40 [ 552.716952][ T31] netlink_unicast+0x82f/0x9e0 [ 552.721787][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 552.727196][ T31] ? netlink_sendmsg+0x642/0xb30 [ 552.732280][ T31] ? skb_put+0x11b/0x210 [ 552.736554][ T31] netlink_sendmsg+0x805/0xb30 [ 552.741632][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.747015][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.752178][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.757504][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.762876][ T31] __sock_sendmsg+0x21c/0x270 [ 552.767562][ T31] ____sys_sendmsg+0x505/0x830 [ 552.772419][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.777724][ T31] ? import_iovec+0x74/0xa0 [ 552.782317][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 552.787024][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.792431][ T31] ? futex_wait+0x285/0x360 [ 552.796967][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 552.801954][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.807420][ T31] ? do_syscall_64+0xbe/0xfa0 [ 552.812136][ T31] do_syscall_64+0xfa/0xfa0 [ 552.816636][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.821866][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.827925][ T31] ? clear_bhb_loop+0x60/0xb0 [ 552.832808][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.838735][ T31] RIP: 0033:0x7f10ffb8efc9 [ 552.843406][ T31] RSP: 002b:00007f110099f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.851898][ T31] RAX: ffffffffffffffda RBX: 00007f10ffde5fa0 RCX: 00007f10ffb8efc9 [ 552.859891][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 552.867912][ T31] RBP: 00007f10ffc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 552.875956][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.884008][ T31] R13: 00007f10ffde6038 R14: 00007f10ffde5fa0 R15: 00007ffebf6cf8a8 [ 552.892199][ T31] [ 552.895253][ T31] INFO: task syz.3.2076:14150 blocked for more than 145 seconds. [ 552.903177][ T31] Not tainted syzkaller #0 [ 552.908108][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.917023][ T31] task:syz.3.2076 state:D stack:28488 pid:14150 tgid:14149 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 552.929104][ T31] Call Trace: [ 552.932468][ T31] [ 552.935406][ T31] __schedule+0x1798/0x4cc0 [ 552.939917][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.944972][ T31] ? __lock_acquire+0xab9/0xd20 [ 552.949823][ T31] ? __pfx___schedule+0x10/0x10 [ 552.954786][ T31] ? schedule+0x91/0x360 [ 552.959037][ T31] schedule+0x165/0x360 [ 552.963225][ T31] schedule_preempt_disabled+0x13/0x30 [ 552.968697][ T31] __mutex_lock+0x7e6/0x1350 [ 552.973326][ T31] ? __mutex_lock+0x5bb/0x1350 [ 552.978091][ T31] ? genl_rcv_msg+0x10d/0x790 [ 552.982915][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 552.987977][ T31] ? stack_trace_save+0x9c/0xe0 [ 552.994172][ T31] ? radix_tree_lookup+0x240/0x290 [ 552.999318][ T31] genl_rcv_msg+0x10d/0x790 [ 553.003879][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.008739][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.013807][ T31] netlink_rcv_skb+0x208/0x470 [ 553.018591][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.023466][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.028503][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.033868][ T31] ? down_read+0x1ad/0x2e0 [ 553.038313][ T31] genl_rcv+0x28/0x40 [ 553.042468][ T31] netlink_unicast+0x82f/0x9e0 [ 553.047236][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 553.052628][ T31] ? netlink_sendmsg+0x642/0xb30 [ 553.057615][ T31] ? skb_put+0x11b/0x210 [ 553.061949][ T31] netlink_sendmsg+0x805/0xb30 [ 553.066718][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.072072][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 553.077050][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.082380][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.087663][ T31] __sock_sendmsg+0x21c/0x270 [ 553.092516][ T31] __sys_sendto+0x3bd/0x520 [ 553.097033][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 553.102148][ T31] ? count_memcg_event_mm+0x21/0x260 [ 553.107456][ T31] ? exc_page_fault+0x82/0x100 [ 553.112261][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 553.117568][ T31] __x64_sys_sendto+0xde/0x100 [ 553.122368][ T31] do_syscall_64+0xfa/0xfa0 [ 553.126871][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.132112][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.138192][ T31] ? clear_bhb_loop+0x60/0xb0 [ 553.143056][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.148986][ T31] RIP: 0033:0x7ff2f2790e5c [ 553.153777][ T52] Bluetooth: hci19: command tx timeout [ 553.155508][ T31] RSP: 002b:00007ff2f358dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 553.168592][ T31] RAX: ffffffffffffffda RBX: 00007ff2f358dfc0 RCX: 00007ff2f2790e5c [ 553.176745][ T31] RDX: 0000000000000020 RSI: 00007ff2f358e010 RDI: 0000000000000007 [ 553.184759][ T31] RBP: 0000000000000000 R08: 00007ff2f358df14 R09: 000000000000000c [ 553.192919][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 553.200947][ T31] R13: 00007ff2f358df68 R14: 00007ff2f358e010 R15: 0000000000000000 [ 553.208947][ T31] [ 553.212068][ T31] INFO: task syz.0.2081:14165 blocked for more than 145 seconds. [ 553.219796][ T31] Not tainted syzkaller #0 [ 553.224766][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.233631][ T31] task:syz.0.2081 state:D stack:28328 pid:14165 tgid:14164 ppid:5832 task_flags:0x400040 flags:0x00080002 [ 553.245794][ T31] Call Trace: [ 553.249073][ T31] [ 553.252039][ T31] __schedule+0x1798/0x4cc0 [ 553.256555][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.261433][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.266279][ T31] ? __pfx___schedule+0x10/0x10 [ 553.271212][ T31] ? schedule+0x91/0x360 [ 553.275489][ T31] schedule+0x165/0x360 [ 553.279689][ T31] schedule_preempt_disabled+0x13/0x30 [ 553.285329][ T31] __mutex_lock+0x7e6/0x1350 [ 553.289945][ T31] ? __mutex_lock+0x5bb/0x1350 [ 553.295239][ T31] ? genl_rcv_msg+0x10d/0x790 [ 553.299942][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 553.305124][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 553.310515][ T31] ? radix_tree_lookup+0x240/0x290 [ 553.316146][ T31] genl_rcv_msg+0x10d/0x790 [ 553.320692][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.326089][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 553.331530][ T31] ? __asan_memcpy+0x40/0x70 [ 553.336129][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 553.341900][ T31] netlink_rcv_skb+0x208/0x470 [ 553.346673][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.352054][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.357103][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.362784][ T31] ? down_read+0x1ad/0x2e0 [ 553.367204][ T31] genl_rcv+0x28/0x40 [ 553.371645][ T31] netlink_unicast+0x82f/0x9e0 [ 553.376436][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 553.382235][ T31] ? netlink_sendmsg+0x642/0xb30 [ 553.387223][ T31] ? skb_put+0x11b/0x210 [ 553.393106][ T31] netlink_sendmsg+0x805/0xb30 [ 553.397921][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.403776][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 553.408752][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.414142][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.419451][ T31] __sock_sendmsg+0x21c/0x270 [ 553.424213][ T31] __sys_sendto+0x3bd/0x520 [ 553.428746][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 553.433872][ T31] ? count_memcg_event_mm+0x21/0x260 [ 553.439282][ T31] ? exc_page_fault+0x82/0x100 [ 553.444431][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 553.449723][ T31] __x64_sys_sendto+0xde/0x100 [ 553.454985][ T31] do_syscall_64+0xfa/0xfa0 [ 553.459522][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.464973][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.471108][ T31] ? clear_bhb_loop+0x60/0xb0 [ 553.475806][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.481779][ T31] RIP: 0033:0x7fa983b90e5c [ 553.486200][ T31] RSP: 002b:00007fa9849b1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 553.494693][ T31] RAX: ffffffffffffffda RBX: 00007fa9849b1fc0 RCX: 00007fa983b90e5c [ 553.502895][ T31] RDX: 0000000000000020 RSI: 00007fa9849b2010 RDI: 0000000000000005 [ 553.511327][ T31] RBP: 0000000000000000 R08: 00007fa9849b1f14 R09: 000000000000000c [ 553.519325][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 553.527355][ T31] R13: 00007fa9849b1f68 R14: 00007fa9849b2010 R15: 0000000000000000 [ 553.535403][ T31] [ 553.538469][ T31] [ 553.538469][ T31] Showing all locks held in the system: [ 553.546343][ T31] 1 lock held by khungtaskd/31: [ 553.551375][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 553.561553][ T31] 2 locks held by getty/5586: [ 553.566237][ T31] #0: ffff88814d88d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 553.576154][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 553.586326][ T31] 1 lock held by udevd/13028: [ 553.591161][ T31] #0: ffff888024fa2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 553.600443][ T31] 2 locks held by syz.5.2070/14136: [ 553.605728][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.614219][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.623338][ T31] 6 locks held by syz.1.2073/14135: [ 553.628533][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.637092][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.646190][ T31] #2: ffff888024f93a70 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 553.656779][ T31] #3: ffff888024f990d8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 553.666367][ T31] #4: ffff888024f98a78 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 553.678539][ T31] #5: ffff888024f98ab0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 553.690962][ T31] 2 locks held by syz.1.2073/14138: [ 553.696171][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.704392][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.713826][ T31] 2 locks held by syz.1.2073/14139: [ 553.719131][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.727430][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.736594][ T31] 2 locks held by syz.4.2074/14141: [ 553.741816][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.750014][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.759085][ T31] 2 locks held by syz.3.2076/14150: [ 553.764610][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.772849][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.781942][ T31] 2 locks held by syz.0.2081/14165: [ 553.787131][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.795459][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.804643][ T31] 2 locks held by syz-executor/14170: [ 553.810028][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.818437][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.827462][ T31] 2 locks held by syz-executor/14172: [ 553.832875][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.841306][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.850337][ T31] 2 locks held by syz-executor/14174: [ 553.855763][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.864208][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.873586][ T31] 2 locks held by syz-executor/14180: [ 553.879472][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.887757][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.896833][ T31] 2 locks held by syz-executor/14188: [ 553.902382][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.910602][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.919882][ T31] 2 locks held by syz-executor/14214: [ 553.925324][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.933642][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.942770][ T31] 2 locks held by syz-executor/14216: [ 553.948137][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.956436][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.965619][ T31] 2 locks held by syz-executor/14227: [ 553.971031][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 553.979262][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 553.988493][ T31] 2 locks held by syz-executor/14230: [ 553.993925][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.002141][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.011433][ T31] 2 locks held by syz-executor/14237: [ 554.016849][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.025111][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.034717][ T31] 2 locks held by syz-executor/14259: [ 554.040111][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.048370][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.057487][ T31] 2 locks held by syz-executor/14261: [ 554.063136][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.071383][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.080390][ T31] 2 locks held by syz-executor/14273: [ 554.085847][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.094150][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.103199][ T31] 2 locks held by syz-executor/14281: [ 554.108564][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.117005][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.126028][ T31] 2 locks held by syz-executor/14285: [ 554.131446][ T31] #0: ffffffff8f331030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 554.139626][ T31] #1: ffffffff8f330e48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 554.148688][ T31] [ 554.151105][ T31] ============================================= [ 554.151105][ T31] [ 554.159533][ T31] NMI backtrace for cpu 1 [ 554.159547][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 554.159561][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.159569][ T31] Call Trace: [ 554.159574][ T31] [ 554.159580][ T31] dump_stack_lvl+0x189/0x250 [ 554.159602][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.159618][ T31] ? __pfx__printk+0x10/0x10 [ 554.159637][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 554.159657][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 554.159671][ T31] ? __pfx__printk+0x10/0x10 [ 554.159685][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 554.159706][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 554.159720][ T31] watchdog+0xf60/0xfa0 [ 554.159735][ T31] ? watchdog+0x1e2/0xfa0 [ 554.159750][ T31] kthread+0x711/0x8a0 [ 554.159768][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.159779][ T31] ? __pfx_kthread+0x10/0x10 [ 554.159796][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.159810][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.159824][ T31] ? __pfx_kthread+0x10/0x10 [ 554.159839][ T31] ret_from_fork+0x4bc/0x870 [ 554.159853][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 554.159869][ T31] ? __switch_to_asm+0x39/0x70 [ 554.159878][ T31] ? __switch_to_asm+0x33/0x70 [ 554.159887][ T31] ? __pfx_kthread+0x10/0x10 [ 554.159903][ T31] ret_from_fork_asm+0x1a/0x30 [ 554.159922][ T31] [ 554.159927][ T31] Sending NMI from CPU 1 to CPUs 0: [ 554.306527][ C0] NMI backtrace for cpu 0 [ 554.306545][ C0] CPU: 0 UID: 0 PID: 7394 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 554.306565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.306575][ C0] Workqueue: events_unbound toggle_allocation_gate [ 554.306597][ C0] RIP: 0010:load_new_mm_cr3+0x14f/0x1e0 [ 554.306622][ C0] Code: b7 c3 3d ff 07 00 00 73 4c f7 c3 00 08 00 00 75 50 ff c3 0f b7 c3 48 09 c1 48 b8 00 00 00 00 00 00 00 80 48 09 c8 0f 22 d8 5b <41> 5c 41 5e 41 5f e9 c6 ad d3 09 cc 90 0f 0b 90 eb af 90 0f 0b 90 [ 554.306636][ C0] RSP: 0018:ffffc9001b2574c0 EFLAGS: 00000046 [ 554.306649][ C0] RAX: 000000000dd38000 RBX: dffffc0000000000 RCX: ffff888068628000 [ 554.306661][ C0] RDX: 0000000000000000 RSI: 000000000dd38000 RDI: 000000001fffffff [ 554.306671][ C0] RBP: ffffc9001b2575b0 R08: ffffffff8e048c5f R09: 1ffffffff1c0918b [ 554.306683][ C0] R10: dffffc0000000000 R11: fffffbfff1c0918c R12: ffffffff8e0485b8 [ 554.306694][ C0] R13: ffffffff8e048500 R14: ffffffff8dd38000 R15: 0000000000010000 [ 554.306706][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 554.306725][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.306736][ C0] CR2: 00007f4333917d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 554.306752][ C0] Call Trace: [ 554.306759][ C0] [ 554.306767][ C0] switch_mm_irqs_off+0x539/0x7b0 [ 554.306791][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 554.306812][ C0] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 554.306830][ C0] ? do_raw_spin_lock+0x121/0x290 [ 554.306849][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 554.306871][ C0] unuse_temporary_mm+0x136/0x220 [ 554.306893][ C0] ? __pfx_unuse_temporary_mm+0x10/0x10 [ 554.306914][ C0] ? __text_poke+0x636/0xa10 [ 554.306933][ C0] ? kasan_check_range+0x2b0/0x2c0 [ 554.306947][ C0] ? __text_poke+0x636/0xa10 [ 554.306967][ C0] ? kmem_cache_alloc_node_noprof+0x8b/0x710 [ 554.306987][ C0] __text_poke+0x6c8/0xa10 [ 554.307008][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 554.307027][ C0] ? kmem_cache_alloc_node_noprof+0x8b/0x710 [ 554.307046][ C0] ? __pfx___text_poke+0x10/0x10 [ 554.307063][ C0] ? rcu_is_watching+0x15/0xb0 [ 554.307080][ C0] ? trace_contention_end+0x39/0x120 [ 554.307104][ C0] smp_text_poke_batch_finish+0x90a/0x1130 [ 554.307130][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 554.307152][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 554.307180][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 554.307201][ C0] static_key_disable_cpuslocked+0xc5/0x1b0 [ 554.307225][ C0] static_key_disable+0x1a/0x20 [ 554.307243][ C0] toggle_allocation_gate+0x1a1/0x240 [ 554.307258][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 554.307273][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 554.307297][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 554.307313][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 554.307329][ C0] process_scheduled_works+0xae1/0x17b0 [ 554.307358][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.307381][ C0] worker_thread+0x8a0/0xda0 [ 554.307409][ C0] kthread+0x711/0x8a0 [ 554.307430][ C0] ? __pfx_worker_thread+0x10/0x10 [ 554.307446][ C0] ? __pfx_kthread+0x10/0x10 [ 554.307465][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.307484][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.307501][ C0] ? __pfx_kthread+0x10/0x10 [ 554.307520][ C0] ret_from_fork+0x4bc/0x870 [ 554.307537][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 554.307555][ C0] ? __switch_to_asm+0x39/0x70 [ 554.307568][ C0] ? __switch_to_asm+0x33/0x70 [ 554.307580][ C0] ? __pfx_kthread+0x10/0x10 [ 554.307598][ C0] ret_from_fork_asm+0x1a/0x30 [ 554.307640][ C0]