last executing test programs: 1m50.0582186s ago: executing program 2 (id=157): r0 = socket(0x8, 0x5, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x159, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "224fbeeadc2a2baa1970a4d61104f4bcfe6ec5b02e01fd936bf50cbe1f0dc690975859964490aa8c0529938debb7eae2ddaf4fe2288a6aac34226c5cd8ef1a01"}}, 0x80}}, 0x40800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x2, 0x200, "6813cd", 0x7, 0x96}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/239, 0xef}], 0x2, &(0x7f0000000500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) close(r0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) (async) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) (async) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) close(r3) (async) close(r3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000880)={0x1, 'veth0_to_hsr\x00', {}, 0x5}) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f00000008c0)={'gre0\x00', r1, 0x40, 0x88, 0x5f, 0x80, {{0x1f, 0x4, 0x3, 0x36, 0x7c, 0x68, 0x0, 0xc, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0xf, 0xf1, [@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1c, 0x2, [{0x5, 0xe, "4ab859520ac14c9e7b753504"}, {0x2, 0x8, "e26dcee84edc"}]}, @timestamp={0x44, 0x20, 0xf9, 0x0, 0xd, [0x8, 0xf2b6, 0x80000000, 0xa, 0x4, 0xfff, 0x400]}, @generic={0x83, 0x6, "3adef4ac"}, @generic={0x44, 0xf, "1f457ef0d7c96e7f4fdacdddff"}, @lsrr={0x83, 0x7, 0x45, [@loopback]}]}}}}}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r14, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40884) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{0x9, 0x0, 0xd7, 0xb3}, {0x68, 0x0, 0x7, 0x2000000}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000c40)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x8, 0x1, 0x2, 0x7a7, 0x4], 0x7, &(0x7f0000000c00)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000d40)=0xffffffff, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r14, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close(r16) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) (async) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) 1m49.104213677s ago: executing program 0 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x40004}], 0x1, 0x2010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)={0x160, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa4cf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45f}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x56937246}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c24df5f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2524}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf7d22e73}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xc010}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7483031dcc6d92fd6ee86b8ec3da2acd000000", @ANYRES16=0x0, @ANYBLOB="000000000000020000000200000008006200090000000800400000000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x4ac, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x6, 0x0, 0x0, 0x1ff, 0x6ad, 0x6}}, {0x10, 0x2, [0xfff9, 0x8b7, 0xdf2, 0x5, 0x8001, 0x5]}}, {{0x1c, 0x1, {0x10, 0x72, 0x2, 0xa, 0x1, 0x40, 0x8001, 0x5}}, {0xe, 0x2, [0x7, 0xfffb, 0x0, 0x8, 0x5]}}, {{0x1c, 0x1, {0x81, 0x2, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}}, {0x16, 0x2, [0xfff, 0x2, 0x1000, 0x9, 0xfff, 0x9, 0x17f9, 0x3, 0xfffc]}}, {{0x1c, 0x1, {0x1, 0x5, 0x4e, 0x8, 0x0, 0x7, 0x2, 0x7}}, {0x12, 0x2, [0x8001, 0x6, 0xb, 0x400, 0x40, 0x401, 0x7]}}, {{0x1c, 0x1, {0xe2, 0x1, 0x8, 0x1e90, 0x1, 0x0, 0xfffffff9, 0x8}}, {0x14, 0x2, [0x5, 0x0, 0x3, 0x52aa, 0x9, 0x2, 0x8001, 0x1c5]}}]}, @TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6c, 0x6, 0xadb, 0x9, 0x0, 0x8, 0x7, 0x8}}, {0x14, 0x2, [0xa, 0xabf, 0x3183, 0x5, 0xf000, 0x8, 0x8, 0xfff7]}}, {{0x1c, 0x1, {0x5a, 0x2, 0x1, 0x6, 0x1, 0x7ff, 0x0, 0x9}}, {0x16, 0x2, [0x5, 0x6, 0x7, 0x401, 0xfff7, 0x4, 0x8, 0x1, 0x1dfd]}}, {{0x1c, 0x1, {0x1d, 0x9, 0x400, 0x11, 0x2, 0x6, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x7, 0x800, 0x1, 0xffff, 0x4, 0x7}}, {0x12, 0x2, [0x9, 0x0, 0x4, 0x2, 0xa4, 0x18, 0xa]}}, {{0x1c, 0x1, {0x7, 0x5, 0x4, 0x1, 0x1, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x9, 0x7, 0x1, 0x8c, 0x1, 0xffffffff, 0x8, 0x9}}, {0x16, 0x2, [0x800, 0x7, 0x9, 0x7ff, 0x1000, 0xfffa, 0x3, 0x4, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10f2}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5f, 0x0, 0x5, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0xa30, 0xffff, 0x8, 0xf, 0x9d67]}}, {{0x1c, 0x1, {0x40, 0x8, 0xb07, 0x7, 0x1, 0x5, 0x6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xff, 0x1, 0x0, 0x0, 0x1, 0x4a38, 0x12d9, 0x7}}, {0x12, 0x2, [0x5, 0x2, 0x1, 0x3, 0x2, 0x7f, 0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1, 0x1a, 0x2, 0xc, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xb9, 0x2, 0x5, 0x7ff, 0x2, 0xff, 0x3, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x9, 0x5, 0xe, 0x9, 0x2, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0xfff7, 0x6, 0x100, 0x1, 0x9, 0xd]}}, {{0x1c, 0x1, {0x81, 0x7, 0x9, 0x8, 0x0, 0x3, 0x186, 0x9}}, {0x16, 0x2, [0xc4, 0xfffa, 0x7, 0xa, 0x9, 0x100, 0x6, 0x7, 0x1000]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x8}}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7}}]}, 0x4ac}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m37.02528729s ago: executing program 1 (id=262): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001"], 0x48) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x40) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r10, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40000) 1m36.631247313s ago: executing program 1 (id=266): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0x0, 0x5, 0x9, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xd, 0x2, 0xc, 0x7b, 0x7f, 0x5, 'veth1_to_bridge\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x6d}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x1}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0x0, 0x0, 0x0, 0xf, {@mac=@random="02020000e300"}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x9bf, 0x0, 0xfffd, 0x3, 0x0, 0x0, 'geneve0\x00', 'netpci0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 1m35.132418575s ago: executing program 2 (id=157): r0 = socket(0x8, 0x5, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x159, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "224fbeeadc2a2baa1970a4d61104f4bcfe6ec5b02e01fd936bf50cbe1f0dc690975859964490aa8c0529938debb7eae2ddaf4fe2288a6aac34226c5cd8ef1a01"}}, 0x80}}, 0x40800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x2, 0x200, "6813cd", 0x7, 0x96}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/239, 0xef}], 0x2, &(0x7f0000000500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) close(r0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) (async) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) (async) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) close(r3) (async) close(r3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000880)={0x1, 'veth0_to_hsr\x00', {}, 0x5}) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f00000008c0)={'gre0\x00', r1, 0x40, 0x88, 0x5f, 0x80, {{0x1f, 0x4, 0x3, 0x36, 0x7c, 0x68, 0x0, 0xc, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0xf, 0xf1, [@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1c, 0x2, [{0x5, 0xe, "4ab859520ac14c9e7b753504"}, {0x2, 0x8, "e26dcee84edc"}]}, @timestamp={0x44, 0x20, 0xf9, 0x0, 0xd, [0x8, 0xf2b6, 0x80000000, 0xa, 0x4, 0xfff, 0x400]}, @generic={0x83, 0x6, "3adef4ac"}, @generic={0x44, 0xf, "1f457ef0d7c96e7f4fdacdddff"}, @lsrr={0x83, 0x7, 0x45, [@loopback]}]}}}}}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r14, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40884) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{0x9, 0x0, 0xd7, 0xb3}, {0x68, 0x0, 0x7, 0x2000000}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000c40)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x8, 0x1, 0x2, 0x7a7, 0x4], 0x7, &(0x7f0000000c00)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000d40)=0xffffffff, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r14, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close(r16) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) (async) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) 1m32.125980793s ago: executing program 0 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x40004}], 0x1, 0x2010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)={0x160, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa4cf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45f}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x56937246}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c24df5f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2524}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf7d22e73}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xc010}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7483031dcc6d92fd6ee86b8ec3da2acd000000", @ANYRES16=0x0, @ANYBLOB="000000000000020000000200000008006200090000000800400000000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x4ac, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "b4fe920132584325163ea1e1f62f007d7816917943afab32282343beb18ce98cf80cc6c8360777da0a47f39e74be898363a2f4713080c56f6696507c47402403fff52c4b9210acbfd1232a70e05ea241e2e45e4f5a3cbba40db0f24240b5b05ceac2e95bc569866bd153517e79e13786e1e1b63c26ebfc9b7284c8187db9b1da678ecdacbbf1f9c5260c1b6b17382c5d03e5cf4143d9faeed5e759c8f94250fd31e17684cbfd2bc5b7a0def62f47c9d661e94b4d3dcf7afdf5827371338b45db8b9dc78447226224814cc912466ff71919b532123c1fd3b25e7ec44d6dd0195e06260753e12a465e2318270ce5356cc22880133feb92db3b58f1ce061427dbec"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x6, 0x0, 0x0, 0x1ff, 0x6ad, 0x6}}, {0x10, 0x2, [0xfff9, 0x8b7, 0xdf2, 0x5, 0x8001, 0x5]}}, {{0x1c, 0x1, {0x10, 0x72, 0x2, 0xa, 0x1, 0x40, 0x8001, 0x5}}, {0xe, 0x2, [0x7, 0xfffb, 0x0, 0x8, 0x5]}}, {{0x1c, 0x1, {0x81, 0x2, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}}, {0x16, 0x2, [0xfff, 0x2, 0x1000, 0x9, 0xfff, 0x9, 0x17f9, 0x3, 0xfffc]}}, {{0x1c, 0x1, {0x1, 0x5, 0x4e, 0x8, 0x0, 0x7, 0x2, 0x7}}, {0x12, 0x2, [0x8001, 0x6, 0xb, 0x400, 0x40, 0x401, 0x7]}}, {{0x1c, 0x1, {0xe2, 0x1, 0x8, 0x1e90, 0x1, 0x0, 0xfffffff9, 0x8}}, {0x14, 0x2, [0x5, 0x0, 0x3, 0x52aa, 0x9, 0x2, 0x8001, 0x1c5]}}]}, @TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6c, 0x6, 0xadb, 0x9, 0x0, 0x8, 0x7, 0x8}}, {0x14, 0x2, [0xa, 0xabf, 0x3183, 0x5, 0xf000, 0x8, 0x8, 0xfff7]}}, {{0x1c, 0x1, {0x5a, 0x2, 0x1, 0x6, 0x1, 0x7ff, 0x0, 0x9}}, {0x16, 0x2, [0x5, 0x6, 0x7, 0x401, 0xfff7, 0x4, 0x8, 0x1, 0x1dfd]}}, {{0x1c, 0x1, {0x1d, 0x9, 0x400, 0x11, 0x2, 0x6, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x7, 0x800, 0x1, 0xffff, 0x4, 0x7}}, {0x12, 0x2, [0x9, 0x0, 0x4, 0x2, 0xa4, 0x18, 0xa]}}, {{0x1c, 0x1, {0x7, 0x5, 0x4, 0x1, 0x1, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x9, 0x7, 0x1, 0x8c, 0x1, 0xffffffff, 0x8, 0x9}}, {0x16, 0x2, [0x800, 0x7, 0x9, 0x7ff, 0x1000, 0xfffa, 0x3, 0x4, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10f2}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5f, 0x0, 0x5, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0xa30, 0xffff, 0x8, 0xf, 0x9d67]}}, {{0x1c, 0x1, {0x40, 0x8, 0xb07, 0x7, 0x1, 0x5, 0x6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xff, 0x1, 0x0, 0x0, 0x1, 0x4a38, 0x12d9, 0x7}}, {0x12, 0x2, [0x5, 0x2, 0x1, 0x3, 0x2, 0x7f, 0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1, 0x1a, 0x2, 0xc, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xb9, 0x2, 0x5, 0x7ff, 0x2, 0xff, 0x3, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x9, 0x5, 0xe, 0x9, 0x2, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0xfff7, 0x6, 0x100, 0x1, 0x9, 0xd]}}, {{0x1c, 0x1, {0x81, 0x7, 0x9, 0x8, 0x0, 0x3, 0x186, 0x9}}, {0x16, 0x2, [0xc4, 0xfffa, 0x7, 0xa, 0x9, 0x100, 0x6, 0x7, 0x1000]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x8}}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7}}]}, 0x4ac}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m20.179367912s ago: executing program 2 (id=157): r0 = socket(0x8, 0x5, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x159, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "224fbeeadc2a2baa1970a4d61104f4bcfe6ec5b02e01fd936bf50cbe1f0dc690975859964490aa8c0529938debb7eae2ddaf4fe2288a6aac34226c5cd8ef1a01"}}, 0x80}}, 0x40800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x2, 0x200, "6813cd", 0x7, 0x96}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/239, 0xef}], 0x2, &(0x7f0000000500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) close(r0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) (async) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) (async) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) close(r3) (async) close(r3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000880)={0x1, 'veth0_to_hsr\x00', {}, 0x5}) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f00000008c0)={'gre0\x00', r1, 0x40, 0x88, 0x5f, 0x80, {{0x1f, 0x4, 0x3, 0x36, 0x7c, 0x68, 0x0, 0xc, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0xf, 0xf1, [@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1c, 0x2, [{0x5, 0xe, "4ab859520ac14c9e7b753504"}, {0x2, 0x8, "e26dcee84edc"}]}, @timestamp={0x44, 0x20, 0xf9, 0x0, 0xd, [0x8, 0xf2b6, 0x80000000, 0xa, 0x4, 0xfff, 0x400]}, @generic={0x83, 0x6, "3adef4ac"}, @generic={0x44, 0xf, "1f457ef0d7c96e7f4fdacdddff"}, @lsrr={0x83, 0x7, 0x45, [@loopback]}]}}}}}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r14, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40884) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{0x9, 0x0, 0xd7, 0xb3}, {0x68, 0x0, 0x7, 0x2000000}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000c40)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x8, 0x1, 0x2, 0x7a7, 0x4], 0x7, &(0x7f0000000c00)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000d40)=0xffffffff, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r14, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close(r16) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) (async) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) 1m16.597525754s ago: executing program 1 (id=266): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0x0, 0x5, 0x9, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xd, 0x2, 0xc, 0x7b, 0x7f, 0x5, 'veth1_to_bridge\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x6d}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x1}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0x0, 0x0, 0x0, 0xf, {@mac=@random="02020000e300"}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x9bf, 0x0, 0xfffd, 0x3, 0x0, 0x0, 'geneve0\x00', 'netpci0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 1m14.351703962s ago: executing program 0 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x40004}], 0x1, 0x2010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)={0x160, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa4cf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45f}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x56937246}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c24df5f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2524}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf7d22e73}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xc010}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7483031dcc6d92fd6ee86b8ec3da2acd000000", @ANYRES16=0x0, @ANYBLOB="000000000000020000000200000008006200090000000800400000000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x4ac, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x6, 0x0, 0x0, 0x1ff, 0x6ad, 0x6}}, {0x10, 0x2, [0xfff9, 0x8b7, 0xdf2, 0x5, 0x8001, 0x5]}}, {{0x1c, 0x1, {0x10, 0x72, 0x2, 0xa, 0x1, 0x40, 0x8001, 0x5}}, {0xe, 0x2, [0x7, 0xfffb, 0x0, 0x8, 0x5]}}, {{0x1c, 0x1, {0x81, 0x2, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}}, {0x16, 0x2, [0xfff, 0x2, 0x1000, 0x9, 0xfff, 0x9, 0x17f9, 0x3, 0xfffc]}}, {{0x1c, 0x1, {0x1, 0x5, 0x4e, 0x8, 0x0, 0x7, 0x2, 0x7}}, {0x12, 0x2, [0x8001, 0x6, 0xb, 0x400, 0x40, 0x401, 0x7]}}, {{0x1c, 0x1, {0xe2, 0x1, 0x8, 0x1e90, 0x1, 0x0, 0xfffffff9, 0x8}}, {0x14, 0x2, [0x5, 0x0, 0x3, 0x52aa, 0x9, 0x2, 0x8001, 0x1c5]}}]}, @TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6c, 0x6, 0xadb, 0x9, 0x0, 0x8, 0x7, 0x8}}, {0x14, 0x2, [0xa, 0xabf, 0x3183, 0x5, 0xf000, 0x8, 0x8, 0xfff7]}}, {{0x1c, 0x1, {0x5a, 0x2, 0x1, 0x6, 0x1, 0x7ff, 0x0, 0x9}}, {0x16, 0x2, [0x5, 0x6, 0x7, 0x401, 0xfff7, 0x4, 0x8, 0x1, 0x1dfd]}}, {{0x1c, 0x1, {0x1d, 0x9, 0x400, 0x11, 0x2, 0x6, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x7, 0x800, 0x1, 0xffff, 0x4, 0x7}}, {0x12, 0x2, [0x9, 0x0, 0x4, 0x2, 0xa4, 0x18, 0xa]}}, {{0x1c, 0x1, {0x7, 0x5, 0x4, 0x1, 0x1, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x9, 0x7, 0x1, 0x8c, 0x1, 0xffffffff, 0x8, 0x9}}, {0x16, 0x2, [0x800, 0x7, 0x9, 0x7ff, 0x1000, 0xfffa, 0x3, 0x4, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10f2}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5f, 0x0, 0x5, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0xa30, 0xffff, 0x8, 0xf, 0x9d67]}}, {{0x1c, 0x1, {0x40, 0x8, 0xb07, 0x7, 0x1, 0x5, 0x6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xff, 0x1, 0x0, 0x0, 0x1, 0x4a38, 0x12d9, 0x7}}, {0x12, 0x2, [0x5, 0x2, 0x1, 0x3, 0x2, 0x7f, 0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1, 0x1a, 0x2, 0xc, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xb9, 0x2, 0x5, 0x7ff, 0x2, 0xff, 0x3, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x9, 0x5, 0xe, 0x9, 0x2, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0xfff7, 0x6, 0x100, 0x1, 0x9, 0xd]}}, {{0x1c, 0x1, {0x81, 0x7, 0x9, 0x8, 0x0, 0x3, 0x186, 0x9}}, {0x16, 0x2, [0xc4, 0xfffa, 0x7, 0xa, 0x9, 0x100, 0x6, 0x7, 0x1000]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x8}}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7}}]}, 0x4ac}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m2.530865948s ago: executing program 2 (id=157): r0 = socket(0x8, 0x5, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x159, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "224fbeeadc2a2baa1970a4d61104f4bcfe6ec5b02e01fd936bf50cbe1f0dc690975859964490aa8c0529938debb7eae2ddaf4fe2288a6aac34226c5cd8ef1a01"}}, 0x80}}, 0x40800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x2, 0x200, "6813cd", 0x7, 0x96}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/239, 0xef}], 0x2, &(0x7f0000000500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) close(r0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) (async) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) (async) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) close(r3) (async) close(r3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000880)={0x1, 'veth0_to_hsr\x00', {}, 0x5}) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f00000008c0)={'gre0\x00', r1, 0x40, 0x88, 0x5f, 0x80, {{0x1f, 0x4, 0x3, 0x36, 0x7c, 0x68, 0x0, 0xc, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0xf, 0xf1, [@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1c, 0x2, [{0x5, 0xe, "4ab859520ac14c9e7b753504"}, {0x2, 0x8, "e26dcee84edc"}]}, @timestamp={0x44, 0x20, 0xf9, 0x0, 0xd, [0x8, 0xf2b6, 0x80000000, 0xa, 0x4, 0xfff, 0x400]}, @generic={0x83, 0x6, "3adef4ac"}, @generic={0x44, 0xf, "1f457ef0d7c96e7f4fdacdddff"}, @lsrr={0x83, 0x7, 0x45, [@loopback]}]}}}}}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r14, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40884) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{0x9, 0x0, 0xd7, 0xb3}, {0x68, 0x0, 0x7, 0x2000000}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000c40)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x8, 0x1, 0x2, 0x7a7, 0x4], 0x7, &(0x7f0000000c00)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000d40)=0xffffffff, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r14, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close(r16) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) (async) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) 1m1.22885047s ago: executing program 1 (id=266): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0x0, 0x5, 0x9, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xd, 0x2, 0xc, 0x7b, 0x7f, 0x5, 'veth1_to_bridge\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x6d}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x1}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0x0, 0x0, 0x0, 0xf, {@mac=@random="02020000e300"}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x9bf, 0x0, 0xfffd, 0x3, 0x0, 0x0, 'geneve0\x00', 'netpci0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 57.573947232s ago: executing program 0 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x40004}], 0x1, 0x2010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)={0x160, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa4cf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45f}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x56937246}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c24df5f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2524}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf7d22e73}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xc010}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7483031dcc6d92fd6ee86b8ec3da2acd000000", @ANYRES16=0x0, @ANYBLOB="000000000000020000000200000008006200090000000800400000000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x4ac, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x6, 0x0, 0x0, 0x1ff, 0x6ad, 0x6}}, {0x10, 0x2, [0xfff9, 0x8b7, 0xdf2, 0x5, 0x8001, 0x5]}}, {{0x1c, 0x1, {0x10, 0x72, 0x2, 0xa, 0x1, 0x40, 0x8001, 0x5}}, {0xe, 0x2, [0x7, 0xfffb, 0x0, 0x8, 0x5]}}, {{0x1c, 0x1, {0x81, 0x2, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}}, {0x16, 0x2, [0xfff, 0x2, 0x1000, 0x9, 0xfff, 0x9, 0x17f9, 0x3, 0xfffc]}}, {{0x1c, 0x1, {0x1, 0x5, 0x4e, 0x8, 0x0, 0x7, 0x2, 0x7}}, {0x12, 0x2, [0x8001, 0x6, 0xb, 0x400, 0x40, 0x401, 0x7]}}, {{0x1c, 0x1, {0xe2, 0x1, 0x8, 0x1e90, 0x1, 0x0, 0xfffffff9, 0x8}}, {0x14, 0x2, [0x5, 0x0, 0x3, 0x52aa, 0x9, 0x2, 0x8001, 0x1c5]}}]}, @TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6c, 0x6, 0xadb, 0x9, 0x0, 0x8, 0x7, 0x8}}, {0x14, 0x2, [0xa, 0xabf, 0x3183, 0x5, 0xf000, 0x8, 0x8, 0xfff7]}}, {{0x1c, 0x1, {0x5a, 0x2, 0x1, 0x6, 0x1, 0x7ff, 0x0, 0x9}}, {0x16, 0x2, [0x5, 0x6, 0x7, 0x401, 0xfff7, 0x4, 0x8, 0x1, 0x1dfd]}}, {{0x1c, 0x1, {0x1d, 0x9, 0x400, 0x11, 0x2, 0x6, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x7, 0x800, 0x1, 0xffff, 0x4, 0x7}}, {0x12, 0x2, [0x9, 0x0, 0x4, 0x2, 0xa4, 0x18, 0xa]}}, {{0x1c, 0x1, {0x7, 0x5, 0x4, 0x1, 0x1, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x9, 0x7, 0x1, 0x8c, 0x1, 0xffffffff, 0x8, 0x9}}, {0x16, 0x2, [0x800, 0x7, 0x9, 0x7ff, 0x1000, 0xfffa, 0x3, 0x4, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10f2}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5f, 0x0, 0x5, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0xa30, 0xffff, 0x8, 0xf, 0x9d67]}}, {{0x1c, 0x1, {0x40, 0x8, 0xb07, 0x7, 0x1, 0x5, 0x6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xff, 0x1, 0x0, 0x0, 0x1, 0x4a38, 0x12d9, 0x7}}, {0x12, 0x2, [0x5, 0x2, 0x1, 0x3, 0x2, 0x7f, 0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1, 0x1a, 0x2, 0xc, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xb9, 0x2, 0x5, 0x7ff, 0x2, 0xff, 0x3, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x9, 0x5, 0xe, 0x9, 0x2, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0xfff7, 0x6, 0x100, 0x1, 0x9, 0xd]}}, {{0x1c, 0x1, {0x81, 0x7, 0x9, 0x8, 0x0, 0x3, 0x186, 0x9}}, {0x16, 0x2, [0xc4, 0xfffa, 0x7, 0xa, 0x9, 0x100, 0x6, 0x7, 0x1000]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x8}}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7}}]}, 0x4ac}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.197540059s ago: executing program 2 (id=157): r0 = socket(0x8, 0x5, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x159, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "224fbeeadc2a2baa1970a4d61104f4bcfe6ec5b02e01fd936bf50cbe1f0dc690975859964490aa8c0529938debb7eae2ddaf4fe2288a6aac34226c5cd8ef1a01"}}, 0x80}}, 0x40800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x2, 0x200, "6813cd", 0x7, 0x96}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/239, 0xef}], 0x2, &(0x7f0000000500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) close(r0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) (async) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) (async) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) close(r3) (async) close(r3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000880)={0x1, 'veth0_to_hsr\x00', {}, 0x5}) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f00000008c0)={'gre0\x00', r1, 0x40, 0x88, 0x5f, 0x80, {{0x1f, 0x4, 0x3, 0x36, 0x7c, 0x68, 0x0, 0xc, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0xf, 0xf1, [@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1c, 0x2, [{0x5, 0xe, "4ab859520ac14c9e7b753504"}, {0x2, 0x8, "e26dcee84edc"}]}, @timestamp={0x44, 0x20, 0xf9, 0x0, 0xd, [0x8, 0xf2b6, 0x80000000, 0xa, 0x4, 0xfff, 0x400]}, @generic={0x83, 0x6, "3adef4ac"}, @generic={0x44, 0xf, "1f457ef0d7c96e7f4fdacdddff"}, @lsrr={0x83, 0x7, 0x45, [@loopback]}]}}}}}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r14, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40884) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{0x9, 0x0, 0xd7, 0xb3}, {0x68, 0x0, 0x7, 0x2000000}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000c40)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x8, 0x1, 0x2, 0x7a7, 0x4], 0x7, &(0x7f0000000c00)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000d40)=0xffffffff, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r14, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close(r16) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) (async) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) 44.365590247s ago: executing program 1 (id=266): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0x0, 0x5, 0x9, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xd, 0x2, 0xc, 0x7b, 0x7f, 0x5, 'veth1_to_bridge\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x6d}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x1}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0x0, 0x0, 0x0, 0xf, {@mac=@random="02020000e300"}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x9bf, 0x0, 0xfffd, 0x3, 0x0, 0x0, 'geneve0\x00', 'netpci0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 43.754801659s ago: executing program 0 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x40004}], 0x1, 0x2010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)={0x160, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa4cf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45f}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x56937246}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c24df5f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2524}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf7d22e73}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xc010}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7483031dcc6d92fd6ee86b8ec3da2acd000000", @ANYRES16=0x0, @ANYBLOB="000000000000020000000200000008006200090000000800400000000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x4ac, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "b4fe920132584325163ea1e1f62f007d7816917943afab32282343beb18ce98cf80cc6c8360777da0a47f39e74be898363a2f4713080c56f6696507c47402403fff52c4b9210acbfd1232a70e05ea241e2e45e4f5a3cbba40db0f24240b5b05ceac2e95bc569866bd153517e79e13786e1e1b63c26ebfc9b7284c8187db9b1da678ecdacbbf1f9c5260c1b6b17382c5d03e5cf4143d9faeed5e759c8f94250fd31e17684cbfd2bc5b7a0def62f47c9d661e94b4d3dcf7afdf5827371338b45db8b9dc78447226224814cc912466ff71919b532123c1fd3b25e7ec44d6dd0195e06260753e12a465e2318270ce5356cc22880133feb92db3b58f1ce061427dbec"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x6, 0x0, 0x0, 0x1ff, 0x6ad, 0x6}}, {0x10, 0x2, [0xfff9, 0x8b7, 0xdf2, 0x5, 0x8001, 0x5]}}, {{0x1c, 0x1, {0x10, 0x72, 0x2, 0xa, 0x1, 0x40, 0x8001, 0x5}}, {0xe, 0x2, [0x7, 0xfffb, 0x0, 0x8, 0x5]}}, {{0x1c, 0x1, {0x81, 0x2, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}}, {0x16, 0x2, [0xfff, 0x2, 0x1000, 0x9, 0xfff, 0x9, 0x17f9, 0x3, 0xfffc]}}, {{0x1c, 0x1, {0x1, 0x5, 0x4e, 0x8, 0x0, 0x7, 0x2, 0x7}}, {0x12, 0x2, [0x8001, 0x6, 0xb, 0x400, 0x40, 0x401, 0x7]}}, {{0x1c, 0x1, {0xe2, 0x1, 0x8, 0x1e90, 0x1, 0x0, 0xfffffff9, 0x8}}, {0x14, 0x2, [0x5, 0x0, 0x3, 0x52aa, 0x9, 0x2, 0x8001, 0x1c5]}}]}, @TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6c, 0x6, 0xadb, 0x9, 0x0, 0x8, 0x7, 0x8}}, {0x14, 0x2, [0xa, 0xabf, 0x3183, 0x5, 0xf000, 0x8, 0x8, 0xfff7]}}, {{0x1c, 0x1, {0x5a, 0x2, 0x1, 0x6, 0x1, 0x7ff, 0x0, 0x9}}, {0x16, 0x2, [0x5, 0x6, 0x7, 0x401, 0xfff7, 0x4, 0x8, 0x1, 0x1dfd]}}, {{0x1c, 0x1, {0x1d, 0x9, 0x400, 0x11, 0x2, 0x6, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x7, 0x800, 0x1, 0xffff, 0x4, 0x7}}, {0x12, 0x2, [0x9, 0x0, 0x4, 0x2, 0xa4, 0x18, 0xa]}}, {{0x1c, 0x1, {0x7, 0x5, 0x4, 0x1, 0x1, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x9, 0x7, 0x1, 0x8c, 0x1, 0xffffffff, 0x8, 0x9}}, {0x16, 0x2, [0x800, 0x7, 0x9, 0x7ff, 0x1000, 0xfffa, 0x3, 0x4, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10f2}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5f, 0x0, 0x5, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0xa30, 0xffff, 0x8, 0xf, 0x9d67]}}, {{0x1c, 0x1, {0x40, 0x8, 0xb07, 0x7, 0x1, 0x5, 0x6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xff, 0x1, 0x0, 0x0, 0x1, 0x4a38, 0x12d9, 0x7}}, {0x12, 0x2, [0x5, 0x2, 0x1, 0x3, 0x2, 0x7f, 0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1, 0x1a, 0x2, 0xc, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xb9, 0x2, 0x5, 0x7ff, 0x2, 0xff, 0x3, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x9, 0x5, 0xe, 0x9, 0x2, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0xfff7, 0x6, 0x100, 0x1, 0x9, 0xd]}}, {{0x1c, 0x1, {0x81, 0x7, 0x9, 0x8, 0x0, 0x3, 0x186, 0x9}}, {0x16, 0x2, [0xc4, 0xfffa, 0x7, 0xa, 0x9, 0x100, 0x6, 0x7, 0x1000]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x8}}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7}}]}, 0x4ac}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.827129367s ago: executing program 2 (id=157): r0 = socket(0x8, 0x5, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x159, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "224fbeeadc2a2baa1970a4d61104f4bcfe6ec5b02e01fd936bf50cbe1f0dc690975859964490aa8c0529938debb7eae2ddaf4fe2288a6aac34226c5cd8ef1a01"}}, 0x80}}, 0x40800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, r0, 0x1dc84000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x2, 0x200, "6813cd", 0x7, 0x96}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x42, 0x400, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "8d9e952bf40ced9d"}}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8001) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/239, 0xef}], 0x2, &(0x7f0000000500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2) close(r0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000640)=0x1, 0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) (async) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000000680), &(0x7f00000006c0)=0x8) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) (async) sendmsg$can_bcm(r6, &(0x7f0000000840)={&(0x7f0000000700), 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x8c8, 0x1a, {0x77359400}, {r11, r12/1000+60000}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x6, 0x3, 0x0, 0x0, "31d397c7df0eabbb"}}, 0x48}, 0x1, 0x0, 0x0, 0x44021}, 0x40) close(r3) (async) close(r3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000880)={0x1, 'veth0_to_hsr\x00', {}, 0x5}) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f00000008c0)={'gre0\x00', r1, 0x40, 0x88, 0x5f, 0x80, {{0x1f, 0x4, 0x3, 0x36, 0x7c, 0x68, 0x0, 0xc, 0x4, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0xf, 0xf1, [@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1c, 0x2, [{0x5, 0xe, "4ab859520ac14c9e7b753504"}, {0x2, 0x8, "e26dcee84edc"}]}, @timestamp={0x44, 0x20, 0xf9, 0x0, 0xd, [0x8, 0xf2b6, 0x80000000, 0xa, 0x4, 0xfff, 0x400]}, @generic={0x83, 0x6, "3adef4ac"}, @generic={0x44, 0xf, "1f457ef0d7c96e7f4fdacdddff"}, @lsrr={0x83, 0x7, 0x45, [@loopback]}]}}}}}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r14, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40884) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{0x9, 0x0, 0xd7, 0xb3}, {0x68, 0x0, 0x7, 0x2000000}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000c40)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x8, 0x1, 0x2, 0x7a7, 0x4], 0x7, &(0x7f0000000c00)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000d40)=0xffffffff, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r14, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close(r16) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) (async) connect$inet6(r17, &(0x7f0000000e80)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000ec0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) 28.900296413s ago: executing program 0 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmmsg$alg(r2, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x40004}], 0x1, 0x2010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r4) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000b40)={0x160, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa4cf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45f}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x56937246}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c24df5f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2524}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf7d22e73}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xc010}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7483031dcc6d92fd6ee86b8ec3da2acd000000", @ANYRES16=0x0, @ANYBLOB="000000000000020000000200000008006200090000000800400000000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x4ac, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x6, 0x0, 0x0, 0x1ff, 0x6ad, 0x6}}, {0x10, 0x2, [0xfff9, 0x8b7, 0xdf2, 0x5, 0x8001, 0x5]}}, {{0x1c, 0x1, {0x10, 0x72, 0x2, 0xa, 0x1, 0x40, 0x8001, 0x5}}, {0xe, 0x2, [0x7, 0xfffb, 0x0, 0x8, 0x5]}}, {{0x1c, 0x1, {0x81, 0x2, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}}, {0x16, 0x2, [0xfff, 0x2, 0x1000, 0x9, 0xfff, 0x9, 0x17f9, 0x3, 0xfffc]}}, {{0x1c, 0x1, {0x1, 0x5, 0x4e, 0x8, 0x0, 0x7, 0x2, 0x7}}, {0x12, 0x2, [0x8001, 0x6, 0xb, 0x400, 0x40, 0x401, 0x7]}}, {{0x1c, 0x1, {0xe2, 0x1, 0x8, 0x1e90, 0x1, 0x0, 0xfffffff9, 0x8}}, {0x14, 0x2, [0x5, 0x0, 0x3, 0x52aa, 0x9, 0x2, 0x8001, 0x1c5]}}]}, @TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6c, 0x6, 0xadb, 0x9, 0x0, 0x8, 0x7, 0x8}}, {0x14, 0x2, [0xa, 0xabf, 0x3183, 0x5, 0xf000, 0x8, 0x8, 0xfff7]}}, {{0x1c, 0x1, {0x5a, 0x2, 0x1, 0x6, 0x1, 0x7ff, 0x0, 0x9}}, {0x16, 0x2, [0x5, 0x6, 0x7, 0x401, 0xfff7, 0x4, 0x8, 0x1, 0x1dfd]}}, {{0x1c, 0x1, {0x1d, 0x9, 0x400, 0x11, 0x2, 0x6, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x7, 0x800, 0x1, 0xffff, 0x4, 0x7}}, {0x12, 0x2, [0x9, 0x0, 0x4, 0x2, 0xa4, 0x18, 0xa]}}, {{0x1c, 0x1, {0x7, 0x5, 0x4, 0x1, 0x1, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x9, 0x7, 0x1, 0x8c, 0x1, 0xffffffff, 0x8, 0x9}}, {0x16, 0x2, [0x800, 0x7, 0x9, 0x7ff, 0x1000, 0xfffa, 0x3, 0x4, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10f2}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5f, 0x0, 0x5, 0x0, 0x8, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0xa30, 0xffff, 0x8, 0xf, 0x9d67]}}, {{0x1c, 0x1, {0x40, 0x8, 0xb07, 0x7, 0x1, 0x5, 0x6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xff, 0x1, 0x0, 0x0, 0x1, 0x4a38, 0x12d9, 0x7}}, {0x12, 0x2, [0x5, 0x2, 0x1, 0x3, 0x2, 0x7f, 0x2]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1, 0x1a, 0x2, 0xc, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xb9, 0x2, 0x5, 0x7ff, 0x2, 0xff, 0x3, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x9, 0x5, 0xe, 0x9, 0x2, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0xfff7, 0x6, 0x100, 0x1, 0x9, 0xd]}}, {{0x1c, 0x1, {0x81, 0x7, 0x9, 0x8, 0x0, 0x3, 0x186, 0x9}}, {0x16, 0x2, [0xc4, 0xfffa, 0x7, 0xa, 0x9, 0x100, 0x6, 0x7, 0x1000]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x8}}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7}}]}, 0x4ac}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.653947108s ago: executing program 1 (id=266): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0x0, 0x5, 0x9, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xd, 0x2, 0xc, 0x7b, 0x7f, 0x5, 'veth1_to_bridge\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x6d}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x1}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0x0, 0x0, 0x0, 0xf, {@mac=@random="02020000e300"}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x9bf, 0x0, 0xfffd, 0x3, 0x0, 0x0, 'geneve0\x00', 'netpci0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 20.282595646s ago: executing program 4 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000206010100000000000000000000000005000100070000000900020073797a30000a0000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x54}}, 0x48088) 20.197491211s ago: executing program 4 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xec, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0xd38, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_devices(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0x2c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1806007f18110200", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001835000005000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018290000", @ANYRES32=r0, @ANYBLOB="00000000ff03000018280000", @ANYRES32=r0, @ANYBLOB="000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000c00)='syzkaller\x00', 0x3, 0xc6, &(0x7f0000000c40)=""/198, 0x41000, 0x8, '\x00', r1, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x3, 0x7}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[r4, r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$xdp(r0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x2, r1, 0x3b}, 0x10, &(0x7f0000000600)=[{&(0x7f0000001340)="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", 0x1000}], 0x1, 0x0, 0x0, 0x4000004}, 0x20010) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r7, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x2, 0x27}}], 0x48}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x11, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0xdc3b, 0x20, &(0x7f0000000840)=""/32, 0x40f00, 0x14, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x4, 0x8, 0xd, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r0, r0], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000680)='kvm_ioapic_set_irq\x00', r10, 0x0, 0x1}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000002020101000000000000000002000000240002900c000280040001ff00000000140001800800010000000000080002"], 0x38}}, 0x0) 20.022624306s ago: executing program 4 (id=627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={0x0}, &(0x7f0000000400)=0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYBLOB="01002dbd700000000000250202f9ffffffaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x24008014}, 0x8800) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="050034008b00000005701b0101000000df40d5551b1b3ca13bc93179ffff5f880c11b737a8c86724030be94a82eb3040f623e8d510db0b5e"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0xd0}}, 0x20000080) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0xd0}}, 0x20000080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x36, 0x6, "c0a11799fc486a6937f3b0a8cfa140ae91cbcd9218a45937d148c6b2e7cc02c7b85e078d237a59fd7dd1e5440de28d327b1a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000800000000007"], 0x1c}}, 0x80) socket$nl_rdma(0x10, 0x3, 0x14) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)={r1, 0x80, "3ca0241c43d557da1e0c1685f8829d8b2a051d9059d7a96148bbcd5fe4ba770e2f0a2f435676bd378539465c609489d88a911577b8e9e235c2fbc5f492f051c21e575544dad53c1c597ee04ca6d8072df064f68a5964b38dd69e458a0b1e5dab8711609caf0ab4be0806d1f78e68360a4b0f61ce7759531a19a2f6e1cdcb5bd1"}, &(0x7f0000000440)=0x88) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)={r1, 0x80, "3ca0241c43d557da1e0c1685f8829d8b2a051d9059d7a96148bbcd5fe4ba770e2f0a2f435676bd378539465c609489d88a911577b8e9e235c2fbc5f492f051c21e575544dad53c1c597ee04ca6d8072df064f68a5964b38dd69e458a0b1e5dab8711609caf0ab4be0806d1f78e68360a4b0f61ce7759531a19a2f6e1cdcb5bd1"}, &(0x7f0000000440)=0x88) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000480)={r13, 0xf84b}, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a14010000000000000000000800030000000000080003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) 19.746215349s ago: executing program 4 (id=630): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x314, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x40, 0xfc}}, @TCA_RED_STAB={0x104, 0x2, "0600cb5a94dff5e85684af279d4e4b110afd3d082689ad96e4a2565e1f0822fab92e776faef09ba10581c824ee31725bd1289d6e7ba672510bf442b674b2d8b9edbd660d6dc8f3a07f4aeba3311020d973f5e38dc0c2352d6889bc3511fa82dda3a0faf0b4d98c941f6c7b500dd65e0bfdf7cc9f24d3a3ebea21579f480eb1fa7ab10758e796dacc1299e19f1d962362498cb203fd0a8ef9ad31686a9fa62a0ba5b5317eccb5964e3dedb0937847e226b4dece517a5d5e1f2e0bd7dd023a94afbbbe9c9033df1209555962b456e34e2f45558af3dbae45f02008a0ec9f94ecb8dd45dd30443975f9cea60c09fe63cdfeed8df938474a68af1ebbd9d600"}]}}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xa, 0x9, 0x3, 0x1, 0x2ecb, 0x1, 0x3}}, {0xa, 0x2, [0x3, 0x9, 0x8]}}, {{0x1c, 0x1, {0x2e, 0x4, 0x668d, 0x4, 0x1, 0x9, 0x5, 0x1}}, {0x6, 0x2, [0xbf1]}}, {{0x1c, 0x1, {0xe, 0x4, 0xfff7, 0x3, 0x0, 0x4, 0x7402, 0x5}}, {0xe, 0x2, [0x81, 0x4, 0x80, 0xb, 0x9]}}, {{0x1c, 0x1, {0x3, 0x6e, 0xa, 0x3ff, 0x2, 0x7, 0x6, 0x1}}, {0x6, 0x2, [0x47]}}, {{0x1c, 0x1, {0x4, 0x3, 0x401, 0x5, 0x1, 0x2, 0x8001, 0x5}}, {0xe, 0x2, [0x2, 0x923, 0xa8, 0x400, 0xb]}}, {{0x1c, 0x1, {0x6, 0x4, 0x3640, 0x39c, 0x0, 0x8, 0x1, 0x5}}, {0xe, 0x2, [0xf, 0x800, 0x9, 0xebb8, 0x8]}}, {{0x1c, 0x1, {0x4, 0x4, 0x8, 0x792, 0x2, 0x5, 0x4, 0x5}}, {0xe, 0x2, [0x7, 0x0, 0xc657, 0x4d, 0x5]}}]}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xd, 0x6, 0x3d3, 0x1, 0x40008, 0x3, 0x6}}, {0x10, 0x2, [0x9, 0x6, 0xffff, 0x3, 0x5, 0x2]}}, {{0x1c, 0x1, {0xe, 0x0, 0x101, 0x2, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x0, 0x0, 0x3, 0x5, 0x2, 0x71e, 0x29, 0x2}}, {0x8, 0x2, [0x9c6, 0x2]}}, {{0x1c, 0x1, {0x13, 0xff, 0x6, 0x10, 0x1, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0x1, 0x3]}}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 19.555950471s ago: executing program 4 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) epoll_create1(0x52b3965c61c6e6de) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="afdbd6e3c79279943c90e0b6af3ea59eca061dcb1b0b2a62e96e4d0e94ba23a0096b8e27f71b9766e060aae230f123869ddff9b59b788bb56b605feb8bf4f796", @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf25300000000c009900080000000700000006003600380000000600360014000000"], 0x30}}, 0x40400c0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f0000000c00)=[{&(0x7f0000000240)="89edee2c78daddb4b473fec988cafbe863cac50580088b", 0x17}, {&(0x7f0000000440)="0174df4d92", 0x5}, {&(0x7f00000005c0)="bf49", 0x2}], 0x3) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000306afe200000000000000000000000905000100070000000900020073797a31000000000900020073797a300000000005000100070000000900020073797a3100000000b02ad173f95b98172ea6e7d5a721f60279d9e064e4a7846f68fcb3239112d0850384d3bd313f50551ccb73bdd03da02341c50202083601a07040a17118dc6a4eed5fc050b5bed190ad95350803c42c7ef9af826387af2eb9804286b04f02e77c280e02b6"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17.646314637s ago: executing program 4 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000006c0)=0xffffffff, 0x4) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/96, 0x60}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000100)=""/95, 0x5f}], 0x4}, 0x12101) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r5, 0x7175543557143ec1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x50}}, 0x4000000) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={r2}) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000480)=0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x4, 0x0, 0x6, 0x7, 0x400, 0x1, 0x8, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYBLOB="3924df00d318"], 0xffe) 17.444529451s ago: executing program 3 (id=637): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 17.294532039s ago: executing program 3 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) 17.214128892s ago: executing program 3 (id=639): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 16.3253407s ago: executing program 3 (id=640): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900000000000a"], 0xc8}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x118, 0x65, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xf}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc8, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xb4, 0x6, [@m_mirred={0xb0, 0x9, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x20000000, 0x8}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000580)={0x1, 0x100}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000040)={0x200, 0x1ff, 0xffff5798, 0x3}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)={@empty, @remote, 0x1, 0x4, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2]}, 0x20) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x2c, 0x16, 0x2, 0x70bd28, 0x25dfdbff, {0xe}, [@generic="794f7f3f92bd7212d2d74ca78cc7adeffaeb92218bf9d806"]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) 15.950332321s ago: executing program 3 (id=641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) pipe(&(0x7f0000000000)) (async) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x0, 0xffffff6a, 0x0, 0x0, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000000c0)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) (rerun: 32) 15.062146377s ago: executing program 3 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r8, r9, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f00000000c0)={0x46, 0xe, 0xb, 0x9, 0x881, 0x81}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 2.027077157s ago: executing program 32 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000006c0)=0xffffffff, 0x4) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/96, 0x60}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000100)=""/95, 0x5f}], 0x4}, 0x12101) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r5, 0x7175543557143ec1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x50}}, 0x4000000) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000003c0)={r2}) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000480)=0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x4, 0x0, 0x6, 0x7, 0x400, 0x1, 0x8, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYBLOB="3924df00d318"], 0xffe) 0s ago: executing program 33 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r8, r9, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f00000000c0)={0x46, 0xe, 0xb, 0x9, 0x881, 0x81}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): [ 133.687129][ T7612] gretap0: left allmulticast mode [ 133.693445][ T7612] gretap0: left promiscuous mode [ 133.699093][ T7612] bridge0: port 4(gretap0) entered disabled state [ 133.748593][ T7612] bridge_slave_0: left allmulticast mode [ 133.756390][ T7612] bridge_slave_0: left promiscuous mode [ 133.762721][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.782902][ T7612] bridge_slave_1: left allmulticast mode [ 133.803049][ T7612] bridge_slave_1: left promiscuous mode [ 133.825059][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.861390][ T7612] bond0: (slave bond_slave_0): Releasing backup interface [ 133.888619][ T7612] bond0: (slave bond_slave_1): Releasing backup interface [ 133.943619][ T7612] team0: Port device team_slave_0 removed [ 133.955417][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.972558][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.982206][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.993054][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.995790][ T7612] team0: Port device team_slave_1 removed [ 134.007243][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.014179][ T7612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.014916][ T7612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.046573][ T7612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.056776][ T7612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.070642][ T7612] macsec1: left allmulticast mode [ 134.075775][ T7612] bridge1: left allmulticast mode [ 134.082537][ T7612] macsec1: left promiscuous mode [ 134.087482][ T7612] bridge1: left promiscuous mode [ 134.096673][ T7612] bridge0: port 3(macsec1) entered disabled state [ 134.107056][ T7612] bond3: (slave ip6erspan0): Releasing active interface [ 134.116448][ T7613] team0: Mode changed to "roundrobin" [ 134.232353][ T7279] veth0_vlan: entered promiscuous mode [ 134.309307][ T7627] virt_wifi0 speed is unknown, defaulting to 1000 [ 134.363778][ T7279] veth1_vlan: entered promiscuous mode [ 134.567751][ T1156] bridge_slave_1: left allmulticast mode [ 134.582146][ T1156] bridge_slave_1: left promiscuous mode [ 134.588932][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.600716][ T7639] netlink: 'syz.3.359': attribute type 21 has an invalid length. [ 134.615912][ T1156] bridge_slave_0: left allmulticast mode [ 134.629074][ T1156] bridge_slave_0: left promiscuous mode [ 134.634818][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.412288][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.423949][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.434546][ T1156] bond0 (unregistering): Released all slaves [ 135.468127][ T7639] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 135.563878][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.587334][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.722199][ T7279] veth0_macvtap: entered promiscuous mode [ 135.735853][ T7279] veth1_macvtap: entered promiscuous mode [ 135.785178][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.817802][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.872049][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.919956][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.093987][ T7683] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 136.121953][ T5840] Bluetooth: hci0: command tx timeout [ 136.172743][ T7279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.197096][ T7279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.220971][ T7279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.230183][ T7279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.298455][ T1156] hsr_slave_0: left promiscuous mode [ 136.317030][ T1156] hsr_slave_1: left promiscuous mode [ 136.339769][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.347198][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.361173][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.368684][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.400824][ T1156] veth1_macvtap: left promiscuous mode [ 136.413039][ T1156] veth0_macvtap: left promiscuous mode [ 136.429466][ T1156] veth1_vlan: left promiscuous mode [ 136.442642][ T1156] veth0_vlan: left promiscuous mode [ 136.900649][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 137.037820][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 137.075379][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 137.134528][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.143615][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.153117][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.163379][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.174966][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.468628][ T7627] chnl_net:caif_netlink_parms(): no params data found [ 137.498126][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.368'. [ 137.654745][ T7710] virt_wifi0 speed is unknown, defaulting to 1000 [ 137.706714][ T7721] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 137.819576][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.826837][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.838301][ T7627] bridge_slave_0: entered allmulticast mode [ 137.846408][ T7627] bridge_slave_0: entered promiscuous mode [ 137.857737][ T7723] netlink: 'syz.4.371': attribute type 10 has an invalid length. [ 137.871718][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.883175][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.371'. [ 137.893544][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.909783][ T7730] netlink: 'syz.4.371': attribute type 10 has an invalid length. [ 137.914787][ T7726] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 137.935680][ T7730] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 137.958776][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.975649][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.983360][ T7627] bridge_slave_1: entered allmulticast mode [ 137.991188][ T7627] bridge_slave_1: entered promiscuous mode [ 138.011333][ T7723] batadv0: entered promiscuous mode [ 138.016662][ T7723] batadv0: entered allmulticast mode [ 138.023291][ T7723] bridge0: port 1(batadv0) entered blocking state [ 138.032151][ T7723] bridge0: port 1(batadv0) entered disabled state [ 138.041669][ T7723] bridge0: port 1(batadv0) entered blocking state [ 138.048337][ T7723] bridge0: port 1(batadv0) entered forwarding state [ 138.198730][ T1129] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 138.208500][ T1129] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 138.219855][ T5840] Bluetooth: hci0: command tx timeout [ 138.239413][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.253663][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.264380][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.308867][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.466488][ T7742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.562525][ T7627] team0: Port device team_slave_0 added [ 138.609759][ T7627] team0: Port device team_slave_1 added [ 138.663742][ T1156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.911392][ T1156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.940503][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.947492][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.998381][ T7627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.020941][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.027919][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.058395][ T7627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.193271][ T7627] hsr_slave_0: entered promiscuous mode [ 139.202537][ T7627] hsr_slave_1: entered promiscuous mode [ 139.222031][ T1156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.239572][ T5840] Bluetooth: hci2: command tx timeout [ 139.317739][ T1156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.338542][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 139.896350][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.905564][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.917509][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.925661][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.933831][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.034738][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.071572][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.078825][ T7710] bridge_slave_0: entered allmulticast mode [ 140.112931][ T7710] bridge_slave_0: entered promiscuous mode [ 140.135829][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.155276][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.171343][ T7710] bridge_slave_1: entered allmulticast mode [ 140.191650][ T7710] bridge_slave_1: entered promiscuous mode [ 140.279416][ T5840] Bluetooth: hci0: command tx timeout [ 140.315029][ T7806] netlink: 64 bytes leftover after parsing attributes in process `syz.3.383'. [ 140.515599][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.554088][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.651524][ T1156] bridge_slave_1: left allmulticast mode [ 140.656565][ T7820] Bluetooth: MGMT ver 1.23 [ 140.657207][ T1156] bridge_slave_1: left promiscuous mode [ 140.677989][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.688249][ T1156] bridge_slave_0: left allmulticast mode [ 140.694580][ T1156] bridge_slave_0: left promiscuous mode [ 140.700510][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.050775][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.063230][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.075739][ T1156] bond0 (unregistering): Released all slaves [ 141.102024][ T7784] virt_wifi0 speed is unknown, defaulting to 1000 [ 141.212308][ T7710] team0: Port device team_slave_0 added [ 141.319237][ T5842] Bluetooth: hci2: command tx timeout [ 141.358246][ T7710] team0: Port device team_slave_1 added [ 141.378507][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 141.513333][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.522344][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.548903][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.596018][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.608044][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.663130][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.703957][ T1156] hsr_slave_0: left promiscuous mode [ 141.712512][ T1156] hsr_slave_1: left promiscuous mode [ 141.718556][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.733689][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.750053][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.757926][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.763229][ T7849] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 141.776745][ T7847] xt_CT: No such helper "netbios-ns" [ 141.777879][ T7849] netlink: 224 bytes leftover after parsing attributes in process `syz.3.391'. [ 141.806368][ T1156] veth1_macvtap: left promiscuous mode [ 141.814865][ T1156] veth0_macvtap: left promiscuous mode [ 141.820570][ T1156] veth1_vlan: left promiscuous mode [ 141.825905][ T1156] veth0_vlan: left promiscuous mode [ 141.969891][ T5842] Bluetooth: hci3: command tx timeout [ 142.213972][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 142.267118][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 142.359212][ T5842] Bluetooth: hci0: command tx timeout [ 142.679307][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 142.726155][ T7710] hsr_slave_0: entered promiscuous mode [ 142.748997][ T7710] hsr_slave_1: entered promiscuous mode [ 142.755604][ T7710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.799307][ T7710] Cannot create hsr debugfs directory [ 142.821400][ T7863] nbd: couldn't find a device at index 16056320 [ 142.852491][ T7863] netlink: 'syz.4.395': attribute type 4 has an invalid length. [ 143.009164][ T7627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.030477][ T7627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 143.070971][ T7627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 143.227341][ T7627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.399326][ T5840] Bluetooth: hci2: command tx timeout [ 143.593581][ T1156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.625545][ T7784] chnl_net:caif_netlink_parms(): no params data found [ 143.779881][ T7885] netlink: 124 bytes leftover after parsing attributes in process `syz.3.402'. [ 143.781697][ T1156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.807956][ T7886] can: request_module (can-proto-0) failed. [ 143.942565][ T1156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.041771][ T5840] Bluetooth: hci3: command tx timeout [ 144.156762][ T1156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.266283][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.277946][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.295160][ T7784] bridge_slave_0: entered allmulticast mode [ 144.335438][ T7784] bridge_slave_0: entered promiscuous mode [ 144.431584][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.438768][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.460001][ T7784] bridge_slave_1: entered allmulticast mode [ 144.479403][ T7784] bridge_slave_1: entered promiscuous mode [ 144.536570][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 144.636446][ T7784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.700939][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.766763][ T7784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.956522][ T7784] team0: Port device team_slave_0 added [ 145.025608][ T7627] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.044037][ T7784] team0: Port device team_slave_1 added [ 145.075055][ T1156] bridge_slave_1: left allmulticast mode [ 145.095427][ T1156] bridge_slave_1: left promiscuous mode [ 145.105739][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.136956][ T1156] bridge_slave_0: left allmulticast mode [ 145.144698][ T1156] bridge_slave_0: left promiscuous mode [ 145.150763][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.480663][ T5840] Bluetooth: hci2: command tx timeout [ 145.511563][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.523051][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.534030][ T1156] bond0 (unregistering): Released all slaves [ 145.648242][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.658830][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.715424][ T7784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.733341][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.741064][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.773429][ T7784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.845016][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 145.941652][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.948903][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.959293][ T7968] netlink: 'syz.4.421': attribute type 18 has an invalid length. [ 145.973090][ T7969] netlink: 'syz.4.421': attribute type 18 has an invalid length. [ 145.994337][ T7969] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.004780][ T7969] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.013563][ T7969] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.022397][ T7969] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.048934][ T7784] hsr_slave_0: entered promiscuous mode [ 146.057282][ T7784] hsr_slave_1: entered promiscuous mode [ 146.063641][ T7784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.071285][ T7784] Cannot create hsr debugfs directory [ 146.080028][ T7710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.091802][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.098974][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.123010][ T5840] Bluetooth: hci3: command tx timeout [ 146.165020][ T7710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.250673][ T1156] hsr_slave_0: left promiscuous mode [ 146.257235][ T1156] hsr_slave_1: left promiscuous mode [ 146.269836][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.277281][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.290046][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.297450][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.317244][ T1156] veth1_macvtap: left promiscuous mode [ 146.322929][ T1156] veth0_macvtap: left promiscuous mode [ 146.328517][ T1156] veth1_vlan: left promiscuous mode [ 146.334131][ T1156] veth0_vlan: left promiscuous mode [ 146.684277][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 146.715687][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 147.055447][ T7710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.084044][ T7710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.493758][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 147.517484][ T5933] IPVS: starting estimator thread 0... [ 147.533390][ T7627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.609243][ T7998] IPVS: using max 27 ests per chain, 64800 per kthread [ 147.667559][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 147.740585][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 147.981616][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.003114][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 148.211283][ T5840] Bluetooth: hci3: command tx timeout [ 148.222995][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.306687][ T7627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.397034][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.404248][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.437010][ T7784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.458753][ T7784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.473786][ T7784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.547450][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.554662][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.564636][ T7784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.592965][ T8030] bridge0: port 1(batadv0) entered disabled state [ 148.616484][ T8030] bond0: (slave bridge0): Releasing backup interface [ 148.837724][ T7627] veth0_vlan: entered promiscuous mode [ 148.953198][ T7627] veth1_vlan: entered promiscuous mode [ 149.075585][ T7627] veth0_macvtap: entered promiscuous mode [ 149.104739][ T7627] veth1_macvtap: entered promiscuous mode [ 149.145892][ T7784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.178994][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.216081][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.243060][ T7627] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.254857][ T7627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.266958][ T7627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.280506][ T7627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.297400][ T7784] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.344085][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.351308][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.380714][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.387871][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.543998][ T8065] virt_wifi0 speed is unknown, defaulting to 1000 [ 149.554120][ T8062] tipc: Enabling of bearer rejected, failed to enable media [ 149.577835][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.642689][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.659852][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.833778][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.878566][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.106589][ T7710] veth0_vlan: entered promiscuous mode [ 150.154787][ T7710] veth1_vlan: entered promiscuous mode [ 150.345790][ T7710] veth0_macvtap: entered promiscuous mode [ 150.373782][ T7710] veth1_macvtap: entered promiscuous mode [ 150.483869][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.546705][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.589698][ T7784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.600719][ T7710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.632873][ T7710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.652745][ T7710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.675487][ T7710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.777540][ T3484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.915863][ T3484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.017238][ T3484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.061795][ T7784] veth0_vlan: entered promiscuous mode [ 151.088185][ T7784] veth1_vlan: entered promiscuous mode [ 151.103324][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.126289][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.193926][ T3484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.231159][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.241023][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.290679][ T7784] veth0_macvtap: entered promiscuous mode [ 151.304780][ T7784] veth1_macvtap: entered promiscuous mode [ 151.364186][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.436844][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.546252][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 151.626698][ T7784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.671167][ T7784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.703838][ T7784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.723050][ T7784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.959530][ T3484] bridge_slave_1: left allmulticast mode [ 151.965217][ T3484] bridge_slave_1: left promiscuous mode [ 152.001944][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.042027][ T3484] bridge_slave_0: left allmulticast mode [ 152.047753][ T3484] bridge_slave_0: left promiscuous mode [ 152.079326][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.157788][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.173165][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.184825][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.193353][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.202953][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.528382][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 152.904781][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.922200][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.935594][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.946545][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.957578][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.966852][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.997093][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.008964][ T3484] bond0 (unregistering): Released all slaves [ 153.272446][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.288715][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.321434][ T8145] virt_wifi0 speed is unknown, defaulting to 1000 [ 153.398700][ T8187] netlink: 72 bytes leftover after parsing attributes in process `syz.3.459'. [ 153.419409][ T8187] netlink: 72 bytes leftover after parsing attributes in process `syz.3.459'. [ 153.438842][ T8176] virt_wifi0 speed is unknown, defaulting to 1000 [ 153.511678][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.530095][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.595740][ T3484] hsr_slave_0: left promiscuous mode [ 153.611755][ T3484] hsr_slave_1: left promiscuous mode [ 153.619538][ T8196] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 153.627294][ T8196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.462'. [ 153.629210][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.670196][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.678828][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.691922][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.722436][ T3484] veth1_macvtap: left promiscuous mode [ 153.728157][ T3484] veth0_macvtap: left promiscuous mode [ 153.738077][ T3484] veth1_vlan: left promiscuous mode [ 153.747385][ T3484] veth0_vlan: left promiscuous mode [ 154.303107][ T5840] Bluetooth: hci0: command tx timeout [ 154.378828][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 154.411674][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 154.734477][ T8196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.744175][ T8196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.753371][ T8196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.764191][ T8196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.777930][ T8196] team0: Port device geneve0 added [ 155.004354][ T5840] Bluetooth: hci2: command tx timeout [ 155.463753][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 155.573639][ T8145] chnl_net:caif_netlink_parms(): no params data found [ 155.678176][ T8176] chnl_net:caif_netlink_parms(): no params data found [ 155.991379][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.000078][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.007265][ T8145] bridge_slave_0: entered allmulticast mode [ 156.014706][ T8145] bridge_slave_0: entered promiscuous mode [ 156.023717][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.032368][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.039899][ T8145] bridge_slave_1: entered allmulticast mode [ 156.047322][ T8145] bridge_slave_1: entered promiscuous mode [ 156.135376][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.147714][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.171669][ T3484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.186922][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.198462][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.205944][ T8176] bridge_slave_0: entered allmulticast mode [ 156.214976][ T8176] bridge_slave_0: entered promiscuous mode [ 156.262285][ T3484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.285112][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.292856][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.300917][ T8176] bridge_slave_1: entered allmulticast mode [ 156.308056][ T8176] bridge_slave_1: entered promiscuous mode [ 156.334763][ T8145] team0: Port device team_slave_0 added [ 156.354613][ T3484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.369872][ T5840] Bluetooth: hci0: command tx timeout [ 156.387593][ T8145] team0: Port device team_slave_1 added [ 156.415791][ T8176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.441434][ T3484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.471997][ T8176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.567163][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.592853][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.643234][ T8145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.656868][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.664539][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.691309][ T8145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.812301][ T8176] team0: Port device team_slave_0 added [ 156.967126][ T8176] team0: Port device team_slave_1 added [ 157.076337][ T8145] hsr_slave_0: entered promiscuous mode [ 157.091279][ T5840] Bluetooth: hci2: command tx timeout [ 157.110912][ T8145] hsr_slave_1: entered promiscuous mode [ 157.313303][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.329074][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.337103][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.345929][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.354210][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.385658][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.396185][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.425056][ T8176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.488462][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.496019][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.522393][ T8176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.757305][ T3484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.805333][ T8176] hsr_slave_0: entered promiscuous mode [ 157.836041][ T8176] hsr_slave_1: entered promiscuous mode [ 157.847411][ T8176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.857213][ T8176] Cannot create hsr debugfs directory [ 157.874843][ T8290] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.944424][ T3484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.991705][ T8313] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 158.077906][ T3484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.166438][ T8310] virt_wifi0 speed is unknown, defaulting to 1000 [ 158.233180][ T3484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.439793][ T5840] Bluetooth: hci0: command tx timeout [ 158.636653][ T3484] bridge_slave_1: left allmulticast mode [ 158.649598][ T3484] bridge_slave_1: left promiscuous mode [ 158.659910][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.675094][ T3484] bridge_slave_0: left allmulticast mode [ 158.681841][ T3484] bridge_slave_0: left promiscuous mode [ 158.687620][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.699706][ T3484] bridge_slave_1: left allmulticast mode [ 158.705367][ T3484] bridge_slave_1: left promiscuous mode [ 158.711314][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.720755][ T3484] bridge_slave_0: left allmulticast mode [ 158.726449][ T3484] bridge_slave_0: left promiscuous mode [ 158.732716][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.921147][ T11] block nbd4: Possible stuck request ffff888024afe000: control (read@0,4096B). Runtime 30 seconds [ 159.160741][ T5840] Bluetooth: hci2: command tx timeout [ 159.182271][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.193108][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.203122][ T3484] bond0 (unregistering): Released all slaves [ 159.278149][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.289227][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.299480][ T3484] bond0 (unregistering): Released all slaves [ 159.402813][ T5840] Bluetooth: hci3: command tx timeout [ 159.537683][ T8290] chnl_net:caif_netlink_parms(): no params data found [ 159.676443][ T8333] netlink: 'syz.4.480': attribute type 18 has an invalid length. [ 159.716032][ T8145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.757771][ T8145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.847294][ T8337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.480'. [ 159.875426][ T8145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.067291][ T8145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.338717][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.366246][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.409256][ T8290] bridge_slave_0: entered allmulticast mode [ 160.416758][ T8290] bridge_slave_0: entered promiscuous mode [ 160.476075][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.513132][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.527928][ T5840] Bluetooth: hci0: command tx timeout [ 160.542073][ T8290] bridge_slave_1: entered allmulticast mode [ 160.561385][ T8290] bridge_slave_1: entered promiscuous mode [ 160.649300][ T3484] hsr_slave_0: left promiscuous mode [ 160.667489][ T3484] hsr_slave_1: left promiscuous mode [ 160.674410][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.688694][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.703975][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.714921][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.727894][ T3484] hsr_slave_0: left promiscuous mode [ 160.734221][ T3484] hsr_slave_1: left promiscuous mode [ 160.743077][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.752925][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.765468][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.778363][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.843251][ T3484] veth1_macvtap: left promiscuous mode [ 160.848954][ T3484] veth0_macvtap: left promiscuous mode [ 160.858528][ T3484] veth1_vlan: left promiscuous mode [ 160.867086][ T3484] veth0_vlan: left promiscuous mode [ 160.876498][ T3484] veth1_macvtap: left promiscuous mode [ 160.882278][ T3484] veth0_macvtap: left promiscuous mode [ 160.888032][ T3484] veth1_vlan: left promiscuous mode [ 160.895783][ T3484] veth0_vlan: left promiscuous mode [ 161.240163][ T5840] Bluetooth: hci2: command tx timeout [ 161.479367][ T5840] Bluetooth: hci3: command tx timeout [ 161.699561][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 161.744138][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 162.689901][ T3484] team0 (unregistering): Port device team_slave_1 removed [ 162.728175][ T3484] team0 (unregistering): Port device team_slave_0 removed [ 163.204041][ T8436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.487'. [ 163.221058][ T8290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.265748][ T8290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.475280][ T8455] netlink: 108 bytes leftover after parsing attributes in process `syz.4.491'. [ 163.487274][ T8290] team0: Port device team_slave_0 added [ 163.502088][ T8455] netlink: 108 bytes leftover after parsing attributes in process `syz.4.491'. [ 163.527346][ T8290] team0: Port device team_slave_1 added [ 163.535476][ T8455] netlink: 108 bytes leftover after parsing attributes in process `syz.4.491'. [ 163.559461][ T5840] Bluetooth: hci3: command tx timeout [ 163.579781][ T8459] netlink: 108 bytes leftover after parsing attributes in process `syz.4.491'. [ 163.609255][ T8459] netlink: 108 bytes leftover after parsing attributes in process `syz.4.491'. [ 163.618231][ T8459] netlink: 108 bytes leftover after parsing attributes in process `syz.4.491'. [ 163.679898][ T8176] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.715397][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.746359][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.815718][ T8290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.832541][ T8176] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.870814][ T8176] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.895180][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.912794][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.946107][ T8290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.973433][ T8176] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.002587][ T8464] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 164.024777][ T8464] netlink: 244 bytes leftover after parsing attributes in process `syz.4.492'. [ 164.117167][ T8290] hsr_slave_0: entered promiscuous mode [ 164.125961][ T8290] hsr_slave_1: entered promiscuous mode [ 164.135898][ T8290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.147703][ T8290] Cannot create hsr debugfs directory [ 164.395925][ T30] audit: type=1800 audit(1747097836.945:2): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.497" name="memory.events" dev="tmpfs" ino=1020 res=0 errno=0 [ 164.544095][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.673311][ T8145] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.753493][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.760728][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.903315][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.910513][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.220193][ T8176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.449985][ T8176] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.535383][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.542598][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.607695][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.615029][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.644131][ T5840] Bluetooth: hci3: command tx timeout [ 165.778791][ T8290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.854236][ T8290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.874170][ T8290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.907362][ T8145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.926632][ T8290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.348147][ T8145] veth0_vlan: entered promiscuous mode [ 166.385096][ T8176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.408223][ T8290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.437009][ T8145] veth1_vlan: entered promiscuous mode [ 166.481996][ T8290] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.515073][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.522230][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.561704][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.568841][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.634747][ T8567] xt_socket: unknown flags 0x50 [ 166.668477][ T8145] veth0_macvtap: entered promiscuous mode [ 166.704894][ T8176] veth0_vlan: entered promiscuous mode [ 166.715266][ T8145] veth1_macvtap: entered promiscuous mode [ 166.758903][ T8290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.785895][ T8176] veth1_vlan: entered promiscuous mode [ 166.807652][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.832798][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.867842][ T8145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.877747][ T8145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.890940][ T8145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.903675][ T8145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.938493][ T8176] veth0_macvtap: entered promiscuous mode [ 166.979806][ T8176] veth1_macvtap: entered promiscuous mode [ 167.115292][ T8582] sch_fq: defrate 0 ignored. [ 167.137771][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.146906][ T8582] netlink: 52 bytes leftover after parsing attributes in process `syz.4.512'. [ 167.216778][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.224774][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.251625][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.284139][ T8176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.296169][ T8176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.305756][ T8176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.315578][ T8176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.366310][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.379999][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.390717][ T8290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.526346][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.536654][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.656012][ T8290] veth0_vlan: entered promiscuous mode [ 167.668787][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.678685][ T8290] veth1_vlan: entered promiscuous mode [ 167.685064][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.871325][ T1156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.932074][ T8290] veth0_macvtap: entered promiscuous mode [ 167.977673][ T1156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.002027][ T8290] veth1_macvtap: entered promiscuous mode [ 168.035078][ T8290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.077652][ T8290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.116513][ T1156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.138588][ T8290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.147664][ T8290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.157178][ T8290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.166117][ T8290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.233942][ T1156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.316240][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.328645][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.396123][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.405041][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.518880][ T1156] bridge_slave_1: left allmulticast mode [ 168.573606][ T1156] bridge_slave_1: left promiscuous mode [ 168.583055][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.605219][ T1156] bridge_slave_0: left allmulticast mode [ 168.612656][ T1156] bridge_slave_0: left promiscuous mode [ 168.618471][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.928490][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.936676][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.945798][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.954216][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.963013][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.035689][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.048332][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.058502][ T1156] bond0 (unregistering): Released all slaves [ 169.135388][ T8597] netlink: 7 bytes leftover after parsing attributes in process `syz.4.516'. [ 169.184679][ T8596] netlink: 7 bytes leftover after parsing attributes in process `syz.4.516'. [ 169.338485][ T8600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.517'. [ 169.353627][ T8600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.517'. [ 169.387801][ T8592] virt_wifi0 speed is unknown, defaulting to 1000 [ 169.421090][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 169.762859][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.778395][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.786298][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.795263][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.811532][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.838658][ T1156] hsr_slave_0: left promiscuous mode [ 169.851419][ T1156] hsr_slave_1: left promiscuous mode [ 169.857487][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.868361][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.887397][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.898718][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.934627][ T1156] veth1_macvtap: left promiscuous mode [ 169.940467][ T1156] veth0_macvtap: left promiscuous mode [ 169.946213][ T1156] veth1_vlan: left promiscuous mode [ 169.957338][ T1156] veth0_vlan: left promiscuous mode [ 170.399226][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 170.433813][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 170.801924][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.810918][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.827166][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.836604][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.851470][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.014592][ T5840] Bluetooth: hci0: command tx timeout [ 171.022171][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.518'. [ 171.162683][ T8622] virt_wifi0 speed is unknown, defaulting to 1000 [ 171.243549][ T8608] virt_wifi0 speed is unknown, defaulting to 1000 [ 171.476704][ T8592] chnl_net:caif_netlink_parms(): no params data found [ 171.758755][ T1156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.775599][ T8645] netlink: 'syz.4.521': attribute type 33 has an invalid length. [ 171.880038][ T5840] Bluetooth: hci2: command tx timeout [ 171.921232][ T1156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.972724][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 172.009405][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.016760][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.025327][ T8592] bridge_slave_0: entered allmulticast mode [ 172.035866][ T8592] bridge_slave_0: entered promiscuous mode [ 172.064510][ T1156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.192298][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.205415][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.215355][ T8592] bridge_slave_1: entered allmulticast mode [ 172.226371][ T8592] bridge_slave_1: entered promiscuous mode [ 172.291742][ T1156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.396534][ T8592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.457851][ T8622] chnl_net:caif_netlink_parms(): no params data found [ 172.497602][ T8592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.625361][ T8592] team0: Port device team_slave_0 added [ 172.723617][ T8592] team0: Port device team_slave_1 added [ 172.895057][ T8703] netlink: 92 bytes leftover after parsing attributes in process `syz.4.527'. [ 172.919377][ T5840] Bluetooth: hci3: command tx timeout [ 172.950316][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.957306][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.990208][ T8592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.015037][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.029686][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.080414][ T5840] Bluetooth: hci0: command tx timeout [ 173.092110][ T8592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.157894][ T8608] chnl_net:caif_netlink_parms(): no params data found [ 173.185051][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.194249][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.201915][ T8622] bridge_slave_0: entered allmulticast mode [ 173.220913][ T8622] bridge_slave_0: entered promiscuous mode [ 173.238865][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.248843][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.256444][ T8622] bridge_slave_1: entered allmulticast mode [ 173.264482][ T8622] bridge_slave_1: entered promiscuous mode [ 173.412532][ T1156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.494291][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.541789][ T1156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.564774][ T8717] netlink: 232 bytes leftover after parsing attributes in process `syz.4.529'. [ 173.607440][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.633811][ T8592] hsr_slave_0: entered promiscuous mode [ 173.644245][ T8592] hsr_slave_1: entered promiscuous mode [ 173.714693][ T8719] IPVS: persistence engine module ip_vs_pe_À not found [ 173.770806][ T1156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.858862][ T8622] team0: Port device team_slave_0 added [ 173.859746][ T8733] Bluetooth: MGMT ver 1.23 [ 173.898878][ T1156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.928887][ T8622] team0: Port device team_slave_1 added [ 173.959622][ T5840] Bluetooth: hci2: command tx timeout [ 174.095711][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 174.200375][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.207597][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.219427][ T8608] bridge_slave_0: entered allmulticast mode [ 174.230766][ T8608] bridge_slave_0: entered promiscuous mode [ 174.254991][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.272839][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.284737][ T8744] xt_CT: No such helper "syz1" [ 174.295348][ T8608] bridge_slave_1: entered allmulticast mode [ 174.311286][ T8608] bridge_slave_1: entered promiscuous mode [ 174.330110][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.343563][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.381670][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.534093][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.550639][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.614582][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.754358][ T8759] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.808474][ T8608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.849584][ T8608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.913618][ T8761] xt_ecn: cannot match TCP bits for non-tcp packets [ 175.000317][ T5840] Bluetooth: hci3: command tx timeout [ 175.105466][ T8622] hsr_slave_0: entered promiscuous mode [ 175.112299][ T8622] hsr_slave_1: entered promiscuous mode [ 175.118546][ T8622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.126194][ T8622] Cannot create hsr debugfs directory [ 175.159482][ T5840] Bluetooth: hci0: command tx timeout [ 175.165363][ T8608] team0: Port device team_slave_0 added [ 175.240296][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 175.263720][ T8608] team0: Port device team_slave_1 added [ 175.420655][ T1156] bridge_slave_1: left allmulticast mode [ 175.426452][ T1156] bridge_slave_1: left promiscuous mode [ 175.432449][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.442378][ T1156] bridge_slave_0: left allmulticast mode [ 175.448820][ T1156] bridge_slave_0: left promiscuous mode [ 175.455040][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.469774][ T1156] bridge_slave_1: left allmulticast mode [ 175.475420][ T1156] bridge_slave_1: left promiscuous mode [ 175.481882][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.492675][ T1156] bridge_slave_0: left allmulticast mode [ 175.498312][ T1156] bridge_slave_0: left promiscuous mode [ 175.504580][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.040483][ T5840] Bluetooth: hci2: command tx timeout [ 176.064930][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.076016][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.086137][ T1156] bond0 (unregistering): Released all slaves [ 176.170686][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.181606][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.192324][ T1156] bond0 (unregistering): Released all slaves [ 176.301900][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.310476][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.365482][ T8608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.380717][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.387693][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.414190][ T8608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.484341][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.544'. [ 176.547859][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 176.559248][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 176.588384][ T8608] hsr_slave_0: entered promiscuous mode [ 176.611579][ T8608] hsr_slave_1: entered promiscuous mode [ 176.617939][ T8608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.642097][ T8608] Cannot create hsr debugfs directory [ 177.085782][ T5840] Bluetooth: hci3: command tx timeout [ 177.240615][ T5840] Bluetooth: hci0: command tx timeout [ 177.286112][ T1156] hsr_slave_0: left promiscuous mode [ 177.314325][ T1156] hsr_slave_1: left promiscuous mode [ 177.322668][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.330594][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.346871][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.357255][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.377559][ T1156] hsr_slave_0: left promiscuous mode [ 177.388540][ T1156] hsr_slave_1: left promiscuous mode [ 177.397241][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.408884][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.424094][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.433428][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.498030][ T1156] veth1_macvtap: left promiscuous mode [ 177.507418][ T1156] veth0_macvtap: left promiscuous mode [ 177.515121][ T1156] veth1_vlan: left promiscuous mode [ 177.524321][ T1156] veth0_vlan: left promiscuous mode [ 177.533042][ T1156] veth1_macvtap: left promiscuous mode [ 177.538702][ T1156] veth0_macvtap: left promiscuous mode [ 177.548855][ T1156] veth1_vlan: left promiscuous mode [ 177.556525][ T1156] veth0_vlan: left promiscuous mode [ 178.136616][ T5840] Bluetooth: hci2: command tx timeout [ 178.173323][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 178.207396][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 178.786615][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 178.818460][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 179.111528][ T8592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.124866][ T8592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.137842][ T8592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.159353][ T5840] Bluetooth: hci3: command tx timeout [ 179.252259][ T8592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.271848][ T8792] virt_wifi0 speed is unknown, defaulting to 1000 [ 179.334984][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'. [ 179.582523][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 179.646350][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 179.706838][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 179.748790][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 179.834568][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 179.858277][ T8592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.876363][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 179.940700][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 179.960539][ T8592] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.980082][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 180.018848][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.555'. [ 180.023722][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.035017][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.072013][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.079328][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.442616][ T8622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.502463][ T8622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.538642][ T8622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.622293][ T8622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.861818][ T8608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.885498][ T8608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.904999][ T8592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.924056][ T8608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.945353][ T8608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.075820][ T8592] veth0_vlan: entered promiscuous mode [ 181.106496][ T8592] veth1_vlan: entered promiscuous mode [ 181.233991][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.304448][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.340678][ T8592] veth0_macvtap: entered promiscuous mode [ 181.363628][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.370865][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.382092][ T8874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.388505][ T8592] veth1_macvtap: entered promiscuous mode [ 181.428142][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.435322][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.523710][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.554976][ T8608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.592384][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.627868][ T8608] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.643986][ T8592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.669352][ T8592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.678538][ T8592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.703471][ T8592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.745902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.753169][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.817936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.825214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.072372][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.091749][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.187693][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.198543][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.211231][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.351042][ T8622] veth0_vlan: entered promiscuous mode [ 182.400610][ T8622] veth1_vlan: entered promiscuous mode [ 182.501796][ T8622] veth0_macvtap: entered promiscuous mode [ 182.534511][ T8622] veth1_macvtap: entered promiscuous mode [ 182.585845][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.618672][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.676627][ T8622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.686586][ T8622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.696095][ T8622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.705266][ T8622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.803998][ T8608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.037652][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.066484][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.087284][ T8608] veth0_vlan: entered promiscuous mode [ 183.134809][ T8608] veth1_vlan: entered promiscuous mode [ 183.145685][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.165913][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.251095][ T3434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.278710][ T8927] netlink: 'syz.4.584': attribute type 32 has an invalid length. [ 183.366664][ T8927] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 183.456890][ T3434] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.576319][ T3434] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.603702][ T8608] veth0_macvtap: entered promiscuous mode [ 183.616476][ T8608] veth1_macvtap: entered promiscuous mode [ 183.662034][ T3434] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.687490][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.725367][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.754685][ T8608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.765642][ T8608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.780299][ T8608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.792101][ T8608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.994513][ T3434] bridge_slave_1: left allmulticast mode [ 184.009200][ T3434] bridge_slave_1: left promiscuous mode [ 184.014975][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.027227][ T3434] bridge_slave_0: left allmulticast mode [ 184.034013][ T3434] bridge_slave_0: left promiscuous mode [ 184.041007][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.364898][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.374136][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.393007][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.412351][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.422723][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.480987][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.492463][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.505126][ T3434] bond0 (unregistering): Released all slaves [ 184.530557][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.546067][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.608039][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.618243][ T8930] virt_wifi0 speed is unknown, defaulting to 1000 [ 184.627922][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.893001][ T8942] netlink: 'syz.3.585': attribute type 5 has an invalid length. [ 185.006606][ T8947] __nla_validate_parse: 63 callbacks suppressed [ 185.006627][ T8947] netlink: 56 bytes leftover after parsing attributes in process `syz.4.587'. [ 185.301221][ T3434] hsr_slave_0: left promiscuous mode [ 185.322693][ T3434] hsr_slave_1: left promiscuous mode [ 185.328788][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.349093][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.419559][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.427015][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.484661][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.498788][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.507791][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.519624][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.527301][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.553315][ T3434] veth1_macvtap: left promiscuous mode [ 185.559912][ T3434] veth0_macvtap: left promiscuous mode [ 185.565684][ T3434] veth1_vlan: left promiscuous mode [ 185.572207][ T3434] veth0_vlan: left promiscuous mode [ 185.687435][ T8972] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 186.313729][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 186.367256][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 186.520588][ T5842] Bluetooth: hci0: command tx timeout [ 186.802446][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 186.855898][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 186.909549][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.920568][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.940860][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.956534][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.965123][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.155363][ T8972] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 187.194002][ T9003] xfrm2: entered promiscuous mode [ 187.215752][ T9003] xfrm2: entered allmulticast mode [ 187.304345][ T9007] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.496485][ T8963] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.562102][ T5842] Bluetooth: hci2: command tx timeout [ 187.625185][ T9024] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.767411][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 187.844720][ T8930] chnl_net:caif_netlink_parms(): no params data found [ 188.078086][ T9049] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 188.100825][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 188.175319][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 188.210474][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 188.215159][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 188.228933][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 188.240478][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 188.383797][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.399544][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.406823][ T8930] bridge_slave_0: entered allmulticast mode [ 188.415122][ T8930] bridge_slave_0: entered promiscuous mode [ 188.430015][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.437280][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.445137][ T8930] bridge_slave_1: entered allmulticast mode [ 188.455603][ T8930] bridge_slave_1: entered promiscuous mode [ 188.513757][ T3434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.578512][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 188.599561][ T5842] Bluetooth: hci0: command tx timeout [ 188.660663][ T9072] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 188.714921][ T3434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.750397][ T8930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.765558][ T8930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.886401][ T3434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.926490][ T8930] team0: Port device team_slave_0 added [ 188.999654][ T11] block nbd4: Possible stuck request ffff888024afe000: control (read@0,4096B). Runtime 60 seconds [ 189.010741][ T5842] Bluetooth: hci3: command tx timeout [ 189.075714][ T3434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.113584][ T8930] team0: Port device team_slave_1 added [ 189.196226][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.204739][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.213218][ T9007] bridge_slave_0: entered allmulticast mode [ 189.222109][ T9007] bridge_slave_0: entered promiscuous mode [ 189.270816][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.278160][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.292151][ T9007] bridge_slave_1: entered allmulticast mode [ 189.305045][ T9096] netlink: 'syz.4.611': attribute type 11 has an invalid length. [ 189.311076][ T9007] bridge_slave_1: entered promiscuous mode [ 189.361508][ T8963] chnl_net:caif_netlink_parms(): no params data found [ 189.456691][ T8930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.464896][ T8930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.495135][ T8930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.509195][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.522309][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.595648][ T8930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.609868][ T8930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.640066][ T5842] Bluetooth: hci2: command tx timeout [ 189.654380][ T8930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.765250][ T9007] team0: Port device team_slave_0 added [ 189.774219][ T9007] team0: Port device team_slave_1 added [ 189.826662][ T8930] hsr_slave_0: entered promiscuous mode [ 189.834745][ T8930] hsr_slave_1: entered promiscuous mode [ 189.880987][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.888675][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.896335][ T8963] bridge_slave_0: entered allmulticast mode [ 189.905172][ T8963] bridge_slave_0: entered promiscuous mode [ 189.928822][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.936114][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.962285][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.990021][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.997160][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.004534][ T8963] bridge_slave_1: entered allmulticast mode [ 190.012903][ T8963] bridge_slave_1: entered promiscuous mode [ 190.022689][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.031895][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.058209][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.206929][ T3434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.227055][ T8963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.240116][ T8963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.277059][ T9007] hsr_slave_0: entered promiscuous mode [ 190.289674][ T9007] hsr_slave_1: entered promiscuous mode [ 190.311629][ T9007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.319629][ T9007] Cannot create hsr debugfs directory [ 190.395303][ T3434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.429864][ T8963] team0: Port device team_slave_0 added [ 190.438537][ T8963] team0: Port device team_slave_1 added [ 190.544048][ T3434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.584624][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.591779][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.619234][ T8963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.679301][ T5842] Bluetooth: hci0: command tx timeout [ 190.686421][ T3434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.705619][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.712751][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.739730][ T8963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.778901][ T9119] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 190.795896][ T9120] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 190.890097][ T9119] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 191.047574][ T9128] bond0: entered allmulticast mode [ 191.061910][ T9128] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 191.079234][ T5842] Bluetooth: hci3: command tx timeout [ 191.086348][ T9128] __nla_validate_parse: 35 callbacks suppressed [ 191.086373][ T9128] netlink: 252 bytes leftover after parsing attributes in process `syz.4.618'. [ 191.126103][ T8963] hsr_slave_0: entered promiscuous mode [ 191.133261][ T8963] hsr_slave_1: entered promiscuous mode [ 191.146563][ T8963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.154509][ T8963] Cannot create hsr debugfs directory [ 191.526409][ T9142] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 191.553281][ T9142] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 191.609234][ T9142] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 191.646697][ T3434] bridge_slave_1: left allmulticast mode [ 191.660444][ T3434] bridge_slave_1: left promiscuous mode [ 191.666430][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.686243][ T3434] bridge_slave_0: left allmulticast mode [ 191.693974][ T3434] bridge_slave_0: left promiscuous mode [ 191.703807][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.717901][ T3434] bridge_slave_1: left allmulticast mode [ 191.728502][ T3434] bridge_slave_1: left promiscuous mode [ 191.729442][ T5842] Bluetooth: hci2: command tx timeout [ 191.743480][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.765742][ T3434] bridge_slave_0: left allmulticast mode [ 191.777533][ T3434] bridge_slave_0: left promiscuous mode [ 191.783522][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.463638][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.475160][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.485244][ T3434] bond0 (unregistering): Released all slaves [ 192.561435][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.574311][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.584164][ T3434] bond0 (unregistering): Released all slaves [ 192.745865][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.624'. [ 192.770971][ T5842] Bluetooth: hci0: command tx timeout [ 193.102904][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 193.159296][ T5842] Bluetooth: hci3: command tx timeout [ 193.515452][ T9204] openvswitch: netlink: Flow key attr not present in new flow. [ 193.528136][ T9204] netlink: 48 bytes leftover after parsing attributes in process `syz.4.633'. [ 193.543642][ T9204] netlink: 48 bytes leftover after parsing attributes in process `syz.4.633'. [ 193.578069][ T9204] tipc: Enabled bearer , priority 0 [ 193.608427][ T9204] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 193.627646][ T9204] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 193.644503][ T9204] tipc: Resetting bearer [ 193.686590][ T3434] hsr_slave_0: left promiscuous mode [ 193.693365][ T3434] hsr_slave_1: left promiscuous mode [ 193.703949][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.713810][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.727700][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.736829][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.754977][ T3434] hsr_slave_0: left promiscuous mode [ 193.764029][ T3434] hsr_slave_1: left promiscuous mode [ 193.770472][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.778107][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.786544][ T3434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.794279][ T3434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.801879][ T5842] Bluetooth: hci2: command tx timeout [ 193.831969][ T3434] veth1_macvtap: left promiscuous mode [ 193.837514][ T3434] veth0_macvtap: left promiscuous mode [ 193.843469][ T3434] veth1_vlan: left promiscuous mode [ 193.848811][ T3434] veth0_vlan: left promiscuous mode [ 193.855914][ T3434] veth1_macvtap: left promiscuous mode [ 193.861615][ T3434] veth0_macvtap: left promiscuous mode [ 193.867234][ T3434] veth1_vlan: left promiscuous mode [ 193.872948][ T3434] veth0_vlan: left promiscuous mode [ 194.123406][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.132649][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.329868][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 194.362203][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 194.902972][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 194.943084][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 195.239177][ T5842] Bluetooth: hci3: command tx timeout [ 195.269232][ T9007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.318200][ T9007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.344493][ T9007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.363094][ T9007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.473635][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 195.726842][ T9224] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 195.765671][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.858027][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.881105][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.888261][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.924039][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.931291][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.221557][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.264246][ T9007] veth0_vlan: entered promiscuous mode [ 196.276761][ T9007] veth1_vlan: entered promiscuous mode [ 196.307816][ T9007] veth0_macvtap: entered promiscuous mode [ 196.317399][ T9007] veth1_macvtap: entered promiscuous mode [ 196.336603][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.352589][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.366357][ T9007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.375595][ T9007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.385246][ T9007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.394108][ T9007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.869530][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 196.878365][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 197.103157][ T9238] xt_CT: No such helper "snmp_trap" [ 199.066545][ T5203] udevd[5203]: worker [6706] /devices/virtual/block/nbd4 is taking a long time [ 206.443393][ T56] Bluetooth: hci4: command 0x0406 tx timeout [ 206.449612][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.186791][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.196955][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.204775][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.213202][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.221180][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.255273][ T9247] virt_wifi0 speed is unknown, defaulting to 1000 [ 211.396666][ T9247] chnl_net:caif_netlink_parms(): no params data found [ 211.503080][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.510417][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.517615][ T9247] bridge_slave_0: entered allmulticast mode [ 211.525992][ T9247] bridge_slave_0: entered promiscuous mode [ 211.534883][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.543033][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.550582][ T9247] bridge_slave_1: entered allmulticast mode [ 211.557895][ T9247] bridge_slave_1: entered promiscuous mode [ 211.594224][ T9247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.606414][ T9247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.642875][ T9247] team0: Port device team_slave_0 added [ 211.652500][ T9247] team0: Port device team_slave_1 added [ 211.683505][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.690969][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.717501][ T9247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.730451][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.737442][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.763634][ T9247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.815552][ T9247] hsr_slave_0: entered promiscuous mode [ 211.822328][ T9247] hsr_slave_1: entered promiscuous mode [ 211.828521][ T9247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.837089][ T9247] Cannot create hsr debugfs directory [ 213.214345][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.222873][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.231399][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.239514][ T5842] Bluetooth: hci5: command tx timeout [ 213.247786][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.256063][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.298090][ T9256] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.450173][ T9256] chnl_net:caif_netlink_parms(): no params data found [ 213.538817][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.546188][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.553811][ T9256] bridge_slave_0: entered allmulticast mode [ 213.561323][ T9256] bridge_slave_0: entered promiscuous mode [ 213.569624][ T9256] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.576804][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.584936][ T9256] bridge_slave_1: entered allmulticast mode [ 213.593020][ T9256] bridge_slave_1: entered promiscuous mode [ 213.627054][ T9256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.638716][ T9256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.677195][ T9256] team0: Port device team_slave_0 added [ 213.686507][ T9256] team0: Port device team_slave_1 added [ 213.717359][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.724659][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.752277][ T9256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.765094][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.772098][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.799457][ T9256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.849472][ T9256] hsr_slave_0: entered promiscuous mode [ 213.855868][ T9256] hsr_slave_1: entered promiscuous mode [ 213.863927][ T9256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.871691][ T9256] Cannot create hsr debugfs directory [ 215.319367][ T5840] Bluetooth: hci6: command tx timeout [ 215.329422][ T5840] Bluetooth: hci5: command tx timeout [ 217.399276][ T5840] Bluetooth: hci5: command tx timeout [ 217.399383][ T5842] Bluetooth: hci6: command tx timeout [ 219.099127][ T11] block nbd4: Possible stuck request ffff888024afe000: control (read@0,4096B). Runtime 90 seconds [ 219.479237][ T5842] Bluetooth: hci6: command tx timeout [ 219.479272][ T5840] Bluetooth: hci5: command tx timeout [ 221.559401][ T5840] Bluetooth: hci6: command tx timeout [ 246.077080][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.085288][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.093610][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.105401][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.113526][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.154568][ T9265] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.305663][ T9265] chnl_net:caif_netlink_parms(): no params data found [ 246.388258][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.395688][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.402993][ T9265] bridge_slave_0: entered allmulticast mode [ 246.411284][ T9265] bridge_slave_0: entered promiscuous mode [ 246.421159][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.428291][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.435743][ T9265] bridge_slave_1: entered allmulticast mode [ 246.443632][ T9265] bridge_slave_1: entered promiscuous mode [ 246.480496][ T9265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.493484][ T9265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.536755][ T9265] team0: Port device team_slave_0 added [ 246.545146][ T9265] team0: Port device team_slave_1 added [ 246.577922][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.585354][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.619104][ T9265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.639804][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.646802][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.679712][ T9265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.782995][ T9265] hsr_slave_0: entered promiscuous mode [ 246.797159][ T9265] hsr_slave_1: entered promiscuous mode [ 246.805377][ T9265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.819496][ T9265] Cannot create hsr debugfs directory [ 246.873602][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 246.882239][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 246.890147][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 246.900458][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 246.908133][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 247.014792][ T9274] virt_wifi0 speed is unknown, defaulting to 1000 [ 247.241392][ T9274] chnl_net:caif_netlink_parms(): no params data found [ 247.377316][ T9274] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.384771][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.392433][ T9274] bridge_slave_0: entered allmulticast mode [ 247.400393][ T9274] bridge_slave_0: entered promiscuous mode [ 247.418606][ T9274] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.426480][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.434482][ T9274] bridge_slave_1: entered allmulticast mode [ 247.442421][ T9274] bridge_slave_1: entered promiscuous mode [ 247.501045][ T9274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.513579][ T9274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.564851][ T9274] team0: Port device team_slave_0 added [ 247.578255][ T9274] team0: Port device team_slave_1 added [ 247.620851][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.627831][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.654580][ T9274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.668054][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.675288][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.701403][ T9274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.756687][ T9274] hsr_slave_0: entered promiscuous mode [ 247.763407][ T9274] hsr_slave_1: entered promiscuous mode [ 247.769847][ T9274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.777428][ T9274] Cannot create hsr debugfs directory [ 248.209463][ T5842] Bluetooth: hci7: command tx timeout [ 248.437780][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 248.446899][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 248.454748][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 248.464159][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 248.475390][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 248.518391][ T9283] virt_wifi0 speed is unknown, defaulting to 1000 [ 248.677944][ T9283] chnl_net:caif_netlink_parms(): no params data found [ 248.774513][ T9283] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.781907][ T9283] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.790839][ T9283] bridge_slave_0: entered allmulticast mode [ 248.798060][ T9283] bridge_slave_0: entered promiscuous mode [ 248.806671][ T9283] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.814283][ T9283] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.821684][ T9283] bridge_slave_1: entered allmulticast mode [ 248.828879][ T9283] bridge_slave_1: entered promiscuous mode [ 248.872547][ T9283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.885311][ T9283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.919410][ T5842] Bluetooth: hci8: command tx timeout [ 248.933522][ T9283] team0: Port device team_slave_0 added [ 248.943632][ T9283] team0: Port device team_slave_1 added [ 248.979778][ T9283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.986759][ T9283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.013592][ T9283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.026280][ T9283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.033415][ T9283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.059504][ T9283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.114390][ T9283] hsr_slave_0: entered promiscuous mode [ 249.121178][ T9283] hsr_slave_1: entered promiscuous mode [ 249.127422][ T9283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.135655][ T9283] Cannot create hsr debugfs directory [ 249.179381][ T11] block nbd4: Possible stuck request ffff888024afe000: control (read@0,4096B). Runtime 120 seconds [ 249.287773][ T9283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.367072][ T9283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.448550][ T9283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.534935][ T9283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.279327][ T5842] Bluetooth: hci7: command tx timeout [ 250.519352][ T5842] Bluetooth: hci9: command tx timeout [ 250.999603][ T5842] Bluetooth: hci8: command tx timeout [ 252.360232][ T5842] Bluetooth: hci7: command tx timeout [ 252.599307][ T5842] Bluetooth: hci9: command tx timeout [ 253.079272][ T5842] Bluetooth: hci8: command tx timeout [ 254.439144][ T5842] Bluetooth: hci7: command tx timeout [ 254.679352][ T5842] Bluetooth: hci9: command tx timeout [ 255.159215][ T5842] Bluetooth: hci8: command tx timeout [ 255.571834][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.578302][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.759316][ T5842] Bluetooth: hci9: command tx timeout [ 271.487560][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 271.497010][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 271.505061][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 271.514036][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 271.524528][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 271.561987][ T9292] virt_wifi0 speed is unknown, defaulting to 1000 [ 271.713543][ T9292] chnl_net:caif_netlink_parms(): no params data found [ 271.806547][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.814026][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.821437][ T9292] bridge_slave_0: entered allmulticast mode [ 271.828588][ T9292] bridge_slave_0: entered promiscuous mode [ 271.836646][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.844683][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.852531][ T9292] bridge_slave_1: entered allmulticast mode [ 271.860270][ T9292] bridge_slave_1: entered promiscuous mode [ 271.898548][ T9292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.912342][ T9292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.950078][ T9292] team0: Port device team_slave_0 added [ 271.962508][ T9292] team0: Port device team_slave_1 added [ 271.998608][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.005808][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.032553][ T9292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.045296][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.052387][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.078790][ T9292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.131524][ T9292] hsr_slave_0: entered promiscuous mode [ 272.138807][ T9292] hsr_slave_1: entered promiscuous mode [ 272.145277][ T9292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.153253][ T9292] Cannot create hsr debugfs directory [ 273.513530][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 273.522238][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 273.530176][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 273.538844][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 273.547396][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 273.560279][ T5842] Bluetooth: hci10: command tx timeout [ 273.593802][ T9301] virt_wifi0 speed is unknown, defaulting to 1000 [ 273.752592][ T9301] chnl_net:caif_netlink_parms(): no params data found [ 273.865628][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.873095][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.881266][ T9301] bridge_slave_0: entered allmulticast mode [ 273.888511][ T9301] bridge_slave_0: entered promiscuous mode [ 273.897969][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.905320][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.912866][ T9301] bridge_slave_1: entered allmulticast mode [ 273.921105][ T9301] bridge_slave_1: entered promiscuous mode [ 273.958543][ T9301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.971653][ T9301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.011793][ T9301] team0: Port device team_slave_0 added [ 274.022185][ T9301] team0: Port device team_slave_1 added [ 274.057494][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.064552][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.090928][ T9301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.103704][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.110714][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.136810][ T9301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.191159][ T9301] hsr_slave_0: entered promiscuous mode [ 274.197602][ T9301] hsr_slave_1: entered promiscuous mode [ 274.204424][ T9301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.212177][ T9301] Cannot create hsr debugfs directory [ 275.559267][ T5842] Bluetooth: hci11: command tx timeout [ 275.639302][ T5842] Bluetooth: hci10: command tx timeout [ 277.639169][ T5842] Bluetooth: hci11: command tx timeout [ 277.719354][ T5842] Bluetooth: hci10: command tx timeout [ 279.239664][ T11] block nbd4: Possible stuck request ffff888024afe000: control (read@0,4096B). Runtime 150 seconds [ 279.729223][ T5842] Bluetooth: hci11: command tx timeout [ 279.799482][ T5842] Bluetooth: hci10: command tx timeout [ 281.799366][ T5842] Bluetooth: hci11: command tx timeout [ 307.477584][ T56] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 307.486638][ T56] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 307.494945][ T56] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 307.504592][ T56] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 307.513903][ T56] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 307.553489][ T9310] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.727032][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 307.823619][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.831282][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.838497][ T9310] bridge_slave_0: entered allmulticast mode [ 307.846020][ T9310] bridge_slave_0: entered promiscuous mode [ 307.856464][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.863733][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.871673][ T9310] bridge_slave_1: entered allmulticast mode [ 307.879189][ T9310] bridge_slave_1: entered promiscuous mode [ 307.917944][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.930723][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.973944][ T9310] team0: Port device team_slave_0 added [ 307.983086][ T9310] team0: Port device team_slave_1 added [ 308.019172][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.026663][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.052847][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.066789][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.073797][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.100600][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.156712][ T9310] hsr_slave_0: entered promiscuous mode [ 308.164037][ T9310] hsr_slave_1: entered promiscuous mode [ 308.170742][ T9310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.178314][ T9310] Cannot create hsr debugfs directory [ 308.840455][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 308.846628][ T56] Bluetooth: hci2: command 0x0406 tx timeout [ 309.239978][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 309.249519][ T5842] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 309.257200][ T5842] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 309.266294][ T5842] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 309.278721][ T5842] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 309.316984][ T9319] virt_wifi0 speed is unknown, defaulting to 1000 [ 309.329127][ T11] block nbd4: Possible stuck request ffff888024afe000: control (read@0,4096B). Runtime 180 seconds [ 309.494168][ T9319] chnl_net:caif_netlink_parms(): no params data found [ 309.559419][ T5840] Bluetooth: hci12: command tx timeout [ 309.602666][ T9319] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.610520][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.617745][ T9319] bridge_slave_0: entered allmulticast mode [ 309.625591][ T9319] bridge_slave_0: entered promiscuous mode [ 309.634308][ T9319] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.642052][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.650084][ T9319] bridge_slave_1: entered allmulticast mode [ 309.658385][ T9319] bridge_slave_1: entered promiscuous mode [ 309.701967][ T9319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.715244][ T9319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.759816][ T9319] team0: Port device team_slave_0 added [ 309.767877][ T9319] team0: Port device team_slave_1 added [ 309.803436][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.810946][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.837289][ T9319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.850745][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.857715][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.884769][ T9319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.971438][ T9319] hsr_slave_0: entered promiscuous mode [ 309.981765][ T9319] hsr_slave_1: entered promiscuous mode [ 309.988485][ T9319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.997397][ T9319] Cannot create hsr debugfs directory [ 310.246943][ T5842] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 310.255868][ T5842] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 310.264089][ T5842] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 310.277182][ T5842] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 310.286838][ T5842] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 310.331359][ T9328] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.585218][ T9328] chnl_net:caif_netlink_parms(): no params data found [ 310.683985][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.691565][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.698778][ T9328] bridge_slave_0: entered allmulticast mode [ 310.706993][ T9328] bridge_slave_0: entered promiscuous mode [ 310.716267][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.724204][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.731720][ T9328] bridge_slave_1: entered allmulticast mode [ 310.739217][ T9328] bridge_slave_1: entered promiscuous mode [ 310.786207][ T9328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.798553][ T9328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.838705][ T9328] team0: Port device team_slave_0 added [ 310.849381][ T9328] team0: Port device team_slave_1 added [ 310.884220][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.891756][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.918427][ T9328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.932706][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.940015][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.966170][ T9328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.020199][ T9328] hsr_slave_0: entered promiscuous mode [ 311.027373][ T9328] hsr_slave_1: entered promiscuous mode [ 311.034029][ T9328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.041713][ T9328] Cannot create hsr debugfs directory [ 311.319393][ T5842] Bluetooth: hci13: command tx timeout [ 311.639993][ T5842] Bluetooth: hci12: command tx timeout [ 312.359210][ T5840] Bluetooth: hci14: command tx timeout [ 313.399101][ T5840] Bluetooth: hci13: command tx timeout [ 313.719272][ T5840] Bluetooth: hci12: command tx timeout [ 313.959148][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 314.439253][ T5842] Bluetooth: hci14: command tx timeout [ 315.479092][ T5842] Bluetooth: hci13: command tx timeout [ 315.809156][ T5842] Bluetooth: hci12: command tx timeout [ 316.529124][ T5842] Bluetooth: hci14: command tx timeout [ 316.973214][ T5203] udevd[5203]: worker [6706] /devices/virtual/block/nbd4 timeout; kill it [ 316.982056][ T5203] udevd[5203]: seq 14367 '/devices/virtual/block/nbd4' killed [ 317.004015][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.010540][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.569274][ T5842] Bluetooth: hci13: command tx timeout [ 318.599193][ T5842] Bluetooth: hci14: command tx timeout [ 332.123226][ T5840] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 332.133305][ T5840] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 332.144182][ T5840] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 332.155107][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 332.164862][ T5840] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 332.222560][ T9337] virt_wifi0 speed is unknown, defaulting to 1000 [ 332.425886][ T9337] chnl_net:caif_netlink_parms(): no params data found [ 332.535646][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.544067][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.552270][ T9337] bridge_slave_0: entered allmulticast mode [ 332.560716][ T9337] bridge_slave_0: entered promiscuous mode [ 332.570330][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.577633][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.585584][ T9337] bridge_slave_1: entered allmulticast mode [ 332.594068][ T9337] bridge_slave_1: entered promiscuous mode [ 332.639905][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.652708][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.704002][ T9337] team0: Port device team_slave_0 added [ 332.713787][ T9337] team0: Port device team_slave_1 added [ 332.757166][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.764757][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.791470][ T9337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.805018][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.812149][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.839512][ T9337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.900297][ T9337] hsr_slave_0: entered promiscuous mode [ 332.907455][ T9337] hsr_slave_1: entered promiscuous mode [ 332.914926][ T9337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.923802][ T9337] Cannot create hsr debugfs directory [ 334.125077][ T56] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 334.140333][ T56] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 334.148644][ T56] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 334.157702][ T56] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 334.167617][ T56] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 334.199151][ T5840] Bluetooth: hci15: command tx timeout [ 334.207339][ T9346] virt_wifi0 speed is unknown, defaulting to 1000 [ 334.379905][ T9346] chnl_net:caif_netlink_parms(): no params data found [ 334.439205][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 334.484844][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.492353][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.500008][ T9346] bridge_slave_0: entered allmulticast mode [ 334.507280][ T9346] bridge_slave_0: entered promiscuous mode [ 334.515845][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.523069][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.531029][ T9346] bridge_slave_1: entered allmulticast mode [ 334.538808][ T9346] bridge_slave_1: entered promiscuous mode [ 334.579079][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.591561][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.632222][ T9346] team0: Port device team_slave_0 added [ 334.641863][ T9346] team0: Port device team_slave_1 added [ 334.687968][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.695186][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.721508][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.734716][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.742062][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.768246][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.822846][ T9346] hsr_slave_0: entered promiscuous mode [ 334.830426][ T9346] hsr_slave_1: entered promiscuous mode [ 334.837358][ T9346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.845784][ T9346] Cannot create hsr debugfs directory [ 336.199417][ T5842] Bluetooth: hci16: command tx timeout [ 336.279512][ T5842] Bluetooth: hci15: command tx timeout [ 338.279550][ T5842] Bluetooth: hci16: command tx timeout [ 338.359396][ T5842] Bluetooth: hci15: command tx timeout [ 339.410184][ T11] block nbd4: Possible stuck request ffff888024afe000: control (read@0,4096B). Runtime 210 seconds [ 339.559381][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 340.039722][ T31] INFO: task dhcpcd:5497 blocked for more than 143 seconds. [ 340.047124][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 340.055146][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.064427][ T31] task:dhcpcd state:D stack:25112 pid:5497 tgid:5497 ppid:1 task_flags:0x400140 flags:0x00000002 [ 340.077046][ T31] Call Trace: [ 340.080573][ T31] [ 340.083554][ T31] __schedule+0x16e2/0x4cd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 340.088129][ T31] ? __lock_acquire+0xaac/0xd20 [ 340.093813][ T31] ? schedule+0x165/0x360 [ 340.098328][ T31] ? __pfx___schedule+0x10/0x10 [ 340.103377][ T31] ? schedule+0x91/0x360 [ 340.108078][ T31] schedule+0x165/0x360 [ 340.112373][ T31] schedule_preempt_disabled+0x13/0x30 [ 340.117890][ T31] __mutex_lock+0x724/0xe80 [ 340.123715][ T31] ? __mutex_lock+0x51b/0xe80 [ 340.128477][ T31] ? genl_rcv_msg+0x10d/0x790 [ 340.133350][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 340.138448][ T31] ? stack_depot_save_flags+0x40/0x910 [ 340.144076][ T31] ? radix_tree_lookup+0x240/0x290 [ 340.149403][ T31] genl_rcv_msg+0x10d/0x790 [ 340.155293][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.199641][ T31] ? __lock_acquire+0xaac/0xd20 [ 340.204632][ T31] netlink_rcv_skb+0x219/0x490 [ 340.230034][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.235189][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.255949][ T31] ? down_read+0x1ad/0x2e0 [ 340.266136][ T31] genl_rcv+0x28/0x40 [ 340.270385][ T31] netlink_unicast+0x758/0x8d0 [ 340.275247][ T31] netlink_sendmsg+0x805/0xb30 [ 340.280352][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.285722][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 340.290786][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.296235][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.301821][ T31] __sock_sendmsg+0x219/0x270 [ 340.306563][ T31] ____sys_sendmsg+0x505/0x830 [ 340.311847][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.317494][ T31] ? import_iovec+0x74/0xa0 [ 340.322173][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 340.326940][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.332285][ T31] ? __rtnl_unlock+0xc8/0xf0 [ 340.336992][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 340.342173][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.347713][ T31] ? __secure_computing+0xe2/0x2a0 [ 340.352967][ T31] do_syscall_64+0xf6/0x210 [ 340.357527][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.364139][ T31] ? clear_bhb_loop+0x45/0xa0 [ 340.368874][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.369111][ T5840] Bluetooth: hci16: command tx timeout [ 340.374946][ T31] RIP: 0033:0x7f6041d74407 [ 340.385013][ T31] RSP: 002b:00007ffe7b297cf0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 340.393625][ T31] RAX: ffffffffffffffda RBX: 00007f6041cea740 RCX: 00007f6041d74407 [ 340.401829][ T31] RDX: 0000000000000000 RSI: 00007ffe7b297d70 RDI: 000000000000000e [ 340.410087][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.418755][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005586ca3d1e10 [ 340.426896][ T31] R13: 000000000000000e R14: 00007ffe7b2ac230 R15: 0000558703ff9fd0 [ 340.435039][ T31] [ 340.438161][ T31] INFO: task syz-executor:8930 blocked for more than 143 seconds. [ 340.446343][ T5840] Bluetooth: hci15: command tx timeout [ 340.447560][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 340.459669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.468363][ T31] task:syz-executor state:D stack:22008 pid:8930 tgid:8930 ppid:1 task_flags:0x400140 flags:0x00000004 [ 340.480725][ T31] Call Trace: [ 340.484050][ T31] [ 340.487035][ T31] __schedule+0x16e2/0x4cd0 [ 340.491769][ T31] ? __lock_acquire+0xaac/0xd20 [ 340.496671][ T31] ? schedule+0x165/0x360 [ 340.501402][ T31] ? __pfx___schedule+0x10/0x10 [ 340.506339][ T31] ? schedule+0x91/0x360 [ 340.510767][ T31] schedule+0x165/0x360 [ 340.515324][ T31] schedule_preempt_disabled+0x13/0x30 [ 340.521357][ T31] __mutex_lock+0x724/0xe80 [ 340.525931][ T31] ? __mutex_lock+0x51b/0xe80 [ 340.530938][ T31] ? genl_rcv_msg+0x10d/0x790 [ 340.535675][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 340.540838][ T31] ? stack_depot_save_flags+0x40/0x910 [ 340.546339][ T31] ? radix_tree_lookup+0x240/0x290 [ 340.551830][ T31] genl_rcv_msg+0x10d/0x790 [ 340.556398][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.561577][ T31] ? __lock_acquire+0xaac/0xd20 [ 340.566495][ T31] netlink_rcv_skb+0x219/0x490 [ 340.571430][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.576507][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.581925][ T31] ? down_read+0x1ad/0x2e0 [ 340.586394][ T31] genl_rcv+0x28/0x40 [ 340.590591][ T31] netlink_unicast+0x758/0x8d0 [ 340.595401][ T31] netlink_sendmsg+0x805/0xb30 [ 340.600410][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.605746][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 340.610877][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.616214][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.621959][ T31] __sock_sendmsg+0x219/0x270 [ 340.626687][ T31] __sys_sendto+0x3bd/0x520 [ 340.631457][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 340.636591][ T31] ? fd_install+0x97/0x540 [ 340.641230][ T31] ? fd_install+0x30d/0x540 [ 340.645790][ T31] __x64_sys_sendto+0xde/0x100 [ 340.650727][ T31] do_syscall_64+0xf6/0x210 [ 340.655275][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.661819][ T31] ? clear_bhb_loop+0x45/0xa0 [ 340.666652][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.672793][ T31] RIP: 0033:0x7f5acb1907fc [ 340.677261][ T31] RSP: 002b:00007fff714de4f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 340.686187][ T31] RAX: ffffffffffffffda RBX: 00007f5acbee4620 RCX: 00007f5acb1907fc [ 340.694348][ T31] RDX: 0000000000000020 RSI: 00007f5acbee4670 RDI: 0000000000000005 [ 340.702493][ T31] RBP: 0000000000000000 R08: 00007fff714de544 R09: 000000000000000c [ 340.710629][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 340.718625][ T31] R13: 00007fff714de598 R14: 00007f5acbee4670 R15: 0000000000000000 [ 340.727095][ T31] [ 340.730307][ T31] INFO: task syz-executor:8963 blocked for more than 144 seconds. [ 340.738130][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 340.752151][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.761312][ T31] task:syz-executor state:D stack:22848 pid:8963 tgid:8963 ppid:1 task_flags:0x400140 flags:0x00000004 [ 340.773565][ T31] Call Trace: [ 340.776965][ T31] [ 340.780068][ T31] __schedule+0x16e2/0x4cd0 [ 340.784627][ T31] ? __lock_acquire+0xaac/0xd20 [ 340.789681][ T31] ? schedule+0x165/0x360 [ 340.794058][ T31] ? __pfx___schedule+0x10/0x10 [ 340.799094][ T31] ? schedule+0x91/0x360 [ 340.803384][ T31] schedule+0x165/0x360 [ 340.807564][ T31] schedule_preempt_disabled+0x13/0x30 [ 340.813224][ T31] __mutex_lock+0x724/0xe80 [ 340.817776][ T31] ? __mutex_lock+0x51b/0xe80 [ 340.822885][ T31] ? genl_rcv_msg+0x10d/0x790 [ 340.827660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 340.832883][ T31] ? stack_depot_save_flags+0x40/0x910 [ 340.838376][ T31] ? radix_tree_lookup+0x240/0x290 [ 340.843737][ T31] genl_rcv_msg+0x10d/0x790 [ 340.848316][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.853529][ T31] ? __lock_acquire+0xaac/0xd20 [ 340.858443][ T31] netlink_rcv_skb+0x219/0x490 [ 340.863297][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.868354][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.873841][ T31] ? down_read+0x1ad/0x2e0 [ 340.878307][ T31] genl_rcv+0x28/0x40 [ 340.882554][ T31] netlink_unicast+0x758/0x8d0 [ 340.887360][ T31] netlink_sendmsg+0x805/0xb30 [ 340.892260][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.897569][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 340.902576][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.907888][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.913338][ T31] __sock_sendmsg+0x219/0x270 [ 340.918040][ T31] __sys_sendto+0x3bd/0x520 [ 340.922643][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 340.928039][ T31] ? fd_install+0x97/0x540 [ 340.932575][ T31] ? fd_install+0x30d/0x540 [ 340.937105][ T31] __x64_sys_sendto+0xde/0x100 [ 340.941968][ T31] do_syscall_64+0xf6/0x210 [ 340.946498][ T31] ? clear_bhb_loop+0x45/0xa0 [ 340.951318][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.957227][ T31] RIP: 0033:0x7fbc6ab907fc [ 340.961680][ T31] RSP: 002b:00007ffcfaf1b290 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 340.970239][ T31] RAX: ffffffffffffffda RBX: 00007fbc6b8e4620 RCX: 00007fbc6ab907fc [ 340.978226][ T31] RDX: 0000000000000020 RSI: 00007fbc6b8e4670 RDI: 0000000000000005 [ 340.986341][ T31] RBP: 0000000000000000 R08: 00007ffcfaf1b2e4 R09: 000000000000000c [ 340.994555][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 341.002665][ T31] R13: 00007ffcfaf1b338 R14: 00007fbc6b8e4670 R15: 0000000000000000 [ 341.010714][ T31] [ 341.013775][ T31] INFO: task syz-executor:9007 blocked for more than 144 seconds. [ 341.021671][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 341.029655][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.038354][ T31] task:syz-executor state:D stack:22232 pid:9007 tgid:9007 ppid:1 task_flags:0x400140 flags:0x00000004 [ 341.050415][ T31] Call Trace: [ 341.053701][ T31] [ 341.056638][ T31] __schedule+0x16e2/0x4cd0 [ 341.061236][ T31] ? __lock_acquire+0xaac/0xd20 [ 341.066119][ T31] ? schedule+0x165/0x360 [ 341.070509][ T31] ? __pfx___schedule+0x10/0x10 [ 341.075389][ T31] ? schedule+0x91/0x360 [ 341.079965][ T31] schedule+0x165/0x360 [ 341.084147][ T31] schedule_preempt_disabled+0x13/0x30 [ 341.090003][ T31] __mutex_lock+0x724/0xe80 [ 341.094535][ T31] ? __mutex_lock+0x51b/0xe80 [ 341.100898][ T31] ? genl_rcv_msg+0x10d/0x790 [ 341.105645][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 341.111203][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 341.116353][ T31] ? radix_tree_lookup+0x240/0x290 [ 341.121869][ T31] genl_rcv_msg+0x10d/0x790 [ 341.126410][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 341.132174][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 341.137220][ T31] ? __copy_skb_header+0xa7/0x550 [ 341.142329][ T31] netlink_rcv_skb+0x219/0x490 [ 341.147114][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 341.152253][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.157572][ T31] ? down_read+0x1ad/0x2e0 [ 341.162391][ T31] genl_rcv+0x28/0x40 [ 341.166400][ T31] netlink_unicast+0x758/0x8d0 [ 341.171272][ T31] netlink_sendmsg+0x805/0xb30 [ 341.176083][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.181432][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 341.186399][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.191795][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.197105][ T31] __sock_sendmsg+0x219/0x270 [ 341.201883][ T31] __sys_sendto+0x3bd/0x520 [ 341.206411][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 341.211761][ T31] ? fd_install+0x97/0x540 [ 341.216218][ T31] ? fd_install+0x30d/0x540 [ 341.220803][ T31] __x64_sys_sendto+0xde/0x100 [ 341.225629][ T31] do_syscall_64+0xf6/0x210 [ 341.230229][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 341.236591][ T31] ? clear_bhb_loop+0x45/0xa0 [ 341.241467][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.247389][ T31] RIP: 0033:0x7fd2709907fc [ 341.251902][ T31] RSP: 002b:00007ffe05af0e70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 341.260416][ T31] RAX: ffffffffffffffda RBX: 00007fd2716e4620 RCX: 00007fd2709907fc [ 341.268398][ T31] RDX: 0000000000000028 RSI: 00007fd2716e4670 RDI: 0000000000000003 [ 341.276478][ T31] RBP: 0000000000000000 R08: 00007ffe05af0ec4 R09: 000000000000000c [ 341.284559][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 341.292633][ T31] R13: 00007ffe05af0f18 R14: 00007fd2716e4670 R15: 0000000000000000 [ 341.300720][ T31] [ 341.303781][ T31] INFO: task syz.4.635:9215 blocked for more than 144 seconds. [ 341.311403][ T31] Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 [ 341.319856][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.328547][ T31] task:syz.4.635 state:D stack:26136 pid:9215 tgid:9214 ppid:5831 task_flags:0x480140 flags:0x00000004 [ 341.340848][ T31] Call Trace: [ 341.344151][ T31] [ 341.347092][ T31] __schedule+0x16e2/0x4cd0 [ 341.351750][ T31] ? __lock_acquire+0xaac/0xd20 [ 341.356658][ T31] ? schedule+0x165/0x360 [ 341.361105][ T31] ? __pfx___schedule+0x10/0x10 [ 341.365992][ T31] ? schedule+0x91/0x360 [ 341.370315][ T31] schedule+0x165/0x360 [ 341.374495][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 341.380134][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 341.386234][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 341.392425][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 341.398349][ T31] queue_limits_commit_update_frozen+0x5e/0x360 [ 341.405413][ T31] ? nbd_set_size+0x2bd/0x6c0 [ 341.410711][ T31] nbd_set_size+0x496/0x6c0 [ 341.415254][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 341.420458][ T31] ? __mutex_trylock_common+0x153/0x260 [ 341.426129][ T31] ? __mutex_lock+0x330/0xe80 [ 341.431060][ T31] ? nla_memcpy+0x5b/0xc0 [ 341.435429][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 341.440778][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 341.446268][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 341.452336][ T31] ? bpf_lsm_capable+0x9/0x20 [ 341.457039][ T31] ? security_capable+0x7e/0x2e0 [ 341.462064][ T31] ? radix_tree_lookup+0x240/0x290 [ 341.467207][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 341.472695][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 341.478455][ T31] ? __nla_parse+0x40/0x60 [ 341.483305][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 341.489888][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 341.495481][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 341.501650][ T31] ? stack_depot_save_flags+0x40/0x910 [ 341.507135][ T31] genl_rcv_msg+0x60e/0x790 [ 341.511729][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 341.516779][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 341.522658][ T31] netlink_rcv_skb+0x219/0x490 [ 341.527457][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 341.532644][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.537972][ T31] ? down_read+0x1ad/0x2e0 [ 341.543140][ T31] genl_rcv+0x28/0x40 [ 341.547164][ T31] netlink_unicast+0x758/0x8d0 [ 341.552059][ T31] netlink_sendmsg+0x805/0xb30 [ 341.556876][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.562510][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 341.567530][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.573008][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.578345][ T31] __sock_sendmsg+0x219/0x270 [ 341.583986][ T31] ____sys_sendmsg+0x505/0x830 [ 341.588876][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.594743][ T31] ? import_iovec+0x74/0xa0 [ 341.599397][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 341.604111][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.609541][ T31] ? __fget_files+0x2a/0x420 [ 341.614190][ T31] ? __fget_files+0x3a0/0x420 [ 341.618913][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 341.623965][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.629683][ T31] ? do_syscall_64+0xba/0x210 [ 341.634392][ T31] do_syscall_64+0xf6/0x210 [ 341.638911][ T31] ? clear_bhb_loop+0x45/0xa0 [ 341.643978][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.650272][ T31] RIP: 0033:0x7fd3af38e969 [ 341.654702][ T31] RSP: 002b:00007fd3b02b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.663200][ T31] RAX: ffffffffffffffda RBX: 00007fd3af5b5fa0 RCX: 00007fd3af38e969 [ 341.671330][ T31] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 341.679404][ T31] RBP: 00007fd3af410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 341.687383][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.695498][ T31] R13: 0000000000000000 R14: 00007fd3af5b5fa0 R15: 00007fffbf443e48 [ 341.704293][ T31] [ 341.707431][ T31] [ 341.707431][ T31] Showing all locks held in the system: [ 341.715278][ T31] 2 locks held by ksoftirqd/0/15: [ 341.720557][ T31] 1 lock held by khungtaskd/31: [ 341.725419][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 341.735420][ T31] 5 locks held by kworker/u8:7/1156: [ 341.740804][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 341.751256][ T31] #1: ffffc90003a5fc60 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 341.763826][ T31] #2: ffff88802f1b8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460 [ 341.773965][ T31] #3: ffffffff99ab1c88 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 341.784352][ T31] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 341.794134][ T31] 1 lock held by klogd/5192: [ 341.798725][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 341.808854][ T31] 2 locks held by dhcpcd/5497: [ 341.813728][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 341.822024][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 341.831271][ T31] 2 locks held by getty/5593: [ 341.835961][ T31] #0: ffff88802fdc70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 341.846073][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 341.856312][ T31] 1 lock held by udevd/6706: [ 341.860991][ T31] #0: ffff888024937358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 341.870521][ T31] 2 locks held by syz-executor/8930: [ 341.875805][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 341.884059][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 341.893141][ T31] 2 locks held by syz-executor/8963: [ 341.898443][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 341.906788][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 341.915855][ T31] 2 locks held by syz-executor/9007: [ 341.921216][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 341.929485][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 341.938576][ T31] 6 locks held by syz.4.635/9215: [ 341.943679][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 341.952271][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 341.961544][ T31] #2: ffff88802493b198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 341.972124][ T31] #3: ffff888024a786f8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a4/0x6c0 [ 341.981827][ T31] #4: ffff888024a780a8 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 341.994081][ T31] #5: ffff888024a780e0 (&q->q_usage_counter(queue)#5){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 342.006539][ T31] 2 locks held by syz.3.642/9243: [ 342.011663][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.019965][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.029068][ T31] 2 locks held by syz.3.642/9244: [ 342.034097][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.042365][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.051688][ T31] 2 locks held by syz-executor/9247: [ 342.057007][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.065331][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.074416][ T31] 2 locks held by syz-executor/9256: [ 342.079795][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.088029][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.097226][ T31] 2 locks held by syz-executor/9265: [ 342.102546][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.110790][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.119886][ T31] 2 locks held by syz-executor/9274: [ 342.125182][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.133400][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.142446][ T31] 2 locks held by syz-executor/9283: [ 342.147738][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.156282][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.165353][ T31] 2 locks held by syz-executor/9292: [ 342.170690][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.178911][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.188124][ T31] 2 locks held by syz-executor/9301: [ 342.193444][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.202271][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.211377][ T31] 2 locks held by syz-executor/9310: [ 342.216762][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.225018][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.234105][ T31] 2 locks held by syz-executor/9319: [ 342.239448][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.247787][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.257074][ T31] 2 locks held by syz-executor/9328: [ 342.262431][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.270706][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.279790][ T31] 2 locks held by syz-executor/9337: [ 342.285104][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.293368][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.302423][ T31] 2 locks held by syz-executor/9346: [ 342.307726][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.316176][ T31] #1: ffffffff8f358bc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 342.325224][ T31] [ 342.327549][ T31] ============================================= [ 342.327549][ T31] [ 342.336024][ T31] NMI backtrace for cpu 1 [ 342.336050][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 342.336081][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.336099][ T31] Call Trace: [ 342.336110][ T31] [ 342.336117][ T31] dump_stack_lvl+0x189/0x250 [ 342.336145][ T31] ? __wake_up_klogd+0xd9/0x110 [ 342.336179][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.336203][ T31] ? __pfx__printk+0x10/0x10 [ 342.336249][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 342.336271][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 342.336286][ T31] ? _printk+0xcf/0x120 [ 342.336309][ T31] ? __pfx__printk+0x10/0x10 [ 342.336330][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 342.336351][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 342.336372][ T31] watchdog+0xfee/0x1030 [ 342.336398][ T31] ? watchdog+0x1de/0x1030 [ 342.336428][ T31] kthread+0x70e/0x8a0 [ 342.336453][ T31] ? __pfx_watchdog+0x10/0x10 [ 342.336474][ T31] ? __pfx_kthread+0x10/0x10 [ 342.336496][ T31] ? __pfx_kthread+0x10/0x10 [ 342.336516][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.336536][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.336574][ T31] ? __pfx_kthread+0x10/0x10 [ 342.336596][ T31] ret_from_fork+0x4b/0x80 [ 342.336614][ T31] ? __pfx_kthread+0x10/0x10 [ 342.336636][ T31] ret_from_fork_asm+0x1a/0x30 [ 342.336678][ T31] [ 342.336685][ T31] Sending NMI from CPU 1 to CPUs 0: [ 342.443004][ T5840] Bluetooth: hci16: command tx timeout [ 342.446969][ C0] NMI backtrace for cpu 0 [ 342.447037][ C0] CPU: 0 UID: 0 PID: 5840 Comm: kworker/u9:4 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 342.447057][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.447069][ C0] Workqueue: hci16 hci_cmd_timeout [ 342.447094][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 342.447115][ C0] Code: e8 5e 1f 82 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 cf 13 e4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 342.447129][ C0] RSP: 0018:ffffc9000413f3b8 EFLAGS: 00000006 [ 342.447142][ C0] RAX: 1ffffffff3369705 RBX: 00000000000003f9 RCX: 0000000000000000 [ 342.447153][ C0] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 342.447163][ C0] RBP: ffffc9000413f590 R08: 0000000000000003 R09: 0000000000000004 [ 342.447173][ C0] R10: dffffc0000000000 R11: ffffffff853db0a0 R12: dffffc0000000000 [ 342.447186][ C0] R13: dffffc0000000000 R14: ffffffff99b4bbc0 R15: 0000000000000000 [ 342.447197][ C0] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 342.447210][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.447221][ C0] CR2: 0000555d37895000 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 342.447235][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 342.447244][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 342.447254][ C0] Call Trace: [ 342.447260][ C0] [ 342.447268][ C0] serial8250_console_write+0x581/0x1ba0 [ 342.447297][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 342.447317][ C0] ? console_flush_all+0x13a/0xc40 [ 342.447335][ C0] ? console_flush_all+0x13a/0xc40 [ 342.447356][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 342.447373][ C0] ? console_flush_all+0x13a/0xc40 [ 342.447389][ C0] ? console_flush_all+0x13a/0xc40 [ 342.447407][ C0] console_flush_all+0x725/0xc40 [ 342.447425][ C0] ? console_flush_all+0x13a/0xc40 [ 342.447445][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 342.447461][ C0] ? stack_trace_save+0x9c/0xe0 [ 342.447483][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 342.447505][ C0] console_unlock+0xc4/0x270 [ 342.447521][ C0] ? __pfx_console_unlock+0x10/0x10 [ 342.447538][ C0] ? vprintk_emit+0x444/0x7a0 [ 342.447552][ C0] ? vprintk_emit+0x444/0x7a0 [ 342.447567][ C0] vprintk_emit+0x5b7/0x7a0 [ 342.447580][ C0] ? vprintk_emit+0x444/0x7a0 [ 342.447596][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 342.447614][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 342.447633][ C0] ? sched_clock_cpu+0x74/0x430 [ 342.447661][ C0] _printk+0xcf/0x120 [ 342.447680][ C0] ? __pfx__printk+0x10/0x10 [ 342.447695][ C0] ? do_raw_spin_lock+0x121/0x290 [ 342.447712][ C0] ? look_up_lock_class+0x74/0x170 [ 342.447734][ C0] bt_err+0x10b/0x160 [ 342.447758][ C0] ? __pfx_bt_err+0x10/0x10 [ 342.447785][ C0] hci_cmd_timeout+0xff/0x1e0 [ 342.447806][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 342.447831][ C0] process_scheduled_works+0xadb/0x17a0 [ 342.447872][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 342.447912][ C0] worker_thread+0x8a0/0xda0 [ 342.447941][ C0] kthread+0x70e/0x8a0 [ 342.447960][ C0] ? __pfx_worker_thread+0x10/0x10 [ 342.447975][ C0] ? __pfx_kthread+0x10/0x10 [ 342.447993][ C0] ? __pfx_kthread+0x10/0x10 [ 342.448011][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.448028][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.448046][ C0] ? __pfx_kthread+0x10/0x10 [ 342.448063][ C0] ret_from_fork+0x4b/0x80 [ 342.448079][ C0] ? __pfx_kthread+0x10/0x10 [ 342.448097][ C0] ret_from_fork_asm+0x1a/0x30 [ 342.448120][ C0] [ 342.455012][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 342.455030][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 342.455057][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.455070][ T31] Call Trace: [ 342.455080][ T31] [ 342.455089][ T31] dump_stack_lvl+0x99/0x250 [ 342.455123][ T31] ? __asan_memcpy+0x40/0x70 [ 342.455146][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.455176][ T31] ? __pfx__printk+0x10/0x10 [ 342.455212][ T31] panic+0x2db/0x790 [ 342.455248][ T31] ? __pfx_panic+0x10/0x10 [ 342.455274][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 342.455301][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 342.455327][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 342.455357][ T31] watchdog+0x102d/0x1030 [ 342.455387][ T31] ? watchdog+0x1de/0x1030 [ 342.455424][ T31] kthread+0x70e/0x8a0 [ 342.455453][ T31] ? __pfx_watchdog+0x10/0x10 [ 342.455479][ T31] ? __pfx_kthread+0x10/0x10 [ 342.455506][ T31] ? __pfx_kthread+0x10/0x10 [ 342.455529][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.455552][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.455577][ T31] ? __pfx_kthread+0x10/0x10 [ 342.455600][ T31] ret_from_fork+0x4b/0x80 [ 342.455622][ T31] ? __pfx_kthread+0x10/0x10 [ 342.455651][ T31] ret_from_fork_asm+0x1a/0x30 [ 342.455689][ T31] [ 342.459431][ T31] Kernel Offset: disabled