last executing test programs: 20.782327901s ago: executing program 3 (id=3820): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x29, 0x19, 0xf, 0xfffffff8, 0x20, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x30, 0x700, 0x22, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'sit0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x6, 0x8, {{0x3c, 0x4, 0x3, 0x25, 0xf0, 0x67, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010100, {[@timestamp_prespec={0x44, 0x34, 0x61, 0x3, 0x2, [{@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x6}, {@rand_addr=0x64010102}, {@rand_addr=0x64010101}, {@remote, 0x3}]}, @cipso={0x86, 0x23, 0x0, [{0x6, 0xb, "f087a74cddacb633d5"}, {0x4, 0x2}, {0x0, 0x5, "e540f3"}, {0x0, 0x5, "e70244"}, {0x6, 0x6, "85d57116"}]}, @timestamp={0x44, 0x10, 0xc1, 0x0, 0x1, [0x80000000, 0xaa, 0xd6d]}, @timestamp_addr={0x44, 0xc, 0xef, 0x1, 0x6, [{@broadcast, 0x7}]}, @end, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0x2, [{@private=0xa010101, 0xb}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x17, 0x3, 0x0, [{@empty, 0x2}, {@empty, 0x5}, {@local, 0x9}, {@multicast1, 0xcf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x309}]}, @timestamp={0x44, 0x2c, 0x54, 0x0, 0x0, [0xd, 0xf, 0x7fff, 0x3, 0x8001, 0xff, 0x2, 0x9, 0xffff, 0x8]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="1fdd152462d36dd529e98ca8c437bd91e1bd9718bb7ef4db074894cf2596b895d2b304ccfd6631c909b437f438c23ffb1b63d7b3101a2b476ae5fdf91f85e2d6c061e8f94ed9c2e34fc11f17", 0x4c}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x17, [@remote, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0xd0, 0x1, 0x5, [{@rand_addr=0x64010102, 0xffff}, {@rand_addr=0x64010101, 0x58ae7af7}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x2}]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @end, @generic={0x7, 0x3, "bc"}, @rr={0x7, 0x17, 0x95, [@broadcast, @multicast1, @local, @remote, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x27}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x148}}, {{&(0x7f0000000280)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="f3069725353a06c542d499ea377fb8a2f75816c1ddd41b7e7379f27f236cae85", 0x20}, {&(0x7f0000000340)="8a620707c2fc10690f994115938014bf6fcdd8f67ea49dd9fe3da4", 0x1b}, {&(0x7f0000000380)="2073982e378f98a4dd321925875a9d775c50e1ed658950befebd763faf70dd9c24e2b2f3e3c3f7065bc4c87c6dd5bc30f6aac995f32efd478d4910e3d5c609a71f7c4018cf96ef481d1c9db22ef8ee189f30c16164f65079499d1a98110aac42ffb01fd49e47348727f36eb29071843c259c7b754072e28ded5fed718c910421032ced9aeffb69d3f3ae1119566bc70873e21b4d5e83149ffbdddf14fe01e00c93e25ef27b469999b5a18735049380876161b5a42cde2a0d650003cc04ae0164d9d6fb16db8672639f77b0c30c01eb51be0f577849089439b5474098fdf5c09987f5397fadd3", 0xe6}], 0x4, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}], 0x70}}, {{&(0x7f0000000600)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000640)="ef18", 0x2}, {&(0x7f0000000680)="1932aff41072b4cced5c5019310b3151b4fe9ae9df1d991881e8b497179dec16c944c6d07a790af7af3eb442ab2fd6d4550c12c699984920b021c721e131cce347a36cd7c973d7fd926e624c71c79f2569cd4fd5c090f777a20b2b5d163b95b8f067a17c4a3af8f33bfe670223be03ecb75174d8c384c40fa536c5cb211014b6bd897105ae5d1700c8029c25515d95318d580930fa3060cd40a4a4f0049d96fd59f74609b521582b550c49bb98d2f7ad6e47f6c2995ee6f9279e8499eb890a6d8b9feb12", 0xc4}], 0x2, &(0x7f0000000940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @dev={0xac, 0x14, 0x14, 0x31}}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x7e, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0x11, "4e600d1eefb3430220ac0f0e5d5a60"}, @lsrr={0x83, 0x1b, 0x2, [@local, @remote, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1]}, @cipso={0x86, 0x3d, 0x3, [{0x1, 0xe, "450c27f3b6d560299b7e0232"}, {0x5, 0x12, "a1837c576b2dede1c4d54ba70bb5f07e"}, {0x5, 0x6, 'z/3\x00'}, {0x5, 0x2}, {0x0, 0x5, "ce3875"}, {0x7, 0xa, "22a4c32c2c7d96c2"}]}, @cipso={0x86, 0x30, 0x3, [{0x7, 0x11, "368b101a01c694508df5e2ad371044"}, {0x1, 0x3, "ca"}, {0x0, 0x7, "1124f6f97a"}, {0x0, 0x3, "1c"}, {0x5, 0xc, "2e845996f20c4e92a295"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x150}}], 0x3, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000b80)={@any, 0x0, 0x8, 0x9, 0x200, 0x81, "51a76fde3b8a381e4c208dc70c5846f57425e9cc8004f414e5079017cf481fc072776f10d35573306572f8dd7e00185a21509ea33e4b061345cb8d2919619df547505f182f3b5f753d04d8a34991dac61ff6d4eca3ed005ef138af2dfb847da172241e30e2a6c0ad3b9922af7f0c861e58def1aee63136d81d98fb027caf4148"}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x40}}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x277}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000801}, 0x15) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x20010, r0, 0xbf22a000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x60, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfe}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20010}, 0x48001) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000f80)='memory.current\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x3, 0x9, 0x7fff, 0x2, 0x2, r7, 0x1, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1}, 0x50) getpeername$l2tp(r7, &(0x7f0000001040)={0x2, 0x0, @multicast1}, &(0x7f0000001080)=0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000010c0)={@mcast1, 0x37, r1}) write$cgroup_subtree(r7, &(0x7f0000001100)={[{0x2d, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'rdma'}, {0x2b, 'cpu'}, {0x2d, 'freezer'}, {0x2d, 'rdma'}, {0x2b, 'net'}, {0x2d, 'rlimit'}]}, 0x31) getpeername$packet(r7, &(0x7f0000001180)={0x11, 0x0, 0x0}, &(0x7f00000011c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=@bridge_getvlan={0x38, 0x72, 0x2, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x804) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000012c0)) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r4) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r9, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) sendmsg$nl_route(r7, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x28804cc}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)=@RTM_DELMDB={0xb8, 0x55, 0x1, 0x70bd2a, 0x25dfdbfc, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x0, {@in6_addr=@private1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x3, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @remote}, 0x18367}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x0, {@in6_addr=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x1, 0x0, {@in6_addr=@empty, 0x8edd}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$nl_route(r7, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)=@setneightbl={0x48, 0x43, 0x400, 0x70bd2a, 0x25dfdbfe, {0x8}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0xffffffffffffff81}, @NDTA_THRESH3={0x8, 0x4, 0x6}, @NDTA_THRESH3={0x8}, @NDTA_THRESH2={0x8, 0x3, 0xd}, @NDTA_NAME={0xf, 0x1, 'syzkaller1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8885}, 0x4048840) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x84, r10, 0x204, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x8, 0x2}, {0x5, 0x4}, {0x30, 0x4}, {0xf0, 0x1}], "1d374f3d1e63f36b"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x9, 0x5}, {0xd, 0x2}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x1}, {0xf5, 0x3}, {0x4, 0x7}, {0x36, 0x6}, {0x6, 0x6}, {0x5, 0x4}, {0x0, 0x6}], "e2942182be496c61"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x80, 0x4}, {0x5, 0x4}, {0x8, 0x4}, {0x0, 0x2}, {0x4, 0x2}, {0x8, 0x1}, {0x51, 0x5}, {0x3}, {0x8, 0x6}, {0x67}, {0xd5, 0x6}, {0x6, 0x7}, {0xa, 0x5}], "9e747e4d215f62d5"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_route(r7, &(0x7f0000001c00)={&(0x7f0000001ac0), 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)=@setlink={0x98, 0x13, 0x0, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x200, 0x8000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0xf20e}, @IFLA_EVENT={0x8, 0x2c, 0x3559}, @IFLA_ADDRESS={0xa, 0x1, @random="3e5f612eac70"}, @IFLA_IFALIASn={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_ALT_IFNAME={0x14}, @IFLA_PHYS_SWITCH_ID={0x19, 0x24, "67afe87a26966550b85e7890c6a2183cd743024f8d"}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c0}, 0x8054) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000001f00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x118, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4011}, 0x400c880) 20.667328918s ago: executing program 3 (id=3824): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000080)=0x9, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0xa8, 0x0, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002"], 0xdc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a7fbb}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010029bd7000ffdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="080205008094010005002100070000001400350064756d6d793000"/36], 0x3c}}, 0x4048004) 20.483410616s ago: executing program 3 (id=3826): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r2}, &(0x7f0000000340)=0x8) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x10, 0x200, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, r4, {0x1, 0x10}, {0x10, 0xfff1}, {0x1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040020}, 0x0) 20.287259566s ago: executing program 3 (id=3830): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0xfffffffffffffe9b}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xb}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4048000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff, 0x4}, {0x0, 0x9}, {0xf, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x20, 0x7, 0xffe00000, 0x3ff, {{0xb, 0x4, 0x2, 0x9, 0x2c, 0x65, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x7, 0x89, [@rand_addr=0x64010100]}, @end, @generic={0x88, 0xa, "9dae95693374287a"}, @ra={0x94, 0x4}, @end]}}}}}) 19.826874538s ago: executing program 0 (id=3838): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5fe4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x30bd28, 0x0, {0x4}, [@nested={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) 19.804407411s ago: executing program 3 (id=3840): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="95000000ad0000009500000001000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) 19.619373737s ago: executing program 2 (id=3842): getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000019580)={'filter\x00', 0x7, 0x4, 0x4c8, 0x110, 0x0, 0x110, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0xff000000, 0xff, 0x9, 0x1, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x0, 0x8, 0x3ff, 0x2, 0x2, 'veth0_vlan\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010100, @loopback, 0xf, 0x1}}}, {{@arp={@local, @empty, 0xff000000, 0xff000000, 0xe, 0x6, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="757930b1b98a", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0xffff, 0x4, 0x21, 0x5, 0x2, 'ip_vti0\x00', 'pim6reg1\x00', {0xff}, {0x7f}, 0x0, 0x26c}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@multicast2, @broadcast, 0xffffff00, 0x0, 0xc, 0x9, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="23fc13b910db", {[0x0, 0xff]}}, 0xfb3, 0x1, 0x2, 0x9, 0x5, 0x3, 'geneve0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x0, 0xbdffa750df69ccdb}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x40, 'system_u:object_r:lost_found_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r4, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r6, 0x45, "9719ea8012338b15e1d9a99b668c0887b4d7e217407d8d4b4505493684c39c9f25b8cb1a679a6eb29c11ff99c3e15f498a7f03fe6840d97bdb25ea534af54775d597ad13e3"}, &(0x7f0000000140)=0x4d) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x3}}, 0x5, 0x0, 0xfffffff8, 0x5, 0x0, 0xfffffff8}, 0x9c) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @broadcast}, 0x204, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000100)='macvlan0\x00', 0x3, 0x9, 0x8}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r6}, 0x8) 19.518191508s ago: executing program 0 (id=3844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async, rerun: 64) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000200)={r4, &(0x7f0000000040)='\x00', 0x10002, &(0x7f00000000c0)={@_ha_fsid={[0x1ff, 0x7]}, {0x8, 0x2, 0x0, 0x1960e0f5}}, 0x7fff, &(0x7f0000000180), &(0x7f00000001c0)=0xd4b}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x1}, 0x8}, 0x1c) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="400000001000"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) 19.459314273s ago: executing program 2 (id=3845): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'cpu\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000380)) 19.401271636s ago: executing program 0 (id=3846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200002520000000000a050000000000f7ff00000100fffc0900010073797a300000000040000000030a010100000000000000000f0000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a0104000000000000000001000000240004802000018007000100721142a9b8f35f26f9000140000000f7070002400000000408000b40000000000900010073797a3000000000140000001100125800000000000000000000000a"], 0xd4}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x95daabe3d5b7bcb) accept4$bt_l2cap(r3, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c68100100008004cb4004400000000a3069078ac1414bbac1414aa441ca2430000000000000007e000000200000006e0000002000000014e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002496b4ebd0000"], 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14fb78bba5c3a1827a4683d68c0000f9473e339d604dc29f3bc90d0fd5fe1e58532ded00c3607d372e302f8af19bc100000000", @ANYRES16=0x0, @ANYBLOB="0400fcfffffffddbdf2512000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000c97a8057fd1d0fd9a0f3c58f9bf32cda570435a267de396410d70aa4a2fe72c232899124a31d85f466d6a78f3ba84b6675e1ffe32208a12e39b271e6639cd6ad4438da1e0206e3d562abeb91ea89a7618d3d23ba1fea1c84ce02a05a7e74d0193ecde259348719e9d69da60e149b1b7a50015fd6c27037b9f6403caa26e2c8e3ba44fad3a25b12166e20674004ea0526af771fdf7a622e6431deb05ee7c0140135d2913fb4bf67defba99702f947a3883c70a5e266a5266900b0332e3e88e307b4dc934d49729edb244a71f93d5e2e", @ANYRES16=r9, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x40080) r11 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write(r11, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000001800)) 19.340993112s ago: executing program 4 (id=3847): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 19.279207384s ago: executing program 2 (id=3848): socketpair(0x8979d398cbba0db7, 0x6, 0xb6, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000140a030000000000000000000a0000010c000640000000040000000408000340000000010900010073797a31000000001400004d25a279939d395e9cae001100010000000000faef00000300000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4008}, 0xa000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {0x0, 0x9}, {0x8, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20048044) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$inet(0x10, 0x3, 0x0) (async) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="b266edea", 0x4}], 0x1}}], 0x1, 0x4001c00) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) 19.054016055s ago: executing program 0 (id=3850): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9507ed387dbe9abc89b6f858f", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.980784959s ago: executing program 4 (id=3851): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$int_out(r0, 0x5462, &(0x7f0000001380)) syz_emit_ethernet(0xba, &(0x7f00000002c0)={@multicast, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x800, @igmp={{0x1a, 0x4, 0x0, 0x0, 0xa8, 0x68, 0x0, 0x7, 0x2, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x23, 0xa9, [@broadcast, @multicast2, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1, @empty]}, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x0, 0x2}, {0x5, 0xf, "b3403a4f3237d7d19ae66f34d5"}, {0x2, 0x9, "45b6bde300d51f"}, {0x5, 0x10, "9c86131e3f30f7d6158d240660ec"}]}]}}, {0x22, 0x9, 0x0, @rand_addr=0x1, "cb17de7b4a94017e874710b632fb0f21dfcb45bec8aabc26b54dc662380b478ab2ff890bb16749c33a3b50c8fc6ba4fe46cb99c2fb68cf08"}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x100}}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @private=0xa010100}, 0x56) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000380)="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", 0x1000}], 0x1) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x48000) 18.679056609s ago: executing program 4 (id=3853): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x10, r6, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000400)) write$cgroup_type(r4, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 18.44420672s ago: executing program 3 (id=3854): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r4, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r3, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000380)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000b38149e43da519e131000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800060000000000"], 0x54}}, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {0xc, 0xfff1}, {0x8, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r11, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r13, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040404) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$packet(r1, &(0x7f0000000240)="44c394f305916c4516999da2080095a11ada0a96a7113c0ca50c0be5993e477c43fd", 0x22, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) 18.302681259s ago: executing program 4 (id=3855): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'caif0\x00', {}, 0x5}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.275467015s ago: executing program 2 (id=3856): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002080)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="b1", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0642ea070aeebc00c551f0367eb7dd87abb4bd1a36e41c02455f845ff", 0xe0}, {&(0x7f0000000740)="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", 0x71f}], 0x3, 0x0, 0x0, 0x880}, {0x0, 0x0, &(0x7f0000001ec0), 0x0, &(0x7f0000001f00)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0xa8d4821eba989719}, @iv={0x108, 0x117, 0x2, 0xf2, "cdb5e1a5ad2a6f425e9bab358cf4907ca0105ad8fe7733c4895f05fd0690ac5a9120afedf06a19b3a875b848d9cf705e50078061247f6340a29a38fdad33174a5e238673c6c189c11d59257990a194ef50d76e3e912ba4b0c3cb8c5fcac5f78c3e409ebdecd1d4181571ab65b89c42c3c6d6968354e897f7456eb679f1b017119d982939f9cc24ded5103a7824dd131abd711ac9ee3de8a2e26a377a850bb791981f62f62db714a9bbee7db2e2c7e30e778c54d8a68105e9bef1929b71caf20b7fe2b133b1a72f765d829a2dc5f168e8e192a9ce1062e099cfbac6055784786c7128aff30a38600793d4047e0a7e9c4857d2"}], 0x150, 0x40080}], 0x2, 0x80001) splice(r2, 0x0, r0, 0x0, 0x800, 0x0) pipe(&(0x7f0000000200)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) accept4$alg(r1, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000002080)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="b1", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0642ea070aeebc00c551f0367eb7dd87abb4bd1a36e41c02455f845ff", 0xe0}, {&(0x7f0000000740)="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", 0x71f}], 0x3, 0x0, 0x0, 0x880}, {0x0, 0x0, &(0x7f0000001ec0), 0x0, &(0x7f0000001f00)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0xa8d4821eba989719}, @iv={0x108, 0x117, 0x2, 0xf2, "cdb5e1a5ad2a6f425e9bab358cf4907ca0105ad8fe7733c4895f05fd0690ac5a9120afedf06a19b3a875b848d9cf705e50078061247f6340a29a38fdad33174a5e238673c6c189c11d59257990a194ef50d76e3e912ba4b0c3cb8c5fcac5f78c3e409ebdecd1d4181571ab65b89c42c3c6d6968354e897f7456eb679f1b017119d982939f9cc24ded5103a7824dd131abd711ac9ee3de8a2e26a377a850bb791981f62f62db714a9bbee7db2e2c7e30e778c54d8a68105e9bef1929b71caf20b7fe2b133b1a72f765d829a2dc5f168e8e192a9ce1062e099cfbac6055784786c7128aff30a38600793d4047e0a7e9c4857d2"}], 0x150, 0x40080}], 0x2, 0x80001) (async) splice(r2, 0x0, r0, 0x0, 0x800, 0x0) (async) 18.246432276s ago: executing program 4 (id=3857): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x5, &(0x7f0000000040)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x16}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_flash={0x33, 0x5, './file0\x00'}}) 18.054491136s ago: executing program 2 (id=3858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x80) recvmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f0000000300)=""/12, 0xc}], 0x2}, 0x0) 17.609992881s ago: executing program 2 (id=3859): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b90", 0x9}], 0x1) (async) writev(r0, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b90", 0x9}], 0x1) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00030064756d6d7930000008001f0004000000180012000a00010064756d6d79000000"], 0x4c}], 0x1}, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="30000000240005050000000000000000000000000300000000000100ffffffff000000000c00010063616b655f6d7100"], 0x30}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x25dfdc00, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x25dfdc00, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) 17.347308259s ago: executing program 4 (id=3860): ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={0x53}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'ip6tnl0\x00'}) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/131, 0x83}, &(0x7f0000000180), 0x1}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200)={0x0, @aes128, 0x0, @desc4}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x10, @inherit={0x50, &(0x7f0000000240)={0x1, 0x1, 0xa, 0x3, {0x8, 0x8, 0x4, 0x80000001, 0x6}, [0x100]}}, @name="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"}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={0x1d, r1, 0x1, {0x1}, 0xcfb1bc2a9b5fb9d5}, 0x18) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000001340)={'pim6reg0\x00', 0x9}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000001380)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001480)={r2}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x10c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6b}, {0x6, 0x16, 0x83b6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xfffd}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x91}, 0x810) sendmsg$nl_route(r3, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)=@delneigh={0x2c, 0x1d, 0x2, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x0, r1, 0x0, 0x17, 0x7}, [@NDA_VNI={0x8, 0x7, 0x37d}, @NDA_PROBES={0x8, 0x4, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa000041}, 0x44001) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001f00)={'syztnl2\x00', &(0x7f0000001dc0)={'sit0\x00', r1, 0x8000, 0x10, 0x9, 0x0, {{0x3f, 0x4, 0x1, 0x8, 0xfc, 0x67, 0x0, 0xb, 0x4, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x1b, 0xfa, [@local, @loopback, @multicast1, @multicast1, @remote, @multicast2]}, @ssrr={0x89, 0x27, 0x51, [@empty, @private=0xa010102, @rand_addr=0x64010101, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @remote, @empty]}, @timestamp_addr={0x44, 0x54, 0x5a, 0x1, 0xb, [{@private=0xa010100, 0x5}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1ff}, {@multicast1, 0x10}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x40}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x1}, {@broadcast, 0x9}, {@private=0xa010101, 0x10000}, {@multicast2, 0x4}, {@loopback, 0x8}]}, @generic={0x40, 0xb, "5a2e531a402b6c4408"}, @timestamp_addr={0x44, 0x3c, 0x53, 0x1, 0x3, [{@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80000001}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x2}]}, @generic={0x7, 0xb, "3691086560aeb53947"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002540)={'syztnl2\x00', &(0x7f00000024c0)={'syztnl1\x00', r1, 0x29, 0xe, 0x4, 0x7c, 0x0, @remote, @local, 0x7800, 0x700, 0x1, 0x7fffffff}}) sendmmsg$inet(r5, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001800)="71f945ecc4f6e0068c21e07fa7e180c5a0d02993aae4ed0f70554609ef181af0324d54a0e57201b44f8871ac87dc51c5dceed6127f65fe0e99b66cfe2fe3e6203f98c7f93b924b074e41600bc61a14f601d51f0bf816592a130d9c3882aada79b39b3a07a7ee9c9216b1b6f08ebeedc377db8065f8734aeb7e0e870ed39667cbc0c4cda63847eac206a198b0aef443e3ca2db3a77020c02e04c27c3b23f87d59224e4a382e1996b35c3e94447b03a21e4fcc645bce17f0c5ec9c1e2884a6634e3e3a4915cae63334b980b1cbc5557376", 0xd0}, {&(0x7f0000001900)="753dff420e", 0x5}, {&(0x7f0000001940)="a5d01ddd85225df8f613247594614c81122f45ec5be31b290cfcebf83527caee40b6a8a6be387e07ebe1606382709240d4f4fc9a8c7fb9b3d6111f76f622890e5b10a8e94e5649319440e6bd372e3e8a8293", 0x52}, {&(0x7f00000019c0)="77779d1faacd0a61beba0b738e3e57fa6754e5e34c8a5fe3070ea93fd8d3f41e7186e2ed9e2f577fe63b1ee54c8946165d3bce549b2657da0977bac8b81ab4059cf0c7d46d9cca53f2961642c5ead15f2bd5bbb43551f5fc87b8b22cc456cb4d9d7a6a2292dd29b21b1e65fe863946519f87f2a4f4af97c2aa658f1116a8a366fd21bc443b81a1123424eafccfc3a3b18f880db62af24b64f61d495b4ba2650ba930f7cf7847ef6c5280b2887b24bef609e227fbfd5b537860335e22e2b315d89f99158e294f33f6ac3363e794a7dd3d178157ed24ddb7c840a47e23f1b30cbbd4f9d871992512c1c7586c8fa240ff4369d8ef", 0xf3}, {&(0x7f0000001ac0)="f208c4ba436e7543def3e87847aae9d721c4c762901d0f182e292c6ea27926c9110b7086a44f6de9ef596ef3e02e1c6bc9027597a57770e9a46517b773a7e47f36e4a0c6bac6c6cc4ee7e787cf79398835c82f4f81aae0d30be753f091ac476e5119db64439d1f16afad4e02e83b1a335f8fb2f3b7e10faa760be56474a6b4dee577f47b292c189b2f4727be92eaba4dd9aacf47", 0x94}, {&(0x7f0000001b80)="f122570137296433d813b8c4eb1479babc861b8d10ee052a74dec9737d2b1df1b36e26cf76d630176309f50eeb31607dbe078924bd89971bbd89573add6f811b5f0d3727ead243a8c00290344177deea37c52c0a7cdc260514a2a3655ecd03ca55024af61d0fa357cc59cb42792331e516b61a936e4d2dbd2aa32101165f148b52c90051e06f5bcf5e6c83114875bf63fc731145557a9f641fff39d65ec65bf814a727d875dfc28f80ee3a94b56b99740b76231ecb8d84c65a76586e", 0xbc}, {&(0x7f0000001c40)="6eaf1ba531181b105ff7bf6306bad115fb66c6835ef10f3b7a51d00fd4e6d7d1db7611160233e535c57917679d5c3290b504c8e891c85212d50c5dcbb3126076b55fb18d83f6122e111128e3228a0f572c70f7be47c90c9600fd2b064edb2dda638c1bb2f148c423561f71668226aaef73bd000ba13a99690d4016241373e9b899c410a71016617e47b27f34bdcaef852abec60a59e32e0ec549d336b41f3d47a18de855b517330719507998c1afb919a63060ab7beeec88eb4638ac4cf4019e56a30cc0fcbb694a8811a3", 0xcb}], 0x7, &(0x7f0000001f40)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xb2, 0x3, 0x9, [{@loopback, 0x101}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @loopback}}}], 0x40}}, {{&(0x7f0000001f80)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002340)=[{&(0x7f0000001fc0)="13f0a5d561ebee426354c302283c9d990f49596e1d4c7f8ccabebe63d25aafc228b65aa5bf6b1d00b3556104568f2f78d1122df4047fd98ab3081c6e0b5d924d19485f12df4f724fa3fc841fda9abe2ac6737ded5e9c13c1dc4068cd1ff86abbba2c44021950ba8035ee436e043d47de049a38884626a8d14a0c1468df3136817b6e612ce348a89875f5a82981215c3b77dc982eb880fb58c4fd7c6dbccab486b93f857dedb979305488ce31508a9db793c45945c02fc48bb48f491641e75a", 0xbf}, {&(0x7f0000002080)="95b76ebc42ff45bc7b182dce728b0c1dea3d44a3872114e3332ade145adc618c93c5455b108878b5bbfed0789735a3a2f0f5437813cb4d48947a62c8f075344b51fffd7076e9e5e759e7e3acb7a5f5197c0216f76424881e209481321f009bb1d8d5fb1c8e533044172843725e1ff9bac24ca451d8f728f75aa89d6ae39e", 0x7e}, {&(0x7f0000002100)="074c36230e7ade4074b8ba3508a01e9a771a49e1eb9c940ebe888e74420a1e292b10b7d61c7c772a31b48f0d4a09021ffc0db98d5a8389b74fa76ae148fad0bb95d7c182847dc158293121b47ee3624762c405114190791d51", 0x59}, {&(0x7f0000002180)="7898f3d4b21bcf6dc8039011d49dde1cd38aa534c2c48437ceafb2e5fb62cd11f03c9bd6c223a2f4a6e0566422699554046c7f2b2940c9ea961986e8e85c353e35d3c13da98ae24edf6e21f483f07845ae1ba6cd004b741142b29d464ae11ec1d37d455fca5a95ebda743821e16e4855c40796a056cdcdaccc24c38895bc2c1958744a1d4235b5543953e281133d771bc5f21e40a1e53e866a9bdf3495b1ef9fe8558bc327ad5207123fff55031f4e9a466e08fe03e75e3bdc3ed1cffb2af47949f946f3fb", 0xc5}, {&(0x7f0000002280)="4440609737fb2627848b638d47779044a1da3adafd8b6352350164a7de672bba41b0e58d0ddfd6e2b35b27c5bf15b14b368c9a306486c36ecdc7437426b23755b53d1598f7eb5e128cec15e0324f2f904a096c5e31cc0899d7ffcea84e127f056dbcf321ea39a9ac158b74231ce9cb743eb2f4bf43549f17cf72cdab0f71e961608bc2af6909b970b6116cef", 0x8c}], 0x5, &(0x7f00000023c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8200}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x68}}, {{&(0x7f0000002440)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000002480), 0x0, &(0x7f0000002580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x86, 0xa, "86fdf5c6ff2057de"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}], 0xd0}}], 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000002740)={'veth1\x00', {0x2, 0x0, @loopback}}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000002780)) ioctl(r2, 0x1, &(0x7f0000002880)="b607a0da88f67442c8541bf1a6e6460afbde6c50f2000b1ef064081efb31ba307015832af1daa8134f51cf3109a9e51f0bc5974e3fa3eebf2c906b7889a42364e83ef1935519b17c3064e67011f06e99adc3eec602f6cde0b7f81dcc08fb6fc78fd8fda6e777718838eba2648be6b3071244339c4589120bfdd86c466f221e862ffb0f38789d66a1bf23cf1ba189eb10db9c8b9a928d7cb5e80021d4cb653315d4ca202a6de44c2d75dfc13a0eba80b87ebf460181f6e473329085e018e175051dc6ea717e531a87150c") read(r2, &(0x7f0000002980)=""/98, 0x62) close(r2) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000002a00)) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) connect$inet(r3, &(0x7f0000002ac0)={0x2, 0x4e21, @private=0xa010102}, 0x10) 15.84688313s ago: executing program 0 (id=3861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 15.67963356s ago: executing program 0 (id=3864): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x800000003, 0x9) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0x9, 0x5, 0x6, 0x3}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x5, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8c9f}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @ldst={0x3, 0x1, 0x4, 0x9, 0x3, 0xffffffffffffff64}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0xff79, 0xeb, &(0x7f0000000440)=""/235, 0x41100, 0x20, '\x00', r3, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xb, 0xd5a, 0x3ff}, 0x10, r8, r7, 0x2, &(0x7f0000000980)=[r6, r5, r5], &(0x7f00000009c0)=[{0x4, 0x1, 0x2, 0x7}, {0x3, 0x5, 0x0, 0x8}], 0x10, 0x8}, 0x94) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 15.557039846s ago: executing program 1 (id=3866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000001000000000300000085000000a000000095", @ANYRESDEC=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x300, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.506248875s ago: executing program 1 (id=3867): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000010a0001001700110000000000000001502ddf3ad7bed2b2835df74ce675704d6a64b2d9e284e344abaed7f18c515c116d1b548200842883d7fb67721ec9ff7ed74b224098c2c44b128101bd33565a928bcead03cd1541c0252923824c54e8b5e07dc8b821d9f2c5d1a025439d4ec6998f31601ebb3272e1110a369811ee9caea8f83f53b19e03267a784260342882ba5279f07542688d23d6bbd2aaefc81db97fbd580bee69120613b9d60b10bcdf"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x4, 0x167, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0x5c, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xdf}, 0x0, 0x5, 0x1, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x5c}}, 0x8001) 15.398953778s ago: executing program 1 (id=3868): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf2a2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 15.39499505s ago: executing program 1 (id=3869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff00000028711051000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 15.351771526s ago: executing program 1 (id=3870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', r4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES16=r0, @ANYRES64=r0], 0x4c}}, 0x44044) 15.252669489s ago: executing program 1 (id=3871): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000f00)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x932, 0x800, 0x1, 0x2}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x30, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xffffffff, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x40085) (async) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) 3.223415148s ago: executing program 32 (id=3854): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r4, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r3, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000380)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000b38149e43da519e131000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800060000000000"], 0x54}}, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {0xc, 0xfff1}, {0x8, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r11, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r13, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040404) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$packet(r1, &(0x7f0000000240)="44c394f305916c4516999da2080095a11ada0a96a7113c0ca50c0be5993e477c43fd", 0x22, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) 2.156405375s ago: executing program 33 (id=3859): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b90", 0x9}], 0x1) (async) writev(r0, &(0x7f0000002840)=[{&(0x7f00000001c0)="b4000006004f709b90", 0x9}], 0x1) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00030064756d6d7930000008001f0004000000180012000a00010064756d6d79000000"], 0x4c}], 0x1}, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="30000000240005050000000000000000000000000300000000000100ffffffff000000000c00010063616b655f6d7100"], 0x30}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x25dfdc00, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x25dfdc00, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) 2.095742179s ago: executing program 34 (id=3860): ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={0x53}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'ip6tnl0\x00'}) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/131, 0x83}, &(0x7f0000000180), 0x1}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200)={0x0, @aes128, 0x0, @desc4}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000002c0)={{r0}, 0x0, 0x10, @inherit={0x50, &(0x7f0000000240)={0x1, 0x1, 0xa, 0x3, {0x8, 0x8, 0x4, 0x80000001, 0x6}, [0x100]}}, @name="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"}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={0x1d, r1, 0x1, {0x1}, 0xcfb1bc2a9b5fb9d5}, 0x18) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000001340)={'pim6reg0\x00', 0x9}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000001380)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001480)={r2}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x10c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6b}, {0x6, 0x16, 0x83b6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xfffd}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x91}, 0x810) sendmsg$nl_route(r3, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)=@delneigh={0x2c, 0x1d, 0x2, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x0, r1, 0x0, 0x17, 0x7}, [@NDA_VNI={0x8, 0x7, 0x37d}, @NDA_PROBES={0x8, 0x4, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa000041}, 0x44001) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001f00)={'syztnl2\x00', &(0x7f0000001dc0)={'sit0\x00', r1, 0x8000, 0x10, 0x9, 0x0, {{0x3f, 0x4, 0x1, 0x8, 0xfc, 0x67, 0x0, 0xb, 0x4, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x1b, 0xfa, [@local, @loopback, @multicast1, @multicast1, @remote, @multicast2]}, @ssrr={0x89, 0x27, 0x51, [@empty, @private=0xa010102, @rand_addr=0x64010101, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @remote, @empty]}, @timestamp_addr={0x44, 0x54, 0x5a, 0x1, 0xb, [{@private=0xa010100, 0x5}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1ff}, {@multicast1, 0x10}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x40}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x1}, {@broadcast, 0x9}, {@private=0xa010101, 0x10000}, {@multicast2, 0x4}, {@loopback, 0x8}]}, @generic={0x40, 0xb, "5a2e531a402b6c4408"}, @timestamp_addr={0x44, 0x3c, 0x53, 0x1, 0x3, [{@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80000001}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x2}]}, @generic={0x7, 0xb, "3691086560aeb53947"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002540)={'syztnl2\x00', &(0x7f00000024c0)={'syztnl1\x00', r1, 0x29, 0xe, 0x4, 0x7c, 0x0, @remote, @local, 0x7800, 0x700, 0x1, 0x7fffffff}}) sendmmsg$inet(r5, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001800)="71f945ecc4f6e0068c21e07fa7e180c5a0d02993aae4ed0f70554609ef181af0324d54a0e57201b44f8871ac87dc51c5dceed6127f65fe0e99b66cfe2fe3e6203f98c7f93b924b074e41600bc61a14f601d51f0bf816592a130d9c3882aada79b39b3a07a7ee9c9216b1b6f08ebeedc377db8065f8734aeb7e0e870ed39667cbc0c4cda63847eac206a198b0aef443e3ca2db3a77020c02e04c27c3b23f87d59224e4a382e1996b35c3e94447b03a21e4fcc645bce17f0c5ec9c1e2884a6634e3e3a4915cae63334b980b1cbc5557376", 0xd0}, {&(0x7f0000001900)="753dff420e", 0x5}, {&(0x7f0000001940)="a5d01ddd85225df8f613247594614c81122f45ec5be31b290cfcebf83527caee40b6a8a6be387e07ebe1606382709240d4f4fc9a8c7fb9b3d6111f76f622890e5b10a8e94e5649319440e6bd372e3e8a8293", 0x52}, {&(0x7f00000019c0)="77779d1faacd0a61beba0b738e3e57fa6754e5e34c8a5fe3070ea93fd8d3f41e7186e2ed9e2f577fe63b1ee54c8946165d3bce549b2657da0977bac8b81ab4059cf0c7d46d9cca53f2961642c5ead15f2bd5bbb43551f5fc87b8b22cc456cb4d9d7a6a2292dd29b21b1e65fe863946519f87f2a4f4af97c2aa658f1116a8a366fd21bc443b81a1123424eafccfc3a3b18f880db62af24b64f61d495b4ba2650ba930f7cf7847ef6c5280b2887b24bef609e227fbfd5b537860335e22e2b315d89f99158e294f33f6ac3363e794a7dd3d178157ed24ddb7c840a47e23f1b30cbbd4f9d871992512c1c7586c8fa240ff4369d8ef", 0xf3}, {&(0x7f0000001ac0)="f208c4ba436e7543def3e87847aae9d721c4c762901d0f182e292c6ea27926c9110b7086a44f6de9ef596ef3e02e1c6bc9027597a57770e9a46517b773a7e47f36e4a0c6bac6c6cc4ee7e787cf79398835c82f4f81aae0d30be753f091ac476e5119db64439d1f16afad4e02e83b1a335f8fb2f3b7e10faa760be56474a6b4dee577f47b292c189b2f4727be92eaba4dd9aacf47", 0x94}, {&(0x7f0000001b80)="f122570137296433d813b8c4eb1479babc861b8d10ee052a74dec9737d2b1df1b36e26cf76d630176309f50eeb31607dbe078924bd89971bbd89573add6f811b5f0d3727ead243a8c00290344177deea37c52c0a7cdc260514a2a3655ecd03ca55024af61d0fa357cc59cb42792331e516b61a936e4d2dbd2aa32101165f148b52c90051e06f5bcf5e6c83114875bf63fc731145557a9f641fff39d65ec65bf814a727d875dfc28f80ee3a94b56b99740b76231ecb8d84c65a76586e", 0xbc}, {&(0x7f0000001c40)="6eaf1ba531181b105ff7bf6306bad115fb66c6835ef10f3b7a51d00fd4e6d7d1db7611160233e535c57917679d5c3290b504c8e891c85212d50c5dcbb3126076b55fb18d83f6122e111128e3228a0f572c70f7be47c90c9600fd2b064edb2dda638c1bb2f148c423561f71668226aaef73bd000ba13a99690d4016241373e9b899c410a71016617e47b27f34bdcaef852abec60a59e32e0ec549d336b41f3d47a18de855b517330719507998c1afb919a63060ab7beeec88eb4638ac4cf4019e56a30cc0fcbb694a8811a3", 0xcb}], 0x7, &(0x7f0000001f40)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xb2, 0x3, 0x9, [{@loopback, 0x101}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @loopback}}}], 0x40}}, {{&(0x7f0000001f80)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002340)=[{&(0x7f0000001fc0)="13f0a5d561ebee426354c302283c9d990f49596e1d4c7f8ccabebe63d25aafc228b65aa5bf6b1d00b3556104568f2f78d1122df4047fd98ab3081c6e0b5d924d19485f12df4f724fa3fc841fda9abe2ac6737ded5e9c13c1dc4068cd1ff86abbba2c44021950ba8035ee436e043d47de049a38884626a8d14a0c1468df3136817b6e612ce348a89875f5a82981215c3b77dc982eb880fb58c4fd7c6dbccab486b93f857dedb979305488ce31508a9db793c45945c02fc48bb48f491641e75a", 0xbf}, {&(0x7f0000002080)="95b76ebc42ff45bc7b182dce728b0c1dea3d44a3872114e3332ade145adc618c93c5455b108878b5bbfed0789735a3a2f0f5437813cb4d48947a62c8f075344b51fffd7076e9e5e759e7e3acb7a5f5197c0216f76424881e209481321f009bb1d8d5fb1c8e533044172843725e1ff9bac24ca451d8f728f75aa89d6ae39e", 0x7e}, {&(0x7f0000002100)="074c36230e7ade4074b8ba3508a01e9a771a49e1eb9c940ebe888e74420a1e292b10b7d61c7c772a31b48f0d4a09021ffc0db98d5a8389b74fa76ae148fad0bb95d7c182847dc158293121b47ee3624762c405114190791d51", 0x59}, {&(0x7f0000002180)="7898f3d4b21bcf6dc8039011d49dde1cd38aa534c2c48437ceafb2e5fb62cd11f03c9bd6c223a2f4a6e0566422699554046c7f2b2940c9ea961986e8e85c353e35d3c13da98ae24edf6e21f483f07845ae1ba6cd004b741142b29d464ae11ec1d37d455fca5a95ebda743821e16e4855c40796a056cdcdaccc24c38895bc2c1958744a1d4235b5543953e281133d771bc5f21e40a1e53e866a9bdf3495b1ef9fe8558bc327ad5207123fff55031f4e9a466e08fe03e75e3bdc3ed1cffb2af47949f946f3fb", 0xc5}, {&(0x7f0000002280)="4440609737fb2627848b638d47779044a1da3adafd8b6352350164a7de672bba41b0e58d0ddfd6e2b35b27c5bf15b14b368c9a306486c36ecdc7437426b23755b53d1598f7eb5e128cec15e0324f2f904a096c5e31cc0899d7ffcea84e127f056dbcf321ea39a9ac158b74231ce9cb743eb2f4bf43549f17cf72cdab0f71e961608bc2af6909b970b6116cef", 0x8c}], 0x5, &(0x7f00000023c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8200}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x68}}, {{&(0x7f0000002440)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000002480), 0x0, &(0x7f0000002580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x86, 0xa, "86fdf5c6ff2057de"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}], 0xd0}}], 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000002740)={'veth1\x00', {0x2, 0x0, @loopback}}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000002780)) ioctl(r2, 0x1, &(0x7f0000002880)="b607a0da88f67442c8541bf1a6e6460afbde6c50f2000b1ef064081efb31ba307015832af1daa8134f51cf3109a9e51f0bc5974e3fa3eebf2c906b7889a42364e83ef1935519b17c3064e67011f06e99adc3eec602f6cde0b7f81dcc08fb6fc78fd8fda6e777718838eba2648be6b3071244339c4589120bfdd86c466f221e862ffb0f38789d66a1bf23cf1ba189eb10db9c8b9a928d7cb5e80021d4cb653315d4ca202a6de44c2d75dfc13a0eba80b87ebf460181f6e473329085e018e175051dc6ea717e531a87150c") read(r2, &(0x7f0000002980)=""/98, 0x62) close(r2) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000002a00)) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) connect$inet(r3, &(0x7f0000002ac0)={0x2, 0x4e21, @private=0xa010102}, 0x10) 49.916591ms ago: executing program 35 (id=3864): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x800000003, 0x9) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0x9, 0x5, 0x6, 0x3}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x5, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8c9f}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @ldst={0x3, 0x1, 0x4, 0x9, 0x3, 0xffffffffffffff64}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0xff79, 0xeb, &(0x7f0000000440)=""/235, 0x41100, 0x20, '\x00', r3, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xb, 0xd5a, 0x3ff}, 0x10, r8, r7, 0x2, &(0x7f0000000980)=[r6, r5, r5], &(0x7f00000009c0)=[{0x4, 0x1, 0x2, 0x7}, {0x3, 0x5, 0x0, 0x8}], 0x10, 0x8}, 0x94) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 0s ago: executing program 36 (id=3871): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000f00)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x932, 0x800, 0x1, 0x2}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x30, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xffffffff, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x40085) (async) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) kernel console output (not intermixed with test programs): et [1, 0] type 2 family 0 port 6081 - 0 [ 357.746702][T16269] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 357.805316][T16217] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.938804][T16279] netlink: 'syz.2.2997': attribute type 9 has an invalid length. [ 357.950079][T16220] vxcan1 speed is unknown, defaulting to 1000 [ 357.983453][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 358.024284][T16217] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.089413][T16279] netlink: 'syz.2.2997': attribute type 9 has an invalid length. [ 358.111248][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 358.126608][T16287] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2999'. [ 358.186295][T16217] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.213541][ T5631] Bluetooth: hci2: command tx timeout [ 358.243546][T16287] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 358.447302][T16212] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 358.944271][T16217] pim6reg527: left allmulticast mode [ 359.171188][ T29] net_ratelimit: 45 callbacks suppressed [ 359.171208][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.244656][T16217] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 359.256366][T16217] ip6gre1 (unregistering): left promiscuous mode [ 359.515859][T16217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.526507][T16217] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 359.543437][T16217] veth0_to_bond: left promiscuous mode [ 359.553135][T16217] bond0 (unregistering): Released all slaves [ 359.565027][T16217] bond1 (unregistering): Released all slaves [ 359.582742][T16217] bond2 (unregistering): Released all slaves [ 359.600838][T16217] bond3 (unregistering): Released all slaves [ 359.618657][T16217] bond4 (unregistering): Released all slaves [ 359.646214][T16217] bond5 (unregistering): Released all slaves [ 359.666119][T16217] bond6 (unregistering): Released all slaves [ 359.685246][T16217] bond7 (unregistering): Released all slaves [ 359.705015][T16217] bond8 (unregistering): Released all slaves [ 359.726886][T16217] bond9 (unregistering): (slave veth3): Releasing active interface [ 359.735158][T16215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.735984][T16215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.754956][T16217] batadv3: entered promiscuous mode [ 359.765601][T16217] bond9 (unregistering): (slave batadv3): Releasing active interface [ 359.779241][T16217] bond9 (unregistering): Released all slaves [ 359.802572][T16217] bond10 (unregistering): Released all slaves [ 359.819412][T16217] bond11 (unregistering): Released all slaves [ 359.838405][T16217] bond12 (unregistering): Released all slaves [ 359.858406][T16217] bond13 (unregistering): Released all slaves [ 359.931087][T16215] bond6: (slave geneve4): failed to get link speed/duplex [ 360.217750][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.253109][T16216] bond6: (slave geneve4): failed to get link speed/duplex [ 360.291209][ T5631] Bluetooth: hci2: command tx timeout [ 360.404344][T16217] tipc: Disabling bearer [ 360.430340][T16217] tipc: Left network mode [ 360.470464][T16215] bond6: (slave geneve4): failed to get link speed/duplex [ 360.497539][T16372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.539174][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.561906][T16377] FAULT_INJECTION: forcing a failure. [ 360.561906][T16377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.605356][T16377] CPU: 1 UID: 0 PID: 16377 Comm: syz.2.3020 Not tainted syzkaller #0 PREEMPT(full) [ 360.605385][T16377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.605411][T16377] Call Trace: [ 360.605420][T16377] [ 360.605429][T16377] dump_stack_lvl+0xe8/0x150 [ 360.605467][T16377] should_fail_ex+0x40c/0x560 [ 360.605499][T16377] _copy_from_user+0x2d/0xb0 [ 360.605520][T16377] inet6_ioctl+0x1ac/0x2e0 [ 360.605559][T16377] ? __pfx_inet6_ioctl+0x10/0x10 [ 360.605583][T16377] ? tomoyo_path_number_perm+0x219/0x5f0 [ 360.605626][T16377] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 360.605656][T16377] sock_do_ioctl+0x101/0x320 [ 360.605687][T16377] ? __pfx_sock_do_ioctl+0x10/0x10 [ 360.605721][T16377] ? hook_file_ioctl+0x1f0/0x5f0 [ 360.605755][T16377] sock_ioctl+0x57a/0x7e0 [ 360.605780][T16377] ? __pfx_sock_ioctl+0x10/0x10 [ 360.605807][T16377] ? __fget_files+0x2a/0x420 [ 360.605834][T16377] ? __fget_files+0x3a2/0x420 [ 360.605862][T16377] ? __fget_files+0x2a/0x420 [ 360.605894][T16377] ? bpf_lsm_file_ioctl+0x9/0x20 [ 360.605919][T16377] ? __pfx_sock_ioctl+0x10/0x10 [ 360.605947][T16377] __se_sys_ioctl+0xfc/0x170 [ 360.605969][T16377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.605992][T16377] do_syscall_64+0x174/0x580 [ 360.606017][T16377] ? trace_irq_disable+0x3b/0x140 [ 360.606045][T16377] ? clear_bhb_loop+0x40/0x90 [ 360.606071][T16377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.606092][T16377] RIP: 0033:0x7fc070d9e019 [ 360.606113][T16377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.606132][T16377] RSP: 002b:00007fc071ce8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.606154][T16377] RAX: ffffffffffffffda RBX: 00007fc071025fa0 RCX: 00007fc070d9e019 [ 360.606169][T16377] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000004 [ 360.606182][T16377] RBP: 00007fc071ce8090 R08: 0000000000000000 R09: 0000000000000000 [ 360.606194][T16377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.606206][T16377] R13: 00007fc071026038 R14: 00007fc071025fa0 R15: 00007fff6654a608 [ 360.606240][T16377] [ 360.971659][T16213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.996857][T16213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.307699][T16385] syzkaller0: entered promiscuous mode [ 361.324581][T16385] syzkaller0: entered allmulticast mode [ 362.375076][ T5631] Bluetooth: hci2: command tx timeout [ 363.324239][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 363.485533][T16428] FAULT_INJECTION: forcing a failure. [ 363.485533][T16428] name failslab, interval 1, probability 0, space 0, times 0 [ 363.514932][T16428] CPU: 1 UID: 0 PID: 16428 Comm: syz.1.3033 Not tainted syzkaller #0 PREEMPT(full) [ 363.514963][T16428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.514976][T16428] Call Trace: [ 363.514985][T16428] [ 363.514994][T16428] dump_stack_lvl+0xe8/0x150 [ 363.515032][T16428] should_fail_ex+0x40c/0x560 [ 363.515066][T16428] should_failslab+0xa8/0x100 [ 363.515101][T16428] __kmalloc_noprof+0xfe/0x720 [ 363.515132][T16428] ? fib6_info_alloc+0x30/0xf0 [ 363.515158][T16428] ? fib6_info_alloc+0x30/0xf0 [ 363.515193][T16428] fib6_info_alloc+0x30/0xf0 [ 363.515223][T16428] ip6_route_info_create+0x149/0x890 [ 363.515254][T16428] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 363.515289][T16428] ip6_route_add+0x49/0x1b0 [ 363.515324][T16428] ipv6_route_ioctl+0x393/0x4e0 [ 363.515363][T16428] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 363.515431][T16428] inet6_ioctl+0x246/0x2e0 [ 363.515465][T16428] ? __pfx_inet6_ioctl+0x10/0x10 [ 363.515489][T16428] ? tomoyo_path_number_perm+0x219/0x5f0 [ 363.515534][T16428] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 363.515566][T16428] sock_do_ioctl+0x101/0x320 [ 363.515599][T16428] ? __pfx_sock_do_ioctl+0x10/0x10 [ 363.515626][T16428] ? hook_file_ioctl+0x1f0/0x5f0 [ 363.515683][T16428] sock_ioctl+0x57a/0x7e0 [ 363.515714][T16428] ? __pfx_sock_ioctl+0x10/0x10 [ 363.515744][T16428] ? __fget_files+0x2a/0x420 [ 363.515773][T16428] ? __fget_files+0x3a2/0x420 [ 363.515801][T16428] ? __fget_files+0x2a/0x420 [ 363.515837][T16428] ? bpf_lsm_file_ioctl+0x9/0x20 [ 363.515864][T16428] ? __pfx_sock_ioctl+0x10/0x10 [ 363.515893][T16428] __se_sys_ioctl+0xfc/0x170 [ 363.515916][T16428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.515940][T16428] do_syscall_64+0x174/0x580 [ 363.515966][T16428] ? trace_irq_disable+0x3b/0x140 [ 363.515995][T16428] ? clear_bhb_loop+0x40/0x90 [ 363.516022][T16428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.516044][T16428] RIP: 0033:0x7f8b9e79e019 [ 363.516064][T16428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.516083][T16428] RSP: 002b:00007f8b9f593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.516106][T16428] RAX: ffffffffffffffda RBX: 00007f8b9ea25fa0 RCX: 00007f8b9e79e019 [ 363.516121][T16428] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000004 [ 363.516135][T16428] RBP: 00007f8b9f593090 R08: 0000000000000000 R09: 0000000000000000 [ 363.516148][T16428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.516161][T16428] R13: 00007f8b9ea26038 R14: 00007f8b9ea25fa0 R15: 00007fffaea01d98 [ 363.516195][T16428] [ 364.348107][T16435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.372405][ T5734] net_ratelimit: 13 callbacks suppressed [ 364.372424][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.388725][T16435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.463145][ T5631] Bluetooth: hci2: command tx timeout [ 364.571918][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.590645][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.904299][T16435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.934357][T16435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.143959][T16467] syzkaller0: entered promiscuous mode [ 365.149666][T16467] syzkaller0: entered allmulticast mode [ 365.158103][T16488] bond0: entered promiscuous mode [ 365.168619][T16488] bond_slave_0: entered promiscuous mode [ 365.275835][T16500] FAULT_INJECTION: forcing a failure. [ 365.275835][T16500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.290251][T16500] CPU: 1 UID: 0 PID: 16500 Comm: syz.1.3044 Not tainted syzkaller #0 PREEMPT(full) [ 365.290298][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.290324][T16500] Call Trace: [ 365.290333][T16500] [ 365.290341][T16500] dump_stack_lvl+0xe8/0x150 [ 365.290379][T16500] should_fail_ex+0x40c/0x560 [ 365.290414][T16500] _copy_to_user+0x31/0xb0 [ 365.290438][T16500] simple_read_from_buffer+0xe1/0x170 [ 365.290476][T16500] proc_fail_nth_read+0x1bb/0x230 [ 365.290518][T16500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.290553][T16500] ? rw_verify_area+0x24a/0x4c0 [ 365.290575][T16500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.290606][T16500] vfs_read+0x213/0xa80 [ 365.290633][T16500] ? __pfx___mutex_lock+0x10/0x10 [ 365.290661][T16500] ? __pfx_vfs_read+0x10/0x10 [ 365.290689][T16500] ? __fget_files+0x2a/0x420 [ 365.290725][T16500] ? __fget_files+0x3a2/0x420 [ 365.290754][T16500] ? __fget_files+0x2a/0x420 [ 365.290793][T16500] ksys_read+0x150/0x270 [ 365.290816][T16500] ? __pfx_ksys_read+0x10/0x10 [ 365.290837][T16500] ? __pfx_sock_ioctl+0x10/0x10 [ 365.290873][T16500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.290897][T16500] do_syscall_64+0x174/0x580 [ 365.290922][T16500] ? trace_irq_disable+0x3b/0x140 [ 365.290951][T16500] ? clear_bhb_loop+0x40/0x90 [ 365.290978][T16500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.291000][T16500] RIP: 0033:0x7f8b9e75e84e [ 365.291020][T16500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 365.291038][T16500] RSP: 002b:00007f8b9f592fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.291061][T16500] RAX: ffffffffffffffda RBX: 00007f8b9f5936c0 RCX: 00007f8b9e75e84e [ 365.291075][T16500] RDX: 000000000000000f RSI: 00007f8b9f5930a0 RDI: 0000000000000005 [ 365.291085][T16500] RBP: 00007f8b9f593090 R08: 0000000000000000 R09: 0000000000000000 [ 365.291095][T16500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.291105][T16500] R13: 00007f8b9ea26038 R14: 00007f8b9ea25fa0 R15: 00007fffaea01d98 [ 365.291132][T16500] [ 365.506676][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.578668][T16502] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 365.636234][T16503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3045'. [ 365.692225][T16504] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3045'. [ 365.842024][T16215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.850847][T16215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.536590][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.861773][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.992577][T16212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.002320][T16212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.335725][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 367.365834][T16435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.378662][T16435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.442997][T16502] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 367.506214][T16435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.525936][T16435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.675652][T16220] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.694283][T16220] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.704734][T16220] bridge_slave_0: entered allmulticast mode [ 367.729179][T16220] bridge_slave_0: entered promiscuous mode [ 367.848304][T16220] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.863479][T16220] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.878393][T16220] bridge_slave_1: entered allmulticast mode [ 367.888555][T16220] bridge_slave_1: entered promiscuous mode [ 368.153512][T16220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.178095][T16220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.316081][T16541] netlink: 'syz.0.3056': attribute type 21 has an invalid length. [ 368.338402][T16530] syzkaller0: entered promiscuous mode [ 368.344343][T16530] syzkaller0: entered allmulticast mode [ 368.402649][T16541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3056'. [ 369.655171][ T5734] net_ratelimit: 9 callbacks suppressed [ 369.655204][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.412118][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.420719][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.686833][T16537] syzkaller0: entered promiscuous mode [ 370.693150][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.701969][T16537] syzkaller0: entered allmulticast mode [ 370.739504][T16217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.749799][T16217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.781589][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.921867][T16217] team0 (unregistering): Port device vlan0 removed [ 371.072119][T16217] team0 (unregistering): Port device team_slave_1 removed [ 371.096724][T16217] team0 (unregistering): Port device team_slave_0 removed [ 371.224358][T16217] smc: removing net device team0 with user defined pnetid SYZ2 [ 371.264631][ T4996] udevd[4996]: worker [5741] /devices/virtual/block/nbd1 is taking a long time [ 371.563905][T16214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.575173][T16214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.731771][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.681879][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.690711][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.129287][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 373.138917][T16220] team0: Port device team_slave_0 added [ 373.209743][T16220] team0: Port device team_slave_1 added [ 373.433862][T16597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3061'. [ 373.470008][T16220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.502199][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.562422][T16220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.575878][T16220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.583486][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.603586][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'. [ 373.620667][T16220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.681461][T16211] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.712054][T16611] SET target dimension over the limit! [ 373.713173][T16211] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.782923][ T6770] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.801600][ T6770] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.824393][ T6770] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.845999][ T6770] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.028984][T16220] hsr_slave_0: entered promiscuous mode [ 374.069375][T16220] hsr_slave_1: entered promiscuous mode [ 374.095470][T16220] debugfs: 'hsr0' already exists in 'hsr' [ 374.119592][T16220] Cannot create hsr debugfs directory [ 374.194721][T16639] netlink: 'syz.1.3070': attribute type 1 has an invalid length. [ 374.248492][T16639] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.3070'. [ 374.318411][T16624] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 374.392127][T16624] bond2 (unregistering): Released all slaves [ 374.400418][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 374.424391][T16651] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3068'. [ 374.511778][ T6770] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.545925][T16214] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc1 [ 374.557544][ T6770] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.608261][T16217] IPVS: stop unused estimator thread 0... [ 374.853239][ T5734] net_ratelimit: 6 callbacks suppressed [ 374.853258][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.884998][T16665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3074'. [ 374.941533][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.956367][ T6770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.038038][ T5291] 8021q: adding VLAN 0 to HW filter on device eth4 [ 375.102423][T16217] bond6: (slave geneve4): failed to get link speed/duplex [ 375.183382][T16655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.216217][ T6770] bond6: (slave geneve4): failed to get link speed/duplex [ 375.402371][ T6770] bond6: (slave geneve4): failed to get link speed/duplex [ 375.461894][T16686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.556504][T16693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3079'. [ 375.576006][T16691] syzkaller0: entered promiscuous mode [ 375.585125][T16691] syzkaller0: entered allmulticast mode [ 375.652863][T16693] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.662000][T16214] bond6: (slave geneve4): failed to get link speed/duplex [ 375.701735][T16698] dummy0: left promiscuous mode [ 375.771858][T16698] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 375.893044][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.011746][T16216] bond6: (slave geneve4): failed to get link speed/duplex [ 376.674711][T16220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.718464][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.747949][T16220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.807261][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.844692][T16220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.899022][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.914902][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3091'. [ 376.938936][T16220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.973356][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.006740][ T5631] block nbd2: Receive control failed (result -107) [ 377.455936][T16220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.562283][T16220] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.596784][T16214] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.604056][T16214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.665662][T16214] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.672924][T16214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.716069][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 377.973735][ T6770] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.623055][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.632970][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.857119][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3109'. [ 379.034210][T16859] tunl0: left promiscuous mode [ 379.113534][T16859] 0ªî{X¹¦: left allmulticast mode [ 379.325735][T16859] veth0_to_bond: left allmulticast mode [ 379.347113][T16874] netlink: 'syz.1.3114': attribute type 23 has an invalid length. [ 379.385978][T16866] syzkaller1: entered promiscuous mode [ 379.410847][T16866] syzkaller1: entered allmulticast mode [ 379.603283][T16881] syzkaller0: entered promiscuous mode [ 379.641589][T16881] syzkaller0: entered allmulticast mode [ 379.668018][T16881] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 379.894431][ T5856] net_ratelimit: 36 callbacks suppressed [ 379.894450][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.970482][T16220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.003152][T16899] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3118'. [ 380.013572][T16213] bond6: (slave geneve4): failed to get link speed/duplex [ 380.061545][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.133334][T16213] bond6: (slave geneve4): failed to get link speed/duplex [ 380.186283][T16220] veth0_vlan: entered promiscuous mode [ 380.230347][T16912] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 380.239490][T16912] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3121'. [ 380.316670][T16220] veth1_vlan: entered promiscuous mode [ 380.351063][T16211] bond6: (slave geneve4): failed to get link speed/duplex [ 380.460241][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'. [ 380.480796][T16220] veth0_macvtap: entered promiscuous mode [ 380.491581][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.513458][T16220] veth1_macvtap: entered promiscuous mode [ 380.527245][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.581694][T16220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.716601][T16220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.751229][T16212] bond6: (slave geneve4): failed to get link speed/duplex [ 380.836174][T16211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.883357][T16211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.914535][T16211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.968369][T16939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3130'. [ 381.084924][T16217] bond6: (slave geneve4): failed to get link speed/duplex [ 381.094433][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.118167][T16943] ipt_REJECT: TCP_RESET invalid for non-tcp [ 381.235737][T16215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.244762][T16214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.288528][T16215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.440776][T16212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.467394][T16212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.666231][T16960] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 381.687614][T16963] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3136'. [ 381.699783][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3135'. [ 381.799107][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'. [ 381.884220][T16973] netlink: 'syz.3.2979': attribute type 1 has an invalid length. [ 381.919111][T16973] netlink: 'syz.3.2979': attribute type 2 has an invalid length. [ 382.202487][T16989] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3139'. [ 382.567567][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.579243][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.588938][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.598459][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.610574][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.803157][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'. [ 382.980336][T17011] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 383.147311][T17013] bond3: option xmit_hash_policy: invalid value (64) [ 383.192095][T17013] bond3 (unregistering): Released all slaves [ 383.295326][T17014] bond3: option xmit_hash_policy: invalid value (64) [ 383.304352][T17014] bond3 (unregistering): Released all slaves [ 383.413017][ T5856] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 384.334706][T17001] vxcan1 speed is unknown, defaulting to 1000 [ 384.693219][ T5631] Bluetooth: hci4: command tx timeout [ 384.963725][T16216] net_ratelimit: 34 callbacks suppressed [ 384.963746][T16216] bond6: (slave geneve4): failed to get link speed/duplex [ 385.053254][T16212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.081492][T16212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.250050][T17131] __nla_validate_parse: 3 callbacks suppressed [ 385.250069][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3165'. [ 385.251269][T16215] bond6: (slave geneve4): failed to get link speed/duplex [ 385.267445][T17131] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3165'. [ 385.282436][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.325778][T17136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3166'. [ 385.422206][T17136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 385.451261][T17140] bond3: (slave batadv1): Opening slave failed [ 385.472474][T16215] bond6: (slave geneve4): failed to get link speed/duplex [ 385.539980][T17143] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 385.567680][T17143] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 385.595042][T17147] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.624131][T17147] nbd: socks must be embedded in a SOCK_ITEM attr [ 385.696510][T16215] bond6: (slave geneve4): failed to get link speed/duplex [ 385.912584][T17157] netlink: 'syz.3.3171': attribute type 23 has an invalid length. [ 386.052727][T11635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.224091][T16214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.251201][T16214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.729373][T17185] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.737418][T17185] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.772559][ T5631] Bluetooth: hci4: command tx timeout [ 386.788612][T17191] netlink: 'syz.4.3174': attribute type 13 has an invalid length. [ 386.799283][T17194] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.806582][T17194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.815109][T17194] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.822460][T17194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.832539][T17194] bridge0: entered promiscuous mode [ 386.837839][T17194] bridge0: entered allmulticast mode [ 386.934853][ T11] block nbd1: Possible stuck request ffff888027947000: control (read@0,1024B). Runtime 90 seconds [ 386.947389][ T11] block nbd1: Possible stuck request ffff8880279471c0: control (read@1024,1024B). Runtime 90 seconds [ 386.958568][ T11] block nbd1: Possible stuck request ffff888027947380: control (read@2048,1024B). Runtime 90 seconds [ 386.970218][ T11] block nbd1: Possible stuck request ffff888027947540: control (read@3072,1024B). Runtime 90 seconds [ 387.026058][T17001] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.036728][T17001] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.044786][T17001] bridge_slave_0: entered allmulticast mode [ 387.053042][T17001] bridge_slave_0: entered promiscuous mode [ 387.069419][T17001] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.078297][T17001] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.086557][T17001] bridge_slave_1: entered allmulticast mode [ 387.100205][T17001] bridge_slave_1: entered promiscuous mode [ 387.145058][T17001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.157946][T17001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.242423][T17211] netlink: 'syz.2.3181': attribute type 83 has an invalid length. [ 387.266835][T17001] team0: Port device team_slave_0 added [ 387.277769][T17001] team0: Port device team_slave_1 added [ 387.389308][T17001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.427568][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.489539][T17001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.502754][T17001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.509772][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.549729][T17001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.631481][T17001] hsr_slave_0: entered promiscuous mode [ 387.646380][T17001] hsr_slave_1: entered promiscuous mode [ 387.663536][T17001] debugfs: 'hsr0' already exists in 'hsr' [ 387.704811][T17001] Cannot create hsr debugfs directory [ 387.759864][T17235] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.770557][T17236] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3187'. [ 388.102203][T17255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3195'. [ 388.270627][T17259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3196'. [ 388.298866][T17001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.317034][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 388.339157][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 388.443279][T17283] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 388.462843][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 388.473028][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3201'. [ 388.482167][T17283] netlink: 'syz.0.3201': attribute type 14 has an invalid length. [ 388.490175][T17283] netlink: 'syz.0.3201': attribute type 13 has an invalid length. [ 388.498956][T17273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.557987][T17268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.607626][T17001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.825573][T17001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.851620][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 388.852871][ T5631] Bluetooth: hci4: command tx timeout [ 388.978743][T17001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.071367][T17297] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 389.091973][T16217] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.113116][T16217] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.383801][T17318] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 389.436612][T17314] macvlan0: entered promiscuous mode [ 389.446261][T17314] macvlan0: entered allmulticast mode [ 389.452835][T17314] bond14: (slave macvlan0): Error -98 calling set_mac_address [ 389.539400][T17320] bond1: (slave bond_slave_1): Device is not our slave [ 389.546852][T17320] bond1: option active_slave: invalid value (bond_slave_1) [ 389.560088][T17320] bond1 (unregistering): Released all slaves [ 389.686010][T17333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.706404][T17333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.728210][T17333] bond0 (unregistering): Released all slaves [ 389.911420][T16216] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.931666][T16216] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.944582][T17001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 389.960606][T17001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.975512][T17001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.996486][T17001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.017803][T17001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 390.071263][T17001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.090151][T17001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 390.110024][T17001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.162157][T16215] net_ratelimit: 17 callbacks suppressed [ 390.162176][T16215] bond6: (slave geneve4): failed to get link speed/duplex [ 390.301066][T16215] bond6: (slave geneve4): failed to get link speed/duplex [ 390.335143][T17363] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 390.356098][T17369] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 390.374269][T17363] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 390.412189][T17001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.452119][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.482419][T16214] bond6: (slave geneve4): failed to get link speed/duplex [ 390.553396][T17001] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.598877][T16212] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.606257][T16212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.663051][T16212] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.670290][T16212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.701494][T16212] bond6: (slave geneve4): failed to get link speed/duplex [ 390.761745][T17394] __nla_validate_parse: 9 callbacks suppressed [ 390.761788][T17394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3229'. [ 390.792298][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.805261][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.824999][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3229'. [ 390.882678][T17395] netlink: 'syz.4.3229': attribute type 3 has an invalid length. [ 390.912894][T16212] bond6: (slave geneve4): failed to get link speed/duplex [ 390.931163][ T5631] Bluetooth: hci4: command tx timeout [ 391.051224][ T36] bond6: (slave geneve4): failed to get link speed/duplex [ 391.195995][T16214] bond6: (slave geneve4): failed to get link speed/duplex [ 391.979464][T17001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.088590][T17001] veth0_vlan: entered promiscuous mode [ 392.106612][T17001] veth1_vlan: entered promiscuous mode [ 392.139976][T17001] veth0_macvtap: entered promiscuous mode [ 392.170387][T17001] veth1_macvtap: entered promiscuous mode [ 392.186765][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3246'. [ 392.199193][T17001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.219101][T17001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.268948][T17469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3247'. [ 392.283125][T16214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.323139][T16214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.362854][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.401106][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.613640][T16211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.634838][T16211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.735132][T16211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.745079][T16211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.879335][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3252'. [ 392.977196][T17493] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3138'. [ 393.278679][T17500] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3255'. [ 393.447928][T17464] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.459848][T17464] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.475078][T17464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.494727][T17464] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.507647][T17464] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.627842][T17511] veth0: entered promiscuous mode [ 393.717825][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3259'. [ 393.760180][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3260'. [ 393.796505][T17519] bond0: option resend_igmp: invalid value (32767) [ 393.805714][T17519] bond0: option resend_igmp: allowed values 0 - 255 [ 393.819420][T17519] bond0 (unregistering): Released all slaves [ 393.950142][T17515] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 394.203681][T17514] veth0: left promiscuous mode [ 394.232372][T17531] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 394.232372][T17531] Please contact the netfilter-devel mailing list or update your nftables rules. [ 394.252083][T17532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3263'. [ 394.428859][T17531] team1: entered promiscuous mode [ 394.459331][T17531] team1: entered allmulticast mode [ 394.850298][T17506] vxcan1 speed is unknown, defaulting to 1000 [ 395.183471][T16211] net_ratelimit: 38 callbacks suppressed [ 395.183491][T16211] bond6: (slave geneve4): failed to get link speed/duplex [ 395.203098][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.293394][T16214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.329499][T16214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.338282][T16217] bond6: (slave geneve4): failed to get link speed/duplex [ 395.448567][T17577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.464942][T16217] bond6: (slave geneve4): failed to get link speed/duplex [ 395.573745][ T5631] Bluetooth: hci0: command tx timeout [ 395.603832][T16211] bond6: (slave geneve4): failed to get link speed/duplex [ 395.652591][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.847588][T17592] __nla_validate_parse: 5 callbacks suppressed [ 395.847609][T17592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3280'. [ 395.962970][T16214] bond6: (slave geneve4): failed to get link speed/duplex [ 395.987126][T17600] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3282'. [ 396.149021][T17610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3284'. [ 396.220740][T17614] netlink: 'syz.0.3286': attribute type 13 has an invalid length. [ 396.240010][T17614] gretap0: refused to change device tx_queue_len [ 396.562294][T17506] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.571717][T17506] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.579142][T17506] bridge_slave_0: entered allmulticast mode [ 396.588191][T17506] bridge_slave_0: entered promiscuous mode [ 396.599512][T17506] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.607277][T17506] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.616465][T17506] bridge_slave_1: entered allmulticast mode [ 396.625079][T17506] bridge_slave_1: entered promiscuous mode [ 396.674168][T17506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.688073][T17506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.774114][T17506] team0: Port device team_slave_0 added [ 396.796294][T17506] team0: Port device team_slave_1 added [ 396.902434][T17506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.908444][T17641] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 396.909630][T17506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.946869][T17506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.966198][T17506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.973966][T17506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.000594][T17506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.008553][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'. [ 397.020663][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3292'. [ 397.053056][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'. [ 397.105289][T17648] Bluetooth: MGMT ver 1.23 [ 397.148679][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'. [ 397.164877][T17506] hsr_slave_0: entered promiscuous mode [ 397.173556][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3292'. [ 397.184217][T17506] hsr_slave_1: entered promiscuous mode [ 397.195799][T17506] debugfs: 'hsr0' already exists in 'hsr' [ 397.201720][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'. [ 397.210877][T17506] Cannot create hsr debugfs directory [ 397.263347][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.276310][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.624723][T17657] veth0_macvtap: left allmulticast mode [ 397.648286][T17670] netlink: 'syz.3.3302': attribute type 1 has an invalid length. [ 397.656813][ T5631] Bluetooth: hci0: command tx timeout [ 397.791983][ T5734] vxcan1 speed is unknown, defaulting to 1000 [ 397.800615][ T5734] syz2: Port: 1 Link DOWN [ 397.898802][T17671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.992310][T11630] vxcan1 speed is unknown, defaulting to 1000 [ 398.034268][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.067688][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.090651][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.104088][T17682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3305'. [ 398.144303][T17682] netlink: 'syz.3.3305': attribute type 32 has an invalid length. [ 398.161864][T16217] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.186604][T16217] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 398.211558][T16217] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.276364][T17690] SET target dimension over the limit! [ 398.309977][T17506] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.326492][T17506] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.427508][T17697] netlink: 'syz.3.3311': attribute type 32 has an invalid length. [ 398.480726][T17506] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.506851][T17506] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.590414][T17506] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.622611][T17506] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.686329][T17706] syzkaller1: entered promiscuous mode [ 398.715659][T17706] syzkaller1: entered allmulticast mode [ 398.750249][T17506] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.778769][T17506] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.249105][T17726] ip6t_rpfilter: unknown options [ 399.348684][T17506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 399.375202][T17506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.394173][T17506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 399.440016][T17506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.463105][T17506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 399.497754][T17506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.522215][T17506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 399.554373][T17506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.598203][T17739] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 399.606775][T17739] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 399.624321][T17739] tipc: Started in network mode [ 399.630368][T17739] tipc: Node identity 080211, cluster identity 4711 [ 399.638029][T17739] tipc: Enabled bearer , priority 0 [ 399.661033][T17739] tipc: Resetting bearer [ 399.705181][T17750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.712558][T17750] IPv6: NLM_F_CREATE should be set when creating new route [ 399.719911][T17750] IPv6: NLM_F_CREATE should be set when creating new route [ 399.727244][T17750] IPv6: NLM_F_CREATE should be set when creating new route [ 399.732095][ T5631] Bluetooth: hci0: command tx timeout [ 399.779805][T17751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.804510][T17506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.881632][T17506] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.901360][T16211] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.908609][T16211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.950484][T16211] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.957740][T16211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.161986][T17765] x_tables: duplicate entry at hook 1 [ 400.259189][T17765] tipc: Enabling of bearer rejected, failed to enable media [ 400.606745][T17785] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 400.723346][T17785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.732888][ T5856] tipc: Node number set to 134353152 [ 400.754071][T17789] vlan2: entered promiscuous mode [ 400.759291][T17789] bond2: entered promiscuous mode [ 400.765640][T17789] vlan2: entered allmulticast mode [ 400.771264][T17789] bond2: entered allmulticast mode [ 400.816209][T17785] bond2: (slave bridge1): making interface the new active one [ 400.844046][T17785] bridge1: entered promiscuous mode [ 400.849599][T17785] bridge1: entered allmulticast mode [ 400.858371][T17785] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 401.216012][T17812] __nla_validate_parse: 6 callbacks suppressed [ 401.216034][T17812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3346'. [ 401.268766][T17814] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 401.344848][T17816] bond3: option mode: invalid value (10) [ 401.377276][T17816] bond3 (unregistering): Released all slaves [ 401.476275][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3347'. [ 401.646192][T17506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.788938][T17506] veth0_vlan: entered promiscuous mode [ 401.811570][ T5631] Bluetooth: hci0: command tx timeout [ 401.831777][T17506] veth1_vlan: entered promiscuous mode [ 402.056647][T17506] veth0_macvtap: entered promiscuous mode [ 402.079793][T17506] veth1_macvtap: entered promiscuous mode [ 402.165570][T17506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.223802][T17506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.320581][T16217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.361498][T16217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.426129][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 402.441453][T16217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.501110][T16217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.542529][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 402.574070][T16214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.613913][T16214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.743763][T16213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.752849][T16213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.765720][T17866] syzkaller0: entered promiscuous mode [ 402.775748][T17866] syzkaller0: entered allmulticast mode [ 402.951410][T17877] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 402.967644][T17875] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3361'. [ 403.184182][T17888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 403.402358][T17464] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.417571][T17464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.427324][T17464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.438755][T17464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.449519][T17464] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.967945][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3372'. [ 404.005889][T17918] ipip0: entered promiscuous mode [ 404.020547][T17920] net_ratelimit: 8 callbacks suppressed [ 404.020568][T17920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.045315][T17918] ipip0: entered allmulticast mode [ 404.164180][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3371'. [ 404.304990][T17935] "syz.2.3375" (17935) uses obsolete ecb(arc4) skcipher [ 404.498721][T17896] vxcan1 speed is unknown, defaulting to 1000 [ 405.244743][T17964] bridge_slave_0: invalid flags given to default FDB implementation [ 405.494872][ T5631] Bluetooth: hci3: command tx timeout [ 405.545494][ T5734] IPVS: starting estimator thread 0... [ 405.651175][T17980] IPVS: using max 26 ests per chain, 62400 per kthread [ 405.683094][T17984] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 405.982346][T17998] syzkaller0: entered promiscuous mode [ 406.001909][T17998] syzkaller0: entered allmulticast mode [ 406.110945][T18000] netlink: 'syz.0.3395': attribute type 10 has an invalid length. [ 406.234591][T18003] tipc: Enabling of bearer rejected, failed to enable media [ 406.364811][T17896] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.395846][T17896] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.428483][T17896] bridge_slave_0: entered allmulticast mode [ 406.460652][T17896] bridge_slave_0: entered promiscuous mode [ 406.500614][T17896] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.529757][T17896] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.540574][T17896] bridge_slave_1: entered allmulticast mode [ 406.554757][T17896] bridge_slave_1: entered promiscuous mode [ 406.583336][T18023] netlink: 'syz.2.3402': attribute type 4 has an invalid length. [ 406.634896][T18031] netlink: 'syz.2.3402': attribute type 4 has an invalid length. [ 406.676866][T17896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.699188][T18023] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3402'. [ 406.716832][T17896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.736727][T18023] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3402'. [ 406.847811][T18037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3402'. [ 406.923068][T18039] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3408'. [ 406.963205][T17896] team0: Port device team_slave_0 added [ 407.010767][T17896] team0: Port device team_slave_1 added [ 407.083504][T18051] raw_sendmsg: syz.1.3409 forgot to set AF_INET. Fix it! [ 407.124451][T17896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.141180][T17896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.212270][T17896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.286110][T17896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.296327][T17896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.325935][T17896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.346500][T18059] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 407.572380][ T5631] Bluetooth: hci3: command tx timeout [ 407.629901][T17896] hsr_slave_0: entered promiscuous mode [ 407.663427][T17896] hsr_slave_1: entered promiscuous mode [ 407.693162][T17896] debugfs: 'hsr0' already exists in 'hsr' [ 407.724357][T17896] Cannot create hsr debugfs directory [ 407.974931][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3420'. [ 408.088239][T18098] syzkaller1: entered promiscuous mode [ 408.112196][T18098] syzkaller1: entered allmulticast mode [ 408.321883][T18116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.514509][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3431'. [ 408.599967][T18118] vxcan1 speed is unknown, defaulting to 1000 [ 408.712840][T18123] veth3: entered allmulticast mode [ 408.785785][T18131] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.234541][T18151] netlink: 'syz.1.3435': attribute type 16 has an invalid length. [ 409.255958][T18151] netlink: 'syz.1.3435': attribute type 17 has an invalid length. [ 409.334141][T16215] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 409.483534][T18151] ipip0: left promiscuous mode [ 409.488656][T18151] ipip0: left allmulticast mode [ 409.651538][ T5631] Bluetooth: hci3: command tx timeout [ 409.660237][T18164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3438'. [ 409.850372][T18172] netlink: 'syz.1.3441': attribute type 6 has an invalid length. [ 409.960733][T18169] bond0: Removing last ns target with arp_interval on [ 410.304105][T17896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 410.342620][T17896] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.388912][T17896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.412562][T17896] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.487388][T17896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 410.496852][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'. [ 410.508370][T18189] netlink: 'syz.0.3445': attribute type 13 has an invalid length. [ 410.552673][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'. [ 410.609431][T17896] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.644385][T18189] veth1_macvtap: left promiscuous mode [ 410.650057][T18189] macsec0: entered allmulticast mode [ 410.669764][T17896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 410.721534][T17896] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.772629][T16216] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.804761][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.851236][T16212] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.871615][T16212] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.885860][T18207] netlink: 'syz.2.3449': attribute type 1 has an invalid length. [ 410.909889][T18205] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3448'. [ 410.966614][T18205] syzkaller0: entered promiscuous mode [ 410.979035][T18205] syzkaller0: entered allmulticast mode [ 411.143745][T18216] syz.3.3451 (18216) used obsolete PPPIOCDETACH ioctl [ 411.192272][T17896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.264902][T17896] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.338037][T16217] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.345335][T16217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.463045][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.470307][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.731270][ T5631] Bluetooth: hci3: command tx timeout [ 412.277251][T18271] __nla_validate_parse: 3 callbacks suppressed [ 412.277270][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'. [ 412.307991][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 412.393443][T18278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3466'. [ 412.501793][T18281] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3467'. [ 412.929854][T17896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.991606][T18310] netlink: 'syz.0.3474': attribute type 83 has an invalid length. [ 413.102811][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'. [ 413.437086][T18306] netlink: 'syz.3.3473': attribute type 4 has an invalid length. [ 413.468946][T17896] veth0_vlan: entered promiscuous mode [ 413.546814][T18324] IPVS: lc: FWM 3 0x00000003 - no destination available [ 413.559466][T17896] veth1_vlan: entered promiscuous mode [ 413.695441][T17896] veth0_macvtap: entered promiscuous mode [ 413.734600][T17896] veth1_macvtap: entered promiscuous mode [ 413.794162][T17896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.829290][T17896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.951310][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'. [ 414.216408][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.271311][T16211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.417518][T18352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.431164][T16211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.450283][T16211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.584973][T16211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.607129][T16211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.746886][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.770885][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.814602][T18361] syzkaller1: entered promiscuous mode [ 414.825786][T18361] syzkaller1: entered allmulticast mode [ 415.069531][T18373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3362'. [ 415.082091][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3492'. [ 415.098188][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3493'. [ 415.665103][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 416.335096][T18445] vlan3: entered promiscuous mode [ 416.348817][T18445] bridge0: entered promiscuous mode [ 416.443402][T18452] netlink: 'syz.3.3514': attribute type 21 has an invalid length. [ 416.630880][T18472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.824672][T18478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.935373][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.039136][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.039175][ T11] block nbd1: Possible stuck request ffff888027947000: control (read@0,1024B). Runtime 120 seconds [ 417.058548][ T11] block nbd1: Possible stuck request ffff8880279471c0: control (read@1024,1024B). Runtime 120 seconds [ 417.070129][ T11] block nbd1: Possible stuck request ffff888027947380: control (read@2048,1024B). Runtime 120 seconds [ 417.081534][ T11] block nbd1: Possible stuck request ffff888027947540: control (read@3072,1024B). Runtime 120 seconds [ 417.478193][T18518] netlink: 'syz.1.3533': attribute type 2 has an invalid length. [ 417.642646][T18523] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 417.673367][T18523] bond1 (unregistering): Released all slaves [ 417.973151][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.175982][T18559] x_tables: duplicate entry at hook 2 [ 418.189647][T18555] Bluetooth: MGMT ver 1.23 [ 418.204463][T18555] Unsupported ieee802154 address type: 0 [ 418.388946][T18572] netlink: 'syz.0.3549': attribute type 3 has an invalid length. [ 418.523994][T18581] __nla_validate_parse: 20 callbacks suppressed [ 418.524024][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'. [ 418.727434][T18585] netlink: 'syz.2.3552': attribute type 23 has an invalid length. [ 418.867717][T18590] vxcan1 speed is unknown, defaulting to 1000 [ 419.014151][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.235936][T18612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3559'. [ 419.954117][ T29] IPVS: starting estimator thread 0... [ 420.053814][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.082533][T18644] IPVS: using max 35 ests per chain, 84000 per kthread [ 420.131316][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.264832][T18658] netlink: 'syz.0.3571': attribute type 23 has an invalid length. [ 420.400567][T18653] bond1 (unregistering): Released all slaves [ 420.508254][T18672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3574'. [ 420.978934][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3576'. [ 421.018899][T18689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.092179][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.375886][T18705] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 421.432948][T18705] bond4: (slave lo): Enslaving as an active interface with an up link [ 421.483913][T18705] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 421.585966][T18715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3584'. [ 421.757722][T18720] xt_hashlimit: size too large, truncated to 1048576 [ 421.855275][T18725] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.048772][T18722] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3587'. [ 422.119890][T18736] netlink: 'syz.3.3589': attribute type 1 has an invalid length. [ 422.135388][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.241213][T18738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3589'. [ 422.445365][T18725] bridge_slave_0 (unregistering): left allmulticast mode [ 422.471718][T18725] bridge_slave_0 (unregistering): left promiscuous mode [ 422.493858][T18725] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.609484][T18736] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 422.856636][T18748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3593'. [ 423.007678][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 423.046472][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 423.221525][T18766] tap0: tun_chr_ioctl cmd 1074025672 [ 423.246461][T18766] tap0: ignored: set checksum disabled [ 423.272901][T18766] netlink: 'syz.3.3600': attribute type 1 has an invalid length. [ 423.309117][T18766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.527962][T18788] netlink: 'syz.2.3605': attribute type 23 has an invalid length. [ 423.743369][T18797] __nla_validate_parse: 6 callbacks suppressed [ 423.743391][T18797] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3608'. [ 423.776652][T18800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3609'. [ 423.798185][T18799] syzkaller0: entered promiscuous mode [ 423.810106][T18799] syzkaller0: entered allmulticast mode [ 423.819826][T18800] netlink: 'syz.3.3609': attribute type 1 has an invalid length. [ 423.918084][T18800] bond3: entered promiscuous mode [ 423.925440][T18800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.944920][T18810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3611'. [ 424.049155][T18815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3612'. [ 424.231217][T18822] geneve2: entered promiscuous mode [ 424.422420][T18837] netlink: 'syz.1.3618': attribute type 21 has an invalid length. [ 424.449886][T18836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3619'. [ 424.475664][T18837] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3618'. [ 424.505123][T18837] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3618'. [ 424.700034][T18850] netlink: 'syz.0.3623': attribute type 2 has an invalid length. [ 424.730073][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3624'. [ 424.739180][T18850] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3623'. [ 424.871710][T18863] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 425.040676][T18863] netlink: 'syz.4.3626': attribute type 5 has an invalid length. [ 425.372993][T18888] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3635'. [ 425.571741][T18900] netlink: 'syz.3.3639': attribute type 29 has an invalid length. [ 426.162164][T18925] netlink: 'syz.3.3648': attribute type 39 has an invalid length. [ 427.577325][T18998] pim6reg: entered allmulticast mode [ 427.638153][T19009] 0·: renamed from hsr0 (while UP) [ 427.671129][T19009] 0·: entered allmulticast mode [ 427.692593][T19009] hsr_slave_0: entered allmulticast mode [ 427.724829][T19009] hsr_slave_1: entered allmulticast mode [ 427.762953][T19009] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 427.853649][T19021] netlink: 'syz.0.3676': attribute type 11 has an invalid length. [ 427.875012][T19021] netlink: 'syz.0.3676': attribute type 11 has an invalid length. [ 427.939892][T19016] bridge0: port 2(bridge_slave_1) entered listening state [ 427.960348][T19016] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.232730][T19039] netlink: 'syz.4.3679': attribute type 1 has an invalid length. [ 428.302880][T19043] netlink: 'syz.4.3679': attribute type 21 has an invalid length. [ 428.314223][T19039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.322973][T19043] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.427478][T19039] bond1: (slave geneve2): making interface the new active one [ 428.498343][T19039] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 429.058198][T19068] __nla_validate_parse: 11 callbacks suppressed [ 429.058219][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3686'. [ 429.508560][T19091] IPv6: addrconf: prefix option has invalid lifetime [ 429.557396][T19091] syzkaller0: entered promiscuous mode [ 429.566264][T19096] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.586258][T19091] syzkaller0: entered allmulticast mode [ 429.670492][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 429.745570][T19100] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 430.177815][T19130] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 430.194358][T19130] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.536795][T19147] No such timeout policy "syz0" [ 430.614725][T19153] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3707'. [ 431.022427][T19167] netlink: 'syz.3.3713': attribute type 1 has an invalid length. [ 431.139036][T19167] bond4: entered promiscuous mode [ 431.160300][T19167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.245153][T19171] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 431.259465][T19171] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 431.276312][T19171] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 431.364840][T19174] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 431.435091][T19174] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 431.599553][T19192] netlink: 'syz.1.3718': attribute type 1 has an invalid length. [ 431.657472][T19192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.748868][T19192] bond1: (slave geneve2): making interface the new active one [ 431.795209][T19192] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 431.879222][T11622] hsr0: entered promiscuous mode [ 431.894180][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 432.213800][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.265155][T19220] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.272469][T19220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.314301][T19222] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 432.337082][T19223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3728'. [ 432.353191][T19220] bridge0: entered allmulticast mode [ 432.837855][T19239] netlink: 'syz.3.3731': attribute type 12 has an invalid length. [ 432.908861][T19238] syzkaller0: entered promiscuous mode [ 432.916459][T19238] syzkaller0: entered allmulticast mode [ 432.957775][T19239] bond5: option primary_reselect: invalid value (255) [ 432.966752][T19239] bond5 (unregistering): Released all slaves [ 435.729460][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3745'. [ 435.779065][T19303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3745'. [ 435.825668][T19312] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 436.160707][T19327] netlink: 'syz.0.3756': attribute type 49 has an invalid length. [ 436.203320][T19332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3757'. [ 436.425445][T19341] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3760'. [ 436.458638][T19341] netlink: 'syz.0.3760': attribute type 9 has an invalid length. [ 436.494616][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3760'. [ 436.524697][T19341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'. [ 436.565860][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3760'. [ 436.597601][T19341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'. [ 436.956515][T19353] netlink: 'syz.1.3763': attribute type 2 has an invalid length. [ 436.988933][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 437.023857][T19355] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3764'. [ 437.078842][T19361] netlink: 'syz.3.3766': attribute type 3 has an invalid length. [ 437.317946][T19376] netlink: 'syz.3.3768': attribute type 2 has an invalid length. [ 440.053260][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.059687][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.505753][T19380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.518218][T19396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 440.687572][T11620] IPVS: starting estimator thread 0... [ 440.775846][T19445] __nla_validate_parse: 17 callbacks suppressed [ 440.775876][T19445] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3787'. [ 440.803453][T19439] IPVS: using max 29 ests per chain, 69600 per kthread [ 440.860738][T19446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.005754][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3795'. [ 441.023644][T19456] bridge_slave_1: left allmulticast mode [ 441.029388][T19456] bridge_slave_1: left promiscuous mode [ 441.061429][T19456] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.115476][T19456] bridge_slave_0: left allmulticast mode [ 441.136117][T19456] bridge_slave_0: left promiscuous mode [ 441.152996][T19456] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.287763][T19460] sch_fq: defrate 0 ignored. [ 441.335013][T16213] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 441.569917][T19492] netlink: 'syz.4.3804': attribute type 1 has an invalid length. [ 441.597509][T19491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3801'. [ 441.834363][T19508] vlan2: entered allmulticast mode [ 441.856275][T19508] bridge1: entered allmulticast mode [ 441.935903][T19492] bridge1: entered promiscuous mode [ 441.968850][T19492] bond2: (slave bridge1): making interface the new active one [ 442.006665][T19492] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 442.041781][T19524] netlink: 'syz.0.3809': attribute type 1 has an invalid length. [ 442.053280][T19517] bridge2: entered promiscuous mode [ 442.063365][T19517] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 442.208214][T19528] netlink: 'syz.1.3810': attribute type 4 has an invalid length. [ 442.258114][T19533] netlink: 'syz.3.3812': attribute type 5 has an invalid length. [ 442.664861][T19554] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3819'. [ 442.674377][T19554] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3819'. [ 442.900238][T19562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3821'. [ 443.049473][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3826'. [ 443.132304][T19566] ip6tnl1: entered allmulticast mode [ 443.357206][T19587] bridge3: entered promiscuous mode [ 443.372974][T19587] bridge3: entered allmulticast mode [ 443.692093][T19615] sctp: [Deprecated]: syz.4.3839 (pid 19615) Use of int in max_burst socket option. [ 443.692093][T19615] Use struct sctp_assoc_value instead [ 443.713110][T19613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.903313][T19624] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3842'. [ 443.929641][T19618] netlink: 'syz.3.3840': attribute type 4 has an invalid length. [ 444.410809][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'. [ 444.456341][T19645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3849'. [ 445.285319][T19679] netlink: 'syz.3.3854': attribute type 29 has an invalid length. [ 445.309332][T19680] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 445.320297][T19680] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 445.340237][ T5291] veth1_vlan: left promiscuous mode [ 445.893285][T19689] __nla_validate_parse: 1 callbacks suppressed [ 445.893299][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3859'. [ 447.093021][ T11] block nbd1: Possible stuck request ffff888027947000: control (read@0,1024B). Runtime 150 seconds [ 447.103948][ T11] block nbd1: Possible stuck request ffff8880279471c0: control (read@1024,1024B). Runtime 150 seconds [ 447.115091][ T11] block nbd1: Possible stuck request ffff888027947380: control (read@2048,1024B). Runtime 150 seconds [ 447.126419][ T11] block nbd1: Possible stuck request ffff888027947540: control (read@3072,1024B). Runtime 150 seconds [ 447.481366][T19649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.547577][T19670] netlink: 'syz.3.3854': attribute type 1 has an invalid length. [ 447.567188][T19670] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3854'. [ 447.644357][T19699] netlink: 'syz.1.3862': attribute type 8 has an invalid length. [ 447.650504][T19697] syzkaller0: entered promiscuous mode [ 447.659927][T19697] syzkaller0: entered allmulticast mode [ 448.157953][T19722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3870'. [ 460.354535][T17464] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.363931][T17464] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.377344][T17464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.387180][T17464] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.395123][T17464] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.677170][T19729] vxcan1 speed is unknown, defaulting to 1000 [ 461.044400][T19729] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.051830][T19729] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.059061][T19729] bridge_slave_0: entered allmulticast mode [ 461.068223][T19729] bridge_slave_0: entered promiscuous mode [ 461.076482][T19729] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.083822][T19729] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.091254][T19729] bridge_slave_1: entered allmulticast mode [ 461.098661][T19729] bridge_slave_1: entered promiscuous mode [ 461.133147][T19729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.145335][T19729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.182691][T19729] team0: Port device team_slave_0 added [ 461.190872][T19729] team0: Port device team_slave_1 added [ 461.220660][T19729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.227764][T19729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.254711][T19729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.267725][T19729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.276205][T19729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.302642][T19729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.433154][T19729] hsr_slave_0: entered promiscuous mode [ 461.441711][T19729] hsr_slave_1: entered promiscuous mode [ 461.507797][T17464] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 461.524791][T17464] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 461.534489][T17464] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 461.545746][T17464] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 461.554851][T17464] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 461.699843][T17464] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 461.717757][T17464] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 461.730790][T17464] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 461.742387][T17464] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 461.754152][T17464] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 462.166525][T19748] vxcan1 speed is unknown, defaulting to 1000 [ 462.349884][T19751] vxcan1 speed is unknown, defaulting to 1000 [ 462.462556][T17464] Bluetooth: hci1: command tx timeout [ 462.729480][T19748] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.736891][T19748] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.745420][T19748] bridge_slave_0: entered allmulticast mode [ 462.753317][T19748] bridge_slave_0: entered promiscuous mode [ 462.764878][T19748] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.773537][T19748] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.780836][T19748] bridge_slave_1: entered allmulticast mode [ 462.789784][T19748] bridge_slave_1: entered promiscuous mode [ 462.845027][T19748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.857729][T19748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.917365][T19748] team0: Port device team_slave_0 added [ 462.927811][T19748] team0: Port device team_slave_1 added [ 462.967240][T19748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.974329][T19748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.001086][T19748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.025947][T19748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.033825][T19748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.060638][T19748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.127800][T19748] hsr_slave_0: entered promiscuous mode [ 463.134701][T19748] hsr_slave_1: entered promiscuous mode [ 463.142148][T19748] debugfs: 'hsr0' already exists in 'hsr' [ 463.147942][T19748] Cannot create hsr debugfs directory [ 463.265249][T19751] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.272633][T19751] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.280032][T19751] bridge_slave_0: entered allmulticast mode [ 463.288340][T19751] bridge_slave_0: entered promiscuous mode [ 463.303728][T19751] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.311355][T19751] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.319741][T19751] bridge_slave_1: entered allmulticast mode [ 463.327932][T19751] bridge_slave_1: entered promiscuous mode [ 463.383639][T19751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.397136][T19751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.539056][T19751] team0: Port device team_slave_0 added [ 463.559818][T19751] team0: Port device team_slave_1 added [ 463.646795][T19751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.654709][T19751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.671144][T17464] Bluetooth: hci6: command tx timeout [ 463.690613][T19751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.713902][T19751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.728868][T19751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.739763][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 463.771625][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 463.781009][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 463.791669][T19751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.809475][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 463.817619][ T5631] Bluetooth: hci7: command tx timeout [ 463.828668][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 463.855884][ T5631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 463.871251][ T5631] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 463.909455][T17464] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 463.925927][T17464] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 463.938078][T17464] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 464.037325][T19751] hsr_slave_0: entered promiscuous mode [ 464.045433][T19751] hsr_slave_1: entered promiscuous mode [ 464.055584][T19751] debugfs: 'hsr0' already exists in 'hsr' [ 464.062575][T19751] Cannot create hsr debugfs directory [ 464.531368][T17464] Bluetooth: hci1: command tx timeout [ 464.589335][T19786] vxcan1 speed is unknown, defaulting to 1000 [ 464.748206][T19784] vxcan1 speed is unknown, defaulting to 1000 [ 465.108744][T19786] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.116124][T19786] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.124190][T19786] bridge_slave_0: entered allmulticast mode [ 465.133097][T19786] bridge_slave_0: entered promiscuous mode [ 465.146352][T19786] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.156073][T19786] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.165078][T19786] bridge_slave_1: entered allmulticast mode [ 465.173791][T19786] bridge_slave_1: entered promiscuous mode [ 465.207333][T19786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.220258][T19786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.270645][T19786] team0: Port device team_slave_0 added [ 465.286457][T19786] team0: Port device team_slave_1 added [ 465.337155][T19786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.344498][T19786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.373392][T19786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.391801][T19786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.398821][T19786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.427684][T19786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.500543][T19786] hsr_slave_0: entered promiscuous mode [ 465.507753][T19786] hsr_slave_1: entered promiscuous mode [ 465.515364][T19786] debugfs: 'hsr0' already exists in 'hsr' [ 465.521481][T19786] Cannot create hsr debugfs directory [ 465.685456][T19784] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.693066][T19784] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.700504][T19784] bridge_slave_0: entered allmulticast mode [ 465.709116][T19784] bridge_slave_0: entered promiscuous mode [ 465.728606][T19784] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.735918][T17464] Bluetooth: hci6: command tx timeout [ 465.741911][T19784] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.749218][T19784] bridge_slave_1: entered allmulticast mode [ 465.757003][T19784] bridge_slave_1: entered promiscuous mode [ 465.810579][T19784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.832864][T19784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.874026][T19784] team0: Port device team_slave_0 added [ 465.891601][T17464] Bluetooth: hci8: command tx timeout [ 465.893698][ T5631] Bluetooth: hci7: command tx timeout [ 465.914058][T19784] team0: Port device team_slave_1 added [ 465.956088][T19784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.963551][T19784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.992294][T19784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.007246][T19784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.015609][T19784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.044623][T19784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.056220][T17464] Bluetooth: hci9: command tx timeout [ 466.125850][T19784] hsr_slave_0: entered promiscuous mode [ 466.133277][T19784] hsr_slave_1: entered promiscuous mode [ 466.139600][T19784] debugfs: 'hsr0' already exists in 'hsr' [ 466.145757][T19784] Cannot create hsr debugfs directory [ 466.611354][T17464] Bluetooth: hci1: command tx timeout [ 467.731824][T17464] Bluetooth: hci5: command 0x0406 tx timeout [ 467.811305][ T5642] Bluetooth: hci6: command tx timeout [ 467.972181][ T5642] Bluetooth: hci7: command tx timeout [ 467.974725][T17464] Bluetooth: hci8: command tx timeout [ 468.133214][T17464] Bluetooth: hci9: command tx timeout [ 468.691330][T17464] Bluetooth: hci1: command tx timeout [ 469.891756][T17464] Bluetooth: hci6: command tx timeout [ 470.051238][T17464] Bluetooth: hci7: command tx timeout [ 470.052090][ T5642] Bluetooth: hci8: command tx timeout [ 470.212230][ T5642] Bluetooth: hci9: command tx timeout [ 472.141341][ T5642] Bluetooth: hci8: command tx timeout [ 472.291215][ T5642] Bluetooth: hci9: command tx timeout [ 473.333620][T16215] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 476.757104][ T4996] udevd[4996]: worker [5741] /devices/virtual/block/nbd1 timeout; kill it [ 476.766812][ T4996] udevd[4996]: seq 18081 '/devices/virtual/block/nbd1' killed [ 477.183824][ T11] block nbd1: Possible stuck request ffff888027947000: control (read@0,1024B). Runtime 180 seconds [ 477.195086][ T11] block nbd1: Possible stuck request ffff8880279471c0: control (read@1024,1024B). Runtime 180 seconds [ 477.206328][ T11] block nbd1: Possible stuck request ffff888027947380: control (read@2048,1024B). Runtime 180 seconds [ 477.218658][ T11] block nbd1: Possible stuck request ffff888027947540: control (read@3072,1024B). Runtime 180 seconds [ 483.094111][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 501.496070][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.504685][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.332161][T16213] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 507.262745][ T11] block nbd1: Possible stuck request ffff888027947000: control (read@0,1024B). Runtime 210 seconds [ 507.273737][ T11] block nbd1: Possible stuck request ffff8880279471c0: control (read@1024,1024B). Runtime 210 seconds [ 507.287105][ T11] block nbd1: Possible stuck request ffff888027947380: control (read@2048,1024B). Runtime 210 seconds [ 507.298497][ T11] block nbd1: Possible stuck request ffff888027947540: control (read@3072,1024B). Runtime 210 seconds [ 508.691504][T17464] Bluetooth: hci4: command 0x0405 tx timeout [ 520.422339][T17464] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 520.432276][T17464] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 520.440217][T17464] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 520.449548][T17464] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 520.462920][T17464] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 520.750336][T19821] vxcan1 speed is unknown, defaulting to 1000 [ 521.133585][T19821] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.141040][T19821] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.148528][T19821] bridge_slave_0: entered allmulticast mode [ 521.156452][T19821] bridge_slave_0: entered promiscuous mode [ 521.165708][T19821] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.173178][T19821] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.182180][T19821] bridge_slave_1: entered allmulticast mode [ 521.191144][T19821] bridge_slave_1: entered promiscuous mode [ 521.224490][T19821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.237076][T19821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.272945][T19821] team0: Port device team_slave_0 added [ 521.282688][T19821] team0: Port device team_slave_1 added [ 521.313418][T19821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.320393][T19821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.346840][T19821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.360335][T19821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.367429][T19821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.395078][T19821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.463551][T19821] hsr_slave_0: entered promiscuous mode [ 521.470488][T19821] hsr_slave_1: entered promiscuous mode [ 521.477491][T19821] debugfs: 'hsr0' already exists in 'hsr' [ 521.485707][T19821] Cannot create hsr debugfs directory [ 521.588611][T17464] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 521.600766][T17464] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 521.609032][T17464] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 521.618741][T17464] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 521.629761][T17464] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 522.016520][T16213] batman_adv: batadv0: Interface deactivated: gretap1 [ 522.212892][T16213] batman_adv: batadv0: Removing interface: gretap1 [ 522.324813][T16213] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 522.333466][T16213] bridge3 (unregistering): left promiscuous mode [ 522.348108][T16213] .` (unregistering): (slave veth0_to_bond): Releasing backup interface [ 522.360776][T16213] .` (unregistering): Released all slaves [ 522.378038][T16213] bond0 (unregistering): (slave bond3): Releasing backup interface [ 522.386933][T16213] bond0 (unregistering): Released all slaves [ 522.403121][T16213] bond1 (unregistering): Released all slaves [ 522.424852][T16213] bond2 (unregistering): Released all slaves [ 522.448065][T16213] bond3 (unregistering): Released all slaves [ 522.473027][T16213] bond4 (unregistering): Released all slaves [ 522.520808][T16213] bond5 (unregistering): Released all slaves [ 522.531468][T17464] Bluetooth: hci10: command tx timeout [ 522.565808][T16213] bond6 (unregistering): (slave veth1): Releasing active interface [ 522.577653][T16213] batadv1: entered promiscuous mode [ 522.587244][T16213] bond6 (unregistering): (slave batadv1): Releasing active interface [ 522.604779][T16213] bond6 (unregistering): (slave veth5): Releasing active interface [ 522.619063][T16213] bond6 (unregistering): Released all slaves [ 522.645779][ T5642] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 522.658135][ T5642] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 522.673722][ T5642] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 522.684738][ T5642] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 522.693883][T16213] bond7 (unregistering): (slave dummy0): Releasing backup interface [ 522.705580][ T5642] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 522.750114][T16213] bond7 (unregistering): Released all slaves [ 522.774115][T16213] bond8 (unregistering): Released all slaves [ 522.796711][T19839] vxcan1 speed is unknown, defaulting to 1000 [ 523.629811][T19850] vxcan1 speed is unknown, defaulting to 1000 [ 523.659265][ T5642] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 523.676422][ T5642] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 523.684853][ T5642] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 523.695463][ T5642] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 523.703389][ T5642] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 523.731939][ T5631] Bluetooth: hci11: command tx timeout [ 524.438863][T19862] vxcan1 speed is unknown, defaulting to 1000 [ 524.611687][ T5642] Bluetooth: hci10: command tx timeout [ 524.779187][ T5642] Bluetooth: hci12: command tx timeout [ 524.805048][T17464] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 524.816293][T17464] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 524.825076][T17464] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 524.837609][T17464] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 524.845622][T17464] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 525.145937][T19839] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.154648][T19839] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.162862][T19839] bridge_slave_0: entered allmulticast mode [ 525.174810][T19839] bridge_slave_0: entered promiscuous mode [ 525.188621][T19839] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.196280][T19839] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.205383][T19839] bridge_slave_1: entered allmulticast mode [ 525.213081][T19839] bridge_slave_1: entered promiscuous mode [ 525.338429][T19839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.390791][T19839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.539086][T19839] team0: Port device team_slave_0 added [ 525.548478][T19839] team0: Port device team_slave_1 added [ 525.648410][T19839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.656256][T19839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.684471][T19839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.698405][T19839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.707068][T19839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.734337][T19839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.749316][T16213] IPVS: stop unused estimator thread 0... [ 525.811175][T17464] Bluetooth: hci13: command tx timeout [ 525.818525][ T5642] Bluetooth: hci11: command tx timeout [ 525.870235][T19879] vxcan1 speed is unknown, defaulting to 1000 [ 525.918718][T19839] hsr_slave_0: entered promiscuous mode [ 525.925769][T19839] hsr_slave_1: entered promiscuous mode [ 525.933335][T19839] debugfs: 'hsr0' already exists in 'hsr' [ 525.939139][T19839] Cannot create hsr debugfs directory [ 526.222808][T19850] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.230039][T19850] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.237845][T19850] bridge_slave_0: entered allmulticast mode [ 526.245321][T19850] bridge_slave_0: entered promiscuous mode [ 526.277667][T19850] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.285313][T19850] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.293351][T19850] bridge_slave_1: entered allmulticast mode [ 526.302599][T19850] bridge_slave_1: entered promiscuous mode [ 526.425199][T19850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.436442][T19862] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.443795][T19862] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.452377][T19862] bridge_slave_0: entered allmulticast mode [ 526.460458][T19862] bridge_slave_0: entered promiscuous mode [ 526.487736][T19850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.497434][T19862] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.505856][T19862] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.513467][T19862] bridge_slave_1: entered allmulticast mode [ 526.521407][T19862] bridge_slave_1: entered promiscuous mode [ 526.625231][T19850] team0: Port device team_slave_0 added [ 526.634856][T19850] team0: Port device team_slave_1 added [ 526.643904][T19862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.658789][T19862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.693298][T17464] Bluetooth: hci10: command tx timeout [ 526.728504][T19862] team0: Port device team_slave_0 added [ 526.766544][T19862] team0: Port device team_slave_1 added [ 526.785865][T19850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.794740][T19850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.823911][T19850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.839480][T19850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.846902][T19850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.874309][T19850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.874702][T17464] Bluetooth: hci12: command tx timeout [ 526.918874][T19862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.926015][T19862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.953259][T17464] Bluetooth: hci14: command tx timeout [ 526.953481][T19862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.997305][T19862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.005833][T19862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.033745][T19862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.126830][T19850] hsr_slave_0: entered promiscuous mode [ 527.134300][T19850] hsr_slave_1: entered promiscuous mode [ 527.141062][T19850] debugfs: 'hsr0' already exists in 'hsr' [ 527.146854][T19850] Cannot create hsr debugfs directory [ 527.256881][T19862] hsr_slave_0: entered promiscuous mode [ 527.265026][T19862] hsr_slave_1: entered promiscuous mode [ 527.271628][T19862] debugfs: 'hsr0' already exists in 'hsr' [ 527.277442][T19862] Cannot create hsr debugfs directory [ 527.549376][T19879] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.557291][T19879] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.565015][T19879] bridge_slave_0: entered allmulticast mode [ 527.576520][T19879] bridge_slave_0: entered promiscuous mode [ 527.601095][T19879] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.608320][T19879] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.617017][T19879] bridge_slave_1: entered allmulticast mode [ 527.624715][T19879] bridge_slave_1: entered promiscuous mode [ 527.719399][T19879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.750647][T19879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.829459][T19879] team0: Port device team_slave_0 added [ 527.839767][T19879] team0: Port device team_slave_1 added [ 527.891727][T17464] Bluetooth: hci13: command tx timeout [ 527.891739][ T5631] Bluetooth: hci11: command tx timeout [ 527.908273][T19879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.915525][T19879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.942695][T19879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.956174][T19879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.963667][T19879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.991317][T19879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.067048][T19879] hsr_slave_0: entered promiscuous mode [ 528.074905][T19879] hsr_slave_1: entered promiscuous mode [ 528.081655][T19879] debugfs: 'hsr0' already exists in 'hsr' [ 528.087423][T19879] Cannot create hsr debugfs directory [ 528.771602][ T5631] Bluetooth: hci10: command tx timeout [ 528.932428][ T5631] Bluetooth: hci12: command tx timeout [ 529.011356][T17464] Bluetooth: hci14: command tx timeout [ 529.171427][T17464] Bluetooth: hci3: command 0x0405 tx timeout [ 529.971565][ T5642] Bluetooth: hci13: command tx timeout [ 529.977143][T17464] Bluetooth: hci11: command tx timeout [ 531.011092][ T5642] Bluetooth: hci12: command tx timeout [ 531.091522][ T5642] Bluetooth: hci14: command tx timeout [ 532.051474][ T5642] Bluetooth: hci13: command tx timeout [ 533.171282][ T5642] Bluetooth: hci14: command tx timeout [ 537.336346][ T11] block nbd1: Possible stuck request ffff888027947000: control (read@0,1024B). Runtime 240 seconds [ 537.339122][T16216] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 537.347780][ T11] block nbd1: Possible stuck request ffff8880279471c0: control (read@1024,1024B). Runtime 240 seconds [ 537.372449][ T11] block nbd1: Possible stuck request ffff888027947380: control (read@2048,1024B). Runtime 240 seconds [ 537.383651][ T11] block nbd1: Possible stuck request ffff888027947540: control (read@3072,1024B). Runtime 240 seconds [ 562.935632][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.942484][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.411701][ T11] block nbd1: Possible stuck request ffff888027947000: control (read@0,1024B). Runtime 270 seconds [ 567.422632][ T11] block nbd1: Possible stuck request ffff8880279471c0: control (read@1024,1024B). Runtime 270 seconds [ 567.435478][ T11] block nbd1: Possible stuck request ffff888027947380: control (read@2048,1024B). Runtime 270 seconds [ 567.446888][ T11] block nbd1: Possible stuck request ffff888027947540: control (read@3072,1024B). Runtime 270 seconds [ 569.331780][T16217] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.493706][T17464] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 580.502202][T17464] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 580.510264][T17464] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 580.519242][T17464] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 580.527979][T17464] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 580.807185][T19911] vxcan1 speed is unknown, defaulting to 1000 [ 581.193164][T19911] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.200552][T19911] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.208115][T19911] bridge_slave_0: entered allmulticast mode [ 581.215950][T19911] bridge_slave_0: entered promiscuous mode [ 581.224908][T19911] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.232433][T19911] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.239754][T19911] bridge_slave_1: entered allmulticast mode [ 581.247764][T19911] bridge_slave_1: entered promiscuous mode [ 581.284824][T19911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.297258][T19911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.332189][T19911] team0: Port device team_slave_0 added [ 581.341884][T19911] team0: Port device team_slave_1 added [ 581.372226][T19911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.379243][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.406255][T19911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.419745][T19911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.427087][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.453566][T19911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.512532][T19911] hsr_slave_0: entered promiscuous mode [ 581.519152][T19911] hsr_slave_1: entered promiscuous mode [ 581.526806][T19911] debugfs: 'hsr0' already exists in 'hsr' [ 581.532770][T19911] Cannot create hsr debugfs directory [ 582.508024][T17464] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 582.518935][T17464] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 582.528177][T17464] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 582.539506][T17464] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 582.548774][T17464] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 582.621343][ T5642] Bluetooth: hci15: command tx timeout [ 582.842277][T19929] vxcan1 speed is unknown, defaulting to 1000 [ 583.232443][T19929] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.239697][T19929] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.247306][T19929] bridge_slave_0: entered allmulticast mode [ 583.255912][T19929] bridge_slave_0: entered promiscuous mode [ 583.266725][T19929] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.274787][T19929] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.282290][T19929] bridge_slave_1: entered allmulticast mode [ 583.289833][T19929] bridge_slave_1: entered promiscuous mode [ 583.321985][T19929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.335753][T19929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.370055][T19929] team0: Port device team_slave_0 added [ 583.380012][T19929] team0: Port device team_slave_1 added [ 583.409778][T19929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.418533][T19929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.449605][T19929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.463570][T19929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.470653][T19929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.504917][T19929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.585795][T19929] hsr_slave_0: entered promiscuous mode [ 583.594008][T19929] hsr_slave_1: entered promiscuous mode [ 583.600757][T19929] debugfs: 'hsr0' already exists in 'hsr' [ 583.609438][T19929] Cannot create hsr debugfs directory [ 583.683651][T19789] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 583.696411][T19789] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 583.705551][T19789] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 583.716499][T19789] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 583.728036][T19789] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 584.104685][T19947] vxcan1 speed is unknown, defaulting to 1000 [ 584.531818][T19947] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.539107][T19947] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.547430][T19947] bridge_slave_0: entered allmulticast mode [ 584.556187][T19947] bridge_slave_0: entered promiscuous mode [ 584.567090][T19947] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.574523][T19947] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.582281][T19947] bridge_slave_1: entered allmulticast mode [ 584.590430][T19947] bridge_slave_1: entered promiscuous mode [ 584.616818][T19789] Bluetooth: hci16: command tx timeout [ 584.656520][T19947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.671874][T19947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.691604][T19789] Bluetooth: hci15: command tx timeout [ 584.729681][T19947] team0: Port device team_slave_0 added [ 584.739356][T19947] team0: Port device team_slave_1 added [ 584.772498][T19787] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 584.783101][T19787] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 584.794760][T19787] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 584.804915][T19787] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 584.806309][T19947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.820535][T19947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.849601][T19947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.849867][T19787] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 584.872704][T19947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.879723][T19947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.906809][T19947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.982309][T19947] hsr_slave_0: entered promiscuous mode [ 584.989307][T19947] hsr_slave_1: entered promiscuous mode [ 584.996968][T19947] debugfs: 'hsr0' already exists in 'hsr' [ 585.003012][T19947] Cannot create hsr debugfs directory [ 585.330451][T19966] vxcan1 speed is unknown, defaulting to 1000 [ 585.495412][T19789] Bluetooth: hci1: command 0x0406 tx timeout [ 585.502744][T19787] Bluetooth: hci6: command 0x0406 tx timeout [ 585.511094][T19787] Bluetooth: hci7: command 0x0406 tx timeout [ 585.812986][ T5642] Bluetooth: hci17: command tx timeout [ 585.823983][ T5642] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 585.842675][ T5642] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 585.854356][ T5642] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 585.866891][ T5642] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 585.877241][ T5642] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 586.093942][T19966] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.102785][T19966] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.110459][T19966] bridge_slave_0: entered allmulticast mode [ 586.118959][T19966] bridge_slave_0: entered promiscuous mode [ 586.128265][T19966] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.136400][T19966] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.144455][T19966] bridge_slave_1: entered allmulticast mode [ 586.153621][T19966] bridge_slave_1: entered promiscuous mode [ 586.195011][T19966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.210233][T19966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.255544][T19966] team0: Port device team_slave_0 added [ 586.264888][T19966] team0: Port device team_slave_1 added [ 586.305077][T19966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.312738][T19966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.338803][T19966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.352955][T19966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.359947][T19966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.387281][T19966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.456465][T19966] hsr_slave_0: entered promiscuous mode [ 586.463839][T19966] hsr_slave_1: entered promiscuous mode [ 586.470479][T19966] debugfs: 'hsr0' already exists in 'hsr' [ 586.477638][T19966] Cannot create hsr debugfs directory [ 586.562975][T19979] vxcan1 speed is unknown, defaulting to 1000 [ 586.699243][T17464] Bluetooth: hci16: command tx timeout [ 586.781605][T17464] Bluetooth: hci15: command tx timeout [ 586.931387][T17464] Bluetooth: hci18: command tx timeout [ 587.137203][T19979] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.145139][T19979] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.152995][T19979] bridge_slave_0: entered allmulticast mode [ 587.160531][T19979] bridge_slave_0: entered promiscuous mode [ 587.169228][T19979] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.178202][T19979] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.185789][T19979] bridge_slave_1: entered allmulticast mode [ 587.193847][T19979] bridge_slave_1: entered promiscuous mode [ 587.230589][T19979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.243352][T19979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.280706][T19979] team0: Port device team_slave_0 added [ 587.290136][T19979] team0: Port device team_slave_1 added [ 587.318652][T19979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.326789][T19979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.353638][T19979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.366804][T19979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.374074][T19979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.401816][T19979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.452602][T19979] hsr_slave_0: entered promiscuous mode [ 587.459393][T19979] hsr_slave_1: entered promiscuous mode [ 587.466667][T19979] debugfs: 'hsr0' already exists in 'hsr' [ 587.472560][T19979] Cannot create hsr debugfs directory [ 587.891728][T17464] Bluetooth: hci17: command tx timeout [ 587.971450][T17464] Bluetooth: hci19: command tx timeout [ 588.771428][T17464] Bluetooth: hci16: command tx timeout [ 588.851564][T17464] Bluetooth: hci15: command tx timeout [ 589.011491][T17464] Bluetooth: hci18: command tx timeout [ 589.171924][ T31] INFO: task dhcpcd:5290 blocked for more than 143 seconds. [ 589.183171][ T31] Not tainted syzkaller #0 [ 589.188195][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.197486][ T31] task:dhcpcd state:D stack:25288 pid:5290 tgid:5290 ppid:1 task_flags:0x400140 flags:0x00080000 [ 589.209560][ T31] Call Trace: [ 589.213008][ T31] [ 589.215979][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 589.220493][ T31] ? __lock_acquire+0x683/0x2cf0 [ 589.226395][ T31] ? __lock_acquire+0x683/0x2cf0 [ 589.231696][ T31] ? unwind_next_frame+0x8f/0x2550 [ 589.236897][ T31] ? __pfx___schedule+0x10/0x10 [ 589.241906][ T31] ? schedule+0x90/0x2b0 [ 589.246202][ T31] schedule+0x164/0x2b0 [ 589.250412][ T31] schedule_preempt_disabled+0x13/0x30 [ 589.256563][ T31] __mutex_lock+0x7bf/0x1550 [ 589.261298][ T31] ? __mutex_lock+0x5d4/0x1550 [ 589.266117][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 589.272203][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 589.277353][ T31] ? stack_trace_save+0xa9/0x100 [ 589.282738][ T31] ? __lock_acquire+0x683/0x2cf0 [ 589.287783][ T31] ? radix_tree_lookup+0x240/0x290 [ 589.293057][ T31] genl_rcv_msg+0x10b/0x7a0 [ 589.297629][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.303738][ T31] ? __lock_acquire+0x683/0x2cf0 [ 589.308781][ T31] netlink_rcv_skb+0x226/0x4a0 [ 589.314087][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.319261][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.324805][ T31] ? down_read+0x2be/0x330 [ 589.331258][ T31] genl_rcv+0x28/0x40 [ 589.342227][ T31] netlink_unicast+0x7bb/0x940 [ 589.351089][ T31] netlink_sendmsg+0x813/0xb40 [ 589.360948][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.370172][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 589.376883][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.401296][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 589.418317][ T31] ____sys_sendmsg+0x54e/0x850 [ 589.423350][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.428724][ T31] ? import_iovec+0x73/0xa0 [ 589.433934][ T31] ___sys_sendmsg+0x2a5/0x360 [ 589.438701][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.444199][ T31] ? netdev_run_todo+0x1045/0x10d0 [ 589.449404][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 589.455922][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 589.461312][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.466930][ T31] ? __secure_computing+0xe7/0x2b0 [ 589.472530][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.479898][ T31] do_syscall_64+0x174/0x580 [ 589.484657][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.490778][ T31] ? clear_bhb_loop+0x40/0x90 [ 589.496596][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.502648][ T31] RIP: 0033:0x7f8c5b198407 [ 589.507144][ T31] RSP: 002b:00007ffd1d8cec20 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 589.515940][ T31] RAX: ffffffffffffffda RBX: 00007f8c5b10e780 RCX: 00007f8c5b198407 [ 589.524390][ T31] RDX: 0000000000000000 RSI: 00007ffd1d8ceca0 RDI: 000000000000000e [ 589.533632][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 589.541859][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564155e2de10 [ 589.549864][ T31] R13: 000000000000000e R14: 00007ffd1d8e3160 R15: 000056417b0ced40 [ 589.558327][ T31] [ 589.561795][ T31] INFO: task syz.3.3854:19676 blocked for more than 143 seconds. [ 589.569560][ T31] Not tainted syzkaller #0 [ 589.575550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.585534][ T31] task:syz.3.3854 state:D stack:26784 pid:19676 tgid:19669 ppid:16220 task_flags:0x400140 flags:0x00080002 [ 589.598173][ T31] Call Trace: [ 589.601790][ T31] [ 589.604778][ T31] __schedule+0x17d9/0x56c0 [ 589.609336][ T31] ? __lock_acquire+0x683/0x2cf0 [ 589.614405][ T31] ? __lock_acquire+0x683/0x2cf0 [ 589.619438][ T31] ? __pfx___schedule+0x10/0x10 [ 589.624695][ T31] ? schedule+0x90/0x2b0 [ 589.628982][ T31] schedule+0x164/0x2b0 [ 589.633303][ T31] schedule_preempt_disabled+0x13/0x30 [ 589.638826][ T31] __mutex_lock+0x7bf/0x1550 [ 589.644063][ T31] ? __mutex_lock+0x5d4/0x1550 [ 589.648917][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 589.654292][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 589.659403][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 589.664628][ T31] ? radix_tree_lookup+0x240/0x290 [ 589.669805][ T31] genl_rcv_msg+0x10b/0x7a0 [ 589.674637][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.679757][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 589.685986][ T31] netlink_rcv_skb+0x226/0x4a0 [ 589.690808][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.695965][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.701361][ T31] ? down_read+0x2be/0x330 [ 589.705836][ T31] genl_rcv+0x28/0x40 [ 589.709855][ T31] netlink_unicast+0x7bb/0x940 [ 589.715232][ T31] netlink_sendmsg+0x813/0xb40 [ 589.720077][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.725492][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 589.730473][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.736057][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 589.741541][ T31] __sys_sendto+0x408/0x5a0 [ 589.746088][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 589.751398][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 589.756737][ T31] __x64_sys_sendto+0xde/0x100 [ 589.761674][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.767816][ T31] do_syscall_64+0x174/0x580 [ 589.772810][ T31] ? trace_irq_disable+0x3b/0x140 [ 589.777882][ T31] ? clear_bhb_loop+0x40/0x90 [ 589.783413][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.789368][ T31] RIP: 0033:0x7f843215e84e [ 589.793899][ T31] RSP: 002b:00007f84303d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 589.802590][ T31] RAX: ffffffffffffffda RBX: 00007f84303d56c0 RCX: 00007f843215e84e [ 589.810573][ T31] RDX: 0000000000000020 RSI: 00007f84303d4000 RDI: 000000000000000b [ 589.819548][ T31] RBP: 0000000000000000 R08: 00007f84303d3f04 R09: 000000000000000c [ 589.828324][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 589.836630][ T31] R13: 00007f84303d3f58 R14: 00007f84303d4000 R15: 0000000000000000 [ 589.845062][ T31] [ 589.848234][ T31] [ 589.848234][ T31] Showing all locks held in the system: [ 589.860379][ T31] 3 locks held by kworker/1:1/29: [ 589.871538][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 589.882088][ T31] #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 589.895396][ T31] #2: ffff8880b8726058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 589.904576][ T31] 1 lock held by khungtaskd/31: [ 589.909586][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 589.919862][ T31] 2 locks held by klogd/4985: [ 589.924751][ T31] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 589.935087][ T31] #1: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: psi_task_switch+0x57/0x7d0 [ 589.944833][ T31] 2 locks held by dhcpcd/5290: [ 589.949624][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 589.957960][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 589.967057][ T31] 2 locks held by getty/5384: [ 589.972236][T17464] Bluetooth: hci17: command tx timeout [ 589.977823][ T31] #0: ffff8880360bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 589.988568][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 589.998858][ T31] 3 locks held by kworker/u9:2/5631: [ 590.004689][ T31] #0: ffff88807d675140 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 590.015807][ T31] #1: ffffc90003edfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 590.028483][ T31] #2: ffff888037630ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 590.038727][ T31] 3 locks held by kworker/u9:4/5642: [ 590.044267][ T31] #0: ffff888054d89940 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 590.055596][ T31] #1: ffffc90003f6fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 590.068638][T17464] Bluetooth: hci19: command tx timeout [ 590.072759][ T31] #2: ffff888043c04ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 590.085661][ T31] 1 lock held by udevd/5741: [ 590.091286][ T31] #0: ffff888027869350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 590.100652][ T31] 6 locks held by syz.3.3854/19670: [ 590.105970][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.114517][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.123780][ T31] #2: ffff888027871260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 590.134952][ T31] #3: ffff88802785be78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 590.144831][ T31] #4: ffff88802785b840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 590.157486][ T31] #5: ffff88802785b878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 590.170420][ T31] 2 locks held by syz.3.3854/19676: [ 590.176091][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.184633][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.194538][ T31] 2 locks held by syz.2.3859/19689: [ 590.199836][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.208221][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.218638][ T31] 2 locks held by syz.2.3859/19690: [ 590.224026][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.232565][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.242009][ T31] 2 locks held by syz.4.3860/19694: [ 590.247249][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.255651][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.264999][ T31] 2 locks held by syz.0.3864/19705: [ 590.270267][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.278900][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.288086][ T31] 2 locks held by syz.1.3871/19724: [ 590.293670][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.303495][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.312684][ T31] 2 locks held by syz.1.3871/19725: [ 590.317910][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.326347][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.335829][ T31] 2 locks held by syz-executor/19729: [ 590.341431][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.349722][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.358801][ T31] 2 locks held by syz-executor/19748: [ 590.364618][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.372991][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.382178][ T31] 2 locks held by syz-executor/19751: [ 590.387579][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.396203][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.406302][ T31] 2 locks held by syz-executor/19784: [ 590.411787][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.420053][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.429454][ T31] 2 locks held by syz-executor/19786: [ 590.435036][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.443451][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.453334][ T31] 2 locks held by syz-executor/19821: [ 590.458772][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.467119][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.476482][ T31] 2 locks held by syz-executor/19839: [ 590.482254][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.490528][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.500522][ T31] 2 locks held by syz-executor/19850: [ 590.506059][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.514726][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.523955][ T31] 2 locks held by syz-executor/19862: [ 590.529368][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.538177][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.547734][ T31] 2 locks held by syz-executor/19879: [ 590.553235][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.561790][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.571250][ T31] 2 locks held by syz-executor/19911: [ 590.576670][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.585004][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.594358][ T31] 2 locks held by syz-executor/19929: [ 590.599784][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.609387][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.623453][ T31] 2 locks held by syz-executor/19947: [ 590.626947][T19976] Bluetooth: hci9: command 0x0406 tx timeout [ 590.628874][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.628942][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.628999][ T31] 2 locks held by syz-executor/19966: [ 590.629010][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.629062][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.629119][ T31] 3 locks held by kworker/u9:6/19976: [ 590.629142][ T31] 2 locks held by syz-executor/19979: [ 590.629154][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 590.629207][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 590.629337][ T31] [ 590.629344][ T31] ============================================= [ 590.629344][ T31] [ 590.629364][ T31] NMI backtrace for cpu 1 [ 590.629395][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 590.629414][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 590.629425][ T31] Call Trace: [ 590.629434][ T31] [ 590.629442][ T31] dump_stack_lvl+0xe8/0x150 [ 590.629517][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 590.629670][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 590.629770][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 590.629883][ T31] sys_info+0x135/0x170 [ 590.629952][ T31] watchdog+0xfd7/0x1030 [ 590.630047][ T31] ? watchdog+0x1c7/0x1030 [ 590.630133][ T31] kthread+0x388/0x470 [ 590.630212][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.630293][ T31] ? __pfx_kthread+0x10/0x10 [ 590.630374][ T31] ret_from_fork+0x514/0xb70 [ 590.630465][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 590.630548][ T31] ? __switch_to+0xc89/0x1420 [ 590.630670][ T31] ? __pfx_kthread+0x10/0x10 [ 590.630758][ T31] ret_from_fork_asm+0x1a/0x30 [ 590.630862][ T31] [ 590.631371][ T31] Sending NMI from CPU 1 to CPUs 0: [ 590.636763][T17464] Bluetooth: hci8: command 0x0406 tx timeout [ 590.644867][ C0] NMI backtrace for cpu 0 [ 590.644887][ C0] CPU: 0 UID: 0 PID: 17464 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 590.644908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 590.644920][ C0] Workqueue: hci8 hci_cmd_timeout [ 590.644946][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 590.644971][ C0] Code: e8 7e 36 60 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf cd cd fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 590.644988][ C0] RSP: 0018:ffffc90004fbf428 EFLAGS: 00000002 [ 590.645003][ C0] RAX: 1ffffffff355bc00 RBX: 00000000000003fd RCX: 0000000000000000 [ 590.645015][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 590.645027][ C0] RBP: dffffc0000000000 R08: ffff888142ef8237 R09: 1ffff110285df046 [ 590.645041][ C0] R10: dffffc0000000000 R11: ffffffff8566dd30 R12: dffffc0000000000 [ 590.645055][ C0] R13: 0000000000000000 R14: ffffffff9aade0e0 R15: 0000000000000000 [ 590.645067][ C0] FS: 0000000000000000(0000) GS:ffff888124f4d000(0000) knlGS:0000000000000000 [ 590.645083][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.645095][ C0] CR2: 000056090a0e7ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 590.645112][ C0] Call Trace: [ 590.645118][ C0] [ 590.645128][ C0] wait_for_lsr+0x184/0x2f0 [ 590.645154][ C0] serial8250_console_write+0x12ef/0x1ba0 [ 590.645176][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 590.645210][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 590.645232][ C0] ? console_flush_all+0x123/0xaf0 [ 590.645258][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 590.645281][ C0] ? console_flush_all+0x123/0xaf0 [ 590.645301][ C0] console_flush_all+0x6ea/0xaf0 [ 590.645324][ C0] ? console_flush_all+0x123/0xaf0 [ 590.645348][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 590.645372][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 590.645398][ C0] console_unlock+0xd1/0x1c0 [ 590.645416][ C0] ? vprintk_emit+0x2cf/0x560 [ 590.645434][ C0] ? __pfx_console_unlock+0x10/0x10 [ 590.645451][ C0] ? vprintk_emit+0x2b0/0x560 [ 590.645470][ C0] ? vprintk_emit+0x455/0x560 [ 590.645488][ C0] ? vprintk_emit+0x2cf/0x560 [ 590.645504][ C0] ? vprintk_emit+0x2cf/0x560 [ 590.645523][ C0] vprintk_emit+0x485/0x560 [ 590.645540][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 590.645563][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 590.645582][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 590.645607][ C0] _printk+0xdd/0x130 [ 590.645637][ C0] ? __pfx__printk+0x10/0x10 [ 590.645665][ C0] bt_err+0x121/0x180 [ 590.645691][ C0] ? __pfx_bt_err+0x10/0x10 [ 590.645722][ C0] hci_cmd_timeout+0xd8/0x1e0 [ 590.645744][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 590.645766][ C0] process_scheduled_works+0xa8e/0x14e0 [ 590.645805][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 590.645830][ C0] ? assign_work+0x3cf/0x5d0 [ 590.645854][ C0] worker_thread+0xa47/0xfb0 [ 590.645886][ C0] ? __kthread_parkme+0x71/0x1f0 [ 590.645916][ C0] kthread+0x388/0x470 [ 590.645943][ C0] ? __pfx_worker_thread+0x10/0x10 [ 590.645964][ C0] ? __pfx_kthread+0x10/0x10 [ 590.645992][ C0] ret_from_fork+0x514/0xb70 [ 590.646021][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 590.646048][ C0] ? __switch_to+0xc89/0x1420 [ 590.646074][ C0] ? __pfx_kthread+0x10/0x10 [ 590.646101][ C0] ret_from_fork_asm+0x1a/0x30 [ 590.646130][ C0] [ 590.675767][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 590.675832][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 590.675901][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 590.675936][ T31] Call Trace: [ 590.675960][ T31] [ 590.675985][ T31] vpanic+0x56c/0xa60 [ 590.676086][ T31] ? __pfx___schedule+0x10/0x10 [ 590.676162][ T31] ? __pfx_vpanic+0x10/0x10 [ 590.676276][ T31] panic+0xc5/0xd0 [ 590.676398][ T31] ? __pfx_panic+0x10/0x10 [ 590.676476][ T31] ? preempt_schedule_common+0x82/0xd0 [ 590.676543][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 590.676621][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 590.676714][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 590.676820][ T31] watchdog+0x1030/0x1030 [ 590.676856][ T31] ? watchdog+0x1c7/0x1030 [ 590.676892][ T31] kthread+0x388/0x470 [ 590.676924][ T31] ? __pfx_watchdog+0x10/0x10 [ 590.676949][ T31] ? __pfx_kthread+0x10/0x10 [ 590.676982][ T31] ret_from_fork+0x514/0xb70 [ 590.677018][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 591.274388][ T31] ? __switch_to+0xc89/0x1420 [ 591.279107][ T31] ? __pfx_kthread+0x10/0x10 [ 591.283736][ T31] ret_from_fork_asm+0x1a/0x30 [ 591.288525][ T31] [ 591.291744][ T31] Kernel Offset: disabled [ 591.296086][ T31] Rebooting in 86400 seconds..