last executing test programs: 19.663518475s ago: executing program 4 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {0xfff1}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x12000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7}, {0x553e3387, 0x3, 0x408000, 0x2}, {0x8001, 0x4, 0x800001}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x128, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x60, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x44, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x24}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '&\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x184}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'erspan0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'veth1\x00', {0x101}, 0x8001}) 18.927900169s ago: executing program 4 (id=390): r0 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x27}, 0x62) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r11, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="11110200359c00001c0012800b0001006d616373656300000c00028005000d000100000008000500", @ANYRES32=r14, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r15, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r15, 0x84, 0x6d, &(0x7f0000000080), 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000080)={'rose0\x00', {0x2, 0x0, @remote}}) 18.388353465s ago: executing program 2 (id=394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000018180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 18.249678787s ago: executing program 3 (id=396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) 18.168037465s ago: executing program 4 (id=398): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0x2) (async) poll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'xfrm0\x00', {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff030040", @ANYRES16=r6, @ANYBLOB="000228bd7000fcdbdf25200000000c009900100000003c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x90) (async) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff030040", @ANYRES16=r6, @ANYBLOB="000228bd7000fcdbdf25200000000c009900100000003c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) 18.166588572s ago: executing program 0 (id=399): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0xa8}}, 0x20000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000880) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 18.165754227s ago: executing program 2 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801475884a27ec8d024e000000000000000000004e890001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) 17.889102122s ago: executing program 3 (id=401): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYBLOB="5bea4481"], 0x38}}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1407, 0x1}, 0x10}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYBLOB="5bea4481"], 0x38}}, 0x0) (async) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1407, 0x1}, 0x10}}, 0x0) (async) 17.868328959s ago: executing program 4 (id=402): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffb47}, [@map_fd={0x18, 0x3}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x4b, &(0x7f0000000140)=""/75, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x5, 0xf, 0x5}, {0x3, 0x3, 0x7, 0x3}, {0x0, 0x5, 0x8, 0xb}, {0x2, 0x4, 0x5}], 0x10, 0x9}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x2, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000400)='GPL\x00', 0x4, 0xcb, &(0x7f0000000440)=""/203, 0x41100, 0x1, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x0, 0x3, 0xf, 0xa}, {0x2, 0x4, 0xa, 0x4}], 0x10, 0xd6f}, 0x94) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)=@getlink={0xc8, 0x12, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x220}, [@IFLA_WEIGHT={0x8, 0xf, 0x6}, @IFLA_PORT_SELF={0x50, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0732c18bc42d00b139b96c93bf4492e9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2af53b2de090c93924a8355bc0dabff6"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x46}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "be3abda6e59ae3a4a6bded7dc366b2a1"}]}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}]}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0xc8}}, 0xc030) 17.76183388s ago: executing program 0 (id=403): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@deltaction={0xcc, 0x31, 0x514, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaf33}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc2}}]}]}, 0xcc}}, 0x24040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "8ae79cc5fbe23f47c104261559251805cd0ab273b2c960775ea17f08032e8009daf091498c50a0b7cc72ddccc75fe1d70e4303626f8b98c88a2a8922a4ace9c19156d23e7908d97b5d5fe1e057b93b90ea381c2f26cc14f507db4084fe0a083294de079687b9c92fc0b2340f7dfb34236f85425f7817df907a18cdf2aa29febd7507949a3de44f94c1c6e4093cd5687d01b6b3e541aced196baab7cb1a3c3ab4bb7a1238a7a0b0e03f6c28add925260c41f0c1659b2470a59421f185e77fe4b7fedeb5a93ae25df4fcd8a8caa95668c68957254fc200568d3d761b1f04dc0c550098d7080f1d66d7c14061b01aa46d467a396b67dc804c296e528f658fce223c"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 17.684288953s ago: executing program 1 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x42000, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000000)=""/27, &(0x7f0000000240)=0x1b) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000562d00000000000000000000000000000000003b63f84566e37172e90801f59cc1f4e0085acfdce2025a1ceb9d97d87c8f"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000380)={0x1, 'ip6gre0\x00', {}, 0x2}) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r2, 0x4) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x4, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x2}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f00000002c0)=""/181, &(0x7f00000000c0)=0xb5) 17.683869256s ago: executing program 3 (id=405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000094b70000000069ba8467e3b15e242fbf868818e740ee0192ae13032de1ee098b20d43a64c1b3d4e6d5ebd55b6feff4c2526c74c723ca116089880ef5dd81e6ab57a3037f4252582bc415b20e5681deee4a3ee6d29b131900754e1aa622a7e7ef3f2a7adeae7f6d46a7f791e305933f779b6dd0f5e40d470cef2825ca826af0c797d24da4307a5b63f795dfd278da2d1b8132f8ac27c0441ad768f957ed545da0b8fc408a34c6dd28ca28e3933faf32e5750c"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x24}, 0x94) 17.683445189s ago: executing program 2 (id=406): r0 = socket(0x10, 0x803, 0x0) recvmsg$can_raw(r0, &(0x7f0000000d00)={&(0x7f0000000400)=@isdn, 0x80, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f0000000780)=""/208, 0xd0}, {&(0x7f0000000940)=""/140, 0x8c}], 0x5, &(0x7f00000006c0)=""/73, 0x49}, 0x20000) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000540)=""/110, 0x6e}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/255, 0xff}, {&(0x7f0000000b00)=""/223, 0xdf}, {&(0x7f0000000c00)=""/237, 0xed}, {&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}], 0xa}, 0xfff}, {{0x0, 0x0, 0x0}, 0xfffffff1}], 0x2, 0x10002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380), 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000000), &(0x7f00000000c0)=@udp, 0x1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xdd, 0x5, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000003300)={0x1054, r5, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x48}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x227}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x100c, 0x70, [@NL80211_MESH_SETUP_IE={0x1004, 0x3, "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"}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x1054}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) write(r1, &(0x7f00000002c0)="2a641de8bb957875a12335fb2359ad8b4e273194ea37ba66d8492cef1b851f095a39cb9471232125e6e5759f24cf4251c01d33b0f2a649e788ca7307ffffd9286975abbc9efa9969fb54ec9409d4754c66d73d2f11369717aab69b5419632ee8c781b6c828dce4328466ffe1cc8e683aea28ee6712bcf6155cc5731c16c85861ea2823f658f297ae042ee7343a97375d7c7a801acf7f073b88b5b69f91e386537e8e6fe382af9502dd84f5af6adf36992b014184fd07d43b8d7e30663b586e6a4abbed23b5b52a95ce99efa1811b353c5ffe1f3178", 0xd5) 17.549998315s ago: executing program 4 (id=407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x81, @loopback, 0xfffffffa}}, 0x8, 0x0, 0x7, 0x9, 0x1}, &(0x7f0000000140)=0x98) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x140f, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xfffffffffffffe5a, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffd75, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffc0, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$kcm(0x2, 0x3, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000ac0)={0x0, 0x3, 0x1, [0xf, 0x83c, 0x6, 0xc0, 0xfff], [0x4, 0x3, 0x100000000, 0x2, 0xfd, 0x2, 0x9, 0x5, 0x9, 0x7, 0x9, 0x17, 0xf2a8, 0x8000000000, 0x3, 0x0, 0x7fff, 0x4, 0x87, 0x9, 0x4, 0x4, 0x1, 0xffffffffffffffff, 0x1, 0x8, 0xefe, 0x7, 0x7, 0x7ff, 0xfff, 0x1, 0xe7, 0x2292, 0x6, 0xc9, 0x2, 0x4, 0x0, 0x9, 0x2, 0xfffffffffffffffd, 0x9, 0x708, 0x4, 0x4, 0x7fff, 0x6, 0x3, 0x30d3, 0xb, 0x6, 0xc, 0x7, 0x5, 0x2, 0xca, 0x200, 0x3, 0x3, 0xb, 0x20, 0x1, 0x4, 0x7, 0xff, 0x35d0, 0x5, 0x9, 0x80000001, 0x75, 0xa007, 0x6, 0x5, 0x2, 0x5, 0x6, 0x8, 0x4, 0x1, 0x2, 0x333, 0x800, 0x4, 0x1, 0x7, 0x6, 0x1, 0x5, 0x8000000000000001, 0x0, 0xbff, 0x8, 0x8, 0xc0, 0x8000000000000000, 0x7e7, 0x5, 0x200, 0xa, 0x6, 0x47, 0x8001, 0x200000, 0x4c29, 0x1, 0xdac8, 0x401, 0x7, 0x10000, 0x49f, 0x6, 0x10000, 0xe, 0x1, 0x6, 0x5, 0x8, 0x6, 0x400, 0x3]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001300)={r7, 0xfffffffffffffffa, 0x1, [0x7, 0xd2, 0x0, 0x7, 0x2e], [0xe, 0x70, 0x8, 0xffffffff, 0x2e43, 0x4, 0x2, 0x5, 0xfc, 0x6, 0xff, 0x3, 0x8, 0x0, 0xef, 0x0, 0xa60e, 0x6, 0x5, 0x22, 0x8001, 0x6ec10318, 0x9, 0x7fffffff, 0x2, 0x3, 0x5, 0x1, 0xbc, 0x2, 0x1, 0x2, 0xfff, 0x5, 0x8, 0x100000000, 0x8, 0x4, 0xffffffffffffffff, 0x4, 0x101, 0x9, 0x1, 0x5, 0xb, 0x6, 0x81, 0x8, 0x6, 0x9, 0xedc5, 0x6, 0x5f6, 0x7f, 0x2, 0x1ff, 0x8000, 0x4, 0x19096c0c, 0x1, 0x1, 0x80, 0x1, 0x5548, 0x0, 0x3, 0x8, 0x401, 0xe679, 0xffffffff, 0x0, 0xfffffffffffffff7, 0x5, 0x1, 0x9, 0x9, 0x0, 0x10000, 0x4, 0x380000, 0x2e4, 0x4, 0x7, 0x7, 0x3, 0x4, 0xd, 0x7fffffffffffffff, 0x23, 0x149b, 0x40, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0xcfbd, 0x1, 0x3, 0xe, 0x4e6, 0x4, 0x8, 0x1, 0xa, 0x1, 0x7fffffffffffffff, 0x2, 0x1ff, 0x2, 0xffffffffffffff35, 0x7, 0x100, 0xc96, 0x0, 0x95, 0x7, 0x10001, 0x6, 0x2, 0xb, 0x3]}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r1, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @x25={0x2, 0x2, 0x0, "5d1131846429864fd168cd48a8f352411dd59da00749aeabf7"}}, 0x2a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48) r9 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r8, 0x4000}, {r8, 0xc040}, {r9, 0x201}, {r9}, {r9, 0x40a8}, {r8, 0x40}, {r8, 0x100}, {r8, 0x10}, {r8, 0xa000}, {r9, 0x1}], 0xa, &(0x7f0000000200), &(0x7f0000000240)={[0x4]}, 0x8) accept(r9, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) 17.459144093s ago: executing program 3 (id=408): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async) pipe(&(0x7f0000000140)) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 17.052398014s ago: executing program 0 (id=409): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) getsockname(r0, 0x0, &(0x7f0000002100)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004024}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000006000104000080000100008080000022d64fe334a43f9d4e25b354c1264a3b983c177f5a00628e4b01597a5a7b498a57041f8209e402a664cf188bd84a63248878db4a6ac9423ab9191de96a7fd0be22d4bf9c30439fbfe5e95c06eee027da78aaf7", @ANYRES32=0x0, @ANYBLOB="2b03000000840000140035006d6163767461703000000000000000000500270000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000100), 0x6) (async) getsockname(r0, 0x0, &(0x7f0000002100)) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004024}, 0x4000080) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) (async) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000006000104000080000100008080000022d64fe334a43f9d4e25b354c1264a3b983c177f5a00628e4b01597a5a7b498a57041f8209e402a664cf188bd84a63248878db4a6ac9423ab9191de96a7fd0be22d4bf9c30439fbfe5e95c06eee027da78aaf7", @ANYRES32=0x0, @ANYBLOB="2b03000000840000140035006d6163767461703000000000000000000500270000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 16.990429954s ago: executing program 2 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.816892183s ago: executing program 2 (id=411): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@random="9f0fb34289a8", @remote, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}], @ipv6=@dccp_packet={0x2, 0x6, "daff06", 0x16, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x0, "9004e0", 0x80, "75dbe4"}, "cfd440de0671"}}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x2ad, 0x8a9, 0xad3, 0xb4b]}) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/140, 0x8c) 16.748409674s ago: executing program 3 (id=412): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x204, 0x8, {}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x7, 0x0, 0x0, "a9c4eaa89d9376ed"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async, rerun: 32) r3 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000001c0)={0x6fb4, {{0xa, 0x4e21, 0x5, @mcast2, 0x8}}, 0x1}, 0x90) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) (async) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) close(0x4) 16.739484546s ago: executing program 0 (id=413): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001340)={0x30, r4, 0x1, 0x2, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xab851, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) sendmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="eec3e377ab55e660079faff03d4d3c92fdbc9304340b70e5eae9bea0ebfbe836b28635bf19ca8eca44ad6e57faea92fc8b6a6519f2e3908a85876c99f48da7835c7d8977ab09e8a40ff173874cbea3f23bb5af57f308635c7f4a08a425f0e4f8c925342879430415f3e5b41caa6407d037b872a4b3c07dd55f44c908126ad26e698c36d02bd90aae5c0f6e5cbe4c143c78cdf817e44cb1e6cb2c533958a4b9", 0x9f}], 0x1, &(0x7f0000000380)=[{0x68, 0x10f, 0x5, "e12e74a89668df99d2fa4e8e53cbce03e780abfd76983edd86a2c918334b55931311c1e0fcfce169ff266205e68623172a26b291e931da978e385eb2f7f37bf32544c19b7be692d8ffab9a75340fc7b65961263d7a"}, {0xc0, 0x29, 0x4, "751dcc5245e0ad2d8f21f6b8db3534ed218dca5917d54f115e8009c22373dca95715ffa045f16d2836b8b6f0f23bce0861046600eba798a665b9d8d088ce7a57c2398cdaf04174a83fdaa8ed4cda8e8d85af155be814a31f4a6c6ac0f37d7caf228b4725a2a4a98a733126d1d23b778e7f32a13f00592aa5790afc7231c814a3be2ded140ced617b8975d01f3042b5a34e12e0a0a8b77134e1f407ba00c38b82b704699cd82d2a84ec"}, {0x40, 0x101, 0x6, "cd7bc36b0f3057b28f28c5a1958e9eb5577ac39154d26e8ea52a3236abf08913ce60442c0210bfa527de8e2fbd1f"}, {0x18, 0x118, 0x49, "d8a7"}], 0x180}, 0x8880) 16.626868862s ago: executing program 3 (id=414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x0, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}}]}, 0x4c}}, 0x24044094) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000002400)={'veth0_virt_wifi\x00'}) 16.552425777s ago: executing program 2 (id=415): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf2503000000040007800c000200010001000000000008000100"], 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x488c) 16.546946481s ago: executing program 0 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="8b04040000000400140012800a00010069706f6962000000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x88894) 16.527756156s ago: executing program 1 (id=417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x7, 0x5, 0x1}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 16.42937482s ago: executing program 0 (id=418): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x532}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x7, @empty, 0xc63}, @in={0x2, 0x4e21, @multicast1}], 0x58) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@empty, @private}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000141401"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='S\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd300000000000010000000800010003000000080002454000aef667356b5614a0197e63cc2d6364ca1b1f3acefdaac3a9f25c4c9917972d08f721d2bbb1b80f6b8b3741cf524d2ed1b60a7e116b2096d90da23c879e1c722fd5d2f715090bcb5aa154b1c7df8cd188b0f2451de912923e15da973694a0b17248f8deff1ed14c20057b4a526281e3be1eb757820d0f70e7f3e7d5bdfa326b98dbd1819999e257e8730416985cb89c1d8b86da836996645896f49d13dc0e7327763e4b366d9db7fdf6c8b40a5a357484ea35b21b88c24accaac031e7021702d17e5b66d6d718fec8ebf6a98bafd1710ec124e30900000000000000002f5919416fff45c5a80dba5974325fb42ec3149426b67d2fe6a98895189e04ff4680ffbedd6f0327cafde0ac"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x24008090) 16.360934924s ago: executing program 1 (id=419): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r5, 0x18d}], 0x1, 0x8001) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_subtree(r6, &(0x7f0000000040), 0xfffffc3f) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000300010003", 0x7) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 16.359728354s ago: executing program 4 (id=420): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8834) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8834) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) 16.190429322s ago: executing program 1 (id=421): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x1, 0x2, 0x2, 0x6, 0xfffe, 0x4}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d83b1ca, 0xc574450d1af3b5bc}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7fff}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 16.132059084s ago: executing program 1 (id=422): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x6b3) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'ip6gretap0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'vcan0\x00', 0x400}) 16.007962237s ago: executing program 1 (id=423): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3d0, 0x110, 0x110, 0x110, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000040), {[{{@arp={@remote, @remote, 0x0, 0xffffff00, 0x6, 0x10, {@mac=@local, {[0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8000, 0x4, 0xad, 0x8, 0x8eb6, 0x7, 'veth1_macvtap\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x309}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3523b37da0ff", @empty, @empty, @empty, 0x4, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 0x9, 0xf, {@mac, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0x9d6e, 0x0, 0x8, 0x0, 0xff, 'xfrm0\x00', 'wg0\x00', {0xff}, {}, 0x0, 0x201}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0xed2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000004c0)={@private2, 0x0}, &(0x7f0000000500)=0x14) (async) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x7, @mcast1, 0x9}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000580), 0x80000) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) (rerun: 32) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6}]}, 0x1c}}, 0x20000080) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xbc, "0529983f24d6518ee2ec0327e71b4a8f80badcd868cfa9d46a12879c1554d8d4942bcf47fcc00fe793ea8f61f5cf304497711d84738b58f1e434e3b75ca756a7f613609873cd41423c57f889e8af449a55fe751ae444dc0ece7e24d7cfff4beab143b07d27c58d8b0abfa8de5ab309ec431fb6ee64e63c24418e12b13cb0aeca12a147c73407f37099430bb16be2cc4670c6a56838542b6eaacd648593d8d1b49f5cb2d6e277c05d8d2ae27a860a0c62323466849f8ce60de3d40e99"}, &(0x7f0000000800)=0xc4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000840)={r5, 0x3, 0x3ff}, 0x8) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000880)={'veth0_vlan\x00', 0x7fffffff}) ioctl(r0, 0x2, &(0x7f00000008c0)="c9b277c3e39c01c933e5877debeccf83f262cbdef4c4e1e18c19141f9a3727ca66fa2849") (async) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000000900)=""/199, &(0x7f0000000a00)=0xc7) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r7) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000e40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b00)={0x2d4, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb261}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd391}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a899ba0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1d0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xebd}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x14}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7205}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff30}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe501}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdfc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbe0a}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x8840}, 0x40080) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000e80)={@multicast1, @multicast2, 0x0, "72c343e90dbac11f9e3ffb01e63d8bc6698e9556fd8c27b2345fe442d2b1c3bd", 0x2, 0xf2, 0x1, 0x95c1}, 0x3c) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffffa}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x20004804) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@fallback=r1, 0x20, 0x1, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r0, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0], 0x0, 0x6f, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)={@map=0x1, r0, 0x15, 0x20, 0x0, @void, @void, @void, @value=r11, r10}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x5, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, [@generic={0x0, 0x4, 0xe, 0x40, 0xffffff80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000015c0)='syzkaller\x00', 0x0, 0xb3, &(0x7f0000001600)=""/179, 0x41100, 0x42, '\x00', r2, 0x25, r0, 0x8, &(0x7f00000016c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001700)={0x5, 0x3, 0x9, 0xffffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001740)=[r0], &(0x7f0000001780)=[{0x3, 0x1, 0xa, 0x6}, {0x0, 0x2, 0x5, 0x4}], 0x10, 0x2}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = socket$inet(0x2, 0x3, 0xffffff7f) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r12, 0x84, 0x1c, &(0x7f0000001880), &(0x7f00000018c0)=0x4) (async) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000001940)={0x2, &(0x7f0000001900)=[{0x1f, 0x2, 0x8, 0xf445}, {0x64, 0x0, 0x1}]}, 0x10) 1.253358536s ago: executing program 32 (id=418): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x532}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x7, @empty, 0xc63}, @in={0x2, 0x4e21, @multicast1}], 0x58) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@empty, @private}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000141401"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='S\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x24008090) 1.208321048s ago: executing program 33 (id=415): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf2503000000040007800c000200010001000000000008000100"], 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x488c) 1.151681096s ago: executing program 34 (id=414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x0, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}}]}, 0x4c}}, 0x24044094) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000002400)={'veth0_virt_wifi\x00'}) 1.070120144s ago: executing program 35 (id=420): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8834) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8834) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) 0s ago: executing program 36 (id=423): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3d0, 0x110, 0x110, 0x110, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000040), {[{{@arp={@remote, @remote, 0x0, 0xffffff00, 0x6, 0x10, {@mac=@local, {[0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8000, 0x4, 0xad, 0x8, 0x8eb6, 0x7, 'veth1_macvtap\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x309}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3523b37da0ff", @empty, @empty, @empty, 0x4, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 0x9, 0xf, {@mac, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0x9d6e, 0x0, 0x8, 0x0, 0xff, 'xfrm0\x00', 'wg0\x00', {0xff}, {}, 0x0, 0x201}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0xed2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000004c0)={@private2, 0x0}, &(0x7f0000000500)=0x14) (async) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x7, @mcast1, 0x9}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000580), 0x80000) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) (rerun: 32) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6}]}, 0x1c}}, 0x20000080) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xbc, "0529983f24d6518ee2ec0327e71b4a8f80badcd868cfa9d46a12879c1554d8d4942bcf47fcc00fe793ea8f61f5cf304497711d84738b58f1e434e3b75ca756a7f613609873cd41423c57f889e8af449a55fe751ae444dc0ece7e24d7cfff4beab143b07d27c58d8b0abfa8de5ab309ec431fb6ee64e63c24418e12b13cb0aeca12a147c73407f37099430bb16be2cc4670c6a56838542b6eaacd648593d8d1b49f5cb2d6e277c05d8d2ae27a860a0c62323466849f8ce60de3d40e99"}, &(0x7f0000000800)=0xc4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000840)={r5, 0x3, 0x3ff}, 0x8) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000880)={'veth0_vlan\x00', 0x7fffffff}) ioctl(r0, 0x2, &(0x7f00000008c0)="c9b277c3e39c01c933e5877debeccf83f262cbdef4c4e1e18c19141f9a3727ca66fa2849") (async) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000000900)=""/199, &(0x7f0000000a00)=0xc7) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r7) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000e40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000b00)={0x2d4, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb261}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd391}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a899ba0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1d0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xebd}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x14}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7205}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff30}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe501}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdfc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbe0a}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x8840}, 0x40080) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000e80)={@multicast1, @multicast2, 0x0, "72c343e90dbac11f9e3ffb01e63d8bc6698e9556fd8c27b2345fe442d2b1c3bd", 0x2, 0xf2, 0x1, 0x95c1}, 0x3c) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x36}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffffa}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x20004804) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, r4, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@fallback=r1, 0x20, 0x1, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r0, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0], 0x0, 0x6f, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)={@map=0x1, r0, 0x15, 0x20, 0x0, @void, @void, @void, @value=r11, r10}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x5, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, [@generic={0x0, 0x4, 0xe, 0x40, 0xffffff80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000015c0)='syzkaller\x00', 0x0, 0xb3, &(0x7f0000001600)=""/179, 0x41100, 0x42, '\x00', r2, 0x25, r0, 0x8, &(0x7f00000016c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001700)={0x5, 0x3, 0x9, 0xffffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001740)=[r0], &(0x7f0000001780)=[{0x3, 0x1, 0xa, 0x6}, {0x0, 0x2, 0x5, 0x4}], 0x10, 0x2}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = socket$inet(0x2, 0x3, 0xffffff7f) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r12, 0x84, 0x1c, &(0x7f0000001880), &(0x7f00000018c0)=0x4) (async) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000001940)={0x2, &(0x7f0000001900)=[{0x1f, 0x2, 0x8, 0xf445}, {0x64, 0x0, 0x1}]}, 0x10) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 59.536133][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.555628][ T5487] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. syzkaller login: [ 81.246149][ T5808] cgroup: Unknown subsys name 'net' [ 81.358541][ T5808] cgroup: Unknown subsys name 'cpuset' [ 81.368751][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.083457][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.862899][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.871616][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.889137][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.898704][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.908164][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.918518][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.935029][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.943894][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.955831][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.966108][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.975212][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.976551][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.995010][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.000890][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.008845][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.016267][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.019774][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.027772][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.035485][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.043906][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.058230][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.073425][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.082875][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.087149][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.100488][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.765809][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 87.876901][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.048515][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 88.100230][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 88.123349][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.132067][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.141214][ T5822] bridge_slave_0: entered allmulticast mode [ 88.149522][ T5822] bridge_slave_0: entered promiscuous mode [ 88.210311][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.218679][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.227143][ T5822] bridge_slave_1: entered allmulticast mode [ 88.236259][ T5822] bridge_slave_1: entered promiscuous mode [ 88.290130][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.298121][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.307358][ T5836] bridge_slave_0: entered allmulticast mode [ 88.317066][ T5836] bridge_slave_0: entered promiscuous mode [ 88.353950][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.362425][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.370109][ T5836] bridge_slave_1: entered allmulticast mode [ 88.377774][ T5836] bridge_slave_1: entered promiscuous mode [ 88.406309][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.452377][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 88.467389][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.493016][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.551634][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.619529][ T5822] team0: Port device team_slave_0 added [ 88.628765][ T5822] team0: Port device team_slave_1 added [ 88.642542][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.651623][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.660742][ T5823] bridge_slave_0: entered allmulticast mode [ 88.669358][ T5823] bridge_slave_0: entered promiscuous mode [ 88.702542][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.710441][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.719805][ T5821] bridge_slave_0: entered allmulticast mode [ 88.728502][ T5821] bridge_slave_0: entered promiscuous mode [ 88.759286][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.766881][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.775835][ T5823] bridge_slave_1: entered allmulticast mode [ 88.784331][ T5823] bridge_slave_1: entered promiscuous mode [ 88.793563][ T5836] team0: Port device team_slave_0 added [ 88.799751][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.807908][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.816211][ T5821] bridge_slave_1: entered allmulticast mode [ 88.824444][ T5821] bridge_slave_1: entered promiscuous mode [ 88.862563][ T5836] team0: Port device team_slave_1 added [ 88.903475][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.910705][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.939927][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.989435][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.998848][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.029672][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.042792][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.050949][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.079552][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.105424][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.118277][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.129609][ T5841] Bluetooth: hci3: command tx timeout [ 89.135956][ T5829] Bluetooth: hci2: command tx timeout [ 89.142457][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.150329][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.181811][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.204372][ T5841] Bluetooth: hci0: command tx timeout [ 89.204501][ T5829] Bluetooth: hci4: command tx timeout [ 89.210699][ T5841] Bluetooth: hci1: command tx timeout [ 89.224911][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.232243][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.240251][ T5820] bridge_slave_0: entered allmulticast mode [ 89.248000][ T5820] bridge_slave_0: entered promiscuous mode [ 89.259123][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.271747][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.289547][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.298024][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.306073][ T5820] bridge_slave_1: entered allmulticast mode [ 89.313966][ T5820] bridge_slave_1: entered promiscuous mode [ 89.360388][ T5821] team0: Port device team_slave_0 added [ 89.415497][ T5821] team0: Port device team_slave_1 added [ 89.435505][ T5823] team0: Port device team_slave_0 added [ 89.444170][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.460706][ T5822] hsr_slave_0: entered promiscuous mode [ 89.467969][ T5822] hsr_slave_1: entered promiscuous mode [ 89.499931][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.515310][ T5823] team0: Port device team_slave_1 added [ 89.597267][ T5836] hsr_slave_0: entered promiscuous mode [ 89.605561][ T5836] hsr_slave_1: entered promiscuous mode [ 89.613663][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 89.620447][ T5836] Cannot create hsr debugfs directory [ 89.627150][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.635961][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.665160][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.679500][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.687123][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.716637][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.743134][ T5820] team0: Port device team_slave_0 added [ 89.749940][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.757166][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.784766][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.798270][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.807291][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.837061][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.867768][ T5820] team0: Port device team_slave_1 added [ 89.999222][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.006928][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.036761][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.066116][ T5823] hsr_slave_0: entered promiscuous mode [ 90.073645][ T5823] hsr_slave_1: entered promiscuous mode [ 90.082202][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 90.089651][ T5823] Cannot create hsr debugfs directory [ 90.127011][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.134945][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.166669][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.200968][ T5821] hsr_slave_0: entered promiscuous mode [ 90.208421][ T5821] hsr_slave_1: entered promiscuous mode [ 90.215623][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 90.222014][ T5821] Cannot create hsr debugfs directory [ 90.445911][ T5820] hsr_slave_0: entered promiscuous mode [ 90.453240][ T5820] hsr_slave_1: entered promiscuous mode [ 90.460552][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 90.467338][ T5820] Cannot create hsr debugfs directory [ 90.826744][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.856691][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.886573][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.898788][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.958275][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.983829][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.996097][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.023502][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.102919][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.129052][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.148763][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.188500][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.205235][ T5829] Bluetooth: hci2: command tx timeout [ 91.211750][ T5841] Bluetooth: hci3: command tx timeout [ 91.276665][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.284628][ T5841] Bluetooth: hci1: command tx timeout [ 91.290920][ T5841] Bluetooth: hci4: command tx timeout [ 91.297223][ T5829] Bluetooth: hci0: command tx timeout [ 91.310700][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.325364][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.352596][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.397606][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.499678][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.521554][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.535811][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.555972][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.568888][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.593351][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.609201][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.617045][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.628790][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.663099][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.670981][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.690276][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.698296][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.726858][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.734469][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.815157][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.905889][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.953070][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.982934][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.021710][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.056587][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.064091][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.079684][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.087943][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.139691][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.147694][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.195635][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.203457][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.249005][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.347811][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.363535][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.397002][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.405411][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.460851][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.468582][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.517534][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.651375][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.859108][ T5836] veth0_vlan: entered promiscuous mode [ 92.965883][ T5836] veth1_vlan: entered promiscuous mode [ 93.090485][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.160238][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.177495][ T5836] veth0_macvtap: entered promiscuous mode [ 93.210244][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.227330][ T5836] veth1_macvtap: entered promiscuous mode [ 93.258909][ T5822] veth0_vlan: entered promiscuous mode [ 93.285659][ T5829] Bluetooth: hci2: command tx timeout [ 93.291642][ T5841] Bluetooth: hci3: command tx timeout [ 93.310854][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.332735][ T5822] veth1_vlan: entered promiscuous mode [ 93.364913][ T5143] Bluetooth: hci1: command tx timeout [ 93.370647][ T5829] Bluetooth: hci0: command tx timeout [ 93.377227][ T5841] Bluetooth: hci4: command tx timeout [ 93.380511][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.422893][ T5821] veth0_vlan: entered promiscuous mode [ 93.437945][ T3579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.449498][ T3579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484045][ T5823] veth0_vlan: entered promiscuous mode [ 93.490853][ T3579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.501417][ T3579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.513389][ T5820] veth0_vlan: entered promiscuous mode [ 93.528016][ T5822] veth0_macvtap: entered promiscuous mode [ 93.551145][ T5821] veth1_vlan: entered promiscuous mode [ 93.561606][ T5822] veth1_macvtap: entered promiscuous mode [ 93.574587][ T5823] veth1_vlan: entered promiscuous mode [ 93.585120][ T5820] veth1_vlan: entered promiscuous mode [ 93.669617][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.730241][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.741037][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.765411][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.814492][ T29] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.828686][ T29] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.841049][ T5823] veth0_macvtap: entered promiscuous mode [ 93.853563][ T5821] veth0_macvtap: entered promiscuous mode [ 93.866612][ T3579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.877143][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.880008][ T3579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.894139][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.909451][ T5823] veth1_macvtap: entered promiscuous mode [ 93.926608][ T5820] veth0_macvtap: entered promiscuous mode [ 93.940420][ T5821] veth1_macvtap: entered promiscuous mode [ 93.961005][ T5820] veth1_macvtap: entered promiscuous mode [ 93.977345][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.032078][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.061700][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.091294][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.122119][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.147289][ T3579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.223588][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.232638][ T3579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.276744][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.287042][ T3579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.297141][ T3579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.330492][ T3579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.342924][ T3579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.377000][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.410751][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.422371][ T3579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.445201][ T3579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.501104][ T3579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.513356][ T3579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.557549][ T3579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.573051][ T3579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.655256][ T5953] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 94.675200][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.684517][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.779049][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.787972][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.850762][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.861605][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.949237][ T5959] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 94.969154][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.981795][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.034053][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.061410][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.175979][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.228139][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.364255][ T5829] Bluetooth: hci3: command tx timeout [ 95.370453][ T5841] Bluetooth: hci2: command tx timeout [ 95.379635][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.410398][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.444476][ T5841] Bluetooth: hci0: command tx timeout [ 95.452999][ T5829] Bluetooth: hci4: command tx timeout [ 95.459371][ T5143] Bluetooth: hci1: command tx timeout [ 95.560365][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'. [ 95.773781][ T5988] syzkaller0: entered promiscuous mode [ 95.855768][ T5988] syzkaller0: entered allmulticast mode [ 95.949146][ T5994] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 96.464729][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.821581][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.914631][ T6015] Zero length message leads to an empty skb [ 97.384950][ T796] cfg80211: failed to load regulatory.db [ 97.570391][ T147] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 97.589164][ T6045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.766688][ T6060] netlink: 192 bytes leftover after parsing attributes in process `syz.0.32'. [ 98.041429][ T6079] : entered promiscuous mode [ 98.274837][ T6096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.367850][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 98.384305][ T6098] netlink: 'syz.3.43': attribute type 7 has an invalid length. [ 98.402047][ T6098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 98.452839][ T6098] gretap0: entered promiscuous mode [ 98.478609][ T6098] gretap0: left promiscuous mode [ 98.521751][ T6101] netlink: 'syz.4.44': attribute type 25 has an invalid length. [ 98.543393][ T6101] netlink: 'syz.4.44': attribute type 9 has an invalid length. [ 98.572805][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.44'. [ 98.798165][ T6103] netlink: 'syz.0.45': attribute type 9 has an invalid length. [ 99.093145][ T6127] veth0_to_bond: entered allmulticast mode [ 99.225381][ T6133] netlink: 14 bytes leftover after parsing attributes in process `syz.0.53'. [ 99.531464][ T6152] xt_HMARK: proto mask must be zero with L3 mode [ 99.670931][ T6161] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 99.688971][ T6161] netlink: 224 bytes leftover after parsing attributes in process `syz.3.60'. [ 99.711358][ T6162] trusted_key: syz.1.59 sent an empty control message without MSG_MORE. [ 99.836741][ T6166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.62'. [ 99.880149][ T6171] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 99.904183][ T6171] netlink: 96 bytes leftover after parsing attributes in process `syz.1.63'. [ 100.043507][ T6174] nftables ruleset with unbound set [ 102.074410][ T6237] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 102.404908][ T6259] __nla_validate_parse: 2 callbacks suppressed [ 102.404931][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 102.826055][ T6274] netlink: 'syz.2.88': attribute type 64 has an invalid length. [ 102.878557][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 102.984870][ T6289] netlink: 104 bytes leftover after parsing attributes in process `syz.0.92'. [ 103.088289][ T6293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 103.193673][ T6288] netlink: 'syz.1.91': attribute type 16 has an invalid length. [ 103.213899][ T6288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 103.478894][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.488869][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.540114][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.573589][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.685675][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.102'. [ 103.898650][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 103.970180][ T6340] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 104.010620][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.106'. [ 104.020968][ T6340] warning: `syz.1.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.157941][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 104.203023][ T6344] bond0: entered promiscuous mode [ 104.224293][ T6344] bond_slave_0: entered promiscuous mode [ 104.239733][ T6344] bond_slave_1: entered promiscuous mode [ 104.259216][ T6344] bond0: left promiscuous mode [ 104.274412][ T6344] bond_slave_0: left promiscuous mode [ 104.296519][ T6344] bond_slave_1: left promiscuous mode [ 104.522279][ T6356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.111'. [ 104.544808][ T6368] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 105.539506][ T6414] netlink: 'syz.1.128': attribute type 10 has an invalid length. [ 105.598546][ T6414] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.136384][ T6440] netlink: 'syz.0.136': attribute type 3 has an invalid length. [ 106.569190][ T6460] netlink: 'syz.2.142': attribute type 83 has an invalid length. [ 107.029355][ T6437] infiniband syz1: set down [ 107.064140][ T6437] infiniband syz1: added ipvlan0 [ 107.103669][ T6437] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 107.134597][ T6437] infiniband syz1: Couldn't open port 1 [ 107.266843][ T6437] RDS/IB: syz1: added [ 107.289638][ T6437] smc: adding ib device syz1 with port count 1 [ 107.300343][ T6498] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 107.311528][ T6437] smc: ib device syz1 port 1 has no pnetid [ 107.329924][ T6498] block nbd0: not configured, cannot reconfigure [ 107.842224][ T6512] veth1_macvtap: left promiscuous mode [ 107.865764][ T6512] __nla_validate_parse: 9 callbacks suppressed [ 107.865787][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.154'. [ 108.089652][ T6519] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 108.145569][ T6525] openvswitch: netlink: Multiple metadata blocks provided [ 108.691474][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 108.708256][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 108.746896][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 108.760810][ T6557] team0: Port device batadv1 added [ 108.785469][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 108.795607][ T6560] team0: Port device batadv2 added [ 108.995096][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 110.392285][ T6627] netlink: 'syz.4.175': attribute type 1 has an invalid length. [ 110.518078][ T6633] netlink: 'syz.4.177': attribute type 21 has an invalid length. [ 110.643143][ T6636] syzkaller0: entered promiscuous mode [ 110.652624][ T6636] syzkaller0: entered allmulticast mode [ 111.377652][ T6545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.670349][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 111.890864][ T6656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.029008][ T6666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.190'. [ 112.547709][ T6694] netlink: 766 bytes leftover after parsing attributes in process `syz.2.198'. [ 112.802116][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 113.451351][ T6747] xt_hashlimit: size too large, truncated to 1048576 [ 113.641909][ T6762] xt_HMARK: proto mask must be zero with L3 mode [ 113.689998][ T6764] x_tables: duplicate underflow at hook 2 [ 113.697111][ T6762] xt_HMARK: proto mask must be zero with L3 mode [ 113.727137][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 113.795759][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 113.999532][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 114.093311][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 114.228032][ T6790] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 114.330006][ T6794] veth3: entered promiscuous mode [ 114.510752][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 114.521518][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 114.602012][ T6812] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 114.703359][ T6821] ieee802154 phy1 wpan1: encryption failed: -22 [ 114.914890][ T6835] netlink: 148 bytes leftover after parsing attributes in process `syz.1.233'. [ 115.496091][ T6822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.505313][ T6822] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 115.576079][ T6822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.602779][ T6822] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 115.709479][ T6822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.727007][ T6822] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 115.799823][ T6862] syzkaller0: entered promiscuous mode [ 115.805649][ T6862] syzkaller0: entered allmulticast mode [ 115.903567][ T6822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.944194][ T6822] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 116.099905][ T6822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 116.144217][ T6822] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 116.199579][ T6871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.241'. [ 116.918793][ T6900] tipc: Started in network mode [ 116.936915][ T6900] tipc: Node identity 5eaf9ab4b8e6, cluster identity 4711 [ 116.947755][ T6900] tipc: Enabled bearer , priority 0 [ 117.232487][ T6900] tipc: Disabling bearer [ 117.479842][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 117.530444][ T6931] vxcan0: entered allmulticast mode [ 117.672857][ T6948] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 117.698436][ T6934] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 117.718860][ T6934] bond1 (unregistering): Released all slaves [ 117.798178][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 117.883067][ T6954] pimreg: entered allmulticast mode [ 117.974065][ T6943] syz.3.258 (6943) used greatest stack depth: 17472 bytes left [ 118.284630][ T6968] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 118.321213][ T6968] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.469993][ T6976] netlink: 'syz.0.266': attribute type 2 has an invalid length. [ 118.549303][ T6992] delete_channel: no stack [ 118.959797][ T7021] __nla_validate_parse: 4 callbacks suppressed [ 118.959817][ T7021] netlink: 276 bytes leftover after parsing attributes in process `syz.3.275'. [ 119.161717][ T7035] netlink: 14 bytes leftover after parsing attributes in process `syz.2.276'. [ 119.223416][ T7030] vlan2: entered allmulticast mode [ 119.257891][ T7030] bond0: entered allmulticast mode [ 119.295877][ T7030] bond_slave_0: entered allmulticast mode [ 119.307940][ T7042] TCP: TCP_TX_DELAY enabled [ 119.319999][ T7030] bond_slave_1: entered allmulticast mode [ 119.398008][ T7035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.420654][ T7035] bond_slave_0: left allmulticast mode [ 119.469420][ T7035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.488876][ T7035] bond_slave_1: left allmulticast mode [ 119.499334][ T7035] bond0 (unregistering): Released all slaves [ 119.695662][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 119.862755][ T7065] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.902875][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'. [ 120.488288][ T7093] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 120.521295][ T7093] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 120.565759][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 120.714395][ T7107] hsr_slave_0 (unregistering): left promiscuous mode [ 120.762192][ T7094] x_tables: duplicate underflow at hook 1 [ 120.855266][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 120.892015][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 120.906453][ T7116] tipc: Started in network mode [ 120.912766][ T7116] tipc: Node identity ee81a10d17ec, cluster identity 4711 [ 120.926065][ T7116] tipc: Enabled bearer , priority 0 [ 121.126255][ T7116] tipc: Disabling bearer [ 121.211436][ T30] audit: type=1804 audit(1773067686.540:2): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.298" name="/newroot/65/cgroup.controllers" dev="tmpfs" ino=350 res=1 errno=0 [ 121.322769][ T30] audit: type=1800 audit(1773067686.550:3): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.298" name="cgroup.controllers" dev="tmpfs" ino=350 res=0 errno=0 [ 121.949690][ T7180] netlink: 44 bytes leftover after parsing attributes in process `syz.0.305'. [ 122.047632][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.056976][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.175050][ T7184] blkio.reset_stats is deprecated [ 122.241611][ T7183] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 122.591379][ T7217] syzkaller0: entered promiscuous mode [ 122.613559][ T7217] syzkaller0: entered allmulticast mode [ 122.653327][ T7222] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 123.251148][ T7249] x_tables: duplicate underflow at hook 3 [ 123.679396][ T7278] siw: device registration error -23 [ 123.707952][ T7279] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 123.821868][ T7279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.933334][ T7281] bond2: (slave geneve2): making interface the new active one [ 123.948085][ T7281] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 124.209162][ T7295] xt_connbytes: Forcing CT accounting to be enabled [ 124.234538][ T7300] xt_connbytes: Forcing CT accounting to be enabled [ 124.254512][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'. [ 124.279630][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'. [ 125.354817][ T7348] raw_sendmsg: syz.1.342 forgot to set AF_INET. Fix it! [ 125.705962][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 125.741876][ T7375] netlink: 232 bytes leftover after parsing attributes in process `syz.2.348'. [ 125.980286][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 126.095224][ T7392] nbd0: detected capacity change from 0 to 127 [ 126.122556][ T5829] block nbd0: Receive control failed (result -104) [ 126.127502][ T5886] block nbd0: Send control failed (result -32) [ 126.144938][ T7396] syzkaller0: entered promiscuous mode [ 126.162921][ T7396] syzkaller0: entered allmulticast mode [ 126.173577][ T5886] block nbd0: Request send failed, requeueing [ 126.189571][ T11] block nbd0: Dead connection, failed to find a fallback [ 126.200682][ T11] block nbd0: shutting down sockets [ 126.207530][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 126.219200][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 126.376133][ T7405] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 126.870546][ T7423] netlink: 204 bytes leftover after parsing attributes in process `syz.4.366'. [ 127.252986][ T7436] netlink: 32 bytes leftover after parsing attributes in process `syz.2.371'. [ 127.399366][ T7410] syzkaller0: entered allmulticast mode [ 127.633007][ T7462] Cannot find add_set index 2 as target [ 128.580898][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 128.957292][ T7526] netlink: 9 bytes leftover after parsing attributes in process `syz.4.390'. [ 128.994299][ T7526] 0·: renamed from hsr_slave_1 (while UP) [ 129.034590][ T7526] 0·: entered allmulticast mode [ 129.071303][ T7526] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 129.276311][ T7532] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 129.296781][ T7532] bond2 (unregistering): Released all slaves [ 129.679285][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.400'. [ 129.702702][ T7558] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 129.748205][ T7558] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 129.838702][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 130.118159][ T7585] netlink: 'syz.1.404': attribute type 39 has an invalid length. [ 130.738746][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 130.791522][ T7609] bond2 (unregistering): Released all slaves [ 131.072394][ T7639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.413'. [ 131.223563][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 131.342281][ T7650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.418'. [ 131.493698][ T7652] Bluetooth: MGMT ver 1.23 [ 131.568157][ T7664] bond_slave_0: entered promiscuous mode [ 131.626108][ T7666] !: renamed from dummy0 (while UP) [ 133.208736][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.709266][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.725273][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.735238][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.766192][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.785248][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.804825][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.815521][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.823215][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.831414][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.840160][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.923085][ T5143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.936776][ T5143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.948095][ T5143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.956737][ T5143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.967390][ T5143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.977253][ T5143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.985299][ T5143] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.997361][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.997499][ T5143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.015668][ T5143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.052679][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 147.063865][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 147.072889][ T5143] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 147.083087][ T5143] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 147.091453][ T5143] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 147.498863][ T7676] chnl_net:caif_netlink_parms(): no params data found [ 147.748007][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.775465][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.783766][ T7676] bridge_slave_0: entered allmulticast mode [ 147.793411][ T7676] bridge_slave_0: entered promiscuous mode [ 147.824528][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.832781][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.858427][ T7676] bridge_slave_1: entered allmulticast mode [ 147.867646][ T7676] bridge_slave_1: entered promiscuous mode [ 147.959783][ T5143] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 147.970073][ T5143] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 147.980409][ T5143] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 147.994970][ T5143] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 148.003906][ T5143] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 148.045881][ T7676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.059705][ T7676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.210972][ T7676] team0: Port device team_slave_0 added [ 148.236472][ T7676] team0: Port device team_slave_1 added [ 148.315543][ T7683] chnl_net:caif_netlink_parms(): no params data found [ 148.334709][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.341900][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.372079][ T7676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.429733][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.437417][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.464713][ T7676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.755848][ T7676] hsr_slave_0: entered promiscuous mode [ 148.763162][ T7676] hsr_slave_1: entered promiscuous mode [ 148.770383][ T7676] debugfs: 'hsr0' already exists in 'hsr' [ 148.777156][ T7676] Cannot create hsr debugfs directory [ 148.815653][ T7678] chnl_net:caif_netlink_parms(): no params data found [ 148.884457][ T5829] Bluetooth: hci5: command tx timeout [ 148.940974][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.949340][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.957161][ T7683] bridge_slave_0: entered allmulticast mode [ 148.966390][ T7683] bridge_slave_0: entered promiscuous mode [ 149.032622][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.040485][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.048375][ T5829] Bluetooth: hci7: command tx timeout [ 149.055147][ T7683] bridge_slave_1: entered allmulticast mode [ 149.062973][ T7683] bridge_slave_1: entered promiscuous mode [ 149.125089][ T5143] Bluetooth: hci8: command tx timeout [ 149.134218][ T5143] Bluetooth: hci6: command tx timeout [ 149.174476][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.225012][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.249576][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.257566][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.265586][ T7678] bridge_slave_0: entered allmulticast mode [ 149.273943][ T7678] bridge_slave_0: entered promiscuous mode [ 149.319313][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.326775][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.334839][ T7678] bridge_slave_1: entered allmulticast mode [ 149.343204][ T7678] bridge_slave_1: entered promiscuous mode [ 149.381766][ T7683] team0: Port device team_slave_0 added [ 149.403354][ T7683] team0: Port device team_slave_1 added [ 149.476401][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.495153][ T7679] chnl_net:caif_netlink_parms(): no params data found [ 149.537221][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.594767][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.603171][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.634344][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.669741][ T7678] team0: Port device team_slave_0 added [ 149.702072][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.710314][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.739144][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.760717][ T7678] team0: Port device team_slave_1 added [ 149.867855][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.875650][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.903399][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.919388][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.927888][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.956014][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.978990][ T7693] chnl_net:caif_netlink_parms(): no params data found [ 150.049797][ T7683] hsr_slave_0: entered promiscuous mode [ 150.057253][ T7683] hsr_slave_1: entered promiscuous mode [ 150.065559][ T7683] debugfs: 'hsr0' already exists in 'hsr' [ 150.072621][ T7683] Cannot create hsr debugfs directory [ 150.095027][ T5143] Bluetooth: hci9: command tx timeout [ 150.124457][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.132668][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.141507][ T7679] bridge_slave_0: entered allmulticast mode [ 150.150458][ T7679] bridge_slave_0: entered promiscuous mode [ 150.192290][ T7679] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.201734][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.210108][ T7679] bridge_slave_1: entered allmulticast mode [ 150.218233][ T7679] bridge_slave_1: entered promiscuous mode [ 150.232409][ T7678] hsr_slave_0: entered promiscuous mode [ 150.240286][ T7678] hsr_slave_1: entered promiscuous mode [ 150.247650][ T7678] debugfs: 'hsr0' already exists in 'hsr' [ 150.254532][ T7678] Cannot create hsr debugfs directory [ 150.348850][ T7679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.395105][ T7679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.430104][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.438145][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.446165][ T7693] bridge_slave_0: entered allmulticast mode [ 150.453843][ T7693] bridge_slave_0: entered promiscuous mode [ 150.495926][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.503422][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.512090][ T7693] bridge_slave_1: entered allmulticast mode [ 150.520147][ T7693] bridge_slave_1: entered promiscuous mode [ 150.530112][ T7679] team0: Port device team_slave_0 added [ 150.539410][ T7679] team0: Port device team_slave_1 added [ 150.636579][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.643857][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.676120][ T7679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.698670][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.713453][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.738191][ T7679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.745399][ T7679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.772102][ T7679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.878784][ T7679] hsr_slave_0: entered promiscuous mode [ 150.886323][ T7679] hsr_slave_1: entered promiscuous mode [ 150.892979][ T7679] debugfs: 'hsr0' already exists in 'hsr' [ 150.899859][ T7679] Cannot create hsr debugfs directory [ 150.921826][ T7693] team0: Port device team_slave_0 added [ 150.953552][ T7693] team0: Port device team_slave_1 added [ 150.964480][ T5143] Bluetooth: hci5: command tx timeout [ 151.035870][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.043221][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.072319][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.110066][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.117752][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.144818][ T5143] Bluetooth: hci7: command tx timeout [ 151.152354][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.204870][ T5143] Bluetooth: hci6: command tx timeout [ 151.210699][ T5143] Bluetooth: hci8: command tx timeout [ 151.291839][ T7693] hsr_slave_0: entered promiscuous mode [ 151.298642][ T7693] hsr_slave_1: entered promiscuous mode [ 151.305556][ T7693] debugfs: 'hsr0' already exists in 'hsr' [ 151.311783][ T7693] Cannot create hsr debugfs directory [ 152.164301][ T5143] Bluetooth: hci9: command tx timeout [ 153.047200][ T5143] Bluetooth: hci5: command tx timeout [ 153.204320][ T5143] Bluetooth: hci7: command tx timeout [ 153.284561][ T5829] Bluetooth: hci6: command tx timeout [ 153.290367][ T5143] Bluetooth: hci8: command tx timeout [ 154.244433][ T5143] Bluetooth: hci9: command tx timeout [ 155.134284][ T5143] Bluetooth: hci5: command tx timeout [ 155.284604][ T5143] Bluetooth: hci7: command tx timeout [ 155.374387][ T5143] Bluetooth: hci8: command tx timeout [ 155.375532][ T5829] Bluetooth: hci6: command tx timeout [ 156.254287][ T1634] block nbd0: Possible stuck request ffff888026950000: control (read@0,1024B). Runtime 30 seconds [ 156.266914][ T1634] block nbd0: Possible stuck request ffff888026950200: control (read@1024,1024B). Runtime 30 seconds [ 156.278429][ T1634] block nbd0: Possible stuck request ffff888026950400: control (read@2048,1024B). Runtime 30 seconds [ 156.324380][ T5829] Bluetooth: hci9: command tx timeout [ 186.325938][ T1634] block nbd0: Possible stuck request ffff888026950000: control (read@0,1024B). Runtime 60 seconds [ 186.338557][ T1634] block nbd0: Possible stuck request ffff888026950200: control (read@1024,1024B). Runtime 60 seconds [ 186.350483][ T1634] block nbd0: Possible stuck request ffff888026950400: control (read@2048,1024B). Runtime 60 seconds [ 187.785130][ T5192] udevd[5192]: worker [5886] /devices/virtual/block/nbd0 is taking a long time [ 194.647921][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.267604][ T5143] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 207.286159][ T5143] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 207.296074][ T5143] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 207.314957][ T5143] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 207.323452][ T5143] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 207.411733][ T5143] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 207.423757][ T5143] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 207.432566][ T5143] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 207.441504][ T5143] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 207.451587][ T5143] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 207.555108][ T5143] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 207.565106][ T5143] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 207.573533][ T5143] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 207.582207][ T5143] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 207.592446][ T5143] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 207.660588][ T5143] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 207.671746][ T5143] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 207.681212][ T5143] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 207.690790][ T5143] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 207.701103][ T5143] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 208.035273][ T7725] chnl_net:caif_netlink_parms(): no params data found [ 208.228739][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.237078][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.245579][ T7725] bridge_slave_0: entered allmulticast mode [ 208.255869][ T7725] bridge_slave_0: entered promiscuous mode [ 208.275559][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.285484][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.293275][ T7725] bridge_slave_1: entered allmulticast mode [ 208.310996][ T7725] bridge_slave_1: entered promiscuous mode [ 208.376188][ T7725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.458447][ T7725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.497330][ T5143] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 208.514896][ T5143] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 208.523725][ T5143] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 208.532607][ T5143] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 208.544980][ T5143] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 208.631940][ T7725] team0: Port device team_slave_0 added [ 208.647708][ T7725] team0: Port device team_slave_1 added [ 208.781032][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.789119][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.818562][ T7725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.833310][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.844177][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.880785][ T7725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.985807][ T7728] chnl_net:caif_netlink_parms(): no params data found [ 209.058949][ T7725] hsr_slave_0: entered promiscuous mode [ 209.069469][ T7725] hsr_slave_1: entered promiscuous mode [ 209.079394][ T7725] debugfs: 'hsr0' already exists in 'hsr' [ 209.087947][ T7725] Cannot create hsr debugfs directory [ 209.364521][ T5143] Bluetooth: hci10: command tx timeout [ 209.418715][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.429344][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.439756][ T7728] bridge_slave_0: entered allmulticast mode [ 209.449349][ T7728] bridge_slave_0: entered promiscuous mode [ 209.462032][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.469652][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.477454][ T7728] bridge_slave_1: entered allmulticast mode [ 209.489918][ T7728] bridge_slave_1: entered promiscuous mode [ 209.524717][ T5143] Bluetooth: hci11: command tx timeout [ 209.590485][ T7728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.607200][ T7728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.636420][ T7730] chnl_net:caif_netlink_parms(): no params data found [ 209.684454][ T5143] Bluetooth: hci12: command tx timeout [ 209.743172][ T7728] team0: Port device team_slave_0 added [ 209.764232][ T5143] Bluetooth: hci13: command tx timeout [ 209.800520][ T7728] team0: Port device team_slave_1 added [ 209.839081][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.847057][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.875624][ T7728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.916123][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.925101][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.954339][ T7728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.073908][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 210.216252][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.245192][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.265301][ T7730] bridge_slave_0: entered allmulticast mode [ 210.282043][ T7730] bridge_slave_0: entered promiscuous mode [ 210.329233][ T7728] hsr_slave_0: entered promiscuous mode [ 210.356337][ T7728] hsr_slave_1: entered promiscuous mode [ 210.376627][ T7728] debugfs: 'hsr0' already exists in 'hsr' [ 210.382970][ T7728] Cannot create hsr debugfs directory [ 210.391306][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.400197][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.409478][ T7730] bridge_slave_1: entered allmulticast mode [ 210.418426][ T7730] bridge_slave_1: entered promiscuous mode [ 210.497389][ T7742] chnl_net:caif_netlink_parms(): no params data found [ 210.532063][ T7730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.578634][ T7730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.645009][ T5143] Bluetooth: hci14: command tx timeout [ 210.715656][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.725021][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.733099][ T7732] bridge_slave_0: entered allmulticast mode [ 210.742314][ T7732] bridge_slave_0: entered promiscuous mode [ 210.767531][ T7730] team0: Port device team_slave_0 added [ 210.782316][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.790789][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.799350][ T7732] bridge_slave_1: entered allmulticast mode [ 210.808898][ T7732] bridge_slave_1: entered promiscuous mode [ 210.842092][ T7730] team0: Port device team_slave_1 added [ 210.907505][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.915202][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.947166][ T7730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.963738][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.972340][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.003016][ T7730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.065473][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.077472][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.086749][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.095323][ T7742] bridge_slave_0: entered allmulticast mode [ 211.103849][ T7742] bridge_slave_0: entered promiscuous mode [ 211.126912][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.171725][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.182084][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.192356][ T7742] bridge_slave_1: entered allmulticast mode [ 211.201737][ T7742] bridge_slave_1: entered promiscuous mode [ 211.224501][ T7732] team0: Port device team_slave_0 added [ 211.265366][ T7732] team0: Port device team_slave_1 added [ 211.326155][ T7730] hsr_slave_0: entered promiscuous mode [ 211.333722][ T7730] hsr_slave_1: entered promiscuous mode [ 211.340801][ T7730] debugfs: 'hsr0' already exists in 'hsr' [ 211.346805][ T7730] Cannot create hsr debugfs directory [ 211.356051][ T7742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.390840][ T7742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.417105][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.425260][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.445180][ T5829] Bluetooth: hci10: command tx timeout [ 211.457443][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.509472][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.517110][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.545261][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.560709][ T7742] team0: Port device team_slave_0 added [ 211.570011][ T7742] team0: Port device team_slave_1 added [ 211.604342][ T5829] Bluetooth: hci11: command tx timeout [ 211.666371][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.678320][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.713695][ T7742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.745961][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.754485][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.764931][ T5829] Bluetooth: hci12: command tx timeout [ 211.794141][ T7742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.844288][ T5829] Bluetooth: hci13: command tx timeout [ 211.862456][ T7732] hsr_slave_0: entered promiscuous mode [ 211.872122][ T7732] hsr_slave_1: entered promiscuous mode [ 211.879222][ T7732] debugfs: 'hsr0' already exists in 'hsr' [ 211.885435][ T7732] Cannot create hsr debugfs directory [ 211.984462][ T7742] hsr_slave_0: entered promiscuous mode [ 211.992621][ T7742] hsr_slave_1: entered promiscuous mode [ 212.000811][ T7742] debugfs: 'hsr0' already exists in 'hsr' [ 212.008058][ T7742] Cannot create hsr debugfs directory [ 212.730552][ T5829] Bluetooth: hci14: command tx timeout [ 213.524511][ T5829] Bluetooth: hci10: command tx timeout [ 213.684458][ T5829] Bluetooth: hci11: command tx timeout [ 213.844317][ T5829] Bluetooth: hci12: command tx timeout [ 213.924335][ T5829] Bluetooth: hci13: command tx timeout [ 214.804245][ T5829] Bluetooth: hci14: command tx timeout [ 215.604602][ T5829] Bluetooth: hci10: command tx timeout [ 215.764701][ T5829] Bluetooth: hci11: command tx timeout [ 215.924368][ T5829] Bluetooth: hci12: command tx timeout [ 216.014300][ T5829] Bluetooth: hci13: command tx timeout [ 216.414388][ T11] block nbd0: Possible stuck request ffff888026950000: control (read@0,1024B). Runtime 90 seconds [ 216.427765][ T11] block nbd0: Possible stuck request ffff888026950200: control (read@1024,1024B). Runtime 90 seconds [ 216.440000][ T11] block nbd0: Possible stuck request ffff888026950400: control (read@2048,1024B). Runtime 90 seconds [ 216.894209][ T5829] Bluetooth: hci14: command tx timeout [ 246.484765][ T11] block nbd0: Possible stuck request ffff888026950000: control (read@0,1024B). Runtime 120 seconds [ 246.501659][ T11] block nbd0: Possible stuck request ffff888026950200: control (read@1024,1024B). Runtime 120 seconds [ 246.515775][ T11] block nbd0: Possible stuck request ffff888026950400: control (read@2048,1024B). Runtime 120 seconds [ 256.087592][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.045211][ T5841] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 268.054916][ T52] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 268.065623][ T5841] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 268.077363][ T52] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 268.091251][ T5841] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 268.101433][ T5841] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 268.112824][ T52] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 268.122187][ T5841] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 268.131236][ T5841] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 268.141105][ T52] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 268.203225][ T5829] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 268.214731][ T5829] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 268.225642][ T5829] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 268.236421][ T5829] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 268.246314][ T5143] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 268.315320][ T5143] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 268.327602][ T5143] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 268.337937][ T5143] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 268.346672][ T5143] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 268.355677][ T5143] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 268.753282][ T7776] chnl_net:caif_netlink_parms(): no params data found [ 268.957777][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.966648][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.975252][ T7776] bridge_slave_0: entered allmulticast mode [ 268.985429][ T7776] bridge_slave_0: entered promiscuous mode [ 269.009375][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.019799][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.030526][ T7776] bridge_slave_1: entered allmulticast mode [ 269.041044][ T7776] bridge_slave_1: entered promiscuous mode [ 269.160171][ T7776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.198845][ T7776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.221648][ T5839] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 269.234407][ T5839] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 269.246667][ T5839] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 269.257021][ T5839] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 269.271219][ T5839] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 269.382820][ T7776] team0: Port device team_slave_0 added [ 269.425907][ T7776] team0: Port device team_slave_1 added [ 269.543512][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.564063][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.593304][ T7776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.628156][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.644070][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.677620][ T7776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.699576][ T7775] chnl_net:caif_netlink_parms(): no params data found [ 270.076809][ T7776] hsr_slave_0: entered promiscuous mode [ 270.096136][ T7776] hsr_slave_1: entered promiscuous mode [ 270.109707][ T7776] debugfs: 'hsr0' already exists in 'hsr' [ 270.125170][ T7776] Cannot create hsr debugfs directory [ 270.245415][ T5839] Bluetooth: hci15: command tx timeout [ 270.245423][ T5143] Bluetooth: hci16: command tx timeout [ 270.293369][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.301554][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.311002][ T7775] bridge_slave_0: entered allmulticast mode [ 270.320064][ T7775] bridge_slave_0: entered promiscuous mode [ 270.340714][ T5839] Bluetooth: hci17: command tx timeout [ 270.388544][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.397177][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.405857][ T7775] bridge_slave_1: entered allmulticast mode [ 270.414655][ T5839] Bluetooth: hci18: command tx timeout [ 270.423876][ T7775] bridge_slave_1: entered promiscuous mode [ 270.551005][ T7775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.596536][ T7779] chnl_net:caif_netlink_parms(): no params data found [ 270.616999][ T7775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.786433][ T7775] team0: Port device team_slave_0 added [ 270.833883][ T7775] team0: Port device team_slave_1 added [ 270.937827][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.947037][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.977710][ T7775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.989859][ T7781] chnl_net:caif_netlink_parms(): no params data found [ 271.016876][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.024954][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.034857][ T7779] bridge_slave_0: entered allmulticast mode [ 271.044817][ T7779] bridge_slave_0: entered promiscuous mode [ 271.054501][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.062025][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.071001][ T7779] bridge_slave_1: entered allmulticast mode [ 271.080634][ T7779] bridge_slave_1: entered promiscuous mode [ 271.089845][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.104107][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.146146][ T7775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.227315][ T7779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.247212][ T7791] chnl_net:caif_netlink_parms(): no params data found [ 271.280027][ T7779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.369611][ T5839] Bluetooth: hci19: command tx timeout [ 271.401461][ T7779] team0: Port device team_slave_0 added [ 271.439268][ T7779] team0: Port device team_slave_1 added [ 271.482293][ T7775] hsr_slave_0: entered promiscuous mode [ 271.493650][ T7775] hsr_slave_1: entered promiscuous mode [ 271.501981][ T7775] debugfs: 'hsr0' already exists in 'hsr' [ 271.508333][ T7775] Cannot create hsr debugfs directory [ 271.691418][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.701318][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.711445][ T7781] bridge_slave_0: entered allmulticast mode [ 271.721691][ T7781] bridge_slave_0: entered promiscuous mode [ 271.733186][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.743474][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.772707][ T7779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.828106][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.850730][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.860357][ T7781] bridge_slave_1: entered allmulticast mode [ 271.876024][ T7781] bridge_slave_1: entered promiscuous mode [ 271.885338][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.892591][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.922277][ T7779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.937425][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.945857][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.955763][ T7791] bridge_slave_0: entered allmulticast mode [ 271.963907][ T7791] bridge_slave_0: entered promiscuous mode [ 272.008779][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.016625][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.024814][ T7791] bridge_slave_1: entered allmulticast mode [ 272.032705][ T7791] bridge_slave_1: entered promiscuous mode [ 272.114560][ T7781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.128694][ T7791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.142980][ T7791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.196309][ T7781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.262963][ T7791] team0: Port device team_slave_0 added [ 272.286829][ T7779] hsr_slave_0: entered promiscuous mode [ 272.293747][ T7779] hsr_slave_1: entered promiscuous mode [ 272.301312][ T7779] debugfs: 'hsr0' already exists in 'hsr' [ 272.308162][ T7779] Cannot create hsr debugfs directory [ 272.325330][ T5827] Bluetooth: hci16: command tx timeout [ 272.333038][ T5833] Bluetooth: hci15: command tx timeout [ 272.348931][ T7791] team0: Port device team_slave_1 added [ 272.380439][ T7781] team0: Port device team_slave_0 added [ 272.393105][ T7781] team0: Port device team_slave_1 added [ 272.404207][ T5833] Bluetooth: hci17: command tx timeout [ 272.484243][ T5833] Bluetooth: hci18: command tx timeout [ 272.503067][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.510551][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.541419][ T7791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.556364][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.563745][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.591660][ T7791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.612411][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.620488][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.649706][ T7781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.688911][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.697405][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.732693][ T7781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.868040][ T7791] hsr_slave_0: entered promiscuous mode [ 272.875384][ T7791] hsr_slave_1: entered promiscuous mode [ 272.882216][ T7791] debugfs: 'hsr0' already exists in 'hsr' [ 272.889255][ T7791] Cannot create hsr debugfs directory [ 272.951370][ T7781] hsr_slave_0: entered promiscuous mode [ 272.959111][ T7781] hsr_slave_1: entered promiscuous mode [ 272.970711][ T7781] debugfs: 'hsr0' already exists in 'hsr' [ 272.978037][ T7781] Cannot create hsr debugfs directory [ 273.444337][ T5833] Bluetooth: hci19: command tx timeout [ 273.526042][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 273.533370][ T5833] Bluetooth: hci9: command 0x0406 tx timeout [ 273.541947][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 273.554977][ T5834] Bluetooth: hci8: command 0x0406 tx timeout [ 273.564544][ T5837] Bluetooth: hci7: command 0x0406 tx timeout [ 274.404537][ T52] Bluetooth: hci15: command tx timeout [ 274.404717][ T5839] Bluetooth: hci16: command tx timeout [ 274.484250][ T5839] Bluetooth: hci17: command tx timeout [ 274.564185][ T5839] Bluetooth: hci18: command tx timeout [ 275.524296][ T5839] Bluetooth: hci19: command tx timeout [ 276.484471][ T52] Bluetooth: hci15: command tx timeout [ 276.490206][ T5839] Bluetooth: hci16: command tx timeout [ 276.564905][ T5839] Bluetooth: hci17: command tx timeout [ 276.579491][ T11] block nbd0: Possible stuck request ffff888026950000: control (read@0,1024B). Runtime 150 seconds [ 276.591074][ T11] block nbd0: Possible stuck request ffff888026950200: control (read@1024,1024B). Runtime 150 seconds [ 276.603398][ T11] block nbd0: Possible stuck request ffff888026950400: control (read@2048,1024B). Runtime 150 seconds [ 276.644186][ T5839] Bluetooth: hci18: command tx timeout [ 277.604329][ T5839] Bluetooth: hci19: command tx timeout [ 286.174609][ T31] INFO: task syz.3.414:7641 blocked for more than 143 seconds. [ 286.189460][ T31] Not tainted syzkaller #0 [ 286.201080][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.216392][ T31] task:syz.3.414 state:D stack:25384 pid:7641 tgid:7640 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 286.237315][ T31] Call Trace: [ 286.241801][ T31] [ 286.246464][ T31] __schedule+0x15dd/0x52d0 [ 286.254210][ T31] ? __pfx___schedule+0x10/0x10 [ 286.262933][ T31] ? schedule+0x90/0x360 [ 286.273320][ T31] schedule+0x164/0x360 [ 286.278558][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.286252][ T31] __mutex_lock+0x7fe/0x1300 [ 286.291295][ T31] ? __mutex_lock+0x5ac/0x1300 [ 286.299237][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 286.304819][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.310464][ T31] ? radix_tree_lookup+0x240/0x290 [ 286.316926][ T31] genl_rcv_msg+0x10b/0x7a0 [ 286.322733][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.331341][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.338131][ T31] netlink_rcv_skb+0x232/0x4b0 [ 286.374491][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.380149][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.435288][ T31] ? down_read+0x272/0x2e0 [ 286.443045][ T31] ? genl_rcv+0xd/0x40 [ 286.464193][ T31] genl_rcv+0x28/0x40 [ 286.469829][ T31] netlink_unicast+0x80f/0x9b0 [ 286.476756][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 286.483290][ T31] ? netlink_sendmsg+0x650/0xb40 [ 286.489893][ T31] ? skb_put+0x11b/0x210 [ 286.496436][ T31] netlink_sendmsg+0x813/0xb40 [ 286.502230][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.508830][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 286.514714][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.522200][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.529861][ T31] __sys_sendto+0x672/0x710 [ 286.535549][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 286.541021][ T31] ? exc_page_fault+0x6a/0xc0 [ 286.546468][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 286.552664][ T31] __x64_sys_sendto+0xde/0x100 [ 286.558285][ T31] do_syscall_64+0x14d/0xf80 [ 286.563859][ T31] ? trace_irq_disable+0x3b/0x150 [ 286.570989][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.577597][ T31] ? clear_bhb_loop+0x40/0x90 [ 286.583419][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.593869][ T31] RIP: 0033:0x7fce9b15cfce [ 286.599832][ T31] RSP: 002b:00007fce9bfa4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 286.611834][ T31] RAX: ffffffffffffffda RBX: 00007fce9bfa66c0 RCX: 00007fce9b15cfce [ 286.623856][ T31] RDX: 0000000000000020 RSI: 00007fce9bfa5000 RDI: 0000000000000007 [ 286.637885][ T31] RBP: 0000000000000000 R08: 00007fce9bfa4f04 R09: 000000000000000c [ 286.651543][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 286.668529][ T31] R13: 00007fce9bfa4f58 R14: 00007fce9bfa5000 R15: 0000000000000000 [ 286.683764][ T31] [ 286.688534][ T31] INFO: task syz.2.415:7645 blocked for more than 143 seconds. [ 286.699148][ T31] Not tainted syzkaller #0 [ 286.707443][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.727654][ T31] task:syz.2.415 state:D stack:24704 pid:7645 tgid:7643 ppid:5821 task_flags:0x480140 flags:0x00080002 [ 286.749100][ T31] Call Trace: [ 286.753535][ T31] [ 286.757448][ T31] __schedule+0x15dd/0x52d0 [ 286.763505][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.771175][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 286.777892][ T31] ? __pfx___schedule+0x10/0x10 [ 286.783361][ T31] ? schedule+0x90/0x360 [ 286.788322][ T31] schedule+0x164/0x360 [ 286.793269][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 286.800974][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 286.811279][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 286.828699][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 286.836471][ T31] nbd_set_size+0x454/0x680 [ 286.841706][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 286.848512][ T31] ? nla_memcpy+0x5b/0xc0 [ 286.855820][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 286.862101][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 286.868311][ T31] ? rcu_is_watching+0x15/0xb0 [ 286.874808][ T31] ? trace_kmalloc+0x2a/0x110 [ 286.880503][ T31] ? __nla_parse+0x40/0x60 [ 286.886940][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 286.895130][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 286.903453][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.912339][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.923083][ T31] genl_rcv_msg+0x61c/0x7a0 [ 286.932136][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.939906][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 286.947665][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 286.959529][ T31] netlink_rcv_skb+0x232/0x4b0 [ 286.980705][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.993193][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.002349][ T31] ? down_read+0x272/0x2e0 [ 287.010099][ T31] ? genl_rcv+0xd/0x40 [ 287.015976][ T31] genl_rcv+0x28/0x40 [ 287.022488][ T31] netlink_unicast+0x80f/0x9b0 [ 287.032594][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 287.044922][ T31] ? netlink_sendmsg+0x650/0xb40 [ 287.053249][ T31] ? skb_put+0x11b/0x210 [ 287.060915][ T31] netlink_sendmsg+0x813/0xb40 [ 287.067092][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.073559][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 287.078975][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.086230][ T31] ____sys_sendmsg+0x972/0x9f0 [ 287.093181][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.103054][ T31] ? import_iovec+0x73/0xa0 [ 287.109977][ T31] ___sys_sendmsg+0x2a5/0x360 [ 287.116052][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.124691][ T31] ? futex_wake+0x4ac/0x580 [ 287.131320][ T31] ? __fget_files+0x2a/0x420 [ 287.139952][ T31] ? __fget_files+0x3a0/0x420 [ 287.151128][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 287.162992][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.174590][ T31] ? rcu_is_watching+0x15/0xb0 [ 287.186374][ T31] do_syscall_64+0x14d/0xf80 [ 287.197073][ T31] ? trace_irq_disable+0x3b/0x150 [ 287.211022][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.221068][ T31] ? clear_bhb_loop+0x40/0x90 [ 287.230387][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.239531][ T31] RIP: 0033:0x7f057ff9c799 [ 287.245163][ T31] RSP: 002b:00007f0580dcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.257370][ T31] RAX: ffffffffffffffda RBX: 00007f0580215fa0 RCX: 00007f057ff9c799 [ 287.268714][ T31] RDX: 000000000000488c RSI: 0000200000000100 RDI: 0000000000000004 [ 287.282854][ T31] RBP: 00007f0580032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 287.294995][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.306248][ T31] R13: 00007f0580216038 R14: 00007f0580215fa0 R15: 00007ffdbdddd4f8 [ 287.316846][ T31] [ 287.320720][ T31] INFO: task syz.0.418:7654 blocked for more than 144 seconds. [ 287.339944][ T31] Not tainted syzkaller #0 [ 287.346388][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.358154][ T31] task:syz.0.418 state:D stack:28128 pid:7654 tgid:7649 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 287.380995][ T31] Call Trace: [ 287.387450][ T31] [ 287.392022][ T31] __schedule+0x15dd/0x52d0 [ 287.399905][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 287.407750][ T31] ? __pfx___schedule+0x10/0x10 [ 287.417536][ T31] ? schedule+0x90/0x360 [ 287.424104][ T31] schedule+0x164/0x360 [ 287.431662][ T31] schedule_preempt_disabled+0x13/0x30 [ 287.441077][ T31] __mutex_lock+0x7fe/0x1300 [ 287.448624][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 287.458024][ T31] ? __mutex_lock+0x5ac/0x1300 [ 287.467991][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 287.477442][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 287.488132][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 287.497574][ T31] ? radix_tree_lookup+0x240/0x290 [ 287.505059][ T31] genl_rcv_msg+0x10b/0x7a0 [ 287.512687][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.520816][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 287.530655][ T31] netlink_rcv_skb+0x232/0x4b0 [ 287.536862][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.543593][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.551163][ T31] ? down_read+0x272/0x2e0 [ 287.557692][ T31] ? genl_rcv+0xd/0x40 [ 287.563718][ T31] genl_rcv+0x28/0x40 [ 287.571072][ T31] netlink_unicast+0x80f/0x9b0 [ 287.580920][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 287.591246][ T31] ? netlink_sendmsg+0x650/0xb40 [ 287.603596][ T31] ? skb_put+0x11b/0x210 [ 287.613097][ T31] netlink_sendmsg+0x813/0xb40 [ 287.622856][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.634828][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 287.645042][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.653143][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.664044][ T31] __sys_sendto+0x672/0x710 [ 287.671826][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 287.678710][ T31] ? exc_page_fault+0x6a/0xc0 [ 287.687988][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 287.695150][ T31] __x64_sys_sendto+0xde/0x100 [ 287.704920][ T31] do_syscall_64+0x14d/0xf80 [ 287.715038][ T31] ? trace_irq_disable+0x3b/0x150 [ 287.726985][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.743502][ T31] ? clear_bhb_loop+0x40/0x90 [ 287.751904][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.761267][ T31] RIP: 0033:0x7fb59655cfce [ 287.771416][ T31] RSP: 002b:00007fb59744fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.786731][ T31] RAX: ffffffffffffffda RBX: 00007fb5974516c0 RCX: 00007fb59655cfce [ 287.795561][ T31] RDX: 0000000000000028 RSI: 00007fb597450000 RDI: 0000000000000008 [ 287.805324][ T31] RBP: 0000000000000000 R08: 00007fb59744ff04 R09: 000000000000000c [ 287.820809][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 287.831331][ T31] R13: 00007fb59744ff58 R14: 00007fb597450000 R15: 0000000000000000 [ 287.842885][ T31] [ 287.851017][ T31] INFO: task syz.4.420:7658 blocked for more than 145 seconds. [ 287.865927][ T31] Not tainted syzkaller #0 [ 287.875633][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.893374][ T31] task:syz.4.420 state:D stack:27880 pid:7658 tgid:7657 ppid:5822 task_flags:0x400040 flags:0x00080002 [ 287.915634][ T31] Call Trace: [ 287.921912][ T31] [ 287.929029][ T31] __schedule+0x15dd/0x52d0 [ 287.939762][ T31] ? __pfx___schedule+0x10/0x10 [ 287.950270][ T31] ? schedule+0x90/0x360 [ 287.959747][ T31] schedule+0x164/0x360 [ 287.966341][ T31] schedule_preempt_disabled+0x13/0x30 [ 287.975191][ T31] __mutex_lock+0x7fe/0x1300 [ 287.984468][ T31] ? __mutex_lock+0x5ac/0x1300 [ 287.992255][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 288.002886][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 288.021973][ T31] ? radix_tree_lookup+0x240/0x290 [ 288.035704][ T31] genl_rcv_msg+0x10b/0x7a0 [ 288.045649][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.056217][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 288.066181][ T31] netlink_rcv_skb+0x232/0x4b0 [ 288.077202][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.085592][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.095882][ T31] ? down_read+0x272/0x2e0 [ 288.104219][ T31] ? genl_rcv+0xd/0x40 [ 288.114085][ T31] genl_rcv+0x28/0x40 [ 288.120269][ T31] netlink_unicast+0x80f/0x9b0 [ 288.129520][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 288.143015][ T31] ? netlink_sendmsg+0x650/0xb40 [ 288.155075][ T31] ? skb_put+0x11b/0x210 [ 288.164217][ T31] netlink_sendmsg+0x813/0xb40 [ 288.173225][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.184983][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 288.194746][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.205149][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.215533][ T31] __sys_sendto+0x672/0x710 [ 288.224317][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 288.234692][ T31] ? exc_page_fault+0x6a/0xc0 [ 288.243477][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 288.254707][ T31] __x64_sys_sendto+0xde/0x100 [ 288.262877][ T31] do_syscall_64+0x14d/0xf80 [ 288.272008][ T31] ? trace_irq_disable+0x3b/0x150 [ 288.282021][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.291332][ T31] ? clear_bhb_loop+0x40/0x90 [ 288.301256][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.312723][ T31] RIP: 0033:0x7fb626b5cfce [ 288.320516][ T31] RSP: 002b:00007fb627aeee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 288.334297][ T31] RAX: ffffffffffffffda RBX: 00007fb627af06c0 RCX: 00007fb626b5cfce [ 288.352086][ T31] RDX: 0000000000000020 RSI: 00007fb627aef000 RDI: 0000000000000005 [ 288.366675][ T31] RBP: 0000000000000000 R08: 00007fb627aeef04 R09: 000000000000000c [ 288.379962][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 288.392515][ T31] R13: 00007fb627aeef58 R14: 00007fb627aef000 R15: 0000000000000000 [ 288.408112][ T31] [ 288.414280][ T31] INFO: task syz.1.423:7669 blocked for more than 145 seconds. [ 288.429807][ T31] Not tainted syzkaller #0 [ 288.438294][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.452696][ T31] task:syz.1.423 state:D stack:27880 pid:7669 tgid:7667 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 288.471423][ T31] Call Trace: [ 288.475576][ T31] [ 288.479680][ T31] __schedule+0x15dd/0x52d0 [ 288.486446][ T31] ? __pfx___schedule+0x10/0x10 [ 288.498365][ T31] ? schedule+0x90/0x360 [ 288.505042][ T31] schedule+0x164/0x360 [ 288.511881][ T31] schedule_preempt_disabled+0x13/0x30 [ 288.523160][ T31] __mutex_lock+0x7fe/0x1300 [ 288.529750][ T31] ? __mutex_lock+0x5ac/0x1300 [ 288.537148][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 288.545041][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 288.559906][ T31] ? radix_tree_lookup+0x240/0x290 [ 288.570294][ T31] genl_rcv_msg+0x10b/0x7a0 [ 288.578189][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.585722][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 288.596154][ T31] netlink_rcv_skb+0x232/0x4b0 [ 288.605388][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.616814][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.625363][ T31] ? down_read+0x272/0x2e0 [ 288.632467][ T31] ? genl_rcv+0xd/0x40 [ 288.639558][ T31] genl_rcv+0x28/0x40 [ 288.650309][ T31] netlink_unicast+0x80f/0x9b0 [ 288.658507][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 288.671395][ T31] ? netlink_sendmsg+0x650/0xb40 [ 288.681508][ T31] ? skb_put+0x11b/0x210 [ 288.689062][ T31] netlink_sendmsg+0x813/0xb40 [ 288.695543][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.705078][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 288.715932][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.726057][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.737496][ T31] __sys_sendto+0x672/0x710 [ 288.746109][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 288.754475][ T31] ? exc_page_fault+0x6a/0xc0 [ 288.760641][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 288.768622][ T31] __x64_sys_sendto+0xde/0x100 [ 288.774651][ T31] do_syscall_64+0x14d/0xf80 [ 288.782893][ T31] ? trace_irq_disable+0x3b/0x150 [ 288.790183][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.799687][ T31] ? clear_bhb_loop+0x40/0x90 [ 288.807085][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.817199][ T31] RIP: 0033:0x7fe38735cfce [ 288.823710][ T31] RSP: 002b:00007fe38816de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 288.836969][ T31] RAX: ffffffffffffffda RBX: 00007fe38816f6c0 RCX: 00007fe38735cfce [ 288.851988][ T31] RDX: 0000000000000020 RSI: 00007fe38816e000 RDI: 0000000000000004 [ 288.865023][ T31] RBP: 0000000000000000 R08: 00007fe38816df04 R09: 000000000000000c [ 288.876793][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 288.886779][ T31] R13: 00007fe38816df58 R14: 00007fe38816e000 R15: 0000000000000000 [ 288.897871][ T31] [ 288.902288][ T31] [ 288.902288][ T31] Showing all locks held in the system: [ 288.916169][ T31] 1 lock held by khungtaskd/31: [ 288.928844][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 288.949630][ T31] 2 locks held by getty/5579: [ 288.957465][ T31] #0: ffff88803615b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 288.979005][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 288.998445][ T31] 1 lock held by udevd/5886: [ 289.006983][ T31] #0: ffff88802688f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 289.023176][ T31] 2 locks held by syz.3.414/7641: [ 289.035487][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.051161][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.066790][ T31] 6 locks held by syz.2.415/7645: [ 289.074151][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.086883][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.100415][ T31] #2: ffff888026893278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 289.115262][ T31] #3: ffff8880260de610 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 289.131288][ T31] #4: ffff8880260ddfb0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 289.152273][ T31] #5: ffff8880260ddfe8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 289.174368][ T31] 2 locks held by syz.0.418/7654: [ 289.182621][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.199762][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.216771][ T31] 2 locks held by syz.4.420/7658: [ 289.225551][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.241726][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.260025][ T31] 2 locks held by syz.1.423/7669: [ 289.268354][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.282372][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.297970][ T31] 2 locks held by syz-executor/7676: [ 289.309858][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.324043][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.340018][ T31] 2 locks held by syz-executor/7678: [ 289.349120][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.359888][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.372166][ T31] 2 locks held by syz-executor/7679: [ 289.379041][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.389489][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.401527][ T31] 2 locks held by syz-executor/7683: [ 289.408156][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.422151][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.434080][ T31] 2 locks held by syz-executor/7693: [ 289.440773][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.450746][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.462928][ T31] 2 locks held by syz-executor/7725: [ 289.470793][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.481236][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.493329][ T31] 2 locks held by syz-executor/7728: [ 289.501217][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.513341][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.528548][ T31] 2 locks held by syz-executor/7730: [ 289.534946][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.544093][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.554783][ T31] 2 locks held by syz-executor/7732: [ 289.560799][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.570816][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.580780][ T31] 2 locks held by syz-executor/7742: [ 289.586744][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.596493][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.608219][ T31] 2 locks held by syz-executor/7775: [ 289.615185][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.624657][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.635508][ T31] 2 locks held by syz-executor/7776: [ 289.641548][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.653362][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.668115][ T31] 2 locks held by syz-executor/7779: [ 289.675854][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.689120][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.700527][ T31] 2 locks held by syz-executor/7781: [ 289.706972][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.719023][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.729702][ T31] 2 locks held by syz-executor/7791: [ 289.735549][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 289.745109][ T31] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 289.756028][ T31] [ 289.758516][ T31] ============================================= [ 289.758516][ T31] [ 289.768083][ T31] NMI backtrace for cpu 0 [ 289.768114][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 289.768138][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.768224][ T31] Call Trace: [ 289.768239][ T31] [ 289.768249][ T31] dump_stack_lvl+0xe8/0x150 [ 289.768287][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 289.768315][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.768347][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 289.768377][ T31] sys_info+0x135/0x170 [ 289.768399][ T31] watchdog+0xfd9/0x1030 [ 289.768437][ T31] ? watchdog+0x21a/0x1030 [ 289.768476][ T31] kthread+0x388/0x470 [ 289.768494][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.768521][ T31] ? __pfx_kthread+0x10/0x10 [ 289.768539][ T31] ret_from_fork+0x51e/0xb90 [ 289.768568][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 289.768607][ T31] ? __switch_to+0xc7d/0x1450 [ 289.768637][ T31] ? __pfx_kthread+0x10/0x10 [ 289.768659][ T31] ret_from_fork_asm+0x1a/0x30 [ 289.768709][ T31] [ 289.768718][ T31] Sending NMI from CPU 0 to CPUs 1: [ 289.896964][ C1] NMI backtrace for cpu 1 [ 289.896986][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 289.897009][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.897021][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 289.897057][ C1] Code: 0e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 a0 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 289.897075][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 289.897094][ C1] RAX: 0000000000103957 RBX: ffffffff819a88ed RCX: 0000000080000001 [ 289.897108][ C1] RDX: 0000000000000001 RSI: ffffffff8def3498 RDI: ffffffff8c27b280 [ 289.897121][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 289.897135][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901196b0 [ 289.897149][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 289.897161][ C1] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 289.897176][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.897189][ C1] CR2: 00007f11d5b47e20 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 289.897208][ C1] Call Trace: [ 289.897216][ C1] [ 289.897222][ C1] default_idle+0x9/0x20 [ 289.897243][ C1] default_idle_call+0x72/0xb0 [ 289.897265][ C1] do_idle+0x1bd/0x500 [ 289.897293][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.897326][ C1] ? __pfx_do_idle+0x10/0x10 [ 289.897358][ C1] cpu_startup_entry+0x43/0x60 [ 289.897385][ C1] start_secondary+0x101/0x110 [ 289.897409][ C1] common_startup_64+0x13e/0x147 [ 289.897438][ C1] [ 290.083243][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 290.090496][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 290.100327][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.111110][ T31] Call Trace: [ 290.114554][ T31] [ 290.117952][ T31] vpanic+0x56c/0xa60 [ 290.122815][ T31] ? __pfx___schedule+0x10/0x10 [ 290.128232][ T31] ? __pfx_vpanic+0x10/0x10 [ 290.133222][ T31] ? __pfx_console_unlock+0x10/0x10 [ 290.138934][ T31] panic+0xc5/0xd0 [ 290.143654][ T31] ? __pfx_panic+0x10/0x10 [ 290.148437][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 290.155217][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 290.161685][ T31] watchdog+0x1023/0x1030 [ 290.166329][ T31] ? watchdog+0x21a/0x1030 [ 290.171063][ T31] kthread+0x388/0x470 [ 290.175609][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.180758][ T31] ? __pfx_kthread+0x10/0x10 [ 290.185833][ T31] ret_from_fork+0x51e/0xb90 [ 290.191356][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.196842][ T31] ? __switch_to+0xc7d/0x1450 [ 290.202687][ T31] ? __pfx_kthread+0x10/0x10 [ 290.207921][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.213403][ T31] [ 290.217361][ T31] Kernel Offset: disabled [ 290.221982][ T31] Rebooting in 86400 seconds..