last executing test programs: 26.463414005s ago: executing program 2 (id=3064): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3, 0x9a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa011100, 0x1000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bafbe9ff9078001809c4000502ff1455f9a337b9cfb46a37f5c2280d6affff070000ffc10002d5886b6a2209c4edf8fccbb1d3f34464000000000000000201c451269df0e6eabddea2c0f1f11ed70d37c3e9f623f0152015ffdb8aabb17caccb5b91fa814daf91"], 0xfd6c) 25.914880824s ago: executing program 2 (id=3067): syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @none}, 0xe) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00200325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x108, r1, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0xcc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dc7541c871077886712d6518d94726da"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "05292ed434aea8044de9b4170c5d903c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "886428161f04560d319817df965fa7c64468f32af8ff9d5f069a1d4cf8481a1a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8c86a0f6e75b08753e0c6726c015c415"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x6, 0xff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x14, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa29fcfce4ea7326f2857f870ce66df00000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x14, r5, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ebdf7769bba336386c6f40615fc32b39071954ee182bef7c014ea7368810c5cdd28c8bd8176d0a92aaf21a21c7b52782970436140f6a7015a92b9b3cb00ec63dc21b06fe34afce0d7f460cf3", @ANYRES16=r5, @ANYBLOB="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"/274], 0x118}, 0x1, 0x0, 0x0, 0x48000}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) (async) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x10) (async, rerun: 32) r8 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) bind$tipc(r8, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x3, 0x2}, 0x10) (async) bind$tipc(r6, 0x0, 0x0) 25.759134056s ago: executing program 2 (id=3069): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x130, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x14}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES8=r2], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 25.437138773s ago: executing program 2 (id=3072): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x12, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc4}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffd0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x48000, &(0x7f00000014c0)={0xa, 0x4e21, 0xe7ff, @mcast1}, 0x1c) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000e14290528ad7000fbdbdf2508000300010000000800010000000000203158d9c699b154b9578ad79a1f807987a92e23a26d565debf2373e239423cbad30f82f61f69d5aff98595524eb842248d5eaa1e3c408a090d88231c4f79060f1f94f04bc37f292e7"], 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x20000000) 25.32417132s ago: executing program 2 (id=3074): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}, {&(0x7f00000001c0)='f', 0x1}], 0x2}], 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x20c89, 0x4cc44}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x2}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 25.019112378s ago: executing program 2 (id=3077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210327697000fcdbdf25040000000c0001800800030003"], 0x20}}, 0x4000000) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="beaad5d5c291000000000000cf41173de4930f770000000000000000000000004f7be1f7e68a65893a4f31dbd0d879402849bdc99ea1d1cfd4a0add7105ad57ab6dbf9fde1595a3c64c6f9af440983c7d35ecec59d988168e669942ddd24422fca47f70d3c62ce777200a5e2e2d92daef66485dd1902cc5166a737435b1b185518db2bb730cd7d9ab16ef66ccc9594a103ca034ed6847fff7cd3e48709616adac2b306adc3e679da7f4f85b61eb884920df2c4739b506f982eafe07221009c991f784f", @ANYRES32=r4, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x24000880) 20.750252173s ago: executing program 4 (id=3120): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="141100002f00010000000000fcdbdf250211f2800c0003000aac0f0000000000140001"], 0x1114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x7, &(0x7f0000000ac0)=@raw=[@generic={0xbf, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0xbc}, @generic={0x18, 0x2, 0x0, 0x0, 0x1000008}, @generic={0x0, 0x0, 0x0, 0x0, 0x2}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic={0x3}, @generic={0x95}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x5, 0x0) sendto$inet6(r2, &(0x7f0000000680)="9f", 0x2a000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5d}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3}}, 0x2, 0x1000}, &(0x7f0000000200)=0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000022c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000002340)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x8, 0x1, 0x8, 0xffffffffffffff7c}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.234888578s ago: executing program 3 (id=3127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x45, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x12}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffa991}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008085}, 0x40) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfc}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x10000, 0x42}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r6 = accept4(r0, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x80, 0x400) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x54, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000806) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="08bd9f6ebd7000ffbc000000000029a3b3aa785fcb185b4430a03479e114df057b995c901287e4ce50429e2c8368502d999b56ce35e9d61096836db1ddc9a20f5ab59fb51b6a5f42690c984b6bc72f282079dbd000c8e5df0268c22c5f59b6f966dd00"], 0x14}, 0x1, 0x0, 0x0, 0xc804}, 0x20000010) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004040}, 0x40800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000000306010200000000000000000500000005000100070000000900020073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 19.663004469s ago: executing program 4 (id=3133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000820c0019800800010002000000300001802c000180"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x44012) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0xffff0000}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x10000000, 0x1}, @empty, @private=0xa010101, 0x9751304b5dc4b606, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) sendmmsg$inet(r1, &(0x7f0000002b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="d06ea1269097746947371f649fcf3560e4b789b6657abf88eacc798f6fcee8f50006c7ca486b4529a74b836ff1904c3d576beab7d95468126981e4b7f8f8c4c98711", 0x42}, {0x0}], 0x2}}], 0x1, 0x2000c044) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x80) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000015c0)={'gretap0\x00', &(0x7f0000001500)={'syztnl1\x00', r6, 0x8000, 0x7800, 0x6, 0x9, {{0x1e, 0x4, 0x3, 0x9, 0x78, 0x64, 0x0, 0x16, 0x4, 0x0, @private=0xa010101, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x1, 0xe, "233f6ab7a3f114c63626b2bd"}, {0x5, 0x7, "2e54b30c55"}, {0x6, 0xf, "05b2d919b93791ab70c1aeb31c"}, {0x7, 0xd, "7ab10dbb4dc2b0879c45e6"}, {0x7, 0x2}, {0x7, 0x7, "b0998b08d1"}]}, @cipso={0x86, 0x1b, 0x3, [{0x0, 0x12, "dda696c1113a85d1e09d926a82a368c4"}, {0x0, 0x3, "a0"}]}]}}}}}) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000854}, 0x4040) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000cf000014000000110001", @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) writev(r1, &(0x7f0000001480)=[{&(0x7f00000000c0)="2bb88d0fc3cc213c62e4b0b8b0f56d8fe9f92d9d7445afe78eba11209a9ed5f47ea3d59ca7bdb1688a2116a51cad31b9531f908924f7b24b987f8571db7a52eed596f5bd5cf358fc56e6a4fff38819760d075707d943437479a65354ac6175", 0x5f}, {&(0x7f0000000180)="3a2cb974fb941bd3bd0e6be5564420880760790d4a2d2799a3a0f8d074df2a3ec562134841522a8190a6d9dc8cfcb3e6c9b62a195b12d32b002addb65a4c02fb6db649c771e1f5bde9157b6e48d724ff71fdac83b576cef4f2b04d341d947fa05e78c536164ef62d0171fb9aece010e9ca20579a586e9f3e1f511792e438ce6eb9e605b325d0642c379121b13c97d8859141ad3d5670f917b1b741a0c45a4ef3a4417227d16ddf6b867bc8de26fc193598a30570921c849dd2a4c915310626", 0xbf}, {&(0x7f0000000240)="df105095aeb3827594d3053395cd32f60a0f03cbbd803f3044e65109c816d2044898d3cd68d9733c58d7d46bc26f3539207f9a50a2180776697791f46ea54ba9aff6c311e040984f576f82870ece6822f4214333b310066258232ebd257f4dc3bc86aa00dcac4a32fd66c1b5642b714b0c781590ea8cfc1758a1384f15dd6511829fcbf7d9f826343be7b4bd7f6e87ee41b53a6171ed86218f7fb6bb0d74d72645", 0xa1}, {&(0x7f0000000300)="647d750ceab0d972d922aeeb277a96506b078c349b5f75f2aaa36475f591e3601a59c1e452fd9bb985be4a21e6ced106b51a86eaa6071243b3a79b0e6bfe291a553982845e267033fb75843bb6db6e098d440a55b128c3dd85cf9a12638e5a5e95130da08cbe1637cdf1424ce709b89b181ea413c1d12b711d4da6875e1c7984b0757838f50e6d634f3aea3ad700c3171bfbaf5133c937ff24507ff80542bcfc3553d1b76cd7067aee9b43c0ef5fde51ccf26132ee2d64012ae36a10e0a68ace54c9b5231089dd82ddb50872ba6fd14280611d26ac4f54974c59e9cd3f65756c778f8b", 0xe3}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="9965dfa620a5a58bc5cb2939b5c666ab069599087528aafdcb586751654ad4e3565b526954ebd311b3850010ded6df822ddffc547951b172322412d56de447a243433a38249cfeaa274e0bab80e0fe19314b5c587c3efa40129c9405e1e10be16b305e7e55df09586b319032d2", 0x6d}], 0x6) 18.774139437s ago: executing program 3 (id=3141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000cc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x414, r4, 0x400, 0x70bd29, 0xb30, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0x9, 0x6, 0x5, 0x3}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x2, 0x1, 0x0, {0x800000000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x5, 0x7c}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xc7, 0xfc, "2e704cd0f4a3a3b8005d86a405f0ff2bee941a220254b85fa3140fb9542dcfdc69962ce174dcb76588a51b1b4c791416a3a52ae4d73fae2f63828a2964ba566ca092d3b4bfda00682892bf6f45b867f5e10572025a75e2d2d899f9ff4ddb1a3342638ddcc1bab6c61b189c12f2665d6e4d052ab470bd19e2c0930b6a33953f0d4bbec32e5818e74846464692aae67125fc621fa529c7f2d5991d2577d4b6d8dbbd9f1c2cd76c9a910fdbf87f05f0746b36a9c1030faeeae71fcadb4f07998fa3e80116"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "27fd5def0cf2d7b82a8b06395f"}, @NL80211_ATTR_FILS_ERP_REALM={0xfa, 0xfa, "87695a655e4777c8215976c7b7bc8484b01b5bbab45cd19c2e4a54423ffcf3fa9866632cfdb8ee59826142280b1a601f671a19601f790f66794cb151eecbb794e1325b0c133ec461398a84604fc65306a63fa1a400dfd5d956acc1515bee286bb56fe6879861d543a06f34282162f2605ae08a331b3aaa378a5fba87cb59843c9078cccc4776d9e4c4744e02ce1df5ecd362f7eb46604c478ecb640758736a9f60cd85bea140b55760df6efdd0b4274999a973219a0eed7afe61b2fde57c0a68157b5f603dce71822081ef95ff5cf6ca0f71d5a5d7d3910bdd52a4030c2fa966f55935858d6fc398a5074009d0bbb429b93b29d7a901"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_IE={0x1b9, 0x2a, [@perr={0x84, 0xfb, {0x8, 0xf, [{{0x0, 0x1}, @device_b, 0x2a05, @value=@broadcast, 0x20}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x9}, {{}, @broadcast, 0x4, @void, 0x1c}, {{}, @device_b, 0x5, @void, 0x33}, {{}, @broadcast, 0x40, @void, 0x10}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x3c}, {{0x0, 0x1}, @device_a, 0xfffff499, @value=@device_b, 0x9}, {{0x0, 0x1}, @device_a, 0x87, @value, 0xd}, {{0x0, 0x1}, @device_b, 0x100, @value, 0x2b}, {{0x0, 0x1}, @broadcast, 0x4d, @value=@broadcast, 0x6}, {{}, @device_b, 0x7, @void, 0x2}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x18}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x3}, {{}, @device_b, 0x1, @void, 0x38}, {{}, @device_a, 0xffffffff, @void, 0x42}]}}, @dsss={0x3, 0x1, 0x40}, @tim={0x5, 0x8c, {0x6, 0xe0, 0x87, "a5b49f4f042d086dbfd459dc000bb935283780028fef99cb96c1c1c59178c531dc3d3ce46f698ca2273e0c8609f65e786c0af24d2898c6b476073fe648a124d20518337d2f748f52a89a8d954fe3c60340a797c87a9fabccb2b822846729668e17625d54cc6eed002bd5c145aff84bdf74539bfe098cbec9b8643ab865537a5a73c22a396540a08759"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x5, @device_a, 0x2, @value=@device_b, 0x2, 0x8000, @broadcast, 0x9}}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x10040080}, 0x4000010) 18.61766159s ago: executing program 4 (id=3143): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r2, &(0x7f0000000100), 0x0}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18001c00fcffffff00000000000000009160fefffcffffff9500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x6, 0x9, {{0x5, 0x4, 0x3, 0x3c, 0x14, 0x68, 0x0, 0xb4, 0x29, 0x0, @local, @empty}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff0100000000000000000000000000010000000000000000c0d8f3b6b1000000000000000000000000e5dd0000000000", @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003200000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000007000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000a000900"/176], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$key(0xf, 0x3, 0x2) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003f000500000000000000000002000000000000000f0001006f76732d73797374656d"], 0x34}}, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000ffdbdf25210000000c000500000000000000000009001f00706879310000000009001f007068793200000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r12 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="0c8a3033bac4", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @remote}}}}, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffffe, 0x1}, @jmp={0x5, 0x1, 0xc, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) socket(0x11, 0x80805, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000500)=0x5) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) 18.303710696s ago: executing program 3 (id=3146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0xfffffe29, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x5, [@func={0x8, 0x0, 0x0, 0xc, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @restrict={0x8}, @restrict={0xc}, @struct={0x9, 0x6, 0x0, 0x4, 0x1, 0x8, [{0xe, 0x5, 0x8}, {0x4, 0x2, 0x8000}, {0x4, 0x3, 0x1}, {0x6, 0x1, 0x5}, {0x3, 0x1, 0xfffffffd}, {0x7, 0x5, 0x80000001}]}]}, {0x0, [0x61, 0x0, 0x30]}}, &(0x7f00000004c0)=""/40, 0xbd, 0x28, 0x0, 0x7, 0x10000}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x2a41, 0x1ff, 0x3cb2601a, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x6}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, r0, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x18, r0}, 0x18) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600009bed6bc120a60000000000000000000000000000000000e2580388e70da2e3286c7eef110fcb76466a1a071b9be6113f993b68053ed45d00fb40204e8533614a92f2426f91b3642974038cd78ad406ce3eafe6d7da354c028275c375eb764eafa55881a65b09afc2f6b14e4d3aecde828796eff5cfa1f703a74f7d373703a0201f158064b1d4c4df0f5c4b467ab7f9c0b1e52d8e285b445bb44a1e3ebf12c3670b48503620b278ae8dad4fda407a813e777e16bc865500000000000000000072478cc790e12314c849371905211b5a53b42124e738a0e798f041e59455ab4dca51b1f31c12b4f5585fb98d645b28c59e72d01d23ad14974f187dced061827c1f0829b3d90fff31c5d349257889b562b685940c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000100"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x45}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x1, 0x5, 0x2, 0xffffffffffffffe0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xba}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x3ff, 0xca, &(0x7f0000000300)=""/202, 0x41100, 0x41, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xb, 0x4, 0x100}, 0x10, 0x151b0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r5, 0x1, r6, r7, r8, r9, 0x1, r10], 0x0, 0x10, 0xfffffff9}, 0x94) socketpair(0x1e, 0x80000, 0x9841, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$netlink(0x10, 0x3, 0x6) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x1c, r13, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6632d07a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r13, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4703}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c4}, 0x44000) 17.943819428s ago: executing program 4 (id=3149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000002100010027bd7000fefffffffe8800000000000000000000000000017f000001000000000000000000000000dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000015fe8007000000000000000000e9fb7f9081e19d7900000028ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000005c000a001c000400feff4e214e210000ffffffff00"/124], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = epoll_create1(0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f00000000c0)=""/52, 0x34, 0x0, &(0x7f0000000280)=""/190, 0xbe}}, 0x10) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0x17bf0d7acc1b9916}) sendmsg$inet(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf252b0000000c00050000000000000000000a0001007770616e30000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0x49, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40884) r9 = accept(r1, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80) bind$unix(r9, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000002100010027bd7000fefffffffe8800000000000000000000000000017f000001000000000000000000000000dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000015fe8007000000000000000000e9fb7f9081e19d7900000028ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000005c000a001c000400feff4e214e210000ffffffff00"/124], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) socket$kcm(0x29, 0x2, 0x0) (async) epoll_create1(0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f00000000c0)=""/52, 0x34, 0x0, &(0x7f0000000280)=""/190, 0xbe}}, 0x10) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0x17bf0d7acc1b9916}) (async) sendmsg$inet(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r6) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf252b0000000c00050000000000000000000a0001007770616e30000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0x49, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40884) (async) accept(r1, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80) (async) bind$unix(r9, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) 17.861672444s ago: executing program 3 (id=3151): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r0, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f0000000980)=ANY=[@ANYBLOB="54040000", @ANYRES16=r0, @ANYBLOB="000229bd7000ffdbdf2508000000cc010280200003801c000180040003000f0002006e657464657673696d3000000400030020000380100001800500020000000000040003000c00018008000100ff070000900003803c0001800400030004000300050002000000000004000300080001000200000008000100400000000400030008000100fa000000050002000000000008000180040003001c00018008000100aa070000040003000800010007000000040003002c000180080001000f00000009000200cd2c215d0000000004000300080001000500000005000200000000000800020006000000f0000500981c43fc3da9a3a18587ed85a02cd61858216db0e3b46e325565658f1d61371db32eea7e7c196f0d06c2f5667b2b8af0a956ccb2f4123cd96655dc7049623039e58513feedb830bc69056d6b6fb390690c37492005a8d23f5fdac37b8236cb8e8df3526a87ef00f96ccf6aacce2695757f9b1a77056cf6b5906fa30330d0c407aecd6d9f52c1b7f9d882a27fca4b075275cc4b695a16fd334113eaa5927d8fcf58e1f281254ad854de03690bc5f73a84348a906e7ec028bfe30aa4a165dd8c74f505720c97d92f47e710b6ee7e8e3ee552dde06d35bdd86436fbe5c07fcf10b87c141d2d6f50a11968b619486c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020069705f7674693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000c4", @ANYRES32=0x0, @ANYBLOB="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"], 0x454}}, 0x2000c811) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001900)="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", 0x0, 0x4, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000), 0x7fb, r3}, 0x38) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x7, 0x0, 0x5, 0x2, 0x5775d27c, 0x154, 0x100}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000050000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000001000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x1, 0x2}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000015c0)=0x9, 0x4) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8820) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4001) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b80000001900010000000000fddbdf25e00000010000000000000000000000002001000000000000000000000000000000000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x37a5fce0bcf595dd}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) socket$nl_route(0x10, 0x3, 0x0) 17.67218271s ago: executing program 4 (id=3152): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lblc\x00', 0x1, 0xa8a, 0x34}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 17.642868036s ago: executing program 0 (id=3153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_newvlan={0x64, 0x70, 0x4, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4d}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x10}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x34000810) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@bridge_newvlan={0x64, 0x70, 0x4, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x7}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4d}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x10}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x34000810) (async) 17.459008982s ago: executing program 4 (id=3154): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25030000000c000500200100000000000008000100000000000c00020007000000000000000d7eb12ae990f0349fc8376abcaa187236e87e1520a10685b4794b8f43943964db8949188f5a2e8963763c94b01718d420e66e24d93a955d6ca891ec75db339e9ce8c60e2e8ef9100e417937dbdaa788e96e7832df240530ce273ee832fe7921646f7147f04d33f3342b2891398391646d44d47e170dd9e0dad67ecf4d06b224a30288a6a1a5ab4490c95a23e3325bb4ee685d10aebe75947c1de5e5612e4864acb54d916f49efb366d87a7db5cfde11c8ecb4a57ab9cdce4d6908c98d8294dcc225"], 0x34}}, 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x59, "0f435dc65e8df6f71ca17a7c683102c9586bb59bbc9ba7a3b6a823bfaab589a29f284d94658dcfd40ea5c3ae10ddadfb55004c9ca4820466ff30f708b53830b5cac515688f53db22da2c2afc65604bd23edcbbdd66e33a63b9"}, &(0x7f0000000340)=0x61) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r3, 0xa2, 0x1f86}, &(0x7f00000003c0)=0x8) socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r5) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="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"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000814) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a0000", 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r11) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$kcm(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) 17.391011296s ago: executing program 1 (id=3155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1f, 0x0, [{0x7, 0x6, "954d2dd4"}, {0x2, 0xf, "ad4cfc6d0c114a69c613f8d51e"}, {0x2, 0x4, "ba2a"}]}]}}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@loopback, 0x4d6, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x93, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0, 0x3}, {0x0, 0x9, 0x2, 0xfffbfffffffffffe}, {0x101, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x4, 0x2, 0xe55286f1921f74b6}, 0x0, 0x1a0b1}, [@iptfs_pkt_size={0x8, 0x29, 0x5}]}, 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.345101669s ago: executing program 3 (id=3156): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0xfc, 0x10, 0x100, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x6ffc, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xfffffffffffffffe, 0x8000000001, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@iptfs_reorder_window={0x6, 0x25, 0x7}, @iptfs_dont_frag={0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="480100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000014e20071c4e210005020000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x844) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4048094}, 0x2404c806) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000027000100fdff0700001000000c000000d4d8af62309bcac09fcfda39778abdd85cb69ea7e264ed03454a71890ea6d1f1af343efde8f9cc3b297576d2078686985670a71960936704256a0e25afc85fb9d5869d574b5098c6b180782e8e47a383c36571008019bff50eeab08474ff28c4b52266c8ebb25b4c6850256fb80370e842a1d400db21c4ac160e14e44e76915807e7f7b5b5c6c70cd4f08b75e3b287caea7e313ef6d779a6f319ec1e48aed6f612754dfb25e749d78ee6f81f5b76236ee29d3fbef5403ebabeaa9af589d42a11b1452028999c40f3d5f66d2875f20d38f4ac3c"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000fc0)={&(0x7f00000000c0), 0xc, &(0x7f0000000f80)={&(0x7f0000000b40)={0x42c, 0x3f4, 0x8, 0x70bd25, 0x25dfdbfd, {0x10, 0x2, 0x23, [0x6, 0x41, 0x4, 0xc1, 0x5, 0x1000, 0x80, 0x5, 0x3, 0x2, 0xfff, 0xff28, 0x4, 0xfffffffb, 0xfc00000, 0x1, 0xfff, 0x2, 0xffffff2b, 0x0, 0x6, 0x4, 0x40, 0x9, 0x80000000, 0x71, 0x36, 0xace, 0xdb7, 0x10001, 0x9, 0x3, 0x9, 0x8, 0x6, 0x2, 0xb8, 0x6, 0x660, 0x6fb, 0x0, 0x21e, 0x2, 0x400, 0x4, 0x7, 0x1ff, 0x7a, 0x101, 0x3, 0x38a, 0x10000, 0x9, 0x2, 0x8, 0x7fff, 0x9, 0x6a, 0x8000, 0x9, 0xfffffff3, 0x9, 0x7, 0x927e], [0x100, 0x6, 0x800, 0x1ff, 0x101400, 0xfffffffa, 0x8, 0x8, 0x1, 0x9, 0x3, 0x8, 0xfffff001, 0x1, 0xe47c, 0x1, 0x7f, 0x9, 0x7, 0x8, 0x8, 0xc, 0x3, 0x1000, 0x47a8, 0x1, 0x31a43702, 0x1c0, 0x5, 0x80, 0x5, 0x0, 0xbef, 0x7, 0x8, 0x8, 0x101, 0x10000, 0x0, 0x0, 0x8, 0x4, 0x1ff, 0xfffff00a, 0x0, 0x3ff, 0x200, 0x4, 0x1000, 0x2, 0x4, 0x4, 0xfffffffd, 0x5, 0x7ff, 0x7, 0x7e59, 0x4d, 0x7, 0x7, 0x8, 0x6, 0x8797, 0x1ff], [0x80000001, 0x18000, 0x9, 0x0, 0x4, 0xd, 0x7, 0x1, 0x5, 0x2, 0xf69, 0x401, 0xd1, 0xfff, 0x4, 0x0, 0x42, 0x7, 0x7b99, 0x9, 0x7aba, 0x7, 0xb8e, 0xfffffffe, 0xfffffffb, 0x1000, 0x6, 0x1, 0x9, 0x0, 0x3, 0x7, 0x5, 0x831e, 0x1, 0x81, 0x8, 0x5, 0x7, 0x4, 0xeef, 0x6, 0x5, 0x3, 0x3, 0x9, 0x10, 0x4, 0x7ff, 0x80000001, 0x8000000, 0x3, 0x4, 0x8, 0x1000, 0xb1, 0x2, 0x9, 0x1, 0x2, 0x0, 0xe, 0x6], [0x6, 0x7, 0x0, 0x0, 0x3, 0xc1, 0x1000, 0x5, 0x8, 0x3, 0x6, 0x6, 0xb, 0x8, 0xfff, 0x4, 0x4, 0xa, 0x4, 0x3, 0x2, 0xe, 0x1, 0x1400, 0x8, 0x18e060c8, 0x1, 0x10000, 0x7a8, 0x6, 0xc9b9, 0x8, 0x5, 0x0, 0x4, 0x1ff, 0x0, 0x92, 0x1, 0x776, 0x0, 0xff, 0x0, 0x0, 0x1f3f9d5, 0x2, 0x3, 0x228f, 0x2, 0x700, 0x5, 0x7, 0x3, 0x8000, 0xfffff8a5, 0xee07, 0x7, 0x200, 0xfffffffb, 0x15f, 0xc95d, 0x6, 0x8, 0x7], 0xa, [':!\xfd(::$\x00', '/\x00']}, [""]}, 0x42c}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000203050000000000000000000200000008000340000003ff0900020047628c67be"], 0x28}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c004001c0012800b00010062726964676500000c0002800600080098a800000a000100aa"], 0x48}}, 0x20008000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x15}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048044}, 0x20000805) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2000}, 0xc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) accept4$unix(r10, 0x0, &(0x7f0000000040), 0x0) close(r9) 17.290273319s ago: executing program 0 (id=3157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 17.123119979s ago: executing program 3 (id=3158): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x800000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000200)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x73, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40800) sendmsg$key(r6, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e30, @rand_addr=0x64010102}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x103503}]}, 0x50}, 0x1, 0x7}, 0x0) 16.920748898s ago: executing program 0 (id=3159): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 16.839572483s ago: executing program 1 (id=3160): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x112, 0x2, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3, 0x1}, 0xc) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x113, 0x1}, {0x10, 0x110, 0xc}], 0x20}, 0xfc40) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) recvmmsg(r1, &(0x7f0000006100), 0x0, 0x12300, 0x0) close(r5) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x29}}, {0x8, 0x2, @remote}}}]}]}, 0x34}}, 0x4) socket$inet6(0xa, 0x1, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) 16.722751418s ago: executing program 0 (id=3161): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x42}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000003000000ef05000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0xf, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) unshare(0x6020400) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000340)=0x5, 0x4) setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000040)=0xfd, 0x4) 16.522866542s ago: executing program 0 (id=3162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC=r0], 0x24}}, 0x0) sendto(r0, &(0x7f0000000000)="aafa022a36cb37b90e053c10d1529b8a334e0bc60cf103e90f4415", 0x1b, 0x20001811, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @mcast1, 0x1}}, 0x80) 16.390771339s ago: executing program 1 (id=3163): setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lblc\x00', 0x1, 0xa8a, 0x34}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 16.389481748s ago: executing program 0 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0xff07, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESDEC=r7, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffff41}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @cb_func={0x18, 0xe, 0x4, 0x0, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x3, 0x93, &(0x7f0000000740)=""/147, 0x41000, 0x1a, '\x00', r3, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0x9, &(0x7f0000000880)=[r0, r0], &(0x7f00000008c0)=[{0x4, 0x5, 0x1, 0xa}, {0x5, 0x4, 0x1, 0xa}, {0x0, 0x1, 0x0, 0x1}, {0x5, 0x1, 0x4, 0x6}, {0x0, 0x4, 0xa, 0x7}, {0x2, 0x4, 0x1, 0xa}, {0x2, 0x5, 0x4, 0xb}, {0x5, 0x4, 0x8, 0x9}, {0x3, 0x4, 0x3, 0xc}], 0x10, 0xc4}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000e6000c000000004400000008000300", @ANYRES32=r11, @ANYBLOB="14002380050011"], 0x30}, 0x1, 0x0, 0x0, 0x24008840}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r14, 0x4) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002f00090025bd7000000000000400000008000c000200000004001f00d4488acdf5d511481cfdf5a806df489f77ee6da30eaa69d4177f2b46712572dc0cfff61923db9fc0d2c71d024e2207611fbadf354f0c7156f2f30cc0a7d16e490ba02694e2cc50133230bce1105aa62e785c19b5f55da9ec78141be3f6b26daaa493f9e2ae47652ed81161604b05c1ffb71a8cc368d45691886b8e8aa168bbdde81f0ae9f7989906"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 15.970987495s ago: executing program 1 (id=3165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x5, 0x7, 0x9, 0x2, 0x2, 0x8, 0x3, 0x4}}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x98, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8009}, [@CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x411}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x406c450}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 15.970446397s ago: executing program 1 (id=3166): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001580)=[{&(0x7f00000003c0)="3f8489", 0x3}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 15.969741537s ago: executing program 1 (id=3167): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10048000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x44, 0x66, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0xa}, {0x9, 0x4}, {0xf, 0xd}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x88}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0xeba1360c956f8e0a) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x40) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="000000f50400000007"], 0x11) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b7040000010000008500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r12, 0x37, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r15, r13, 0x22, 0x1e, 0x0, @void, @value=r10, @void, @void, r14}, 0x20) 2.125608811s ago: executing program 32 (id=3154): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25030000000c000500200100000000000008000100000000000c00020007000000000000000d7eb12ae990f0349fc8376abcaa187236e87e1520a10685b4794b8f43943964db8949188f5a2e8963763c94b01718d420e66e24d93a955d6ca891ec75db339e9ce8c60e2e8ef9100e417937dbdaa788e96e7832df240530ce273ee832fe7921646f7147f04d33f3342b2891398391646d44d47e170dd9e0dad67ecf4d06b224a30288a6a1a5ab4490c95a23e3325bb4ee685d10aebe75947c1de5e5612e4864acb54d916f49efb366d87a7db5cfde11c8ecb4a57ab9cdce4d6908c98d8294dcc225"], 0x34}}, 0x80000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x59, "0f435dc65e8df6f71ca17a7c683102c9586bb59bbc9ba7a3b6a823bfaab589a29f284d94658dcfd40ea5c3ae10ddadfb55004c9ca4820466ff30f708b53830b5cac515688f53db22da2c2afc65604bd23edcbbdd66e33a63b9"}, &(0x7f0000000340)=0x61) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r3, 0xa2, 0x1f86}, &(0x7f00000003c0)=0x8) socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r5) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="0100fcffffff00000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008e0001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300010000002a760a7c8f1c8e97806fca2fd638671afe0ca992a3699c13a4ff55b5acff096e7fead513ad634e3cc59ce29b54f1c656accc8d7ed8df3f8f2c3fb76321815781d335a8cb86fe7673408d9119c8e7cd9bce753589eeaca24cc5990c852aa24bf5c6761ff72bfd49dd535aa5eee034feb9734f00f302db9ee76161710e172bad209a962acc5190a321c0176769d11312e43ffced84a2a919a2f11122345ef39734e348478d2507b96c4dc4a11c701bc61ea354c3b13117ee68936dc52dda7788e2b556e27e2e03470fb697e00c034602977579fe0cf3d82bf835fbf5f88298f661985cb20103f0ae786f09f7bb950ff37c1dfcd006d107e411a04621efe16aaa7de54b8dca445e04b7fb754f756316fcb4e6386d8271d1e328a3c9609cf2be472f478546432b1a1511bd8611e82e6671"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000814) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a0000", 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r11) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$kcm(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.095247425s ago: executing program 33 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0xff07, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESDEC=r7, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffff41}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @cb_func={0x18, 0xe, 0x4, 0x0, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x3, 0x93, &(0x7f0000000740)=""/147, 0x41000, 0x1a, '\x00', r3, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0x9, &(0x7f0000000880)=[r0, r0], &(0x7f00000008c0)=[{0x4, 0x5, 0x1, 0xa}, {0x5, 0x4, 0x1, 0xa}, {0x0, 0x1, 0x0, 0x1}, {0x5, 0x1, 0x4, 0x6}, {0x0, 0x4, 0xa, 0x7}, {0x2, 0x4, 0x1, 0xa}, {0x2, 0x5, 0x4, 0xb}, {0x5, 0x4, 0x8, 0x9}, {0x3, 0x4, 0x3, 0xc}], 0x10, 0xc4}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000e6000c000000004400000008000300", @ANYRES32=r11, @ANYBLOB="14002380050011"], 0x30}, 0x1, 0x0, 0x0, 0x24008840}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r14, 0x4) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002f00090025bd7000000000000400000008000c000200000004001f00d4488acdf5d511481cfdf5a806df489f77ee6da30eaa69d4177f2b46712572dc0cfff61923db9fc0d2c71d024e2207611fbadf354f0c7156f2f30cc0a7d16e490ba02694e2cc50133230bce1105aa62e785c19b5f55da9ec78141be3f6b26daaa493f9e2ae47652ed81161604b05c1ffb71a8cc368d45691886b8e8aa168bbdde81f0ae9f7989906"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 1.041808915s ago: executing program 34 (id=3158): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x800000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000200)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x73, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40800) sendmsg$key(r6, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e30, @rand_addr=0x64010102}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x103503}]}, 0x50}, 0x1, 0x7}, 0x0) 0s ago: executing program 35 (id=3167): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10048000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x44, 0x66, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0xa}, {0x9, 0x4}, {0xf, 0xd}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x88}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0xeba1360c956f8e0a) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x40) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="000000f50400000007"], 0x11) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b7040000010000008500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r12, 0x37, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r15, r13, 0x22, 0x1e, 0x0, @void, @value=r10, @void, @void, r14}, 0x20) kernel console output (not intermixed with test programs): : (slave syz_tun): failed to get link speed/duplex [ 419.322955][T15746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2541'. [ 419.337593][T15746] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2541'. [ 419.348186][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'. [ 419.366789][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 419.497796][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 419.571427][T15753] bond8: option arp_all_targets: invalid value (3) [ 419.580988][T15753] bond8 (unregistering): Released all slaves [ 419.656693][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 419.667683][T15759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2545'. [ 419.678451][T15759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2545'. [ 419.777617][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 419.819102][T15762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2546'. [ 419.897035][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 419.942934][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2548'. [ 420.132400][T15768] netlink: 'syz.0.2547': attribute type 12 has an invalid length. [ 420.330005][T15787] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 420.380460][T15787] erspan2: entered allmulticast mode [ 420.558793][T15798] netlink: 'syz.4.2557': attribute type 1 has an invalid length. [ 421.596323][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 422.014916][T15848] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 422.034322][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064d80400: rx timeout, send abort [ 422.079413][T15848] bond14: (slave lo): Enslaving as an active interface with an up link [ 422.534631][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae28800: rx timeout, send abort [ 422.545377][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064d80400: abort rx timeout. Force session deactivation [ 423.007687][T15909] __nla_validate_parse: 4 callbacks suppressed [ 423.007708][T15909] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.2585'. [ 423.043057][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae28800: abort rx timeout. Force session deactivation [ 423.102196][T15911] netlink: 'syz.0.2584': attribute type 1 has an invalid length. [ 423.120349][T15911] netlink: 'syz.0.2584': attribute type 6 has an invalid length. [ 423.142302][T15911] netlink: 'syz.0.2584': attribute type 3 has an invalid length. [ 423.168516][T15915] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 423.186948][T15915] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 423.402813][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'. [ 423.745041][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 423.856904][ T9682] net_ratelimit: 34 callbacks suppressed [ 423.856928][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 424.006208][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 424.102099][T15954] syzkaller0: entered promiscuous mode [ 424.137141][T15954] syzkaller0: entered allmulticast mode [ 424.176346][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 425.226002][T15974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.250426][T15974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.271376][T15974] hsr0: entered promiscuous mode [ 425.276829][T15974] hsr0: entered allmulticast mode [ 425.282164][T15974] hsr_slave_0: entered allmulticast mode [ 425.288269][T15974] hsr_slave_1: entered allmulticast mode [ 425.306584][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 425.415615][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 425.716518][T15998] erspan0: left promiscuous mode [ 425.751104][T15998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.785380][T15998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.842087][T15998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.855523][T15998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.874285][T15998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.893922][T15998] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 425.932311][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.939603][ T9680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.953469][ T9680] bridge0: port 3(vlan2) entered blocking state [ 425.960002][ T9680] bridge0: port 3(vlan2) entered forwarding state [ 425.969843][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.977088][ T9680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.064914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.150747][ T57] bond6: (slave syz_tun): failed to get link speed/duplex [ 426.277184][ T57] bond6: (slave syz_tun): failed to get link speed/duplex [ 426.376814][ C0] IPv6: veth0_to_bridge: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 426.428566][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 426.738794][T16061] bond10: entered allmulticast mode [ 426.757939][T16059] bond10: left allmulticast mode [ 426.929599][T16069] netlink: 'syz.4.2624': attribute type 1 has an invalid length. [ 427.002983][T16074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2624'. [ 427.021311][T16071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.060462][T16071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.088570][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'. [ 427.105836][T16071] batman_adv: batadv0: Removing interface: ipvlan0 [ 427.114603][T16071] batman_adv: batadv0: Removing interface: ipvlan1 [ 427.151852][T16076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2626'. [ 427.225922][T16074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 427.244063][T16069] bridge6: entered promiscuous mode [ 427.261594][T16069] bond3: (slave bridge6): making interface the new active one [ 427.274246][T16069] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 427.524656][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 427.555265][T16088] netlink: 'syz.0.2628': attribute type 1 has an invalid length. [ 427.567840][T16091] netlink: 'syz.2.2630': attribute type 11 has an invalid length. [ 427.833373][T16093] netlink: 'syz.0.2628': attribute type 10 has an invalid length. [ 427.843601][T16093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2628'. [ 428.061305][T16088] 8021q: adding VLAN 0 to HW filter on device bond15 [ 428.129693][T16093] dummy0: entered promiscuous mode [ 428.179503][T16125] netlink: 556 bytes leftover after parsing attributes in process `syz.1.2639'. [ 428.227097][T16123] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 428.341713][T16123] lo speed is unknown, defaulting to 1000 [ 428.369429][T16123] lo speed is unknown, defaulting to 1000 [ 428.385276][T16123] lo speed is unknown, defaulting to 1000 [ 428.412337][T16131] bridge0: port 3(dummy0) entered disabled state [ 428.412330][T16123] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 428.484172][T16131] dummy0: left allmulticast mode [ 428.492672][T16123] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 428.501418][T16131] dummy0: left promiscuous mode [ 428.545210][T16131] bridge0: port 3(dummy0) entered disabled state [ 428.549500][T16140] SET target dimension over the limit! [ 428.608864][T16123] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 428.667205][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2641'. [ 428.681188][T16123] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 428.694759][T16146] tap0: tun_chr_ioctl cmd 1074025677 [ 428.717542][T16146] tap0: linktype set to 0 [ 428.748749][T16154] netlink: 'syz.3.2643': attribute type 1 has an invalid length. [ 428.759276][T16146] netlink: 'syz.3.2643': attribute type 1 has an invalid length. [ 428.809944][T16148] tap0: tun_chr_ioctl cmd 1074025677 [ 428.835213][T16148] tap0: linktype set to 0 [ 428.843503][T16146] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 428.846935][T16154] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 428.858104][T16123] lo speed is unknown, defaulting to 1000 [ 428.926804][ T6151] net_ratelimit: 11 callbacks suppressed [ 428.926827][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 428.988593][T16123] lo speed is unknown, defaulting to 1000 [ 429.044106][T16123] lo speed is unknown, defaulting to 1000 [ 429.053212][T16123] lo speed is unknown, defaulting to 1000 [ 429.065570][T16123] lo speed is unknown, defaulting to 1000 [ 429.097632][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 429.172329][T16176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.277047][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 429.323698][T16180] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 429.358615][T16180] netlink: 756 bytes leftover after parsing attributes in process `syz.4.2651'. [ 429.426226][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 429.522600][T16185] netlink: 'syz.0.2653': attribute type 1 has an invalid length. [ 429.531936][T16185] batadv_slave_1: Caught tx_queue_len zero misconfig [ 429.566250][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 429.620777][T16190] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2654'. [ 429.656447][T16190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2654'. [ 429.665679][T16190] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2654'. [ 429.696268][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 429.806969][ T12] bond6: (slave syz_tun): failed to get link speed/duplex [ 429.849650][ T57] IPVS: starting estimator thread 0... [ 429.907339][T16200] syzkaller0: entered promiscuous mode [ 429.923176][T16200] syzkaller0: entered allmulticast mode [ 429.947362][T16199] IPVS: using max 31 ests per chain, 74400 per kthread [ 429.959788][ T12] bond6: (slave syz_tun): failed to get link speed/duplex [ 430.014764][T16204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2660'. [ 430.032068][T16204] bond0: entered promiscuous mode [ 430.039504][T16204] bond0: left promiscuous mode [ 430.130366][T16208] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 430.392762][T16226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2663'. [ 430.419622][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 430.447387][T16226] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2663'. [ 430.622883][T16235] xt_hashlimit: size too large, truncated to 1048576 [ 431.437886][T16269] netlink: 'syz.4.2675': attribute type 1 has an invalid length. [ 431.464951][T16269] bond4: entered promiscuous mode [ 431.471142][T16269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.546522][T16269] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 431.559208][T16269] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 431.569679][T16269] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 432.099767][T16293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.289219][T16305] xt_policy: output policy not valid in PREROUTING and INPUT [ 432.515913][T16320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.557582][T16320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.385197][T16351] netlink: 'syz.1.2702': attribute type 2 has an invalid length. [ 433.900270][T16376] syzkaller1: entered promiscuous mode [ 433.906842][T16376] syzkaller1: entered allmulticast mode [ 433.948610][T16380] __nla_validate_parse: 6 callbacks suppressed [ 433.948638][T16380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2709'. [ 433.983071][T16379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2711'. [ 433.994026][T16379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2711'. [ 434.016879][ T6151] net_ratelimit: 27 callbacks suppressed [ 434.016899][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 434.148497][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 434.215970][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 434.234910][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 434.247962][T16389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2713'. [ 434.263945][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 434.273594][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 434.282672][T16389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2713'. [ 434.293146][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 434.315712][T16389] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2713'. [ 434.328380][T16389] ipvlan0: left promiscuous mode [ 434.387859][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 434.401703][T16395] netlink: 'syz.0.2716': attribute type 4 has an invalid length. [ 434.586941][ T12] bond6: (slave syz_tun): failed to get link speed/duplex [ 434.632303][T16400] xt_CT: No such helper "snmp_trap" [ 434.671193][T16408] netlink: 'syz.1.2720': attribute type 1 has an invalid length. [ 434.706844][ T12] bond6: (slave syz_tun): failed to get link speed/duplex [ 434.845992][T16414] netlink: 'syz.2.2722': attribute type 1 has an invalid length. [ 434.888560][T16408] 8021q: adding VLAN 0 to HW filter on device bond10 [ 434.975491][T16411] bond10: (slave ip6gretap2): making interface the new active one [ 434.980272][T16417] netlink: 'syz.0.2723': attribute type 1 has an invalid length. [ 435.051521][T16411] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 435.208206][T16417] bond16: entered promiscuous mode [ 435.220537][T16417] 8021q: adding VLAN 0 to HW filter on device bond16 [ 435.230141][T16425] lo: entered allmulticast mode [ 435.237579][T16429] lo: left allmulticast mode [ 435.467521][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 435.560348][T16446] 8021q: adding VLAN 0 to HW filter on device bond8 [ 435.639792][T16455] netlink: 'syz.4.2733': attribute type 11 has an invalid length. [ 435.651767][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 435.766932][ T9691] bond6: (slave syz_tun): failed to get link speed/duplex [ 435.896253][ T57] bond6: (slave syz_tun): failed to get link speed/duplex [ 437.373465][T16525] team0: Caught tx_queue_len zero misconfig [ 437.596301][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 437.789713][T16541] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 437.800503][T16541] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 438.008346][T16559] netlink: 'syz.4.2762': attribute type 5 has an invalid length. [ 438.041654][T16559] netlink: 'syz.4.2762': attribute type 6 has an invalid length. [ 438.071657][T16561] netlink: 'syz.0.2765': attribute type 4 has an invalid length. [ 438.877558][ T1507] block nbd0: Possible stuck request ffff888026757000: control (read@0,1024B). Runtime 90 seconds [ 438.888349][ T1507] block nbd0: Possible stuck request ffff8880267571c0: control (read@1024,1024B). Runtime 90 seconds [ 438.899379][ T1507] block nbd0: Possible stuck request ffff888026757380: control (read@2048,1024B). Runtime 90 seconds [ 438.910371][ T1507] block nbd0: Possible stuck request ffff888026757540: control (read@3072,1024B). Runtime 90 seconds [ 439.001056][T16580] __nla_validate_parse: 29 callbacks suppressed [ 439.001077][T16580] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2773'. [ 439.058493][ T9691] net_ratelimit: 27 callbacks suppressed [ 439.058515][ T9691] bond6: (slave syz_tun): failed to get link speed/duplex [ 439.196205][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 439.306427][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 439.333813][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2777'. [ 439.410093][T16592] RDS: rds_bind could not find a transport for fe80::a8, load rds_tcp or rds_rdma? [ 439.425851][T16597] ip_tables: iptables: counters copy to user failed while replacing table [ 439.436822][ T9691] bond6: (slave syz_tun): failed to get link speed/duplex [ 439.559691][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 439.677650][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 439.816798][ T9691] bond6: (slave syz_tun): failed to get link speed/duplex [ 439.867725][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2781'. [ 439.946713][ T7847] bond6: (slave syz_tun): failed to get link speed/duplex [ 440.061866][T16625] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.069285][T16625] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.078846][T16625] bridge0: entered allmulticast mode [ 440.084976][T16627] netlink: 'syz.2.2786': attribute type 21 has an invalid length. [ 440.100846][T16627] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2786'. [ 440.114215][T16628] sctp: [Deprecated]: syz.4.2784 (pid 16628) Use of int in maxseg socket option. [ 440.114215][T16628] Use struct sctp_assoc_value instead [ 440.129450][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 440.140357][T16630] netlink: 'syz.2.2786': attribute type 21 has an invalid length. [ 440.181275][T16630] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2786'. [ 440.234815][T16634] bridge_slave_1: left allmulticast mode [ 440.263940][T16634] bridge_slave_1: left promiscuous mode [ 440.292961][T16634] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.648898][T16634] bridge_slave_0: left allmulticast mode [ 440.686807][T16634] bridge_slave_0: left promiscuous mode [ 440.757063][T16634] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.031991][T16634] team0: Port device bridge0 removed [ 441.088969][T16672] netlink: 'syz.1.2790': attribute type 3 has an invalid length. [ 441.658471][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 442.019568][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 442.116922][T16716] lo speed is unknown, defaulting to 1000 [ 442.634601][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2806'. [ 442.644882][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2806'. [ 442.977870][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'. [ 443.419840][T16786] bridge39: port 1(veth8) entered blocking state [ 443.429873][T16786] bridge39: port 1(veth8) entered disabled state [ 443.439625][T16786] veth8: entered allmulticast mode [ 443.452808][T16786] veth8: entered promiscuous mode [ 443.495492][T16791] bridge39: port 2(veth10) entered blocking state [ 443.507679][T16791] bridge39: port 2(veth10) entered disabled state [ 443.515897][T16791] veth10: entered allmulticast mode [ 443.524463][T16791] veth10: entered promiscuous mode [ 443.761424][T16807] netlink: 'syz.1.2828': attribute type 11 has an invalid length. [ 444.130477][T16820] bond14: option fail_over_mac: invalid value (127) [ 444.141026][T16820] bond14 (unregistering): Released all slaves [ 444.202944][T16825] SET target dimension over the limit! [ 444.262801][ T9705] net_ratelimit: 21 callbacks suppressed [ 444.262822][ T9705] bond6: (slave syz_tun): failed to get link speed/duplex [ 444.368963][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 444.389364][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 444.398270][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 444.408828][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 444.417918][ T9705] bond6: (slave syz_tun): failed to get link speed/duplex [ 444.432706][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.517067][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 444.524703][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 444.533603][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 444.546239][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 444.548826][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 444.564895][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.714957][T16839] __nla_validate_parse: 4 callbacks suppressed [ 444.714976][T16839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2834'. [ 444.787460][ T12] bond6: (slave syz_tun): failed to get link speed/duplex [ 444.916797][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 444.975052][T16848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.037244][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 445.743116][ T9705] bond6: (slave syz_tun): failed to get link speed/duplex [ 445.866475][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 445.930253][T16871] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2845'. [ 445.984547][T16877] ip6t_srh: unknown srh invflags 4000 [ 446.000280][T16826] lo speed is unknown, defaulting to 1000 [ 446.011825][T16874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2844'. [ 446.048832][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 446.085601][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.094180][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.225836][T16885] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.253953][T16889] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 446.281179][T16889] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2850'. [ 446.303742][T16885] bridge_slave_1: left allmulticast mode [ 446.318782][T16885] bridge_slave_1: left promiscuous mode [ 446.341802][T16885] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.479447][T16885] bond0: (slave 30ì): Releasing backup interface [ 446.532571][T16885] bond0: (slave bond_slave_1): Releasing backup interface [ 446.604876][T16885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 446.637451][ T50] Bluetooth: hci5: command tx timeout [ 446.737014][ T9705] bond6: (slave syz_tun): failed to get link speed/duplex [ 446.787604][T16912] syzkaller0: entered promiscuous mode [ 446.818099][T16912] syzkaller0: entered allmulticast mode [ 447.057308][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'. [ 447.078032][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'. [ 447.087894][T16936] netlink: 'syz.2.2858': attribute type 15 has an invalid length. [ 447.140561][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2858'. [ 447.154043][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'. [ 447.163369][T16936] netlink: 'syz.2.2858': attribute type 15 has an invalid length. [ 447.234793][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2861'. [ 447.256817][ T9691] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 447.272738][ T9691] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 60387 - 0 [ 447.317168][ T9691] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 447.342282][ T9691] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 60387 - 0 [ 447.536647][ T57] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 447.572666][ T57] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 60387 - 0 [ 447.609305][ T57] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 447.652672][ T57] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 60387 - 0 [ 447.728454][T16958] bond18: option packets_per_slave: invalid value (875837489) [ 447.741456][T16958] bond18: option packets_per_slave: allowed values 0 - 65535 [ 447.777663][T16958] bond18 (unregistering): Released all slaves [ 447.888819][T16959] bond18: option packets_per_slave: invalid value (875837489) [ 447.906130][T16959] bond18: option packets_per_slave: allowed values 0 - 65535 [ 447.931433][T16959] bond18 (unregistering): Released all slaves [ 448.262364][T16978] netlink: 'syz.2.2870': attribute type 3 has an invalid length. [ 448.291061][T16826] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.299985][T16826] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.307751][T16826] bridge_slave_0: entered allmulticast mode [ 448.316834][T16826] bridge_slave_0: entered promiscuous mode [ 448.331232][T16826] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.338993][T16826] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.348304][T16826] bridge_slave_1: entered allmulticast mode [ 448.358874][T16826] bridge_slave_1: entered promiscuous mode [ 448.406565][T15452] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 448.421911][T15452] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.440297][T16981] bond0: Unable to set down delay as MII monitoring is disabled [ 448.491259][T16826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.514666][T16826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.524787][T15452] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 448.636730][T16826] team0: Port device team_slave_0 added [ 448.655196][T16826] team0: Port device team_slave_1 added [ 448.717169][ T50] Bluetooth: hci5: command tx timeout [ 448.941090][T16988] bond6: (slave bond0): Releasing active interface [ 448.976488][T15452] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.995850][T16988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.059643][T16988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.074102][T16988] bond0 (unregistering): Released all slaves [ 449.124698][T16826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.151029][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.211437][T16826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.254087][T16826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.279901][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.327254][T16826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.483807][T16826] hsr_slave_0: entered promiscuous mode [ 449.494031][T16826] hsr_slave_1: entered promiscuous mode [ 449.503244][T16826] debugfs: 'hsr0' already exists in 'hsr' [ 449.511121][T16826] Cannot create hsr debugfs directory [ 449.696190][ T57] net_ratelimit: 10 callbacks suppressed [ 449.696210][ T57] bond6: (slave syz_tun): failed to get link speed/duplex [ 449.748836][T17015] SET target dimension over the limit! [ 449.777559][T17015] netlink: 'syz.1.2880': attribute type 1 has an invalid length. [ 449.795259][T17015] netlink: 'syz.1.2880': attribute type 2 has an invalid length. [ 449.849976][T17015] __nla_validate_parse: 4 callbacks suppressed [ 449.849996][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 449.890482][T17015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2880'. [ 449.924725][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 449.988175][T17026] netlink: 'syz.0.2881': attribute type 3 has an invalid length. [ 450.005731][T17015] netlink: 'syz.1.2880': attribute type 5 has an invalid length. [ 450.053759][T17026] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2881'. [ 450.076419][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 450.132371][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2883'. [ 450.244616][T17031] bond14: entered promiscuous mode [ 450.264889][T17031] 8021q: adding VLAN 0 to HW filter on device bond14 [ 450.337150][T17031] 8021q: adding VLAN 0 to HW filter on device bond14 [ 450.345709][T17031] bond14: (slave sit4): The slave device specified does not support setting the MAC address [ 450.364553][T17031] bond14: (slave sit4): Error -95 calling set_mac_address [ 450.537642][ T12] bond6: (slave syz_tun): failed to get link speed/duplex [ 450.678675][T17055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2887'. [ 450.801520][ T50] Bluetooth: hci5: command tx timeout [ 450.987640][ T9705] bond6: (slave syz_tun): failed to get link speed/duplex [ 451.155689][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2892'. [ 451.236432][ T57] bond6: (slave syz_tun): failed to get link speed/duplex [ 451.366666][ T9705] bond6: (slave syz_tun): failed to get link speed/duplex [ 451.506610][ T12] bond6: (slave syz_tun): failed to get link speed/duplex [ 451.596239][T17096] netlink: 'syz.1.2898': attribute type 11 has an invalid length. [ 451.633936][T17098] IPVS: length: 35 != 43032 [ 451.693319][T16826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 451.705686][T16826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.849705][T17100] veth0_vlan: left promiscuous mode [ 451.883165][T17100] veth0_vlan: entered promiscuous mode [ 451.919222][T17100] veth1_macvtap: left promiscuous mode [ 451.926432][T17100] veth0_macvtap: left promiscuous mode [ 451.933448][T17100] veth0_macvtap: entered promiscuous mode [ 451.941015][T17100] veth1_macvtap: entered promiscuous mode [ 451.974159][T17100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.985127][T17100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.995006][T17100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.005177][T17100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.017225][T17100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.032881][T17100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.091109][T17100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.115151][T17100] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 452.137790][T17100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 452.163150][T17100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.172450][T17100] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 452.195089][T16826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 452.225052][T16826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.253144][T16826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 452.270768][T16826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.326301][ T9705] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.336329][ T9705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.345269][ T9705] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.355323][ T9705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.366989][T16826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 452.380914][T16826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.389756][T17111] ip6_vti0: left promiscuous mode [ 452.482462][T17124] bond9: entered allmulticast mode [ 452.565010][T17137] netlink: 5232 bytes leftover after parsing attributes in process `syz.0.2906'. [ 452.769166][ T9705] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.809826][ T9705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.843364][ T9705] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.876696][ T50] Bluetooth: hci5: command tx timeout [ 452.890868][ T9705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.926819][ T9682] bond6: (slave syz_tun): failed to get link speed/duplex [ 452.943002][T17154] netlink: 'syz.2.2911': attribute type 1 has an invalid length. [ 453.043619][T17154] 8021q: adding VLAN 0 to HW filter on device bond15 [ 453.142109][ T9682] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 453.156930][ T9682] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 453.190846][ T9682] bond2: (slave veth5): making interface the new active one [ 453.242953][ T9682] bond2: active interface up! [ 453.319355][T17154] bond15: (slave geneve3): making interface the new active one [ 453.329326][T17154] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 453.347612][ T9705] bond6: (slave syz_tun): failed to get link speed/duplex [ 453.388492][ T6151] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.419715][ T6151] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.493623][T16826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.549063][T16826] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.572974][T17181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2918'. [ 453.592578][ T9682] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.599839][ T9682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.649493][T17182] netlink: 'syz.2.2919': attribute type 1 has an invalid length. [ 453.692080][T17178] syzkaller0: entered promiscuous mode [ 453.709177][T17178] syzkaller0: entered allmulticast mode [ 453.772594][ T9705] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.779936][ T9705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.826558][ T9705] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.941118][T17190] netlink: 'syz.1.2920': attribute type 11 has an invalid length. [ 454.053715][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 454.451027][T17196] netlink: 'syz.3.2922': attribute type 7 has an invalid length. [ 454.460578][T17196] netlink: 'syz.3.2922': attribute type 3 has an invalid length. [ 454.463108][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.484988][T17196] block nbd3: not configured, cannot reconfigure [ 454.524177][T17194] netlink: 'syz.2.2921': attribute type 1 has an invalid length. [ 454.737968][ T13] net_ratelimit: 5 callbacks suppressed [ 454.737988][ T13] bond6: (slave syz_tun): failed to get link speed/duplex [ 454.888284][T17215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.906316][ T9705] bond6: (slave syz_tun): failed to get link speed/duplex [ 454.952796][T17215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.992414][T17215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.008662][T17215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.020741][T17215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.040814][T17215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.069464][T17215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.093175][T17215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.768040][T17250] netlink: 'syz.2.2932': attribute type 1 has an invalid length. [ 455.768968][T17252] __nla_validate_parse: 5 callbacks suppressed [ 455.768985][T17252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2931'. [ 455.953603][T17258] 8021q: adding VLAN 0 to HW filter on device bond17 [ 455.975837][T17258] bond16: (slave bond17): making interface the new active one [ 456.043440][T17258] bond16: (slave bond17): Enslaving as an active interface with an up link [ 456.070158][T17254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2932'. [ 456.111859][T16826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.135706][T17254] 8021q: adding VLAN 0 to HW filter on device bond16 [ 456.381008][ T189] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 456.429497][T17274] syzkaller1: entered promiscuous mode [ 456.448255][T17274] syzkaller1: entered allmulticast mode [ 456.466808][T17274] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2938'. [ 456.540348][T17277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2935'. [ 456.576607][ T6151] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 456.666802][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'. [ 456.704043][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2939'. [ 456.899472][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 456.999971][T16826] veth0_vlan: entered promiscuous mode [ 457.051821][T16826] veth1_vlan: entered promiscuous mode [ 457.149641][T17309] syzkaller0: entered promiscuous mode [ 457.158259][T17309] syzkaller0: entered allmulticast mode [ 457.182466][T17309] tipc: Enabled bearer , priority 0 [ 457.196449][T16826] veth0_macvtap: entered promiscuous mode [ 457.220113][T16826] veth1_macvtap: entered promiscuous mode [ 457.294007][T17312] tipc: Resetting bearer [ 457.333211][T17312] tipc: Disabling bearer [ 457.354610][T16826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.368745][T17322] netdevsim netdevsim3 €Â: renamed from netdevsim0 [ 457.427328][T16826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.438270][T15447] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 457.508286][ T9682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.605927][ T9682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 457.655158][ T9682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 457.737766][ T9682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.846533][ T6151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.957045][T17339] netlink: 5020 bytes leftover after parsing attributes in process `syz.2.2952'. [ 457.985013][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.006436][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.036201][ T9705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.065754][ T9682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.075022][ T9682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.172668][ T8587] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 458.305462][T17346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2831'. [ 458.413766][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2831'. [ 459.590600][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.609961][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.620352][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.632300][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.644418][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.816534][ T6151] net_ratelimit: 37 callbacks suppressed [ 459.816559][ T6151] bond6: (slave syz_tun): failed to get link speed/duplex [ 460.035604][ T5610] bond6: (slave syz_tun): Removing an active aggregator [ 460.051931][ T5610] bond6: (slave syz_tun): Releasing backup interface [ 460.084168][T17395] xt_l2tp: unknown flags: 51 [ 460.810495][T17372] lo speed is unknown, defaulting to 1000 [ 460.932819][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'. [ 461.208435][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2984'. [ 461.756600][ T50] Bluetooth: hci3: command tx timeout [ 461.832138][T17372] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.846222][T17372] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.867464][T17372] bridge_slave_0: entered allmulticast mode [ 461.875520][T17372] bridge_slave_0: entered promiscuous mode [ 461.903167][T17499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2991'. [ 461.996560][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 462.042725][T17372] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.056873][T17372] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.082414][T17372] bridge_slave_1: entered allmulticast mode [ 462.098082][T17372] bridge_slave_1: entered promiscuous mode [ 462.182944][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2994'. [ 462.199586][T17372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.229664][T17372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.319796][T17372] team0: Port device team_slave_0 added [ 462.339012][T17372] team0: Port device team_slave_1 added [ 462.463652][T17372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.483307][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.531532][T17372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.573489][T17372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.603971][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.652556][T17372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.747370][T17523] netlink: 'syz.0.2997': attribute type 13 has an invalid length. [ 462.812890][T17372] hsr_slave_0: entered promiscuous mode [ 462.824823][T17372] hsr_slave_1: entered promiscuous mode [ 462.842186][T17372] debugfs: 'hsr0' already exists in 'hsr' [ 462.849586][T17372] Cannot create hsr debugfs directory [ 463.106454][T15447] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 463.373299][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'. [ 463.440034][T17551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3010'. [ 463.464552][T17551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3010'. [ 463.509559][T17554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3010'. [ 463.536769][T17552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3006'. [ 463.551944][T17554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3010'. [ 463.667170][T15452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 463.839082][ T50] Bluetooth: hci3: command tx timeout [ 463.871234][T17372] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 464.266531][T17372] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 464.523342][T17580] syzkaller0: entered promiscuous mode [ 464.529666][T17580] syzkaller0: entered allmulticast mode [ 464.562436][T17372] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 464.583703][T17589] syzkaller0: left promiscuous mode [ 464.590400][T17589] syzkaller0: left allmulticast mode [ 464.663728][T17605] netlink: 'syz.0.3023': attribute type 1 has an invalid length. [ 465.099084][T17620] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 465.918958][ T50] Bluetooth: hci3: command tx timeout [ 467.030855][T17605] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 467.049435][T17610] veth19: entered allmulticast mode [ 467.077548][T17613] bond4: (slave veth0_to_bond): Releasing active interface [ 467.091676][T17618] __nla_validate_parse: 1 callbacks suppressed [ 467.091697][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 467.240924][T17372] netdevsim netdevsim3 €Â (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 467.374661][T17643] netlink: 'syz.4.3030': attribute type 2 has an invalid length. [ 467.504690][T17636] lo speed is unknown, defaulting to 1000 [ 467.628860][T17652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3033'. [ 467.649026][T17651] openvswitch: netlink: Key type 226 is out of range max 32 [ 467.804574][T17649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3033'. [ 467.845908][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3033'. [ 467.996674][ T50] Bluetooth: hci3: command tx timeout [ 468.069889][T17667] sctp: [Deprecated]: syz.2.3037 (pid 17667) Use of int in max_burst socket option. [ 468.069889][T17667] Use struct sctp_assoc_value instead [ 468.151279][T17665] syzkaller0: entered promiscuous mode [ 468.163323][T17665] syzkaller0: entered allmulticast mode [ 468.182390][T17372] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.210420][T17372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.220111][T17372] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.242358][T17372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.318276][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 468.345049][T17372] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.373567][T17372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.410634][T17372] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.430137][T17372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.588483][T17686] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 468.597073][T17686] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 468.665803][T17686] tipc: Enabled bearer , priority 20 [ 468.726380][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 468.735455][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 468.802398][T17372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.889338][T17372] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.904923][T17696] sctp: [Deprecated]: syz.4.3045 (pid 17696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.904923][T17696] Use struct sctp_sack_info instead [ 468.933455][T17694] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 468.942784][T17694] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 468.957746][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.965124][ T9705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.967494][ T1507] block nbd0: Possible stuck request ffff888026757000: control (read@0,1024B). Runtime 120 seconds [ 468.985084][ T1507] block nbd0: Possible stuck request ffff8880267571c0: control (read@1024,1024B). Runtime 120 seconds [ 468.996310][ T1507] block nbd0: Possible stuck request ffff888026757380: control (read@2048,1024B). Runtime 120 seconds [ 468.997424][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.007401][ T1507] block nbd0: Possible stuck request ffff888026757540: control (read@3072,1024B). Runtime 120 seconds [ 469.024914][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 469.062224][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.069535][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.231712][T17704] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 469.271682][T17704] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 469.526199][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.532748][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 469.669623][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 469.701309][T17731] Cannot find del_set index 3 as target [ 469.801645][ T30] audit: type=1804 audit(1787812164.450:10): pid=17739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3058" name="/newroot/602/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0 [ 469.856842][ T30] audit: type=1800 audit(1787812164.450:11): pid=17737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3058" name="cgroup.controllers" dev="tmpfs" ino=3100 res=0 errno=0 [ 469.889448][ T30] audit: type=1800 audit(1787812164.450:12): pid=17739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3058" name="cgroup.controllers" dev="tmpfs" ino=3100 res=0 errno=0 [ 469.911995][T17742] lo: Caught tx_queue_len zero misconfig [ 469.931199][T17742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3056'. [ 470.061661][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'. [ 470.203558][T17751] lo speed is unknown, defaulting to 1000 [ 470.236794][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 470.556332][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 470.727018][T17372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.094493][T17372] veth0_vlan: entered promiscuous mode [ 471.254696][T17372] veth1_vlan: entered promiscuous mode [ 471.349250][T17372] veth0_macvtap: entered promiscuous mode [ 471.364369][T17372] veth1_macvtap: entered promiscuous mode [ 471.397531][T17372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.425578][T17372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.697942][ T9682] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.736840][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.803075][ T9695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.811984][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.838587][ T9695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.847172][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.075925][T17820] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 472.102792][ T9695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.121008][ T9695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.151670][T17820] tipc: Started in network mode [ 472.171308][T17820] tipc: Node identity ac14140f, cluster identity 4711 [ 472.188292][T17820] tipc: New replicast peer: 255.255.255.255 [ 472.195730][T17820] tipc: Enabled bearer , priority 10 [ 472.205071][T17823] netlink: 'syz.4.3073': attribute type 10 has an invalid length. [ 472.270008][T17823] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.340442][T17823] bond0: (slave team0): Enslaving as an active interface with an up link [ 472.968851][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.985430][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.995661][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.004762][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.013381][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 473.161146][T17864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3086'. [ 473.209763][T17866] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3087'. [ 473.308786][ T24] tipc: Node number set to 2886997007 [ 473.360657][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 473.589690][T17887] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3092'. [ 473.622142][T17883] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 473.676200][ C1] net_ratelimit: 5 callbacks suppressed [ 473.676226][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 473.688413][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 474.164803][T17909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3097'. [ 474.189057][T17857] lo speed is unknown, defaulting to 1000 [ 474.258442][T17914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3099'. [ 474.267762][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3099'. [ 474.326608][T17913] syzkaller0: entered promiscuous mode [ 474.335703][T17913] syzkaller0: entered allmulticast mode [ 474.364465][T17913] tipc: Enabled bearer , priority 0 [ 474.383192][T17913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3098'. [ 474.416606][T17913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3098'. [ 474.509127][T17913] tipc: Resetting bearer [ 474.530205][T17911] tipc: Resetting bearer [ 474.588825][T17911] tipc: Disabling bearer [ 474.677953][T17925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.716709][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 474.723241][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 474.807748][T17927] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3102'. [ 474.926568][T17939] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 474.998708][T17939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.009277][T17857] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.018080][T17857] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.025754][T17857] bridge_slave_0: entered allmulticast mode [ 475.046485][T17857] bridge_slave_0: entered promiscuous mode [ 475.055975][T17857] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.063549][T17857] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.068832][T17930] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 475.072114][T17857] bridge_slave_1: entered allmulticast mode [ 475.091965][T17857] bridge_slave_1: entered promiscuous mode [ 475.130439][ T50] Bluetooth: hci4: command tx timeout [ 475.203638][T17944] veth21: entered allmulticast mode [ 475.231805][T17944] bond0: (slave veth21): Enslaving as an active interface with an up link [ 475.275527][T17939] bond0 (unregistering): (slave veth21): Releasing backup interface [ 475.306873][T17952] ip_tables: iptables: counters copy to user failed while replacing table [ 475.311367][T17939] bond0 (unregistering): Released all slaves [ 475.364483][T17952] ip_tables: iptables: counters copy to user failed while replacing table [ 475.441748][T17857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.465409][T17857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.632300][T17857] team0: Port device team_slave_0 added [ 475.659027][T17857] team0: Port device team_slave_1 added [ 475.756384][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 475.762934][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 475.784966][T17857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.803256][T17857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.863628][T17857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.878175][T17857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.885281][T17857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.912345][T17857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.066750][T17857] hsr_slave_0: entered promiscuous mode [ 476.078926][T17857] hsr_slave_1: entered promiscuous mode [ 476.097439][T17857] debugfs: 'hsr0' already exists in 'hsr' [ 476.114224][T17857] Cannot create hsr debugfs directory [ 476.135656][T17982] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 476.167046][T17982] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 476.179560][T17982] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 476.531341][T17995] netlink: 'syz.0.3118': attribute type 2 has an invalid length. [ 476.625109][T17995] : entered promiscuous mode [ 476.630867][T17999] netlink: 'syz.3.3121': attribute type 12 has an invalid length. [ 476.690270][T18002] netlink: 'syz.4.3120': attribute type 11 has an invalid length. [ 476.702085][T17857] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 476.743934][T17857] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 476.772280][T17857] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.794604][T18005] xt_connbytes: Forcing CT accounting to be enabled [ 476.800477][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 476.844225][T18000] pimreg: entered allmulticast mode [ 476.908355][T18008] ovs-s: entered promiscuous mode [ 476.940021][T18009] openvswitch: ovs-s: Dropping previously announced user features [ 476.983376][T17857] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 477.006183][T17857] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 477.029281][T17857] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.134923][T18021] lo speed is unknown, defaulting to 1000 [ 477.145394][T17857] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 477.161098][T17857] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 477.172786][T17857] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.196841][ T50] Bluetooth: hci4: command tx timeout [ 477.274601][T17857] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 477.295406][T17857] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0 [ 477.311630][T17857] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.360884][ T5618] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 477.521555][T18031] syzkaller0: entered promiscuous mode [ 477.541689][T18031] syzkaller0: entered allmulticast mode [ 478.000907][T17857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.253694][T18047] __nla_validate_parse: 11 callbacks suppressed [ 478.253716][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'. [ 478.305064][T17857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.329946][T17857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.377639][T17857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.612134][T17857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.644699][T17857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.680481][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3141'. [ 478.714145][T17857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 478.740879][T17857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.876160][ C1] net_ratelimit: 3 callbacks suppressed [ 478.876180][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 478.888403][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 478.933993][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'. [ 479.004891][T18096] ovs-system: left promiscuous mode [ 479.246679][T18113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3146'. [ 479.277087][ T5618] Bluetooth: hci4: command tx timeout [ 479.421649][T17857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.430762][T18122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3149'. [ 479.472627][T17857] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.526672][T18124] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3148'. [ 479.559685][T18129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3149'. [ 479.582240][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.589523][ T9705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.709137][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.716396][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.723009][T18138] netlink: Conntrack attr has 8 unknown bytes [ 479.731587][ T57] IPVS: starting estimator thread 0... [ 479.749033][T18138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.847481][T18139] IPVS: using max 26 ests per chain, 62400 per kthread [ 479.916250][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.922772][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 480.080373][T18156] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3156'. [ 480.179395][T18157] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 480.205738][T18157] syzkaller1: linktype set to 825 [ 480.401136][T18165] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3158'. [ 480.956195][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 480.962777][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 481.069719][T17857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.116268][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.129102][T18204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3165'. [ 481.228869][T17857] veth0_vlan: entered promiscuous mode [ 481.260423][T17857] veth1_vlan: entered promiscuous mode [ 481.338244][T17857] veth0_macvtap: entered promiscuous mode [ 481.358748][ T5618] Bluetooth: hci4: command tx timeout [ 481.381781][T17857] veth1_macvtap: entered promiscuous mode [ 481.412429][T17857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.451221][T17857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.556605][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.611666][T18215] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 481.619281][T18215] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 481.631295][T18215] netlink: 'syz.1.3167': attribute type 2 has an invalid length. [ 481.636830][ T9682] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.658101][ T9682] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.669952][ T9682] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.997951][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 482.004545][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.251303][ T4976] udevd[4976]: worker [10040] /devices/virtual/block/nbd0 is taking a long time [ 484.076471][ C1] net_ratelimit: 2 callbacks suppressed [ 484.076488][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.088568][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 485.116180][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 485.122656][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 486.156244][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 486.162707][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 486.236792][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 487.196369][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 487.202865][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 488.236358][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 488.242956][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 489.276197][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 489.282700][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 490.316254][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 490.322762][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 491.358893][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 491.365384][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 492.396298][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.402818][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 493.436293][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 493.442754][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 494.476516][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 494.482997][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 495.279943][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.288260][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.297308][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.308547][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.316816][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 495.516378][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 495.522873][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 495.601058][T18292] lo speed is unknown, defaulting to 1000 [ 495.843369][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.850784][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.858457][T18292] bridge_slave_0: entered allmulticast mode [ 495.865736][T18292] bridge_slave_0: entered promiscuous mode [ 495.874815][T18292] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.882752][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.890331][T18292] bridge_slave_1: entered allmulticast mode [ 495.898113][T18292] bridge_slave_1: entered promiscuous mode [ 495.930551][T18292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.942528][T18292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.974951][T18292] team0: Port device team_slave_0 added [ 495.983326][T18292] team0: Port device team_slave_1 added [ 496.014077][T18292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.021127][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.047168][T18292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.059724][T18292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.066770][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.094277][T18292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.141945][T18292] hsr_slave_0: entered promiscuous mode [ 496.149136][T18292] hsr_slave_1: entered promiscuous mode [ 496.155320][T18292] debugfs: 'hsr0' already exists in 'hsr' [ 496.161653][T18292] Cannot create hsr debugfs directory [ 496.449472][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 496.467889][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 496.481614][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 496.493827][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 496.502886][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 496.558110][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 496.564655][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 496.581282][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 496.593147][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 496.605294][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 496.618566][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 496.633371][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 497.002532][T18311] lo speed is unknown, defaulting to 1000 [ 497.081422][T18313] lo speed is unknown, defaulting to 1000 [ 497.356206][ T5618] Bluetooth: hci1: command tx timeout [ 497.479279][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 497.500943][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 497.510366][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 497.521097][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 497.532849][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 497.596322][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 497.602878][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 497.669088][T18311] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.677882][T18311] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.685115][T18311] bridge_slave_0: entered allmulticast mode [ 497.692724][T18311] bridge_slave_0: entered promiscuous mode [ 497.721069][T18311] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.729707][T18311] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.737583][T18311] bridge_slave_1: entered allmulticast mode [ 497.745559][T18311] bridge_slave_1: entered promiscuous mode [ 497.812259][T18313] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.819891][T18313] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.827472][T18313] bridge_slave_0: entered allmulticast mode [ 497.834814][T18313] bridge_slave_0: entered promiscuous mode [ 497.846492][T18311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.855907][T18313] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.864913][T18313] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.873032][T18313] bridge_slave_1: entered allmulticast mode [ 497.880949][T18313] bridge_slave_1: entered promiscuous mode [ 497.893065][T18311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.971087][T18313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.982809][T18311] team0: Port device team_slave_0 added [ 497.992442][T18313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.013474][T18311] team0: Port device team_slave_1 added [ 498.088278][T18311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.095377][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.123187][T18311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.138729][T18313] team0: Port device team_slave_0 added [ 498.145191][T18311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.153874][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.182360][T18311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.195758][T18313] team0: Port device team_slave_1 added [ 498.238618][T18313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.245636][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.272321][T18313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.286416][T18313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.293453][T18313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.320060][T18313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.331866][T18340] lo speed is unknown, defaulting to 1000 [ 498.408172][T18311] hsr_slave_0: entered promiscuous mode [ 498.414736][T18311] hsr_slave_1: entered promiscuous mode [ 498.421279][T18311] debugfs: 'hsr0' already exists in 'hsr' [ 498.427123][T18311] Cannot create hsr debugfs directory [ 498.472909][T18313] hsr_slave_0: entered promiscuous mode [ 498.479787][T18313] hsr_slave_1: entered promiscuous mode [ 498.486488][T18313] debugfs: 'hsr0' already exists in 'hsr' [ 498.492317][T18313] Cannot create hsr debugfs directory [ 498.557559][ T50] Bluetooth: hci6: command tx timeout [ 498.636550][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 498.643008][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 498.727777][ T50] Bluetooth: hci7: command tx timeout [ 499.041375][ T1507] block nbd0: Possible stuck request ffff888026757000: control (read@0,1024B). Runtime 150 seconds [ 499.052574][ T1507] block nbd0: Possible stuck request ffff8880267571c0: control (read@1024,1024B). Runtime 150 seconds [ 499.065091][ T1507] block nbd0: Possible stuck request ffff888026757380: control (read@2048,1024B). Runtime 150 seconds [ 499.077485][ T1507] block nbd0: Possible stuck request ffff888026757540: control (read@3072,1024B). Runtime 150 seconds [ 499.092247][T18340] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.099794][T18340] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.107523][T18340] bridge_slave_0: entered allmulticast mode [ 499.114765][T18340] bridge_slave_0: entered promiscuous mode [ 499.125043][T18340] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.132308][T18340] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.140190][T18340] bridge_slave_1: entered allmulticast mode [ 499.148404][T18340] bridge_slave_1: entered promiscuous mode [ 499.202382][T18340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.215223][T18340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.249892][T18340] team0: Port device team_slave_0 added [ 499.258524][T18340] team0: Port device team_slave_1 added [ 499.287591][T18340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.294611][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.321262][T18340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.333612][T18340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.341503][T18340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.369156][T18340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.416501][T18340] hsr_slave_0: entered promiscuous mode [ 499.422963][T18340] hsr_slave_1: entered promiscuous mode [ 499.429820][T18340] debugfs: 'hsr0' already exists in 'hsr' [ 499.435623][T18340] Cannot create hsr debugfs directory [ 499.441215][ T50] Bluetooth: hci1: command tx timeout [ 499.596350][ T50] Bluetooth: hci8: command tx timeout [ 499.677590][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 499.684106][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 500.636317][ T50] Bluetooth: hci6: command tx timeout [ 500.716367][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 500.722867][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 500.796999][ T50] Bluetooth: hci7: command tx timeout [ 501.516248][ T50] Bluetooth: hci1: command tx timeout [ 501.676638][ T50] Bluetooth: hci8: command tx timeout [ 501.766280][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 501.772715][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 502.716761][ T50] Bluetooth: hci6: command tx timeout [ 502.806317][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 502.812780][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 502.877288][ T50] Bluetooth: hci7: command tx timeout [ 503.596340][ T50] Bluetooth: hci1: command tx timeout [ 503.756735][ T50] Bluetooth: hci8: command tx timeout [ 503.836341][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 503.842807][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 504.796452][ T50] Bluetooth: hci6: command tx timeout [ 504.876496][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 504.882961][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 504.956998][ T50] Bluetooth: hci7: command tx timeout [ 505.836815][ T50] Bluetooth: hci8: command tx timeout [ 505.916276][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 505.922808][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 506.956475][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 506.963122][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 507.996981][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.003486][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.036380][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.042861][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 510.076447][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 510.082891][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 511.116378][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 511.122867][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 512.156310][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 512.162778][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 513.196427][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 513.202881][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 514.236409][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 514.242882][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 515.276404][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 515.282887][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 516.316635][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 516.323216][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 517.356420][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 517.362920][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 518.236413][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 518.396396][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 518.402959][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 519.436357][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 519.442905][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 520.476375][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 520.482856][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 521.516370][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 521.522837][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 522.556326][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 522.562799][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 523.596371][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 523.602931][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 524.637057][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 524.643672][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 525.676287][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 525.682774][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 526.716307][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 526.722870][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 527.756300][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 527.762992][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 528.796191][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 528.802759][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.121389][ T1507] block nbd0: Possible stuck request ffff888026757000: control (read@0,1024B). Runtime 180 seconds [ 529.132319][ T1507] block nbd0: Possible stuck request ffff8880267571c0: control (read@1024,1024B). Runtime 180 seconds [ 529.143550][ T1507] block nbd0: Possible stuck request ffff888026757380: control (read@2048,1024B). Runtime 180 seconds [ 529.154829][ T1507] block nbd0: Possible stuck request ffff888026757540: control (read@3072,1024B). Runtime 180 seconds [ 529.655676][ T4976] udevd[4976]: worker [10040] /devices/virtual/block/nbd0 timeout; kill it [ 529.667866][ T4976] udevd[4976]: seq 17191 '/devices/virtual/block/nbd0' killed [ 529.836242][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.842720][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 530.876187][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 530.882673][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.916278][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 531.922753][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 532.318224][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 532.813020][T18370] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 532.823126][T18370] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 532.831953][T18370] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 532.842084][T18370] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 532.853135][T18370] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 532.956587][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 532.963188][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 533.151641][T18368] lo speed is unknown, defaulting to 1000 [ 533.384597][T18368] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.391997][T18368] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.399501][T18368] bridge_slave_0: entered allmulticast mode [ 533.407417][T18368] bridge_slave_0: entered promiscuous mode [ 533.415647][T18368] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.423108][T18368] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.430510][T18368] bridge_slave_1: entered allmulticast mode [ 533.438302][T18368] bridge_slave_1: entered promiscuous mode [ 533.470158][T18368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.484796][T18368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.520773][T18368] team0: Port device team_slave_0 added [ 533.529384][T18368] team0: Port device team_slave_1 added [ 533.560875][T18368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.569228][T18368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.596392][T18368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.609237][T18368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.616687][T18368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.643300][T18368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.692869][T18368] hsr_slave_0: entered promiscuous mode [ 533.699866][T18368] hsr_slave_1: entered promiscuous mode [ 533.706719][T18368] debugfs: 'hsr0' already exists in 'hsr' [ 533.712532][T18368] Cannot create hsr debugfs directory [ 533.864587][T18368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.972252][T18368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.996555][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 534.003049][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 534.052819][T18368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.133810][T18368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.956307][T18370] Bluetooth: hci9: command tx timeout [ 535.036203][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 535.042679][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.086390][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 536.092839][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 537.036235][T18370] Bluetooth: hci9: command tx timeout [ 537.116314][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 537.122832][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 538.156271][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 538.162771][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 539.116489][T18370] Bluetooth: hci9: command tx timeout [ 539.196247][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 539.202813][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 540.236250][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 540.242898][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 541.196442][T18370] Bluetooth: hci9: command tx timeout [ 541.276472][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 541.283068][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 542.316236][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 542.322703][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 543.356276][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 543.362788][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 544.396293][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 544.402789][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 545.436182][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 545.443313][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 546.486225][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 546.492704][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 547.516227][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 547.522754][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 548.556215][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 548.562734][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 549.596338][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 549.602829][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 550.636390][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 550.643172][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 551.676197][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 551.682660][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 552.716226][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 552.722828][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 553.756515][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 553.763010][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 554.796218][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 554.802699][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 555.328615][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 555.339892][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 555.348033][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 555.363584][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 555.374682][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 555.657093][T18387] lo speed is unknown, defaulting to 1000 [ 555.836183][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 555.842682][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 555.905951][T18387] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.913593][T18387] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.921542][T18387] bridge_slave_0: entered allmulticast mode [ 555.929585][T18387] bridge_slave_0: entered promiscuous mode [ 555.938390][T18387] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.945639][T18387] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.953254][T18387] bridge_slave_1: entered allmulticast mode [ 555.960831][T18387] bridge_slave_1: entered promiscuous mode [ 555.995398][T18387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.009107][T18387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.041296][T18387] team0: Port device team_slave_0 added [ 556.049432][T18387] team0: Port device team_slave_1 added [ 556.077924][T18387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.084926][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.111296][T18387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.123481][T18387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.130900][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.156935][T18387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.203834][T18387] hsr_slave_0: entered promiscuous mode [ 556.210441][T18387] hsr_slave_1: entered promiscuous mode [ 556.217584][T18387] debugfs: 'hsr0' already exists in 'hsr' [ 556.223511][T18387] Cannot create hsr debugfs directory [ 556.406870][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 556.426870][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 556.435365][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 556.445695][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 556.454880][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 556.844323][T18405] lo speed is unknown, defaulting to 1000 [ 556.876196][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 556.882717][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 556.960120][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 556.975397][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 556.990685][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 557.000995][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 557.012892][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 557.396284][T18405] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.403728][T18405] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.411517][T18405] bridge_slave_0: entered allmulticast mode [ 557.420781][T18405] bridge_slave_0: entered promiscuous mode [ 557.430008][T18405] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.445276][T18405] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.453071][ T50] Bluetooth: hci10: command tx timeout [ 557.460905][T18405] bridge_slave_1: entered allmulticast mode [ 557.469909][T18405] bridge_slave_1: entered promiscuous mode [ 557.503583][T18405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.518600][T18405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.563331][T18405] team0: Port device team_slave_0 added [ 557.569221][T18416] lo speed is unknown, defaulting to 1000 [ 557.576177][T18405] team0: Port device team_slave_1 added [ 557.627917][T18405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.634905][T18405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.661600][T18405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.680322][T18405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.687580][T18405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.714469][T18405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.835183][T18405] hsr_slave_0: entered promiscuous mode [ 557.848847][T18405] hsr_slave_1: entered promiscuous mode [ 557.855406][T18405] debugfs: 'hsr0' already exists in 'hsr' [ 557.862667][T18405] Cannot create hsr debugfs directory [ 557.908249][T18370] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 557.919311][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 557.919406][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 557.942489][T18370] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 557.954323][T18370] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 557.962557][T18370] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 557.970470][T18370] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 558.404695][T18416] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.412313][T18416] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.421666][T18416] bridge_slave_0: entered allmulticast mode [ 558.430390][T18416] bridge_slave_0: entered promiscuous mode [ 558.442164][T18416] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.450384][T18416] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.458127][T18416] bridge_slave_1: entered allmulticast mode [ 558.466279][T18416] bridge_slave_1: entered promiscuous mode [ 558.515563][T18416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.535144][T18416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.557344][ T50] Bluetooth: hci11: command tx timeout [ 558.599422][T18416] team0: Port device team_slave_0 added [ 558.614814][T18416] team0: Port device team_slave_1 added [ 558.633940][T18436] lo speed is unknown, defaulting to 1000 [ 558.682851][T18416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.689989][T18416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.716596][T18416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.740006][T18416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.747586][T18416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.775441][T18416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.873655][T18416] hsr_slave_0: entered promiscuous mode [ 558.882357][T18416] hsr_slave_1: entered promiscuous mode [ 558.889187][T18416] debugfs: 'hsr0' already exists in 'hsr' [ 558.894979][T18416] Cannot create hsr debugfs directory [ 558.956203][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 558.962732][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 559.116386][ T50] Bluetooth: hci12: command tx timeout [ 559.196730][ T1507] block nbd0: Possible stuck request ffff888026757000: control (read@0,1024B). Runtime 210 seconds [ 559.207637][ T1507] block nbd0: Possible stuck request ffff8880267571c0: control (read@1024,1024B). Runtime 210 seconds [ 559.225445][ T1507] block nbd0: Possible stuck request ffff888026757380: control (read@2048,1024B). Runtime 210 seconds [ 559.238165][ T1507] block nbd0: Possible stuck request ffff888026757540: control (read@3072,1024B). Runtime 210 seconds [ 559.316525][T18436] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.323750][T18436] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.331948][T18436] bridge_slave_0: entered allmulticast mode [ 559.340187][T18436] bridge_slave_0: entered promiscuous mode [ 559.354325][T18436] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.362555][T18436] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.370259][T18436] bridge_slave_1: entered allmulticast mode [ 559.378430][T18436] bridge_slave_1: entered promiscuous mode [ 559.423619][T18436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.435915][T18436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.483550][T18436] team0: Port device team_slave_0 added [ 559.492841][T18436] team0: Port device team_slave_1 added [ 559.516581][ T50] Bluetooth: hci10: command tx timeout [ 559.530067][T18436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.537521][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.564530][T18436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.578266][T18436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.585263][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.612234][T18436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.677190][T18436] hsr_slave_0: entered promiscuous mode [ 559.684604][T18436] hsr_slave_1: entered promiscuous mode [ 559.694960][T18436] debugfs: 'hsr0' already exists in 'hsr' [ 559.701397][T18436] Cannot create hsr debugfs directory [ 559.996306][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 560.002780][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 560.076708][ T50] Bluetooth: hci13: command tx timeout [ 560.636550][ T50] Bluetooth: hci11: command tx timeout [ 561.036258][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 561.042743][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 561.196557][ T50] Bluetooth: hci12: command tx timeout [ 561.597071][ T50] Bluetooth: hci10: command tx timeout [ 562.076372][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 562.082845][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 562.156495][ T50] Bluetooth: hci13: command tx timeout [ 562.716429][ T50] Bluetooth: hci11: command tx timeout [ 563.116217][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 563.122765][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 563.276818][ T50] Bluetooth: hci12: command tx timeout [ 563.677272][T18370] Bluetooth: hci10: command tx timeout [ 564.156294][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 564.162827][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 564.237564][ T50] Bluetooth: hci13: command tx timeout [ 564.796411][ T50] Bluetooth: hci11: command tx timeout [ 565.196245][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 565.202834][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 565.356864][ T50] Bluetooth: hci12: command tx timeout [ 566.238623][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 566.245119][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 566.316755][ T50] Bluetooth: hci13: command tx timeout [ 567.276252][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 567.282781][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 568.316221][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 568.322760][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 569.356305][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 569.362828][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 570.240637][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 570.396214][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 570.402691][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 571.436538][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 571.442991][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 572.476323][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 572.482811][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.516290][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.522788][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 574.556552][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 574.563079][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 575.596446][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 575.602970][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 576.636483][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 576.642939][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 577.676315][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 577.682825][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 578.716290][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 578.722901][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 579.756389][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 579.762831][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 580.796452][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 580.802963][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 581.836553][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 581.842999][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 582.876304][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.882777][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 583.916404][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 583.923008][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 584.956401][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 584.962886][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 585.600203][T18370] Bluetooth: hci3: command 0x0406 tx timeout [ 585.996350][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 586.002917][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 587.036329][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 587.042812][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 588.076421][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 588.082862][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 588.639448][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 589.116419][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 589.122904][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 589.278332][ T1507] block nbd0: Possible stuck request ffff888026757000: control (read@0,1024B). Runtime 240 seconds [ 589.289273][ T1507] block nbd0: Possible stuck request ffff8880267571c0: control (read@1024,1024B). Runtime 240 seconds [ 589.300515][ T1507] block nbd0: Possible stuck request ffff888026757380: control (read@2048,1024B). Runtime 240 seconds [ 589.311643][ T1507] block nbd0: Possible stuck request ffff888026757540: control (read@3072,1024B). Runtime 240 seconds [ 590.156428][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 590.163017][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 591.196613][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 591.203118][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 592.236259][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 592.242760][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 593.276285][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 593.282780][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 593.379112][T18370] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 593.388295][T18370] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 593.396517][T18370] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 593.409309][T18370] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 593.419045][T18370] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 593.702506][T18464] lo speed is unknown, defaulting to 1000 [ 593.949284][T18464] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.956592][T18464] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.963970][T18464] bridge_slave_0: entered allmulticast mode [ 593.972291][T18464] bridge_slave_0: entered promiscuous mode [ 593.980709][T18464] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.988078][T18464] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.995260][T18464] bridge_slave_1: entered allmulticast mode [ 594.004632][T18464] bridge_slave_1: entered promiscuous mode [ 594.037019][T18464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.049433][T18464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.083770][T18464] team0: Port device team_slave_0 added [ 594.092240][T18464] team0: Port device team_slave_1 added [ 594.121804][T18464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.128917][T18464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.155267][T18464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.171448][T18464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.178935][T18464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.207024][T18464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.258851][T18464] hsr_slave_0: entered promiscuous mode [ 594.265348][T18464] hsr_slave_1: entered promiscuous mode [ 594.271758][T18464] debugfs: 'hsr0' already exists in 'hsr' [ 594.277549][T18464] Cannot create hsr debugfs directory [ 594.316527][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 594.323030][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 595.356428][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 595.363017][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 595.516166][T18419] Bluetooth: hci14: command tx timeout [ 595.837524][T18419] Bluetooth: hci4: command 0x0406 tx timeout [ 596.396304][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 596.402816][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 597.436289][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 597.442762][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 597.596523][T18370] Bluetooth: hci14: command tx timeout [ 598.476330][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 598.482812][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 599.516421][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 599.522991][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 599.676392][T18370] Bluetooth: hci14: command tx timeout [ 600.556390][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 600.562859][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 601.596468][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 601.602961][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 601.756448][T18370] Bluetooth: hci14: command tx timeout [ 602.636284][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 602.642785][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 603.676258][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 603.682756][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 604.716369][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 604.722843][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 605.756330][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 605.762835][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 606.796308][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 606.802783][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 607.836265][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 607.842739][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 608.876456][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 608.882910][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 609.119931][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.916455][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 609.923033][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 610.956418][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 610.962965][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 611.996294][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 612.002792][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 613.036366][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 613.042880][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 614.076425][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 614.082922][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 615.116306][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 615.122760][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 615.393342][T18419] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 615.402210][T18419] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 615.413278][T18419] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 615.422417][T18419] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 615.430806][T18419] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 615.712303][T18482] lo speed is unknown, defaulting to 1000 [ 615.952205][T18482] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.959499][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.967202][T18482] bridge_slave_0: entered allmulticast mode [ 615.974552][T18482] bridge_slave_0: entered promiscuous mode [ 615.983044][T18482] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.990430][T18482] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.000191][T18482] bridge_slave_1: entered allmulticast mode [ 616.008148][T18482] bridge_slave_1: entered promiscuous mode [ 616.041474][T18482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.053477][T18482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.087676][T18482] team0: Port device team_slave_0 added [ 616.097340][T18482] team0: Port device team_slave_1 added [ 616.125627][T18482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.133062][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.159782][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 616.159883][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 616.173174][T18482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.185515][T18482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.192938][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.220060][T18482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.267905][T18482] hsr_slave_0: entered promiscuous mode [ 616.274546][T18482] hsr_slave_1: entered promiscuous mode [ 616.281316][T18482] debugfs: 'hsr0' already exists in 'hsr' [ 616.287216][T18482] Cannot create hsr debugfs directory [ 616.974268][T18370] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 616.987320][T18370] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 617.000116][T18370] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 617.020366][T18370] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 617.029783][T18370] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 617.035676][ T5618] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 617.046824][T18370] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 617.054658][ T5618] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 617.068017][T18419] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 617.084653][T18370] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 617.196129][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 617.202668][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 617.508979][T18501] lo speed is unknown, defaulting to 1000 [ 617.516399][T18370] Bluetooth: hci15: command tx timeout [ 617.535447][T18503] lo speed is unknown, defaulting to 1000 [ 618.004734][ T50] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 618.005275][T18501] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.012668][T18501] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.012836][T18501] bridge_slave_0: entered allmulticast mode [ 618.039500][T18501] bridge_slave_0: entered promiscuous mode [ 618.040385][ T50] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 618.054600][ T50] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 618.066540][ T50] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 618.078207][ T50] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 618.107230][T18501] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.126373][T18501] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.133967][T18501] bridge_slave_1: entered allmulticast mode [ 618.143612][T18501] bridge_slave_1: entered promiscuous mode [ 618.222877][T18501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.236265][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 618.237501][T18501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.242972][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 618.287941][T18503] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.295620][T18503] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.303159][T18503] bridge_slave_0: entered allmulticast mode [ 618.311392][T18503] bridge_slave_0: entered promiscuous mode [ 618.337193][T18503] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.345538][T18503] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.353436][T18503] bridge_slave_1: entered allmulticast mode [ 618.361821][T18503] bridge_slave_1: entered promiscuous mode [ 618.374886][T18501] team0: Port device team_slave_0 added [ 618.417098][T18501] team0: Port device team_slave_1 added [ 618.442812][T18503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.462531][T18503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.521581][T18501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.532337][T18501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.561552][T18501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.585814][T18501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.593478][T18501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.620590][T18501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.644820][T18503] team0: Port device team_slave_0 added [ 618.657446][T18503] team0: Port device team_slave_1 added [ 618.733234][T18503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.741829][T18503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.768318][T18503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.781272][T18503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.788510][T18503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.817038][T18503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.838687][T18501] hsr_slave_0: entered promiscuous mode [ 618.845262][T18501] hsr_slave_1: entered promiscuous mode [ 618.852460][T18501] debugfs: 'hsr0' already exists in 'hsr' [ 618.858349][T18501] Cannot create hsr debugfs directory [ 618.879881][T18534] lo speed is unknown, defaulting to 1000 [ 618.963362][T18503] hsr_slave_0: entered promiscuous mode [ 618.970310][T18503] hsr_slave_1: entered promiscuous mode [ 618.977228][T18503] debugfs: 'hsr0' already exists in 'hsr' [ 618.983013][T18503] Cannot create hsr debugfs directory [ 619.116544][T18370] Bluetooth: hci17: command tx timeout [ 619.123975][ T50] Bluetooth: hci16: command tx timeout [ 619.276298][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 619.282782][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 619.369393][ T1507] block nbd0: Possible stuck request ffff888026757000: control (read@0,1024B). Runtime 270 seconds [ 619.387187][ T1507] block nbd0: Possible stuck request ffff8880267571c0: control (read@1024,1024B). Runtime 270 seconds [ 619.400526][ T1507] block nbd0: Possible stuck request ffff888026757380: control (read@2048,1024B). Runtime 270 seconds [ 619.411837][ T1507] block nbd0: Possible stuck request ffff888026757540: control (read@3072,1024B). Runtime 270 seconds [ 619.551712][T18534] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.559238][T18534] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.566819][T18534] bridge_slave_0: entered allmulticast mode [ 619.574169][T18534] bridge_slave_0: entered promiscuous mode [ 619.584106][T18534] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.591720][T18534] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.597217][T18551] Bluetooth: hci15: command tx timeout [ 619.601006][T18534] bridge_slave_1: entered allmulticast mode [ 619.617972][T18534] bridge_slave_1: entered promiscuous mode [ 619.671184][T18534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.686835][T18534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.751814][T18534] team0: Port device team_slave_0 added [ 619.760951][T18534] team0: Port device team_slave_1 added [ 619.804179][T18534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.811439][T18534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.839149][T18534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.861941][T18534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.869047][T18534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.895647][T18534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.985105][T18534] hsr_slave_0: entered promiscuous mode [ 619.992830][T18534] hsr_slave_1: entered promiscuous mode [ 620.000399][T18534] debugfs: 'hsr0' already exists in 'hsr' [ 620.006471][T18534] Cannot create hsr debugfs directory [ 620.156638][T18551] Bluetooth: hci18: command tx timeout [ 620.316324][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 620.322890][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 621.196540][T18551] Bluetooth: hci17: command tx timeout [ 621.202464][T18551] Bluetooth: hci16: command tx timeout [ 621.356327][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 621.362765][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 621.446795][T18551] Bluetooth: hci7: command 0x0406 tx timeout [ 621.452421][T18555] Bluetooth: hci6: command 0x0406 tx timeout [ 621.454845][T18551] Bluetooth: hci8: command 0x0406 tx timeout [ 621.465065][T18551] Bluetooth: hci1: command 0x0406 tx timeout [ 621.676605][T18370] Bluetooth: hci15: command tx timeout [ 622.236344][T18370] Bluetooth: hci18: command tx timeout [ 622.396173][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 622.402634][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 623.276442][ T5618] Bluetooth: hci17: command tx timeout [ 623.282026][T18370] Bluetooth: hci16: command tx timeout [ 623.436226][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 623.442798][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 623.756397][T18370] Bluetooth: hci15: command tx timeout [ 624.316348][T18370] Bluetooth: hci18: command tx timeout [ 624.477076][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 624.483547][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 625.356498][T18370] Bluetooth: hci16: command tx timeout [ 625.359637][ T5618] Bluetooth: hci17: command tx timeout [ 625.516452][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 625.523025][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 626.396419][T18370] Bluetooth: hci18: command tx timeout [ 626.556217][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 626.562682][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 627.596309][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 627.602895][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 628.636182][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 628.642676][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 629.676367][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 629.682845][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 630.716217][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 630.722899][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 631.756189][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 631.762672][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 632.796326][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 632.802851][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 633.836234][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 633.842723][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 634.076620][ T31] INFO: task syz-executor:17857 blocked for more than 143 seconds. [ 634.084617][ T31] Not tainted syzkaller #0 [ 634.089827][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.099053][ T31] task:syz-executor state:D stack:22160 pid:17857 tgid:17857 ppid:1 task_flags:0x400140 flags:0x00080002 [ 634.111207][ T31] Call Trace: [ 634.114576][ T31] [ 634.117773][ T31] __schedule+0x17d4/0x5630 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 634.122486][ T31] ? __pfx___schedule+0x10/0x10 [ 634.127883][ T31] ? schedule+0x90/0x2b0 [ 634.132955][ T31] schedule+0x164/0x2b0 [ 634.138210][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.144046][ T31] __mutex_lock+0x7c1/0x1550 [ 634.148822][ T31] ? __mutex_lock+0x5d4/0x1550 [ 634.153640][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 634.158684][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.163794][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 634.170107][ T31] ? radix_tree_lookup+0x240/0x290 [ 634.175445][ T31] genl_rcv_msg+0x10b/0x7a0 [ 634.186865][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.192087][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 634.197760][ T31] netlink_rcv_skb+0x226/0x4a0 [ 634.202604][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.208123][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.213511][ T31] ? down_read+0x2be/0x330 [ 634.218732][ T31] genl_rcv+0x28/0x40 [ 634.223146][ T31] netlink_unicast+0x7bd/0x940 [ 634.228270][ T31] netlink_sendmsg+0x813/0xb40 [ 634.233100][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.239718][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 634.244876][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.250404][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 634.255630][ T31] __sys_sendto+0x408/0x5a0 [ 634.260448][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 634.265561][ T31] ? errseq_sample+0x40/0x70 [ 634.270586][ T31] ? fd_install+0x94/0x3d0 [ 634.275132][ T31] ? fd_install+0x309/0x3d0 [ 634.279754][ T31] __x64_sys_sendto+0xde/0x100 [ 634.284575][ T31] do_syscall_64+0x166/0x520 [ 634.289899][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.296431][ T31] ? clear_bhb_loop+0x70/0xc0 [ 634.301186][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.307625][ T31] RIP: 0033:0x7fc943d5e90e [ 634.312118][ T31] RSP: 002b:00007ffdc62f9958 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 634.322359][ T31] RAX: ffffffffffffffda RBX: 00005555636a9500 RCX: 00007fc943d5e90e [ 634.330785][ T31] RDX: 0000000000000028 RSI: 00007fc944b54670 RDI: 0000000000000003 [ 634.339240][ T31] RBP: 0000000000000001 R08: 00007ffdc62f99d4 R09: 000000000000000c [ 634.349604][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 634.358455][ T31] R13: 00007ffdc62f9a28 R14: 00007fc944b54670 R15: 0000000000000000 [ 634.366853][ T31] [ 634.369970][ T31] INFO: task syz.4.3154:18148 blocked for more than 143 seconds. [ 634.378725][ T31] Not tainted syzkaller #0 [ 634.383726][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.393389][ T31] task:syz.4.3154 state:D stack:26376 pid:18148 tgid:18146 ppid:16826 task_flags:0x480140 flags:0x00080002 [ 634.436026][ T31] Call Trace: [ 634.445419][ T31] [ 634.452075][ T31] __schedule+0x17d4/0x5630 [ 634.466962][ T31] ? __lock_acquire+0x683/0x2cf0 [ 634.486923][ T31] ? __pfx___schedule+0x10/0x10 [ 634.491896][ T31] ? schedule+0x90/0x2b0 [ 634.501832][ T31] schedule+0x164/0x2b0 [ 634.507649][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 634.513335][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 634.520098][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 634.527085][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 634.533233][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 634.539797][ T31] nbd_set_size+0x454/0x680 [ 634.544496][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 634.549673][ T31] ? nla_memcpy+0x5b/0xc0 [ 634.554131][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 634.560067][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 634.566124][ T31] ? rcu_is_watching+0x16/0xb0 [ 634.570994][ T31] ? trace_kmalloc+0x2a/0xf0 [ 634.575658][ T31] ? __kmalloc_noprof+0x39a/0x720 [ 634.580926][ T31] ? __nla_parse+0x40/0x60 [ 634.585420][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 634.591874][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 634.598411][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 634.604033][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.610396][ T31] ? __lock_acquire+0x683/0x2cf0 [ 634.615417][ T31] genl_rcv_msg+0x614/0x7a0 [ 634.620236][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.625352][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 634.631302][ T31] netlink_rcv_skb+0x226/0x4a0 [ 634.636285][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.641477][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.647034][ T31] ? down_read+0x2be/0x330 [ 634.651532][ T31] genl_rcv+0x28/0x40 [ 634.655570][ T31] netlink_unicast+0x7bd/0x940 [ 634.661050][ T31] netlink_sendmsg+0x813/0xb40 [ 634.665885][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.671310][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 634.676567][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.681916][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 634.687167][ T31] ____sys_sendmsg+0x54e/0x850 [ 634.692005][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.697618][ T31] ? import_iovec+0x73/0xa0 [ 634.702276][ T31] ___sys_sendmsg+0x2a5/0x360 [ 634.707114][ T31] ? __lock_acquire+0x683/0x2cf0 [ 634.712118][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.720594][ T31] ? futex_wait+0x2a2/0x390 [ 634.725284][ T31] ? __fget_files+0x2a/0x420 [ 634.730141][ T31] ? __fget_files+0x3a2/0x420 [ 634.735004][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 634.740185][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.745734][ T31] do_syscall_64+0x166/0x520 [ 634.750454][ T31] ? trace_irq_disable+0x3b/0x140 [ 634.755562][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.761802][ T31] ? clear_bhb_loop+0x70/0xc0 [ 634.766871][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.772801][ T31] RIP: 0033:0x7efe7ed9e0d9 [ 634.777417][ T31] RSP: 002b:00007efe7fbe2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.785907][ T31] RAX: ffffffffffffffda RBX: 00007efe7f025fa0 RCX: 00007efe7ed9e0d9 [ 634.794133][ T31] RDX: 0000000000080000 RSI: 0000200000000c40 RDI: 0000000000000004 [ 634.804578][ T31] RBP: 00007efe7ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 634.812822][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.821279][ T31] R13: 00007efe7f026038 R14: 00007efe7f025fa0 R15: 00007ffc180e6ce8 [ 634.829670][ T31] [ 634.832863][ T31] INFO: task syz.4.3154:18152 blocked for more than 144 seconds. [ 634.841964][ T31] Not tainted syzkaller #0 [ 634.847572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.856566][ T31] task:syz.4.3154 state:D stack:25768 pid:18152 tgid:18146 ppid:16826 task_flags:0x400140 flags:0x00080002 [ 634.869144][ T31] Call Trace: [ 634.872480][ T31] [ 634.875430][ T31] __schedule+0x17d4/0x5630 [ 634.880273][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 634.880356][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 634.894031][ T31] ? __pfx___schedule+0x10/0x10 [ 634.899148][ T31] ? schedule+0x90/0x2b0 [ 634.903459][ T31] schedule+0x164/0x2b0 [ 634.908351][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.913860][ T31] __mutex_lock+0x7c1/0x1550 [ 634.918667][ T31] ? __mutex_lock+0x5d4/0x1550 [ 634.923478][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 634.928421][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.933623][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 634.939642][ T31] ? radix_tree_lookup+0x240/0x290 [ 634.944812][ T31] genl_rcv_msg+0x10b/0x7a0 [ 634.949457][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.954529][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 634.960233][ T31] netlink_rcv_skb+0x226/0x4a0 [ 634.965071][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.970740][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.976214][ T31] ? down_read+0x2be/0x330 [ 634.980769][ T31] genl_rcv+0x28/0x40 [ 634.984828][ T31] netlink_unicast+0x7bd/0x940 [ 634.990062][ T31] netlink_sendmsg+0x813/0xb40 [ 634.994899][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.000619][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 635.005608][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.011154][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 635.016325][ T31] __sys_sendto+0x408/0x5a0 [ 635.020858][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 635.025900][ T31] ? errseq_sample+0x40/0x70 [ 635.030984][ T31] ? fd_install+0x94/0x3d0 [ 635.035434][ T31] ? fd_install+0x309/0x3d0 [ 635.040766][ T31] __x64_sys_sendto+0xde/0x100 [ 635.045608][ T31] do_syscall_64+0x166/0x520 [ 635.050378][ T31] ? trace_irq_disable+0x3b/0x140 [ 635.055449][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.061970][ T31] ? clear_bhb_loop+0x70/0xc0 [ 635.066762][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.072691][ T31] RIP: 0033:0x7efe7ed5e90e [ 635.077329][ T31] RSP: 002b:00007efe7fbbfe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.085827][ T31] RAX: ffffffffffffffda RBX: 00007efe7fbc16c0 RCX: 00007efe7ed5e90e [ 635.094533][ T31] RDX: 0000000000000020 RSI: 00007efe7fbc0000 RDI: 0000000000000045 [ 635.102640][ T31] RBP: 0000000000000000 R08: 00007efe7fbbff04 R09: 000000000000000c [ 635.110753][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000045 [ 635.119563][ T31] R13: 00007efe7fbbff58 R14: 00007efe7fbc0000 R15: 0000000000000000 [ 635.128092][ T31] [ 635.131193][ T31] INFO: task syz.3.3158:18170 blocked for more than 144 seconds. [ 635.139101][ T31] Not tainted syzkaller #0 [ 635.144627][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.153825][ T31] task:syz.3.3158 state:D stack:27872 pid:18170 tgid:18163 ppid:17372 task_flags:0x400140 flags:0x00080002 [ 635.166135][ T31] Call Trace: [ 635.169523][ T31] [ 635.172505][ T31] __schedule+0x17d4/0x5630 [ 635.177470][ T31] ? __pfx___schedule+0x10/0x10 [ 635.182364][ T31] ? schedule+0x90/0x2b0 [ 635.186943][ T31] schedule+0x164/0x2b0 [ 635.191243][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.197175][ T31] __mutex_lock+0x7c1/0x1550 [ 635.201848][ T31] ? __mutex_lock+0x5d4/0x1550 [ 635.207150][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 635.211926][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.217116][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 635.222274][ T31] ? __lock_acquire+0x683/0x2cf0 [ 635.227483][ T31] ? radix_tree_lookup+0x240/0x290 [ 635.232687][ T31] genl_rcv_msg+0x10b/0x7a0 [ 635.237710][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.242885][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.248935][ T31] netlink_rcv_skb+0x226/0x4a0 [ 635.253775][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.259073][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.264430][ T31] ? down_read+0x2be/0x330 [ 635.268990][ T31] genl_rcv+0x28/0x40 [ 635.273014][ T31] netlink_unicast+0x7bd/0x940 [ 635.278553][ T31] netlink_sendmsg+0x813/0xb40 [ 635.283419][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.288885][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 635.293896][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.299480][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 635.304591][ T31] __sys_sendto+0x408/0x5a0 [ 635.309273][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 635.314366][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 635.320516][ T31] __x64_sys_sendto+0xde/0x100 [ 635.325359][ T31] do_syscall_64+0x166/0x520 [ 635.330426][ T31] ? trace_irq_disable+0x3b/0x140 [ 635.335537][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.341956][ T31] ? clear_bhb_loop+0x70/0xc0 [ 635.346878][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.352822][ T31] RIP: 0033:0x7f2115d5e90e [ 635.357704][ T31] RSP: 002b:00007f2116c77e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.366289][ T31] RAX: ffffffffffffffda RBX: 00007f2116c796c0 RCX: 00007f2115d5e90e [ 635.375148][ T31] RDX: 0000000000000020 RSI: 00007f2116c78000 RDI: 000000000000000a [ 635.383423][ T31] RBP: 0000000000000000 R08: 00007f2116c77f04 R09: 000000000000000c [ 635.393776][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 635.402001][ T31] R13: 00007f2116c77f58 R14: 00007f2116c78000 R15: 0000000000000000 [ 635.410452][ T31] [ 635.413863][ T31] INFO: task syz.0.3164:18199 blocked for more than 144 seconds. [ 635.423986][ T31] Not tainted syzkaller #0 [ 635.430350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.440154][ T31] task:syz.0.3164 state:D stack:27248 pid:18199 tgid:18194 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 635.452410][ T31] Call Trace: [ 635.455743][ T31] [ 635.458871][ T31] __schedule+0x17d4/0x5630 [ 635.463488][ T31] ? __pfx___schedule+0x10/0x10 [ 635.468491][ T31] ? schedule+0x90/0x2b0 [ 635.472802][ T31] schedule+0x164/0x2b0 [ 635.477731][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.483305][ T31] __mutex_lock+0x7c1/0x1550 [ 635.488254][ T31] ? __mutex_lock+0x5d4/0x1550 [ 635.493092][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 635.498378][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.503571][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 635.508812][ T31] ? radix_tree_lookup+0x240/0x290 [ 635.513997][ T31] genl_rcv_msg+0x10b/0x7a0 [ 635.519271][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.524387][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.530023][ T31] netlink_rcv_skb+0x226/0x4a0 [ 635.534852][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.540686][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.546192][ T31] ? down_read+0x2be/0x330 [ 635.550781][ T31] genl_rcv+0x28/0x40 [ 635.554807][ T31] netlink_unicast+0x7bd/0x940 [ 635.559763][ T31] netlink_sendmsg+0x813/0xb40 [ 635.564595][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.570076][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 635.575093][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.580648][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 635.585737][ T31] __sys_sendto+0x408/0x5a0 [ 635.590361][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 635.595472][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 635.601496][ T31] __x64_sys_sendto+0xde/0x100 [ 635.606567][ T31] do_syscall_64+0x166/0x520 [ 635.611253][ T31] ? trace_irq_disable+0x3b/0x140 [ 635.616477][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.622608][ T31] ? clear_bhb_loop+0x70/0xc0 [ 635.627425][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.633356][ T31] RIP: 0033:0x7f32bc55e90e [ 635.637922][ T31] RSP: 002b:00007f32bd45fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.646654][ T31] RAX: ffffffffffffffda RBX: 00007f32bd4616c0 RCX: 00007f32bc55e90e [ 635.654820][ T31] RDX: 0000000000000020 RSI: 00007f32bd460000 RDI: 0000000000000009 [ 635.663075][ T31] RBP: 0000000000000000 R08: 00007f32bd45ff04 R09: 000000000000000c [ 635.671148][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 635.679384][ T31] R13: 00007f32bd45ff58 R14: 00007f32bd460000 R15: 0000000000000000 [ 635.687629][ T31] [ 635.690761][ T31] INFO: task syz.0.3164:18203 blocked for more than 144 seconds. [ 635.698763][ T31] Not tainted syzkaller #0 [ 635.703790][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.712614][ T31] task:syz.0.3164 state:D stack:26784 pid:18203 tgid:18194 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 635.724782][ T31] Call Trace: [ 635.728258][ T31] [ 635.731261][ T31] __schedule+0x17d4/0x5630 [ 635.735841][ T31] ? __pfx___schedule+0x10/0x10 [ 635.740934][ T31] ? schedule+0x90/0x2b0 [ 635.745244][ T31] schedule+0x164/0x2b0 [ 635.749619][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.755288][ T31] __mutex_lock+0x7c1/0x1550 [ 635.760278][ T31] ? __mutex_lock+0x5d4/0x1550 [ 635.765149][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 635.770120][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.775225][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 635.780553][ T31] ? radix_tree_lookup+0x240/0x290 [ 635.785742][ T31] genl_rcv_msg+0x10b/0x7a0 [ 635.790432][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.795542][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.801082][ T31] netlink_rcv_skb+0x226/0x4a0 [ 635.805913][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.811192][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.816686][ T31] ? down_read+0x2be/0x330 [ 635.821172][ T31] genl_rcv+0x28/0x40 [ 635.825167][ T31] netlink_unicast+0x7bd/0x940 [ 635.830184][ T31] netlink_sendmsg+0x813/0xb40 [ 635.835023][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.841400][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 635.847764][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.853134][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 635.858952][ T31] ____sys_sendmsg+0x54e/0x850 [ 635.864771][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.871090][ T31] ? import_iovec+0x73/0xa0 [ 635.875670][ T31] ___sys_sendmsg+0x2a5/0x360 [ 635.880493][ T31] ? __lock_acquire+0x683/0x2cf0 [ 635.885480][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.890932][ T31] ? futex_wait+0x2a2/0x390 [ 635.895564][ T31] ? __fget_files+0x2a/0x420 [ 635.900596][ T31] ? __fget_files+0x3a2/0x420 [ 635.905309][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 635.910386][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.915918][ T31] do_syscall_64+0x166/0x520 [ 635.916179][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 635.927229][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 635.934438][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.941014][ T31] ? clear_bhb_loop+0x70/0xc0 [ 635.945789][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.952026][ T31] RIP: 0033:0x7f32bc59e0d9 [ 635.956658][ T31] RSP: 002b:00007f32bd440028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.965290][ T31] RAX: ffffffffffffffda RBX: 00007f32bc826180 RCX: 00007f32bc59e0d9 [ 635.973601][ T31] RDX: 0000000004080040 RSI: 0000200000000400 RDI: 000000000000000c [ 635.982467][ T31] RBP: 00007f32bc635024 R08: 0000000000000000 R09: 0000000000000000 [ 635.990746][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.999885][ T31] R13: 00007f32bc826218 R14: 00007f32bc826180 R15: 00007fffc6b4ee88 [ 636.008398][ T31] [ 636.011549][ T31] INFO: task syz.1.3167:18210 blocked for more than 145 seconds. [ 636.019587][ T31] Not tainted syzkaller #0 [ 636.024552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 636.033393][ T31] task:syz.1.3167 state:D stack:26000 pid:18210 tgid:18209 ppid:5608 task_flags:0x400140 flags:0x00080002 [ 636.045802][ T31] Call Trace: [ 636.049709][ T31] [ 636.052707][ T31] __schedule+0x17d4/0x5630 [ 636.058059][ T31] ? __pfx___schedule+0x10/0x10 [ 636.063296][ T31] ? schedule+0x90/0x2b0 [ 636.067733][ T31] schedule+0x164/0x2b0 [ 636.071962][ T31] schedule_preempt_disabled+0x13/0x30 [ 636.077828][ T31] __mutex_lock+0x7c1/0x1550 [ 636.082513][ T31] ? __mutex_lock+0x5d4/0x1550 [ 636.087570][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 636.093265][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 636.098536][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 636.103714][ T31] ? radix_tree_lookup+0x240/0x290 [ 636.108980][ T31] genl_rcv_msg+0x10b/0x7a0 [ 636.113578][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.118827][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 636.124284][ T31] netlink_rcv_skb+0x226/0x4a0 [ 636.129161][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.134237][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.139702][ T31] ? down_read+0x2be/0x330 [ 636.144190][ T31] genl_rcv+0x28/0x40 [ 636.148365][ T31] netlink_unicast+0x7bd/0x940 [ 636.153227][ T31] netlink_sendmsg+0x813/0xb40 [ 636.158384][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.163743][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 636.169398][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.174784][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 636.179996][ T31] __sys_sendto+0x408/0x5a0 [ 636.184571][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 636.189786][ T31] ? do_user_addr_fault+0xc4c/0x1340 [ 636.195155][ T31] __x64_sys_sendto+0xde/0x100 [ 636.200257][ T31] do_syscall_64+0x166/0x520 [ 636.204925][ T31] ? trace_irq_disable+0x3b/0x140 [ 636.210246][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.216492][ T31] ? clear_bhb_loop+0x70/0xc0 [ 636.221251][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.227315][ T31] RIP: 0033:0x7fb8f8f5e90e [ 636.231878][ T31] RSP: 002b:00007fb8f9f4de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 636.240721][ T31] RAX: ffffffffffffffda RBX: 00007fb8f9f4f6c0 RCX: 00007fb8f8f5e90e [ 636.248813][ T31] RDX: 0000000000000020 RSI: 00007fb8f9f4e000 RDI: 0000000000000000 [ 636.256984][ T31] RBP: 0000000000000000 R08: 00007fb8f9f4df04 R09: 000000000000000c [ 636.265021][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.273277][ T31] R13: 00007fb8f9f4df58 R14: 00007fb8f9f4e000 R15: 0000000000000000 [ 636.281509][ T31] [ 636.284641][ T31] INFO: task syz.1.3167:18212 blocked for more than 145 seconds. [ 636.292460][ T31] Not tainted syzkaller #0 [ 636.297614][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 636.306568][ T31] task:syz.1.3167 state:D stack:26784 pid:18212 tgid:18209 ppid:5608 task_flags:0x400140 flags:0x00080002 [ 636.318844][ T31] Call Trace: [ 636.322331][ T31] [ 636.325350][ T31] __schedule+0x17d4/0x5630 [ 636.329988][ T31] ? __pfx___schedule+0x10/0x10 [ 636.334909][ T31] ? schedule+0x90/0x2b0 [ 636.339318][ T31] schedule+0x164/0x2b0 [ 636.343537][ T31] schedule_preempt_disabled+0x13/0x30 [ 636.349212][ T31] __mutex_lock+0x7c1/0x1550 [ 636.353881][ T31] ? __mutex_lock+0x5d4/0x1550 [ 636.358805][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 636.363628][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 636.368775][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 636.374036][ T31] ? radix_tree_lookup+0x240/0x290 [ 636.379330][ T31] genl_rcv_msg+0x10b/0x7a0 [ 636.383923][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.389200][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 636.394681][ T31] netlink_rcv_skb+0x226/0x4a0 [ 636.400111][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.405237][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.410676][ T31] ? down_read+0x2be/0x330 [ 636.415164][ T31] genl_rcv+0x28/0x40 [ 636.419415][ T31] netlink_unicast+0x7bd/0x940 [ 636.424267][ T31] netlink_sendmsg+0x813/0xb40 [ 636.429302][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.434675][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 636.439875][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.445206][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 636.450377][ T31] __sys_sendto+0x408/0x5a0 [ 636.454945][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 636.460100][ T31] ? errseq_sample+0x40/0x70 [ 636.464782][ T31] ? fd_install+0x94/0x3d0 [ 636.469401][ T31] ? fd_install+0x309/0x3d0 [ 636.474116][ T31] __x64_sys_sendto+0xde/0x100 [ 636.479009][ T31] do_syscall_64+0x166/0x520 [ 636.483676][ T31] ? trace_irq_disable+0x3b/0x140 [ 636.488989][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.495135][ T31] ? clear_bhb_loop+0x70/0xc0 [ 636.500028][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.506073][ T31] RIP: 0033:0x7fb8f8f5e90e [ 636.510527][ T31] RSP: 002b:00007fb8f9f2ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 636.519064][ T31] RAX: ffffffffffffffda RBX: 00007fb8f9f2e6c0 RCX: 00007fb8f8f5e90e [ 636.527278][ T31] RDX: 0000000000000024 RSI: 00007fb8f9f2d000 RDI: 0000000000000005 [ 636.535319][ T31] RBP: 0000000000000000 R08: 00007fb8f9f2cf04 R09: 000000000000000c [ 636.543552][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 636.551658][ T31] R13: 00007fb8f9f2cf58 R14: 00007fb8f9f2d000 R15: 0000000000000000 [ 636.561049][ T31] [ 636.564237][ T31] [ 636.564237][ T31] Showing all locks held in the system: [ 636.572209][ T31] locks held by kworker/u8:0/12: 3, last CPU#1: [ 636.578712][ T31] #0: ffff88803239a140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 636.590578][ T31] #1: ffffc90000117c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 636.605018][ T31] #2: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 636.614909][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 636.621076][ T31] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 636.631099][ T31] locks held by getty/5365: 2, on CPU#1: [ 636.637338][ T31] #0: ffff888035f440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 636.647806][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 636.658186][ T31] locks held by udevd/10040: 1, on CPU#1: [ 636.663922][ T31] #0: ffff888025c5b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 636.673365][ T31] locks held by syz-executor/17857: 2, on CPU#0: [ 636.679930][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.688279][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.697631][ T31] locks held by syz.4.3154/18148: 6, on CPU#1: [ 636.703821][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.712183][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.722373][ T31] #2: ffff888026542a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 636.733054][ T31] #3: ffff888021fa47c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 636.742596][ T31] #4: ffff888021fa4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 636.755060][ T31] #5: ffff888021fa41c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 636.767622][ T31] locks held by syz.4.3154/18152: 2, on CPU#1: [ 636.773842][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.782334][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.791509][ T31] locks held by syz.3.3158/18170: 2, on CPU#1: [ 636.798044][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.806393][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.815448][ T31] locks held by syz.0.3164/18199: 2, on CPU#0: [ 636.821712][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.830147][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.839381][ T31] locks held by syz.0.3164/18203: 2, on CPU#1: [ 636.845609][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.854730][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.864814][ T31] locks held by syz.1.3167/18210: 2, on CPU#1: [ 636.871454][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.880027][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.890293][ T31] locks held by syz.1.3167/18212: 2, on CPU#0: [ 636.896640][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.904914][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.914176][ T31] locks held by syz-executor/18292: 2, on CPU#1: [ 636.920967][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.929614][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.938997][ T31] locks held by syz-executor/18311: 2, on CPU#1: [ 636.945359][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.954313][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.963939][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 636.964029][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 636.977781][ T31] locks held by syz-executor/18313: 2, on CPU#0: [ 636.984778][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.993518][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.002680][ T31] locks held by syz-executor/18340: 2, on CPU#1: [ 637.009784][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.018184][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.027418][ T31] locks held by syz-executor/18368: 2, on CPU#1: [ 637.033775][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.042516][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.051619][ T31] locks held by syz-executor/18387: 2, on CPU#0: [ 637.058244][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.066846][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.075851][ T31] locks held by syz-executor/18405: 2, on CPU#1: [ 637.082441][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.091356][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.101007][ T31] locks held by syz-executor/18416: 2, on CPU#0: [ 637.107633][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.115917][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.125858][ T31] locks held by syz-executor/18436: 2, on CPU#1: [ 637.132404][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.140970][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.150292][ T31] locks held by syz-executor/18464: 2, on CPU#0: [ 637.156813][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.165166][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.174724][ T31] locks held by syz-executor/18482: 2, on CPU#1: [ 637.181362][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.189884][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.199250][ T31] locks held by syz-executor/18501: 2, on CPU#0: [ 637.205727][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.214938][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.224085][ T31] locks held by syz-executor/18503: 2, on CPU#0: [ 637.230524][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.238854][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.248004][ T31] locks held by syz-executor/18534: 2, on CPU#1: [ 637.254375][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 637.262730][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 637.271887][ T31] [ 637.274247][ T31] ============================================= [ 637.274247][ T31] [ 637.283180][ T31] NMI backtrace for cpu 0 [ 637.283199][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 637.283221][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.283232][ T31] Call Trace: [ 637.283240][ T31] [ 637.283249][ T31] dump_stack_lvl+0xe8/0x150 [ 637.283313][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 637.283344][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 637.283386][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 637.283421][ T31] sys_info+0x135/0x170 [ 637.283448][ T31] watchdog+0xfd7/0x1030 [ 637.283492][ T31] ? watchdog+0x1c7/0x1030 [ 637.283529][ T31] kthread+0x38b/0x480 [ 637.283569][ T31] ? __pfx_watchdog+0x10/0x10 [ 637.283597][ T31] ? __pfx_kthread+0x10/0x10 [ 637.283630][ T31] ret_from_fork+0x514/0xb70 [ 637.283679][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 637.283710][ T31] ? __switch_to+0xc89/0x1420 [ 637.283741][ T31] ? __pfx_kthread+0x10/0x10 [ 637.283784][ T31] ret_from_fork_asm+0x1a/0x30 [ 637.283834][ T31] [ 637.283845][ T31] Sending NMI from CPU 0 to CPUs 1: [ 637.395063][ C1] NMI backtrace for cpu 1 [ 637.395082][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 637.395104][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.395117][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 637.395238][ C1] RIP: 0010:memset_orig+0x36/0xb0 [ 637.395265][ C1] Code: 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 <48> 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 [ 637.395290][ C1] RSP: 0018:ffffc90000126968 EFLAGS: 00000247 [ 637.395305][ C1] RAX: 0000000000000000 RBX: ffffc900001269c8 RCX: 0000000000000000 [ 637.395318][ C1] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc900001269c8 [ 637.395331][ C1] RBP: ffffc90000126a50 R08: ffffc90000126a27 R09: 0000000000000000 [ 637.395345][ C1] R10: ffffc900001269c8 R11: fffff52000024d45 R12: 0000000000000000 [ 637.395358][ C1] R13: ffff88801def5dc0 R14: ffffffff81b1e750 R15: dffffc0000000000 [ 637.395373][ C1] FS: 0000000000000000(0000) GS:ffff888125024000(0000) knlGS:0000000000000000 [ 637.395389][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 637.395403][ C1] CR2: 0000561b052c4168 CR3: 000000000e946000 CR4: 00000000003526f0 [ 637.395420][ C1] Call Trace: [ 637.395426][ C1] [ 637.395433][ C1] __unwind_start+0x36/0x660 [ 637.395458][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 637.395492][ C1] arch_stack_walk+0xe3/0x150 [ 637.395517][ C1] stack_trace_save+0xa9/0x100 [ 637.395542][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 637.395569][ C1] ? __lock_acquire+0x683/0x2cf0 [ 637.395600][ C1] kasan_save_track+0x3e/0x80 [ 637.395661][ C1] kasan_save_free_info+0x40/0x50 [ 637.395679][ C1] __kasan_slab_free+0x5c/0x80 [ 637.395704][ C1] kfree+0x1c5/0x640 [ 637.395722][ C1] ? ieee80211_inform_bss+0xbda/0x10d0 [ 637.395813][ C1] ieee80211_inform_bss+0xbda/0x10d0 [ 637.395842][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 637.395864][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 637.395891][ C1] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 637.395973][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 637.396000][ C1] cfg80211_inform_single_bss_data+0xd9c/0x1be0 [ 637.396034][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 637.396077][ C1] ? _ieee802_11_parse_elems_full+0x2c0/0x48f0 [ 637.396149][ C1] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 637.396179][ C1] cfg80211_inform_bss_data+0x263/0x3cc0 [ 637.396222][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 637.396272][ C1] ? __lock_acquire+0x683/0x2cf0 [ 637.396315][ C1] ? cfg80211_defragment_element+0x3e/0x360 [ 637.396346][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 637.396371][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 637.396402][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 637.396429][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 637.396457][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 637.396479][ C1] ? sta_info_get+0x4f/0x300 [ 637.396533][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 637.396582][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 637.396617][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 637.396639][ C1] ? __lock_acquire+0x683/0x2cf0 [ 637.396666][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 637.396691][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 637.396713][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 637.396735][ C1] ? __lock_acquire+0x683/0x2cf0 [ 637.396767][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 637.396797][ C1] ? kcov_remote_start+0x1a4/0x7c0 [ 637.396827][ C1] ieee80211_iface_work+0x78a/0x1010 [ 637.396859][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 637.396879][ C1] ? process_scheduled_works+0xa1a/0x14c0 [ 637.396900][ C1] process_scheduled_works+0xa88/0x14c0 [ 637.396938][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 637.396963][ C1] ? assign_work+0x3cf/0x5d0 [ 637.396986][ C1] worker_thread+0xa47/0xfb0 [ 637.397024][ C1] kthread+0x38b/0x480 [ 637.397051][ C1] ? __pfx_worker_thread+0x10/0x10 [ 637.397072][ C1] ? __pfx_kthread+0x10/0x10 [ 637.397099][ C1] ret_from_fork+0x514/0xb70 [ 637.397127][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 637.397152][ C1] ? __switch_to+0xc89/0x1420 [ 637.397177][ C1] ? __pfx_kthread+0x10/0x10 [ 637.397203][ C1] ret_from_fork_asm+0x1a/0x30 [ 637.397241][ C1] [ 637.398865][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 637.398932][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 637.398995][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.399039][ T31] Call Trace: [ 637.399061][ T31] [ 637.399084][ T31] vpanic+0x56d/0xa60 [ 637.399187][ T31] ? __pfx___schedule+0x10/0x10 [ 637.399250][ T31] ? __pfx_vpanic+0x10/0x10 [ 637.399343][ T31] panic+0xc5/0xd0 [ 637.399424][ T31] ? __pfx_panic+0x10/0x10 [ 637.399499][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 637.399571][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 637.399646][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 637.399739][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 637.399845][ T31] watchdog+0x1030/0x1030 [ 637.399939][ T31] ? watchdog+0x1c7/0x1030 [ 637.400035][ T31] kthread+0x38b/0x480 [ 637.400118][ T31] ? __pfx_watchdog+0x10/0x10 [ 637.400205][ T31] ? __pfx_kthread+0x10/0x10 [ 637.400297][ T31] ret_from_fork+0x514/0xb70 [ 637.400390][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 637.400467][ T31] ? __switch_to+0xc89/0x1420 [ 637.400548][ T31] ? __pfx_kthread+0x10/0x10 [ 637.400634][ T31] ret_from_fork_asm+0x1a/0x30 [ 637.400760][ T31] [ 637.953129][ T31] Kernel Offset: disabled [ 637.957482][ T31] Rebooting in 86400 seconds..