last executing test programs: 21.128881266s ago: executing program 3 (id=561): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x18db8, 0x10000000}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="80050007000600000006002700"/36], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 20.889066129s ago: executing program 3 (id=565): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x1b0, 0x0, 0x6, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x644}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20004881}, 0x20000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 20.847335473s ago: executing program 3 (id=566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 20.666652007s ago: executing program 3 (id=571): socket(0x2b, 0x80801, 0x1) pipe(&(0x7f0000000240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x6, 0x5004, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf9a7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socket$inet6(0xa, 0x80003, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 20.383651683s ago: executing program 3 (id=574): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000003e000701feff18000100007c007c0000040042800c0001500000a15b80"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xffffffffffffffe1, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000, 0x0, 0x0, &(0x7f0000000400)="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"}, 0xf) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1200}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) recvmmsg(r9, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=""/17, 0x68, 0x11, 0x1, 0x0, 0x10000, @value=r10}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f00000016c0)=ANY=[@ANYBLOB="180200000000006560148e00000045424e85f4f8000085ec000087000000850000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 20.12860381s ago: executing program 0 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008"], 0x124}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfe79, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x1, @remote, 0x7}]}, &(0x7f0000000100)=0x10) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000500)={0x1, 0x4, 0xa4, 0x8003, @vifc_lcl_addr=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={r7, 0x180}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r7, 0x3ff}, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r8], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r8, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 20.058779112s ago: executing program 2 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x114}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x114}}, 0x0) (async) 19.957332971s ago: executing program 2 (id=579): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x6e, 0x0, 0x0, 0x0, "4e4e488e419039dda425818c34de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2809cbc3da9bb3c86e0c5e53cff15d561c53fe9ae3a"}, 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xbfa, 0x10, 0x6, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 19.947702152s ago: executing program 0 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4241}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a030000000000000000000100000a0900010073797a30000000000800024000000006"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000dc0)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) syz_emit_ethernet(0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400385000fe8000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900003300fc010000000000000000000000000000ff0000000000000000000000000033000000000000ce5a423e98b3592da4b4c500aadef053"], 0x0) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000300200000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000003030000ae771958a0cb06cc"], 0x48}}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmmsg$inet6(r10, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ff0600000000fcdbdf2552000000d6210001006e657464657673696d0000000f0002006e65746465768f45365273696d3000004500a58707762594114c62d65128b4a48991bac76287659f86a527b2913acf57e901cfc4b5cf38b90f7080f79a6bccf1c3983a010667b5e329c5671de0eeda3ff586cec3ef4ee266776e673ace98802a634a812ca01b5b849d34cbd027b796d516406c5d9c9f87566c4ebd02d584ebdb53ea1a2373f32813ee1a4745252104cf92b52c6975b6c4611b"], 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800002008ffb0000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000fdffffffdbaaf0ff10010000bf8600000000000007080000c8070000bfa400000000000007040000f0ffffffd50000000800000018220000", @ANYBLOB="037fe1c6520bd783411340d4459db84802feafbc85a3632157a906a0dbfb6f37225a16ab23b9aeefa62eb665e29321c65c3e3389e4ecdb7356bea814a212997e23eb5e", @ANYBLOB="000000000600000007000000080000004608f0ff760000005d9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.928175194s ago: executing program 2 (id=582): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="b7eb010018000000000000000c000000039301000000002e615f5f000000ea00"/42], 0x0, 0x2a, 0x0, 0x1}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "410cfe0c744a0128", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "fae8ff55f5ffff00"}, 0x38) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=ANY=[@ANYBLOB="10000000004000"], 0x10}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fcdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x928}, 0x1, 0x0, 0x0, 0x2004c0a1}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="280000006d00010028bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="400109000000020008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) setsockopt(r3, 0x4f3, 0x2, &(0x7f0000000340)="d55b856ad0302e81853b285768c2180e35061d6492147e520bc8283f4108ce8ba4822d32e942ecc8a5cc9ad8b145a4262dbd42fb03b27a4a2c76cf829b64398b138f620068205b24ec4a8d1495a032d52ccd6159abbd19e2fde06d554a73a9e878fa8e1dbf1023cb99ca593c70e15a5071e8c0f42deee3b24b4bf8b1dc1b5043f191a67ab217d8854b9e74b0", 0x8c) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYRES32=r5], 0x12f) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) read$alg(r6, 0x0, 0x0) write$cgroup_devices(r6, 0x0, 0x0) 19.842037979s ago: executing program 1 (id=583): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x5d, "98ba01c3b5d587bf9c6c5add84efb6c99fde35c14f90af84a52458aeaa1fd3a03767b2624c08b8fc46d46c364d4f01aaa9a9936f146dedcc0e722bb3e427da8e8ef71ecf4cc0d11d07db8a56e57e0e56b243e1f9f2e0352f526a3a1fd0"}, &(0x7f00000001c0)=0x65) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newnexthop={0x50, 0x68, 0x20, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x2}, [@NHA_GROUP={0x24, 0x2, [{0x0, 0x7}, {0x0, 0x1}, {0x0, 0x40}, {0x1}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x24000080) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={r3, 0x948b, 0x101, 0x7}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r5, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x3e}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x48}}, 0x40000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r3, 0x2, 0x4f1a, 0x4}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000640)=@add_del={0x2, &(0x7f0000000600)='ipvlan0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000780)={r1}) setsockopt$MRT6_ASSERT(r7, 0x29, 0xcf, &(0x7f00000007c0)=0x1, 0x4) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={r8, 0x0, 0xac, 0x1000, &(0x7f0000000a80)="53007758fa53aaced266ef5c55fa39e35813202c4210d9bc0225f257597f3406906728763e62e8961532ca45c25dfdbff432712f09112edc1979138aac30148fe8dc81c5d102effe94ae0d8944246d6c0d966cccfba4ece15379304974475991802a879c8da845cbacf9682a942ef48e7b99cc4e61a6d21e7084db679720413521fa1b7f46d6889d9f8a749f067fa3c796944516ef9d977b16bae88a67320e4cbd91ef7fc4599e20beabd3dd", &(0x7f0000000b40)=""/4096, 0x5, 0x0, 0xed, 0x9d, &(0x7f0000001b40)="695ca6d4041d99495d4d1655d09a078634c518ed513e2716ac685f9ffc06675aa37eba26e72fd308fb92191c1c14c1a0c1e226b1d500b46dfcd2410ed5caa805dd15211b2fb6919855a2ee83f0ef1e867e2dfc7dd972e225c8f0db1dd23fed5f05e51be40d392700e8752a27f46e2aed187d231faf5a97be2a075a48ce2b5662d67688e2f038be1d36a372912376181f2a92fe38b460798190e21c03ec5c56f0378eaee9bc781f9caf63f411b4349fbce466f05a23cf4b04541d07a6f5f99d56496ad398358db807379847ca46c05ff10c46325b5c575643837cefc29ab6de0642dc24b9519ba6e2a7eab850a1", &(0x7f0000001c40)="76bef2ddac7bd2c56d6853398b25f3f2547d339a14c23448d49638cdbbd37d1cc8b231d4d90949b09bff3376b24737341e42ed4d4d6f4ab2bd07a1b3f0ddbd49e0601a19493b97427bd7d2e1aa116105dac3077f2f05b0cc9f1eb981ea93787840de4ae1c3a6d40cc13527b4d29fc1802ef2182fb83b7b85542519d202d1e6a0ce95c6e037de88890127985a52dff6530e4fcbd4ee6656142d2bf80a27", 0x3, 0x0, 0x1ff}, 0x50) ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f0000001d80)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001e00)={r2, @in6={{0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}}, [0x9a9, 0x2, 0x1, 0x6, 0x9, 0x4, 0x101, 0x7f, 0x10001, 0x4, 0x3, 0x3, 0x270a, 0x0, 0x81]}, &(0x7f0000001f00)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, 0x0, &(0x7f0000001fc0)) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) ioctl$IMGETVERSION(r6, 0x80044942, &(0x7f0000002040)) accept4$ax25(r6, &(0x7f0000002080)={{0x3, @null}, [@rose, @rose, @remote, @bcast, @null, @null, @default, @rose]}, &(0x7f0000002100)=0x48, 0x80800) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000002140)={r8, 0xad, 0x1, 0x10000}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0xbc, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_SSID={0x1f, 0x34, @random="7c489507bc8d59480d8b318e4e3d3f870f433833942cdab8920f2f"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e939a105e9a74d625beefcefc6d0195a"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "eb7c9804dc0486b8e9144badba26e060"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000804}, 0x44) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000002300)) 19.784720374s ago: executing program 0 (id=584): socket(0x2b, 0x80801, 0x1) pipe(&(0x7f0000000240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x6, 0x5004, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf9a7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socket$inet6(0xa, 0x80003, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 19.784120584s ago: executing program 1 (id=585): socket(0x11, 0x800000003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40084}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x13, &(0x7f0000000640)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x9, 0x1, 0x4, 0x100, 0x4}], &(0x7f0000000700)='GPL\x00', 0x9, 0xf1, &(0x7f0000000740)=""/241, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x46}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf25080000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00028004000480"], 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x4008090) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000600)=0x681, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) 19.532736762s ago: executing program 0 (id=587): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x1b0, 0x0, 0x6, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x644}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20004881}, 0x20000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 19.093196286s ago: executing program 1 (id=589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x30}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x4000814) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, r7, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x402}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x0, 0xfffffffa, 0x2, @remote, @remote, 0x8, 0x1, 0x80000000, 0xfffffffb}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r3, 0x506, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 18.373257323s ago: executing program 0 (id=590): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001a00)=ANY=[@ANYBLOB="e4000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0008000000000400140003006e657464657673696d30000000000000080004000d040000a8001680840001800c000300030000000900000014000a000b0000000000000003000000000000000c000700060000000300000028000100"], 0xe4}}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x1f, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000c000000000000000800000018110000", @ANYRESHEX=r5, @ANYBLOB="1e0e000000fa62d859326500b7030000000000008500000083000000bf09000000000000550901000000000095004000000000001811000000000000000000000400", @ANYRESHEX=r1, @ANYBLOB="0000010000000000b7020000b8a4c21685000000860000f2982000882d0b3e61ddffc1c708f62df33f87c0ca1c69a7b51fdc3e074c046bf8e7ed7e33c3767720f0ad2cd466c934f05c30f37d3227ad95b895d017e53b33ab5dd38ad6c4efe30761a481fa61f25a", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018170000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf91000800000000b70000000000fd009500"/48], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xce, &(0x7f00000004c0)=""/206, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x15, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183b000003000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf910000000000876a00b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.372925919s ago: executing program 2 (id=591): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x32}, 0x0, @in=@multicast1}}, 0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in=@empty, 0x4e20, 0x0, 0x4e21, 0xfffa, 0xa, 0x100, 0x80, 0x3b, 0x0, r1}, {0x7, 0x4, 0x8, 0x698, 0x5, 0x2, 0x800, 0x9}, {0xffffffffffff3d4e, 0x4, 0x2e1, 0x58}, 0x7ff, 0x6e6bb4, 0x0, 0x0, 0x1, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xcd}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x3, 0x1, 0x3, 0x9, 0x2, 0x2}}, 0xe8) close(r0) 18.302435016s ago: executing program 1 (id=593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x800) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c7000fbdbdf", @ANYRES32=r2, @ANYBLOB="080009000600000014000200fc01000000000000000000000000000014000600020000005b1600000800000000000000140006000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x4084) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xfffffffffffffe3e}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0xd026}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x58}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x57, 0x0, 0x4, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd]}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000030601040000000000000000070000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 18.134756922s ago: executing program 2 (id=595): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0xe4, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x494883a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb8c60a7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x782d7977}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1273a165}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x674c4baf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45e92f53}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1392e541}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x598c846a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0xc}]}]}]}, 0xe4}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b0400000000000000000200000018000480140001800a000100696e6ee572000000040002800900e8941b9869a1211900000900020073797a320000000005000740c5000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf2507000000140001800800fd007f0000010600010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 32) write$tun(r6, &(0x7f0000001840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0006600000b89907864010102ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfe9eca842ea6963b425a7edbb8b3a5ec2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed5485079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"], 0xfce) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, 0xf, 0x1ffffffff}}}, {{@arp={@private=0xa010101, @remote, 0xff, 0xff000000, 0xf, 0xf, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x8, 0x4, 0x5, 0x7f, 0xfffe, 'bond_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac, @local, @empty, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) (rerun: 32) 18.096611116s ago: executing program 3 (id=596): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000000000000000010008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000200)=""/39, 0x27}], 0x2, &(0x7f00000004c0)=""/109, 0x6d}, 0x40000000) r4 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb7f0a0043c5e9b405a902211c0000000000019078acbbac1414aa080090780fff02000000"], 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000080), 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x2, 0x6, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000480)='svc_stats_latency\x00', r1, 0x0, 0x3}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 17.853357091s ago: executing program 2 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x60, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe03c5dc0}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc}}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000065cbda3d63451e81ae6ea39cc57b1880965244ae42b640620a9d80634f8f276f832739294e7739aa1f1aed718e9e5e73b3477b4b1a8bfbb082567b038aecb4ccf75488f993b4107ca3ad999d9c4aaeea08532cd081a1992405e5589fdeac41f3fe20de83869c701c522662095ebe02630f52c59b6bc757aca2e6bf95cdbe5558f2b9bad1647e5dabc12ab291138b0da464a9b6284f6de7a20c91b1a0888c43ae19a06deeb9e7f866e65d0c0b7750b144e7d47823a589eec89e179e2a62", @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="090007009f987960380000000800370002000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf255a00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099010400000088000000"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x44814) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{}, {0x3}, @device_b, @device_a, @initial, {0x0, 0x400}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x16, {0x0, 0x6, @val=0x17c0, @void, @val="6635d477e1ed3e9d28a2e58b21ddef69"}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 17.759007792s ago: executing program 4 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r4 = socket(0x2b, 0x1, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c4}, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f386bb8", 0x4}], 0x1}}], 0x1, 0x4000) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 17.705133769s ago: executing program 1 (id=601): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @private}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, 0x4e23, 0x87, 0x4e21, 0x1, 0x2, 0x80, 0x20, 0x33, r1, r2}, {0x7f0000000000, 0xffff, 0x401, 0xc46d, 0x6, 0x4, 0x8, 0x3f1e}, {0xc24, 0x5, 0x7, 0x10}, 0x1, 0x6e6bb4, 0x2, 0x1, 0x0, 0x1}, {{@in6=@local, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x2, 0x2, 0x3, 0x0, 0xe55, 0xa8}}, 0xe8) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffff0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x0, {[0x6, 0x0, 0x2, 0xfffffef9, 0x0, 0x0, 0x1464410e, 0x7]}}, 0x5c) (async) r3 = socket$inet(0x2, 0x3, 0x30) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC, @ANYRESHEX=r6], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 17.554850834s ago: executing program 1 (id=602): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 17.425326594s ago: executing program 4 (id=603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe7c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe68, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {0x800000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b802c0001800a0001006c696d69740000001c0002800c00014000000000000400030c0002400000"], 0x108}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r9) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="200029bd7000fedbdf250f0000030000000003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x14) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) 17.126427779s ago: executing program 4 (id=604): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) getpeername$inet6(r0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000340)=0xc) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x2, 0x7, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x8001) (async) write$tun(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@ipv4_newrule={0x40, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bridge_slave_0\x00'}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}]}, 0x40}}, 0x0) 17.016205046s ago: executing program 4 (id=605): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000000000800040001000000", 0x24) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x20008050) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x20008050) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x0, 0x1, r1}]}}}]}, 0x48}}, 0x20044002) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x0, 0x1, r1}]}}}]}, 0x48}}, 0x20044002) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000001c0)=0x1254d9, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f00000002c0)=0x200, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f00000002c0)=0x200, 0x4) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, r9}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffffd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r11, @ANYBLOB="1400020000000000000000000000ffff000000000800080081ebff00"], 0x34}}, 0x0) 16.893217245s ago: executing program 4 (id=606): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x11, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00') sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x2a020400) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000c00)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYBLOB="76023df7cfc3577e5889e1261b639df8865d8e31d131cd887203e59d7d517914676aa9dda0c066e933077d4df5832c977a0764ad45e09e3418f946eca30e70e037a10917e5970b7d7e5e831e405ebf297475707d74c0b7ff8f876f26f9e08416e06c19c47d6e08acec11ef5fd7cccf857886b28d5861316204cab0dbbaf417a9b18e9894320160f6bb55244d747c5c401366e80e02053df023b23b7e607408a0bafcc9d42354b452102aa3519fa41a0b05ca7860a43922efe091d398ce046f78412cc5af465c36610a153e83476330df1538820a8b7033edc35f0b13f286e270c4736dff762465f8ce4a53217563a988fdd904"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf) 16.550137144s ago: executing program 4 (id=607): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 15.214769575s ago: executing program 0 (id=608): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x78, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fc, r4}, 0x38) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000240)=ANY=[]) listen(r1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c63a6efdecc4194d99634ff4eb90c266e83fff7dfbd3568c030612b423a3", 0x21}, {&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc712a114aaeae76812b1375a1b59f2b669bcf1f5a", 0x74}, {&(0x7f0000000100)="8d25ca2a98879e57578c3d652f5cf57f904b471f18c14b4d786c4ae155bee597b14455173e5580fb3f47", 0x2a}], 0x3, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r11 = accept(r1, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000100000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MISDN_TIME_STAMP(r11, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.021548106s ago: executing program 32 (id=596): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000000000000000010008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000200)=""/39, 0x27}], 0x2, &(0x7f00000004c0)=""/109, 0x6d}, 0x40000000) r4 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb7f0a0043c5e9b405a902211c0000000000019078acbbac1414aa080090780fff02000000"], 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000080), 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x2, 0x6, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000480)='svc_stats_latency\x00', r1, 0x0, 0x3}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.504507773s ago: executing program 33 (id=602): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 2.461250832s ago: executing program 34 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x60, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe03c5dc0}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x60}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc}}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000065cbda3d63451e81ae6ea39cc57b1880965244ae42b640620a9d80634f8f276f832739294e7739aa1f1aed718e9e5e73b3477b4b1a8bfbb082567b038aecb4ccf75488f993b4107ca3ad999d9c4aaeea08532cd081a1992405e5589fdeac41f3fe20de83869c701c522662095ebe02630f52c59b6bc757aca2e6bf95cdbe5558f2b9bad1647e5dabc12ab291138b0da464a9b6284f6de7a20c91b1a0888c43ae19a06deeb9e7f866e65d0c0b7750b144e7d47823a589eec89e179e2a62", @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="090007009f987960380000000800370002000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf255a00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099010400000088000000"], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x44814) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{}, {0x3}, @device_b, @device_a, @initial, {0x0, 0x400}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x16, {0x0, 0x6, @val=0x17c0, @void, @val="6635d477e1ed3e9d28a2e58b21ddef69"}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.507816242s ago: executing program 35 (id=607): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 0s ago: executing program 36 (id=608): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x78, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fc, r4}, 0x38) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000240)=ANY=[]) listen(r1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c63a6efdecc4194d99634ff4eb90c266e83fff7dfbd3568c030612b423a3", 0x21}, {&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc712a114aaeae76812b1375a1b59f2b669bcf1f5a", 0x74}, {&(0x7f0000000100)="8d25ca2a98879e57578c3d652f5cf57f904b471f18c14b4d786c4ae155bee597b14455173e5580fb3f47", 0x2a}], 0x3, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r11 = accept(r1, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000100000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MISDN_TIME_STAMP(r11, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 72.193596][ T5851] cgroup: Unknown subsys name 'net' [ 72.347790][ T5851] cgroup: Unknown subsys name 'cpuset' [ 72.356758][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.828794][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.179709][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.187729][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.195293][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.207088][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.214864][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.270367][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.278259][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.285992][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.307855][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.324661][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.369643][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.377446][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.385093][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.393083][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.401414][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.437204][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.445124][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.452707][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.462571][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.470336][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.500799][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.508730][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.516432][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.530777][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.538879][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.918777][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 77.008540][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 77.112749][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 77.214633][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.222605][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.230208][ T5861] bridge_slave_0: entered allmulticast mode [ 77.237464][ T5861] bridge_slave_0: entered promiscuous mode [ 77.290519][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.314105][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.321503][ T5861] bridge_slave_1: entered allmulticast mode [ 77.331323][ T5861] bridge_slave_1: entered promiscuous mode [ 77.388445][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.396519][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.403697][ T5868] bridge_slave_0: entered allmulticast mode [ 77.411314][ T5868] bridge_slave_0: entered promiscuous mode [ 77.443194][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 77.453639][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.461100][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.468701][ T5868] bridge_slave_1: entered allmulticast mode [ 77.476489][ T5868] bridge_slave_1: entered promiscuous mode [ 77.485887][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.497663][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.507392][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 77.619439][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.653637][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.661122][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.668585][ T5866] bridge_slave_0: entered allmulticast mode [ 77.676715][ T5866] bridge_slave_0: entered promiscuous mode [ 77.693444][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.716415][ T5861] team0: Port device team_slave_0 added [ 77.746255][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.753477][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.760711][ T5866] bridge_slave_1: entered allmulticast mode [ 77.768628][ T5866] bridge_slave_1: entered promiscuous mode [ 77.780962][ T5861] team0: Port device team_slave_1 added [ 77.801574][ T5868] team0: Port device team_slave_0 added [ 77.811427][ T5868] team0: Port device team_slave_1 added [ 77.914842][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.921789][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.947964][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.970434][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.977843][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.985311][ T5870] bridge_slave_0: entered allmulticast mode [ 77.992274][ T5870] bridge_slave_0: entered promiscuous mode [ 78.002555][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.022923][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.029954][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.056146][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.068157][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.075680][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.101821][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.112851][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.120235][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.127510][ T5870] bridge_slave_1: entered allmulticast mode [ 78.134877][ T5870] bridge_slave_1: entered promiscuous mode [ 78.143542][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.152808][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.159989][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.167264][ T5873] bridge_slave_0: entered allmulticast mode [ 78.174953][ T5873] bridge_slave_0: entered promiscuous mode [ 78.189504][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.196637][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.222607][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.256738][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.264000][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.271196][ T5873] bridge_slave_1: entered allmulticast mode [ 78.278360][ T5873] bridge_slave_1: entered promiscuous mode [ 78.325107][ T5182] Bluetooth: hci0: command tx timeout [ 78.336107][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.394386][ T5182] Bluetooth: hci1: command tx timeout [ 78.395038][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.411104][ T5866] team0: Port device team_slave_0 added [ 78.419421][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.446182][ T5868] hsr_slave_0: entered promiscuous mode [ 78.452528][ T5868] hsr_slave_1: entered promiscuous mode [ 78.472856][ T5866] team0: Port device team_slave_1 added [ 78.478860][ T5182] Bluetooth: hci2: command tx timeout [ 78.499281][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.513253][ T5861] hsr_slave_0: entered promiscuous mode [ 78.519879][ T5861] hsr_slave_1: entered promiscuous mode [ 78.526223][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 78.532015][ T5861] Cannot create hsr debugfs directory [ 78.554160][ T5182] Bluetooth: hci3: command tx timeout [ 78.608134][ T5870] team0: Port device team_slave_0 added [ 78.628262][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.634221][ T5182] Bluetooth: hci4: command tx timeout [ 78.635868][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.667072][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.697902][ T5870] team0: Port device team_slave_1 added [ 78.723002][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.730438][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.756819][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.769652][ T5873] team0: Port device team_slave_0 added [ 78.779005][ T5873] team0: Port device team_slave_1 added [ 78.848262][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.855545][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.882447][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.929669][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.937040][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.963036][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.015291][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.022282][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.048431][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.090707][ T5866] hsr_slave_0: entered promiscuous mode [ 79.097987][ T5866] hsr_slave_1: entered promiscuous mode [ 79.103987][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 79.109780][ T5866] Cannot create hsr debugfs directory [ 79.133712][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.141201][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.167368][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.233708][ T5870] hsr_slave_0: entered promiscuous mode [ 79.240673][ T5870] hsr_slave_1: entered promiscuous mode [ 79.247213][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 79.252967][ T5870] Cannot create hsr debugfs directory [ 79.382258][ T5873] hsr_slave_0: entered promiscuous mode [ 79.389140][ T5873] hsr_slave_1: entered promiscuous mode [ 79.395732][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 79.401461][ T5873] Cannot create hsr debugfs directory [ 79.589511][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.601519][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.648291][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.670121][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.786062][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.797667][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.818856][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.848479][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.883409][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.894940][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.908710][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.930365][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.032176][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.043899][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.069740][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.079335][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.183882][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.229975][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.242820][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.260832][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.273135][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.290889][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.303881][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.311232][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.323833][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.349092][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.356237][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.372496][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.394882][ T5182] Bluetooth: hci0: command tx timeout [ 80.411783][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.461724][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.468854][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.475134][ T5182] Bluetooth: hci1: command tx timeout [ 80.501210][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.518886][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.526006][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.539307][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.554180][ T5182] Bluetooth: hci2: command tx timeout [ 80.558224][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.590827][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.597971][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.609692][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.616788][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.634709][ T5182] Bluetooth: hci3: command tx timeout [ 80.714647][ T5182] Bluetooth: hci4: command tx timeout [ 80.730350][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.751701][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.758857][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.774204][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.781328][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.811571][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.822003][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.841558][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.883604][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.971774][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.007653][ T4590] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.014830][ T4590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.069222][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.111403][ T4590] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.118582][ T4590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.470025][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.531249][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.588256][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.679383][ T5861] veth0_vlan: entered promiscuous mode [ 81.733759][ T5866] veth0_vlan: entered promiscuous mode [ 81.753791][ T5870] veth0_vlan: entered promiscuous mode [ 81.770394][ T5861] veth1_vlan: entered promiscuous mode [ 81.783614][ T5870] veth1_vlan: entered promiscuous mode [ 81.805278][ T5866] veth1_vlan: entered promiscuous mode [ 81.855833][ T5861] veth0_macvtap: entered promiscuous mode [ 81.871670][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.882979][ T5868] veth0_vlan: entered promiscuous mode [ 81.899723][ T5861] veth1_macvtap: entered promiscuous mode [ 81.931845][ T5870] veth0_macvtap: entered promiscuous mode [ 81.947001][ T5870] veth1_macvtap: entered promiscuous mode [ 81.958000][ T5868] veth1_vlan: entered promiscuous mode [ 81.970253][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.991739][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.053847][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.067361][ T5866] veth0_macvtap: entered promiscuous mode [ 82.079133][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.092717][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.101897][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.113003][ T5866] veth1_macvtap: entered promiscuous mode [ 82.121463][ T5873] veth0_vlan: entered promiscuous mode [ 82.129354][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.148741][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.177324][ T5873] veth1_vlan: entered promiscuous mode [ 82.199207][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.209941][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.231479][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.243870][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.261165][ T1160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.270230][ T1160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.296466][ T5868] veth0_macvtap: entered promiscuous mode [ 82.321928][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.331300][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.350016][ T5868] veth1_macvtap: entered promiscuous mode [ 82.356926][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.372608][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.381482][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.399961][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.462541][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.475450][ T5182] Bluetooth: hci0: command tx timeout [ 82.489157][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.497337][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.516314][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.523945][ T5873] veth0_macvtap: entered promiscuous mode [ 82.544848][ T5873] veth1_macvtap: entered promiscuous mode [ 82.555721][ T5182] Bluetooth: hci1: command tx timeout [ 82.599422][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.622663][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.634220][ T5182] Bluetooth: hci2: command tx timeout [ 82.640152][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.665537][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.680193][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.697594][ T4590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.714361][ T5182] Bluetooth: hci3: command tx timeout [ 82.715322][ T4590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.754273][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.789112][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.797393][ T5182] Bluetooth: hci4: command tx timeout [ 82.870826][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.896436][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.910780][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.919571][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.927071][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.940783][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.977004][ T5980] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7'. [ 82.977771][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.006152][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.056090][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.063931][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.189136][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.214135][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.343339][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.366682][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.555752][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.563603][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.594946][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.682835][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.700947][ T5999] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.742503][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.936035][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 84.001379][ T6016] tipc: Started in network mode [ 84.015392][ T6016] tipc: Node identity 2a8c3583139c, cluster identity 4711 [ 84.023111][ T6016] tipc: Enabled bearer , priority 0 [ 84.089155][ T6026] syzkaller0: entered promiscuous mode [ 84.096881][ T6026] syzkaller0: entered allmulticast mode [ 84.221766][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.279143][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.287254][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.484117][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.499314][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.554303][ T5182] Bluetooth: hci0: command tx timeout [ 84.634466][ T5182] Bluetooth: hci1: command tx timeout [ 84.676956][ T6016] tipc: Resetting bearer [ 84.716269][ T5182] Bluetooth: hci2: command tx timeout [ 84.790168][ T6029] tipc: Resetting bearer [ 84.794245][ T5182] Bluetooth: hci3: command tx timeout [ 84.874154][ T5182] Bluetooth: hci4: command tx timeout [ 84.960610][ T6029] tipc: Disabling bearer [ 85.060726][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.078312][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.158461][ T6066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21'. [ 85.210952][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.211123][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 85.234162][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.257742][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 85.296093][ T6059] Zero length message leads to an empty skb [ 85.470235][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 85.517909][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 86.481819][ T6086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.26'. [ 86.560279][ T10] cfg80211: failed to load regulatory.db [ 86.622608][ T6092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28'. [ 86.679051][ T6093] tipc: Invalid UDP bearer configuration [ 86.679106][ T6093] tipc: Enabling of bearer rejected, failed to enable media [ 86.894273][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.907692][ T6103] batadv_slave_1: entered promiscuous mode [ 87.112373][ T6108] netlink: 'syz.0.32': attribute type 5 has an invalid length. [ 87.660458][ T6128] tipc: Enabling of bearer rejected, failed to enable media [ 87.873680][ T6133] FAULT_INJECTION: forcing a failure. [ 87.873680][ T6133] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.942176][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.3.38 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 87.942206][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.942226][ T6133] Call Trace: [ 87.942235][ T6133] [ 87.942244][ T6133] dump_stack_lvl+0x189/0x250 [ 87.942277][ T6133] ? __pfx____ratelimit+0x10/0x10 [ 87.942305][ T6133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.942330][ T6133] ? __pfx__printk+0x10/0x10 [ 87.942358][ T6133] ? __might_fault+0xb0/0x130 [ 87.942399][ T6133] should_fail_ex+0x414/0x560 [ 87.942428][ T6133] _copy_from_user+0x2d/0xb0 [ 87.942449][ T6133] ___sys_sendmsg+0x158/0x2a0 [ 87.942484][ T6133] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.942556][ T6133] ? __fget_files+0x2a/0x420 [ 87.942597][ T6133] ? __fget_files+0x3a0/0x420 [ 87.942637][ T6133] __x64_sys_sendmsg+0x19b/0x260 [ 87.942670][ T6133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.942710][ T6133] ? __pfx_ksys_write+0x10/0x10 [ 87.942734][ T6133] ? rcu_is_watching+0x15/0xb0 [ 87.942759][ T6133] ? do_syscall_64+0xbe/0x3b0 [ 87.942789][ T6133] do_syscall_64+0xfa/0x3b0 [ 87.942813][ T6133] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.942837][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.942857][ T6133] ? clear_bhb_loop+0x60/0xb0 [ 87.942881][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.942900][ T6133] RIP: 0033:0x7fae84b8ebe9 [ 87.942924][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.942940][ T6133] RSP: 002b:00007fae82df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.942964][ T6133] RAX: ffffffffffffffda RBX: 00007fae84db5fa0 RCX: 00007fae84b8ebe9 [ 87.942978][ T6133] RDX: 0000000000000830 RSI: 00002000000002c0 RDI: 0000000000000005 [ 87.942990][ T6133] RBP: 00007fae82df6090 R08: 0000000000000000 R09: 0000000000000000 [ 87.943002][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.943012][ T6133] R13: 00007fae84db6038 R14: 00007fae84db5fa0 R15: 00007ffe284f2208 [ 87.943048][ T6133] [ 88.629051][ T30] audit: type=1800 audit(1755123938.990:2): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.37" name="memory.events" dev="tmpfs" ino=51 res=0 errno=0 [ 88.686556][ T6148] tipc: Started in network mode [ 88.691472][ T6148] tipc: Node identity 5aa552237786, cluster identity 4711 [ 88.722002][ T6148] tipc: Enabled bearer , priority 0 [ 88.750758][ T6152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.831065][ T6148] tipc: Resetting bearer [ 88.859202][ T6154] sctp: failed to load transform for md5: -4 [ 88.998111][ T6149] syzkaller0: entered promiscuous mode [ 89.003750][ T6149] syzkaller0: entered allmulticast mode [ 89.027771][ T6142] tipc: Resetting bearer [ 89.045474][ T6142] tipc: Disabling bearer [ 89.215832][ T6172] __nla_validate_parse: 4 callbacks suppressed [ 89.215850][ T6172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.46'. [ 89.425455][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.48'. [ 89.486624][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47'. [ 90.218810][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 90.235723][ T6202] netlink: 'syz.3.54': attribute type 2 has an invalid length. [ 90.527348][ T6213] bridge_slave_0: left allmulticast mode [ 90.533047][ T6213] bridge_slave_0: left promiscuous mode [ 90.582137][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.652992][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 90.673563][ T6213] bridge_slave_1: left allmulticast mode [ 90.693159][ T6213] bridge_slave_1: left promiscuous mode [ 90.700887][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.731909][ T6213] bond0: (slave bond_slave_0): Releasing backup interface [ 90.743071][ T6213] bond0: (slave bond_slave_1): Releasing backup interface [ 90.762393][ T6213] team0: Port device team_slave_0 removed [ 90.776057][ T6213] team0: Port device team_slave_1 removed [ 90.784452][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.791964][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.803206][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.811275][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.879013][ T6228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 90.958972][ T6213] syz.1.60 (6213) used greatest stack depth: 19864 bytes left [ 91.070037][ T6236] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 91.155650][ T6234] netlink: 96 bytes leftover after parsing attributes in process `syz.2.64'. [ 91.177539][ T6244] trusted_key: syz.1.67 sent an empty control message without MSG_MORE. [ 91.272495][ T6246] netlink: 'syz.4.68': attribute type 21 has an invalid length. [ 91.318487][ T6247] syz_tun: entered allmulticast mode [ 91.349912][ T6247] Illegal XDP return value 16128 on prog (id 18) dev syz_tun, expect packet loss! [ 91.380602][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 91.396134][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.69'. [ 91.490802][ T1160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.522650][ T1160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.568210][ T1160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.614319][ T1160] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.629001][ T6260] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET) [ 91.651467][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 91.737723][ T6260] tipc: Started in network mode [ 91.748552][ T6260] tipc: Node identity de6675096beb, cluster identity 4711 [ 91.766610][ T6260] tipc: Enabled bearer , priority 0 [ 91.789517][ T6268] syzkaller0: entered promiscuous mode [ 91.807560][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 91.824897][ T6268] syzkaller0: entered allmulticast mode [ 91.900751][ T6260] tipc: Resetting bearer [ 91.912717][ T6243] syz_tun: left allmulticast mode [ 91.946048][ T6259] tipc: Resetting bearer [ 92.053776][ T6259] tipc: Disabling bearer [ 92.306428][ T6294] syz_tun: entered promiscuous mode [ 92.313191][ T6294] batadv_slave_0: entered promiscuous mode [ 92.328810][ T6294] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 92.346633][ T6294] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.364428][ T6294] hsr1: entered allmulticast mode [ 92.369483][ T6294] syz_tun: entered allmulticast mode [ 92.423117][ T6294] batadv_slave_0: entered allmulticast mode [ 92.445465][ T6307] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 92.456290][ T6305] tipc: Started in network mode [ 92.516663][ T6305] tipc: Node identity a2d7ab8a3a29, cluster identity 4711 [ 92.561862][ T6305] tipc: Enabled bearer , priority 0 [ 92.631591][ T6311] syzkaller0: entered promiscuous mode [ 92.657874][ T6311] syzkaller0: entered allmulticast mode [ 92.752897][ T6298] tipc: Resetting bearer [ 92.762711][ T6289] tipc: Resetting bearer [ 92.773795][ T6289] tipc: Disabling bearer [ 93.007923][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.015861][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.190411][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.217993][ T6336] openvswitch: netlink: Message has 20 unknown bytes. [ 93.240743][ T6336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.605415][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.617943][ T6351] netlink: 'syz.0.95': attribute type 32 has an invalid length. [ 93.668565][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 93.725033][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.765952][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 93.800878][ T6351] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 93.875239][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.888140][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 93.900860][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.914508][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 94.000110][ T6367] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 94.220971][ T6373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 94.686994][ T6392] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 94.712974][ T6392] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 94.861925][ T6373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 95.113891][ T6373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 95.231272][ T6373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 95.415801][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 95.551715][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.586867][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.684774][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 95.774813][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 95.783143][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 96.008158][ T6435] netlink: 'syz.4.121': attribute type 10 has an invalid length. [ 96.020370][ T6434] netlink: 'syz.1.122': attribute type 11 has an invalid length. [ 96.065556][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.085271][ T6435] bond0: (slave team0): Enslaving as an active interface with an up link [ 96.357486][ T6449] : entered promiscuous mode [ 96.409344][ T6445] netlink: zone id is out of range [ 96.430055][ T6445] netlink: zone id is out of range [ 96.435752][ T6445] netlink: zone id is out of range [ 96.440879][ T6445] netlink: zone id is out of range [ 96.446694][ T6445] netlink: zone id is out of range [ 96.451818][ T6445] netlink: zone id is out of range [ 96.457376][ T6445] netlink: zone id is out of range [ 96.462505][ T6445] netlink: zone id is out of range [ 96.468900][ T6445] netlink: zone id is out of range [ 96.474443][ T6445] netlink: zone id is out of range [ 96.483890][ T6456] netlink: 'syz.3.128': attribute type 17 has an invalid length. [ 96.952841][ T6477] __nla_validate_parse: 5 callbacks suppressed [ 96.952858][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 97.060567][ T6487] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 97.317569][ T6487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.355468][ T6491] sit1: entered promiscuous mode [ 97.414485][ T6500] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.509617][ T6487] gretap1: entered promiscuous mode [ 97.530724][ T6487] bond2: (slave gretap1): making interface the new active one [ 97.548817][ T6487] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 97.594989][ T6491] macvlan2: entered promiscuous mode [ 97.610695][ T6491] macvlan2: entered allmulticast mode [ 97.624876][ T6491] bond2: entered promiscuous mode [ 97.635323][ T6491] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.645182][ T6491] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 97.665989][ T6491] bond2: left promiscuous mode [ 98.400596][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 98.548387][ T6542] pimreg: entered allmulticast mode [ 98.710779][ T6551] xt_socket: unknown flags 0xd0 [ 99.175165][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.158'. [ 99.184904][ T6576] hsr1: left allmulticast mode [ 99.194235][ T6576] syz_tun: left allmulticast mode [ 99.206857][ T6576] batadv_slave_0: left allmulticast mode [ 99.227119][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.258578][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.323445][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.367567][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.462998][ T6588] veth0: entered promiscuous mode [ 99.481749][ T6587] veth0: left promiscuous mode [ 99.608450][ T6595] ip6gretap0: entered promiscuous mode [ 99.636193][ T6595] macsec1: entered allmulticast mode [ 99.659426][ T6595] ip6gretap0: entered allmulticast mode [ 99.680204][ T6595] ip6gretap0: left allmulticast mode [ 99.685793][ T6595] ip6gretap0: left promiscuous mode [ 99.841215][ T6600] tipc: Enabled bearer , priority 0 [ 99.850613][ T6601] syzkaller0: entered promiscuous mode [ 99.857326][ T6601] syzkaller0: entered allmulticast mode [ 99.996818][ T6599] tipc: Resetting bearer [ 100.033829][ T6599] tipc: Disabling bearer [ 100.208234][ T6627] geneve2: entered promiscuous mode [ 100.246593][ T6632] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 100.327212][ T6634] vlan2: entered promiscuous mode [ 100.332524][ T6634] vlan2: entered allmulticast mode [ 100.338676][ T6634] hsr_slave_1: entered allmulticast mode [ 100.570267][ T6649] pim6reg1: entered allmulticast mode [ 101.057634][ T6672] macvlan2: entered allmulticast mode [ 101.075522][ T6672] veth1_vlan: entered allmulticast mode [ 101.109096][ T6672] veth1_vlan: left allmulticast mode [ 101.469055][ T6684] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.541619][ T6687] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 101.612522][ T6691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.188'. [ 101.900020][ T6703] netlink: 'syz.4.195': attribute type 4 has an invalid length. [ 101.938639][ T6703] netlink: 152 bytes leftover after parsing attributes in process `syz.4.195'. [ 101.956930][ T6706] netlink: 'syz.4.195': attribute type 10 has an invalid length. [ 101.987326][ T6703] Ã: renamed from bond0 [ 102.108442][ T6713] net_ratelimit: 92 callbacks suppressed [ 102.108459][ T6713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.281807][ T6717] veth3: entered promiscuous mode [ 102.650319][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 103.164595][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.442640][ T6804] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 103.469115][ T6804] netlink: 232 bytes leftover after parsing attributes in process `syz.4.208'. [ 103.480732][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 103.697668][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 103.706477][ T6810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.706537][ T6810] IPv6: NLM_F_CREATE should be set when creating new route [ 103.706607][ T6810] IPv6: NLM_F_CREATE should be set when creating new route [ 103.728941][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 103.783793][ T6808] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 103.793957][ T6808] netlink: 10 bytes leftover after parsing attributes in process `syz.2.210'. [ 103.825598][ T6813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.904579][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 104.037234][ T6824] netlink: 256 bytes leftover after parsing attributes in process `syz.3.216'. [ 104.486118][ T6852] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 104.623480][ T6855] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 104.634472][ T6855] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 104.647000][ T6855] bond1: (slave vti0): making interface the new active one [ 104.656195][ T6855] bond1: (slave vti0): Enslaving as an active interface with an up link [ 104.762017][ T6859] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 105.576556][ T6885] geneve2: left promiscuous mode [ 105.583007][ T6885] vlan2: left promiscuous mode [ 105.588263][ T6885] vlan2: left allmulticast mode [ 105.593245][ T6885] hsr_slave_1: left allmulticast mode [ 105.617655][ T6768] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.644711][ T6768] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.720251][ T6768] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.857344][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 105.878738][ T6751] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.302075][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.566241][ T6938] tipc: Enabled bearer , priority 0 [ 106.586637][ T6939] syzkaller0: entered promiscuous mode [ 106.602984][ T6939] syzkaller0: entered allmulticast mode [ 106.738567][ T6936] tipc: Resetting bearer [ 107.109705][ T6936] tipc: Disabling bearer [ 107.458879][ T6983] netlink: 'syz.3.252': attribute type 33 has an invalid length. [ 107.477517][ T6983] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 108.029312][ T7005] __nla_validate_parse: 5 callbacks suppressed [ 108.029331][ T7005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 108.159931][ T7005] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.262'. [ 108.361322][ T7021] dvmrp8: entered allmulticast mode [ 108.526484][ T7020] dvmrp8: left allmulticast mode [ 108.589280][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 108.607406][ T7033] tipc: Enabled bearer , priority 0 [ 108.642855][ T7033] syzkaller0: entered promiscuous mode [ 108.652339][ T7033] syzkaller0: entered allmulticast mode [ 108.723831][ T7033] tipc: Resetting bearer [ 108.737576][ T7029] tipc: Resetting bearer [ 108.763053][ T7029] tipc: Disabling bearer [ 108.917770][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.272'. [ 108.963489][ T7051] netlink: 45 bytes leftover after parsing attributes in process `syz.0.274'. [ 109.017898][ T7052] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.272'. [ 109.257391][ T7064] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.265120][ T7064] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.368080][ T7072] tipc: Enabled bearer , priority 0 [ 109.377986][ T7069] syzkaller0: entered promiscuous mode [ 109.394798][ T7069] syzkaller0: entered allmulticast mode [ 109.429034][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'. [ 109.442357][ T7069] tipc: Resetting bearer [ 109.464901][ T7068] tipc: Resetting bearer [ 109.476542][ T7068] tipc: Disabling bearer [ 109.495281][ T7080] netlink: 'syz.0.282': attribute type 7 has an invalid length. [ 109.517071][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 109.628036][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 110.124639][ T7110] tipc: Can't bind to reserved service type 2 [ 110.187224][ T7113] netlink: 'syz.0.294': attribute type 2 has an invalid length. [ 110.230658][ T7113] k›*·]‘: entered promiscuous mode [ 110.261553][ T7120] netlink: 'syz.1.291': attribute type 9 has an invalid length. [ 110.293196][ T7120] netlink: 'syz.1.291': attribute type 6 has an invalid length. [ 110.502894][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 110.526475][ T7138] Bluetooth: MGMT ver 1.23 [ 110.559425][ T7128] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 110.612179][ T7141] netlink: 'syz.3.297': attribute type 10 has an invalid length. [ 110.722272][ T7128] Ã: renamed from bond0 (while UP) [ 111.058183][ T7141] batman_adv: batadv0: Adding interface: netdevsim0 [ 111.077756][ T7141] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.105874][ T7141] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 111.109924][ T7161] netlink: 'syz.0.300': attribute type 2 has an invalid length. [ 111.961367][ T930] IPVS: starting estimator thread 0... [ 112.064263][ T7195] IPVS: using max 29 ests per chain, 69600 per kthread [ 112.139702][ T7198] sch_fq: defrate 53322 ignored. [ 112.928166][ T7228] nbd: socks must be embedded in a SOCK_ITEM attr [ 113.000209][ T5992] block nbd64: NBD_DISCONNECT [ 113.405176][ T7243] tipc: Started in network mode [ 113.410172][ T7243] tipc: Node identity 660bc9c59b0e, cluster identity 4711 [ 113.464554][ T7243] tipc: Enabled bearer , priority 0 [ 113.500209][ T7246] __nla_validate_parse: 13 callbacks suppressed [ 113.500225][ T7246] netlink: 3 bytes leftover after parsing attributes in process `syz.3.319'. [ 113.533367][ T7247] netlink: 3 bytes leftover after parsing attributes in process `syz.3.319'. [ 113.533571][ T7244] syzkaller0: entered promiscuous mode [ 113.585324][ T7244] syzkaller0: entered allmulticast mode [ 113.621337][ T7247] batadv1: entered promiscuous mode [ 113.630117][ T7247] batadv1: entered allmulticast mode [ 113.662379][ T7246] batadv1: entered promiscuous mode [ 113.682373][ T7246] batadv1: entered allmulticast mode [ 113.740625][ T7244] sch_fq: defrate 257 ignored. [ 113.776230][ T7249] tipc: Resetting bearer [ 113.783412][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 113.954961][ T7242] tipc: Resetting bearer [ 114.019127][ T7242] tipc: Disabling bearer [ 114.043597][ T7268] netlink: 256 bytes leftover after parsing attributes in process `syz.4.325'. [ 114.068816][ T7268] netlink: 48 bytes leftover after parsing attributes in process `syz.4.325'. [ 114.128555][ T7268] veth0: entered promiscuous mode [ 114.180689][ T7268] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 114.226080][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 114.239450][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 114.515245][ T7285] netlink: 'syz.2.327': attribute type 12 has an invalid length. [ 114.534602][ T7285] netlink: 'syz.2.327': attribute type 29 has an invalid length. [ 114.551444][ T7285] netlink: 148 bytes leftover after parsing attributes in process `syz.2.327'. [ 114.664740][ T7266] veth0: left promiscuous mode [ 114.786676][ T7301] netlink: 'syz.2.331': attribute type 28 has an invalid length. [ 114.939004][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 115.309663][ T7321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.336'. [ 115.817005][ T7340] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 116.046834][ T7349] block nbd1: Unsupported socket: shutdown callout must be supported. [ 116.610474][ T7364] syzkaller0: entered promiscuous mode [ 116.616637][ T7364] syzkaller0: entered allmulticast mode [ 117.577773][ T7404] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 120.086058][ T7418] __nla_validate_parse: 8 callbacks suppressed [ 120.086074][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 120.153315][ T7418] hsr_slave_1 (unregistering): left promiscuous mode [ 120.392817][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.368'. [ 120.451636][ T7443] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.368'. [ 120.459791][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 120.530316][ T7440] macvtap0: entered promiscuous mode [ 120.537062][ T7440] batadv0: entered promiscuous mode [ 120.542460][ T7440] macvtap0: entered allmulticast mode [ 120.550732][ T7440] batadv0: entered allmulticast mode [ 120.560140][ T7440] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 120.791692][ T7455] FAULT_INJECTION: forcing a failure. [ 120.791692][ T7455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.842127][ T7455] CPU: 1 UID: 0 PID: 7455 Comm: syz.3.374 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 120.842168][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.842187][ T7455] Call Trace: [ 120.842194][ T7455] [ 120.842202][ T7455] dump_stack_lvl+0x189/0x250 [ 120.842230][ T7455] ? __pfx____ratelimit+0x10/0x10 [ 120.842255][ T7455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.842278][ T7455] ? __pfx__printk+0x10/0x10 [ 120.842316][ T7455] should_fail_ex+0x414/0x560 [ 120.842343][ T7455] _copy_to_user+0x31/0xb0 [ 120.842364][ T7455] simple_read_from_buffer+0xe1/0x170 [ 120.842396][ T7455] proc_fail_nth_read+0x1b3/0x220 [ 120.842421][ T7455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.842445][ T7455] ? rw_verify_area+0x2a6/0x4d0 [ 120.842486][ T7455] ? __lock_acquire+0xab9/0xd20 [ 120.842513][ T7455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.842538][ T7455] vfs_read+0x200/0x980 [ 120.842562][ T7455] ? fdget_pos+0x247/0x320 [ 120.842584][ T7455] ? __pfx___mutex_lock+0x10/0x10 [ 120.842611][ T7455] ? __pfx_vfs_read+0x10/0x10 [ 120.842639][ T7455] ? __fget_files+0x2a/0x420 [ 120.842673][ T7455] ? __fget_files+0x3a0/0x420 [ 120.842701][ T7455] ? __fget_files+0x2a/0x420 [ 120.842741][ T7455] ksys_read+0x145/0x250 [ 120.842765][ T7455] ? __fget_files+0x2a/0x420 [ 120.842796][ T7455] ? __pfx_ksys_read+0x10/0x10 [ 120.842828][ T7455] ? do_syscall_64+0xbe/0x3b0 [ 120.842858][ T7455] do_syscall_64+0xfa/0x3b0 [ 120.842882][ T7455] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.842906][ T7455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.842926][ T7455] ? clear_bhb_loop+0x60/0xb0 [ 120.842950][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.842970][ T7455] RIP: 0033:0x7fae84b8d5fc [ 120.842988][ T7455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 120.843004][ T7455] RSP: 002b:00007fae82df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.843024][ T7455] RAX: ffffffffffffffda RBX: 00007fae84db5fa0 RCX: 00007fae84b8d5fc [ 120.843048][ T7455] RDX: 000000000000000f RSI: 00007fae82df60a0 RDI: 0000000000000004 [ 120.843059][ T7455] RBP: 00007fae82df6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.843069][ T7455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.843080][ T7455] R13: 00007fae84db6038 R14: 00007fae84db5fa0 R15: 00007ffe284f2208 [ 120.843109][ T7455] [ 121.177827][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 121.310283][ T7464] netlink: 'syz.1.378': attribute type 3 has an invalid length. [ 121.399311][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'. [ 121.476576][ T7480] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.382'. [ 121.802413][ T7489] netlink: 'syz.4.385': attribute type 13 has an invalid length. [ 121.841402][ T7489] netlink: 'syz.4.385': attribute type 17 has an invalid length. [ 121.993506][ T7489] 8021q: adding VLAN 0 to HW filter on device à [ 122.037932][ T7489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.097121][ T7497] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 122.219019][ T7489] netlink: 'syz.4.385': attribute type 10 has an invalid length. [ 122.276229][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.385'. [ 122.285743][ T7489] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 122.297532][ T7489] wlan1: mtu less than device minimum [ 122.303258][ T7489] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 122.456703][ T7497] syz.4.385 (7497) used greatest stack depth: 17896 bytes left [ 122.531398][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'. [ 122.671515][ T7523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.682651][ T7523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.723772][ T7523] hsr0: entered promiscuous mode [ 122.730005][ T7523] hsr0: entered allmulticast mode [ 122.739514][ T7523] hsr_slave_0: entered allmulticast mode [ 122.745710][ T7523] hsr_slave_1: entered allmulticast mode [ 122.773972][ T7527] C: renamed from team_slave_0 [ 122.794028][ T7527] netlink: 'syz.4.396': attribute type 8 has an invalid length. [ 122.802158][ T7527] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 122.988910][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 123.026849][ T7540] vlan3: entered promiscuous mode [ 123.031915][ T7540] bond0: entered promiscuous mode [ 123.038594][ T7540] bond_slave_0: entered promiscuous mode [ 123.053844][ T7540] bond_slave_1: entered promiscuous mode [ 123.077325][ T7540] vlan3: entered allmulticast mode [ 123.093248][ T7540] bond0: entered allmulticast mode [ 123.100310][ T7540] bond_slave_0: entered allmulticast mode [ 123.107627][ T7540] bond_slave_1: entered allmulticast mode [ 123.245833][ T7560] unknown channel width for channel at 909000KHz? [ 123.252469][ T7560] unknown channel width for channel at 909000KHz? [ 123.262636][ T7560] unknown channel width for channel at 909000KHz? [ 123.282325][ T7560] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 123.398287][ T7566] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 123.448425][ T7569] netlink: 'syz.2.410': attribute type 13 has an invalid length. [ 123.475588][ T7569] netlink: 'syz.2.410': attribute type 17 has an invalid length. [ 123.631418][ T7569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.640910][ T7569] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.655877][ T7569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.741133][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.419459][ T7615] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.596198][ T7615] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.692817][ T7615] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.868816][ T7635] syzkaller0: entered promiscuous mode [ 124.874912][ T7635] syzkaller0: entered allmulticast mode [ 124.941209][ T7615] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.984166][ T7635] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.241619][ T7654] __nla_validate_parse: 10 callbacks suppressed [ 125.241636][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 125.340589][ T6777] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.463678][ T7660] bridge_slave_0: left allmulticast mode [ 125.490870][ T7660] bridge_slave_0: left promiscuous mode [ 125.504376][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.548187][ T7660] bridge_slave_1: left allmulticast mode [ 125.559403][ T7660] bridge_slave_1: left promiscuous mode [ 125.576946][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.600215][ T7660] Ã: (slave bond_slave_0): Releasing backup interface [ 125.627573][ T7660] Ã: (slave bond_slave_1): Releasing backup interface [ 125.662429][ T7660] team0: Port device team_slave_0 removed [ 125.689345][ T7660] team0: Port device team_slave_1 removed [ 125.700968][ T7668] netlink: 88 bytes leftover after parsing attributes in process `syz.4.432'. [ 125.704962][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.764896][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.780804][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 125.791666][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.801377][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.818248][ T7660] batman_adv: batadv0: Removing interface: netdevsim0 [ 125.833718][ T6777] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.884377][ T1160] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.027643][ T6012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.162243][ T7681] netlink: 10 bytes leftover after parsing attributes in process `syz.4.435'. [ 126.177377][ T7672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.433'. [ 126.346224][ T7688] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 126.448311][ T7688] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 126.559657][ T7688] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 126.643019][ T7688] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 126.758407][ T7708] tipc: Enabled bearer , priority 0 [ 126.787675][ T7708] syzkaller0: entered promiscuous mode [ 126.807597][ T7708] syzkaller0: entered allmulticast mode [ 126.817157][ T1160] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 126.878230][ T1160] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 126.903344][ T1160] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 126.915049][ T7708] tipc: Resetting bearer [ 126.933328][ T7707] tipc: Resetting bearer [ 126.946510][ T7707] tipc: Disabling bearer [ 126.956412][ T1160] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 132.636384][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.642691][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.610529][ T7720] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 175.617136][ T7716] netlink: 'syz.2.448': attribute type 16 has an invalid length. [ 175.626245][ T7722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.446'. [ 175.638515][ T7716] netlink: 'syz.2.448': attribute type 17 has an invalid length. [ 175.815031][ T7729] IPv6: NLM_F_REPLACE set, but no existing node found! [ 175.893778][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 176.031433][ T7740] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 176.041587][ T7738] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 176.047364][ T7738] dvmrp1: linktype set to 773 [ 176.109179][ T7740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.163802][ T7740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 176.227083][ T7743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.254702][ T7743] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 176.316920][ T7743] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 176.384461][ T7745] erspan0: entered allmulticast mode [ 176.429445][ T7751] wireguard0: entered promiscuous mode [ 176.435677][ T7751] wireguard0: entered allmulticast mode [ 176.617149][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 176.637127][ T7761] netlink: 120 bytes leftover after parsing attributes in process `syz.0.457'. [ 176.654179][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 176.727147][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 176.740072][ T7767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.457'. [ 176.913440][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 176.994422][ T7779] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 176.994856][ T36] bond0: (slave bond_slave_0): interface is now down [ 177.078778][ T36] bond0: (slave bond_slave_1): interface is now down [ 177.129616][ T36] bond0: (slave bond_slave_0): interface is now down [ 177.164053][ T36] bond0: (slave bond_slave_1): interface is now down [ 177.207681][ T6012] bond0: (slave bond_slave_0): interface is now down [ 177.241405][ T6012] bond0: (slave bond_slave_1): interface is now down [ 177.281176][ T6012] bond0: now running without any active interface! [ 177.523734][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.468'. [ 177.665925][ T7814] netlink: 'syz.0.470': attribute type 14 has an invalid length. [ 177.885993][ T7818] tipc: Enabled bearer , priority 0 [ 177.938366][ T7826] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 177.970527][ T7828] syzkaller0: entered promiscuous mode [ 178.006625][ T7828] syzkaller0: entered allmulticast mode [ 178.023654][ T7818] Bluetooth: MGMT ver 1.23 [ 178.078021][ T7817] tipc: Resetting bearer [ 178.126626][ T7817] tipc: Disabling bearer [ 178.502801][ T7863] sctp: [Deprecated]: syz.4.486 (pid 7863) Use of int in max_burst socket option. [ 178.502801][ T7863] Use struct sctp_assoc_value instead [ 178.522702][ T7862] netlink: 'syz.1.480': attribute type 39 has an invalid length. [ 178.613720][ T7867] tipc: Enabled bearer , priority 0 [ 178.639569][ T7852] syzkaller0: entered promiscuous mode [ 178.645563][ T7852] syzkaller0: entered allmulticast mode [ 178.793188][ T7861] tipc: Resetting bearer [ 178.860648][ T7851] tipc: Resetting bearer [ 178.872754][ T7851] tipc: Disabling bearer [ 178.993763][ T7887] netlink: 'syz.4.492': attribute type 11 has an invalid length. [ 180.074166][ T7835] Bluetooth: hci2: command 0x0401 tx timeout [ 180.074199][ T5864] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 180.877422][ T7992] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 180.907352][ T7992] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 181.592489][ T8009] __nla_validate_parse: 13 callbacks suppressed [ 181.592505][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.525'. [ 182.223916][ T8039] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 182.304731][ T8045] bond3: entered promiscuous mode [ 182.309807][ T8045] bond3: entered allmulticast mode [ 182.367932][ T8045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.523025][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.531181][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.655553][ T8039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.674610][ T8039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.894744][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.962846][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.985896][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.031980][ T8071] netlink: 'syz.3.541': attribute type 13 has an invalid length. [ 183.050456][ T8071] netlink: 'syz.3.541': attribute type 17 has an invalid length. [ 183.079655][ T8070] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 183.188404][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.243755][ T8081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.286469][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 183.314329][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 183.388488][ T8071] 8021q: adding VLAN 0 to HW filter on device à [ 183.406460][ T8071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.425318][ T8079] ¾x9ÿ: renamed from bridge_slave_0 [ 183.801539][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.549'. [ 183.842460][ T8101] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.549'. [ 184.581760][ T8135] netlink: 88 bytes leftover after parsing attributes in process `syz.2.560'. [ 184.680972][ T8138] vlan2: entered allmulticast mode [ 184.693857][ T8138] veth1: entered allmulticast mode [ 184.700860][ T8138] batman_adv: batadv0: Adding interface: vlan2 [ 184.708633][ T8138] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.734690][ T8138] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 184.748870][ T8142] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 184.761903][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 184.771752][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 184.801578][ T8147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.561'. [ 184.816670][ T8143] netlink: 'syz.2.560': attribute type 5 has an invalid length. [ 185.189681][ T8165] netlink: 'syz.2.569': attribute type 2 has an invalid length. [ 185.216205][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 185.256888][ T8165] þ`Ì: entered promiscuous mode [ 185.304411][ T8168] batadv0: entered promiscuous mode [ 185.328407][ T8168] macvtap1: entered promiscuous mode [ 185.355127][ T8168] macvtap1: entered allmulticast mode [ 185.363247][ T8168] batadv0: entered allmulticast mode [ 185.379496][ T8168] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 185.526370][ T8180] syzkaller0: entered promiscuous mode [ 185.545181][ T8180] syzkaller0: entered allmulticast mode [ 185.713308][ T8195] netlink: ct family unspecified [ 185.723483][ T8195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.955451][ T8203] netlink: 'syz.0.580': attribute type 303 has an invalid length. [ 186.141483][ T8213] macvtap1: entered promiscuous mode [ 186.148249][ T8213] batadv0: entered promiscuous mode [ 186.156842][ T8213] macvtap1: entered allmulticast mode [ 186.162299][ T8213] batadv0: entered allmulticast mode [ 186.173443][ T8213] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 186.197034][ T8219] batadv0: left allmulticast mode [ 186.202091][ T8219] batadv0: left promiscuous mode [ 187.416434][ T8232] team0: Mode changed to "activebackup" [ 187.664691][ T8243] __nla_validate_parse: 4 callbacks suppressed [ 187.664709][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.593'. [ 187.682247][ T36] wlan0: Trigger new scan to find an IBSS to join [ 187.751222][ T8249] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.593'. [ 187.973416][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 188.143784][ T8259] nbd3: detected capacity change from 0 to 63 [ 188.166452][ T8264] block nbd0: NBD_DISCONNECT [ 188.172048][ T8264] block nbd0: Send disconnect failed -107 [ 188.181625][ T8264] block nbd0: Disconnected due to user request. [ 188.189129][ T8264] block nbd0: shutting down sockets [ 188.439754][ T8279] batadv_slave_1: left promiscuous mode [ 188.456743][ T8279] hsr0: left promiscuous mode [ 188.461810][ T8279] hsr0: left allmulticast mode [ 188.471185][ T8279] hsr_slave_0: left allmulticast mode [ 188.477217][ T8279] hsr_slave_1: left allmulticast mode [ 188.504632][ T8279] veth3: left promiscuous mode [ 188.510792][ T8279] batadv0: left allmulticast mode [ 188.516530][ T8279] batadv0: left promiscuous mode [ 188.521965][ T8279] macvtap0: left promiscuous mode [ 188.527485][ T8279] macvtap0: left allmulticast mode [ 188.562048][ T8279] vlan2: left allmulticast mode [ 188.567167][ T8279] veth1: left allmulticast mode [ 188.580841][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 188.593930][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 188.616594][ T5864] block nbd3: Receive control failed (result -104) [ 188.625878][ T6768] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 188.639717][ T6768] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 188.833601][ T8288] netlink: 36 bytes leftover after parsing attributes in process `syz.4.605'. [ 188.846590][ T8289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.605'. [ 188.989287][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 189.033599][ T8292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.581388][ T8235] Set syz1 is full, maxelem 65536 reached [ 194.077843][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.084259][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.277167][ T8304] Bluetooth: hci0: command 0x0406 tx timeout [ 201.281627][ T8303] Bluetooth: hci1: command 0x0406 tx timeout [ 201.283278][ T8304] Bluetooth: hci3: command 0x0406 tx timeout [ 201.296522][ T8303] Bluetooth: hci2: command 0x0401 tx timeout [ 202.981829][ T8305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.989678][ T8305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.997940][ T8305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.006436][ T8305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.014753][ T8305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.157547][ T8309] chnl_net:caif_netlink_parms(): no params data found [ 203.230340][ T8309] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.237644][ T8309] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.245103][ T8309] bridge_slave_0: entered allmulticast mode [ 203.252131][ T8309] bridge_slave_0: entered promiscuous mode [ 203.260079][ T8309] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.267452][ T8309] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.274860][ T8309] bridge_slave_1: entered allmulticast mode [ 203.282764][ T8309] bridge_slave_1: entered promiscuous mode [ 203.368317][ T8309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.387435][ T8309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.488762][ T8309] team0: Port device team_slave_0 added [ 203.506912][ T8309] team0: Port device team_slave_1 added [ 203.599721][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.606940][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.664026][ T8309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.677217][ T8309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.687691][ T8309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.714118][ T8309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.751538][ T8305] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 203.762772][ T8305] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 203.772224][ T8305] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 203.780792][ T8305] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 203.788905][ T8305] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 203.812445][ T7835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 203.813790][ T8309] hsr_slave_0: entered promiscuous mode [ 203.826262][ T7835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 203.830084][ T8309] hsr_slave_1: entered promiscuous mode [ 203.839236][ T7835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 203.839853][ T8309] debugfs: 'hsr0' already exists in 'hsr' [ 203.852220][ T8309] Cannot create hsr debugfs directory [ 203.853288][ T7835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 203.866472][ T7835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 204.258223][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 204.366167][ T8319] chnl_net:caif_netlink_parms(): no params data found [ 204.451397][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.461786][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.471538][ T8321] bridge_slave_0: entered allmulticast mode [ 204.482212][ T8321] bridge_slave_0: entered promiscuous mode [ 204.513362][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.523403][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.533037][ T8321] bridge_slave_1: entered allmulticast mode [ 204.543453][ T8321] bridge_slave_1: entered promiscuous mode [ 204.597039][ T8305] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 204.606126][ T8305] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 204.614418][ T8305] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 204.622304][ T8305] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 204.630606][ T8305] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 204.661505][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.689907][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.712455][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.720154][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.727615][ T8319] bridge_slave_0: entered allmulticast mode [ 204.735680][ T8319] bridge_slave_0: entered promiscuous mode [ 204.743470][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.750692][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.758373][ T8319] bridge_slave_1: entered allmulticast mode [ 204.765525][ T8319] bridge_slave_1: entered promiscuous mode [ 204.813661][ T8319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.824818][ T8321] team0: Port device team_slave_0 added [ 204.838284][ T8319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.849336][ T8321] team0: Port device team_slave_1 added [ 204.921995][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.929336][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.956011][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.972078][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.979095][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.005168][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.018145][ T8319] team0: Port device team_slave_0 added [ 205.029839][ T8319] team0: Port device team_slave_1 added [ 205.035719][ T7835] Bluetooth: hci5: command tx timeout [ 205.081579][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.088720][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.115188][ T8319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.131302][ T8319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.138301][ T8319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.166565][ T8319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.229939][ T8321] hsr_slave_0: entered promiscuous mode [ 205.236340][ T8321] hsr_slave_1: entered promiscuous mode [ 205.242445][ T8321] debugfs: 'hsr0' already exists in 'hsr' [ 205.248811][ T8321] Cannot create hsr debugfs directory [ 205.323523][ T8319] hsr_slave_0: entered promiscuous mode [ 205.330540][ T8319] hsr_slave_1: entered promiscuous mode [ 205.336926][ T8319] debugfs: 'hsr0' already exists in 'hsr' [ 205.342658][ T8319] Cannot create hsr debugfs directory [ 205.514952][ T8336] chnl_net:caif_netlink_parms(): no params data found [ 205.673595][ T8336] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.681049][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.689162][ T8336] bridge_slave_0: entered allmulticast mode [ 205.696354][ T8336] bridge_slave_0: entered promiscuous mode [ 205.708357][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.715518][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.722682][ T8336] bridge_slave_1: entered allmulticast mode [ 205.730413][ T8336] bridge_slave_1: entered promiscuous mode [ 205.781273][ T8336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.793472][ T8336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.836401][ T7835] Bluetooth: hci6: command tx timeout [ 205.886934][ T8336] team0: Port device team_slave_0 added [ 205.907178][ T8336] team0: Port device team_slave_1 added [ 205.914090][ T7835] Bluetooth: hci7: command tx timeout [ 206.008645][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.021496][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.055154][ T8336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.092800][ T8336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.099912][ T8336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.131623][ T8336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.141850][ T8305] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 206.150493][ T8305] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 206.158446][ T8305] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 206.166702][ T8305] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 206.175142][ T8305] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 206.216038][ T8336] hsr_slave_0: entered promiscuous mode [ 206.222692][ T8336] hsr_slave_1: entered promiscuous mode [ 206.229661][ T8336] debugfs: 'hsr0' already exists in 'hsr' [ 206.235780][ T8336] Cannot create hsr debugfs directory [ 206.537547][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 206.613027][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.620274][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.627806][ T8345] bridge_slave_0: entered allmulticast mode [ 206.636488][ T8345] bridge_slave_0: entered promiscuous mode [ 206.644121][ T8345] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.651271][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.658819][ T8345] bridge_slave_1: entered allmulticast mode [ 206.665993][ T8345] bridge_slave_1: entered promiscuous mode [ 206.700873][ T8345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.712678][ T8345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.724133][ T8305] Bluetooth: hci8: command tx timeout [ 206.755239][ T8345] team0: Port device team_slave_0 added [ 206.763005][ T8345] team0: Port device team_slave_1 added [ 206.793723][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.801539][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.828391][ T8345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.841124][ T8345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.848155][ T8345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.874612][ T8345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.923148][ T8345] hsr_slave_0: entered promiscuous mode [ 206.929507][ T8345] hsr_slave_1: entered promiscuous mode [ 206.935729][ T8345] debugfs: 'hsr0' already exists in 'hsr' [ 206.941452][ T8345] Cannot create hsr debugfs directory [ 207.114139][ T8305] Bluetooth: hci5: command tx timeout [ 207.914155][ T8305] Bluetooth: hci6: command tx timeout [ 207.994295][ T8305] Bluetooth: hci7: command tx timeout [ 208.234093][ T8305] Bluetooth: hci9: command tx timeout [ 208.804328][ T8305] Bluetooth: hci8: command tx timeout [ 209.194193][ T8305] Bluetooth: hci5: command tx timeout [ 209.994304][ T8305] Bluetooth: hci6: command tx timeout [ 210.074153][ T7835] Bluetooth: hci7: command tx timeout [ 210.314091][ T8305] Bluetooth: hci9: command tx timeout [ 210.874173][ T8305] Bluetooth: hci8: command tx timeout [ 211.284228][ T8305] Bluetooth: hci5: command tx timeout [ 212.074124][ T8305] Bluetooth: hci6: command tx timeout [ 212.154177][ T8305] Bluetooth: hci7: command tx timeout [ 212.404085][ T8305] Bluetooth: hci9: command tx timeout [ 212.954119][ T8305] Bluetooth: hci8: command tx timeout [ 214.474230][ T8305] Bluetooth: hci9: command tx timeout [ 218.398688][ T55] block nbd3: Possible stuck request ffff888025590000: control (read@0,1024B). Runtime 30 seconds [ 218.409641][ T55] block nbd3: Possible stuck request ffff8880255901c0: control (read@1024,1024B). Runtime 30 seconds [ 218.421309][ T55] block nbd3: Possible stuck request ffff888025590380: control (read@2048,1024B). Runtime 30 seconds [ 218.432250][ T55] block nbd3: Possible stuck request ffff888025590540: control (read@3072,1024B). Runtime 30 seconds [ 226.874204][ T7835] Bluetooth: hci4: command 0x0406 tx timeout [ 248.488197][ T55] block nbd3: Possible stuck request ffff888025590000: control (read@0,1024B). Runtime 60 seconds [ 248.499003][ T55] block nbd3: Possible stuck request ffff8880255901c0: control (read@1024,1024B). Runtime 60 seconds [ 248.510144][ T55] block nbd3: Possible stuck request ffff888025590380: control (read@2048,1024B). Runtime 60 seconds [ 248.521063][ T55] block nbd3: Possible stuck request ffff888025590540: control (read@3072,1024B). Runtime 60 seconds [ 250.911434][ T5232] udevd[5232]: worker [7942] /devices/virtual/block/nbd3 is taking a long time [ 255.517252][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.523691][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.062310][ T7835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 263.071194][ T7835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 263.078977][ T7835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 263.088142][ T7835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 263.096327][ T7835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 263.263646][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 263.342926][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.350200][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.359627][ T8354] bridge_slave_0: entered allmulticast mode [ 263.367935][ T8354] bridge_slave_0: entered promiscuous mode [ 263.376246][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.383420][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.391500][ T8354] bridge_slave_1: entered allmulticast mode [ 263.399103][ T8354] bridge_slave_1: entered promiscuous mode [ 263.463603][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.482920][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.548706][ T8354] team0: Port device team_slave_0 added [ 263.565694][ T8354] team0: Port device team_slave_1 added [ 263.633675][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.647630][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.654175][ T7835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 263.683068][ T7835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 263.685770][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.690952][ T7835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 263.709207][ T7835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 263.710769][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.716950][ T7835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 263.742126][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.768133][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.819079][ T8354] hsr_slave_0: entered promiscuous mode [ 263.825733][ T8354] hsr_slave_1: entered promiscuous mode [ 263.831814][ T8354] debugfs: 'hsr0' already exists in 'hsr' [ 263.838564][ T8354] Cannot create hsr debugfs directory [ 264.264971][ T8363] chnl_net:caif_netlink_parms(): no params data found [ 264.289345][ T8305] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 264.299375][ T8305] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 264.307273][ T8305] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 264.316066][ T8305] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 264.323847][ T8305] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 264.466746][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.473902][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.492985][ T8363] bridge_slave_0: entered allmulticast mode [ 264.501201][ T8363] bridge_slave_0: entered promiscuous mode [ 264.516597][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.523825][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.531498][ T8363] bridge_slave_1: entered allmulticast mode [ 264.539615][ T8363] bridge_slave_1: entered promiscuous mode [ 264.649169][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.680115][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.767091][ T8363] team0: Port device team_slave_0 added [ 264.782371][ T8363] team0: Port device team_slave_1 added [ 264.801098][ T8305] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 264.809863][ T8305] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 264.822801][ T8305] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 264.833716][ T8305] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 264.843332][ T8305] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 264.870632][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.878010][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.904524][ T8363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.917102][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.924130][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.950185][ T8363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.053060][ T8363] hsr_slave_0: entered promiscuous mode [ 265.060220][ T8363] hsr_slave_1: entered promiscuous mode [ 265.067536][ T8363] debugfs: 'hsr0' already exists in 'hsr' [ 265.073285][ T8363] Cannot create hsr debugfs directory [ 265.116952][ T8305] Bluetooth: hci10: command tx timeout [ 265.126272][ T8369] chnl_net:caif_netlink_parms(): no params data found [ 265.332785][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.340458][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.347774][ T8369] bridge_slave_0: entered allmulticast mode [ 265.356144][ T8369] bridge_slave_0: entered promiscuous mode [ 265.374710][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.382052][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.389629][ T8369] bridge_slave_1: entered allmulticast mode [ 265.397163][ T8369] bridge_slave_1: entered promiscuous mode [ 265.448305][ T8369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.460757][ T8369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.524521][ T8369] team0: Port device team_slave_0 added [ 265.554454][ T8369] team0: Port device team_slave_1 added [ 265.622809][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.633803][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.665791][ T8369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.689824][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.698083][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.724476][ T8369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.743047][ T8376] chnl_net:caif_netlink_parms(): no params data found [ 265.754451][ T8305] Bluetooth: hci11: command tx timeout [ 265.822570][ T8369] hsr_slave_0: entered promiscuous mode [ 265.829788][ T8369] hsr_slave_1: entered promiscuous mode [ 265.836197][ T8369] debugfs: 'hsr0' already exists in 'hsr' [ 265.841928][ T8369] Cannot create hsr debugfs directory [ 266.067482][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.074911][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.082156][ T8376] bridge_slave_0: entered allmulticast mode [ 266.090226][ T8376] bridge_slave_0: entered promiscuous mode [ 266.152649][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.160626][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.168302][ T8376] bridge_slave_1: entered allmulticast mode [ 266.176259][ T8376] bridge_slave_1: entered promiscuous mode [ 266.262497][ T8376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.307032][ T8376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.316515][ T7835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 266.326327][ T7835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 266.334452][ T7835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 266.348081][ T7835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 266.355856][ T7835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 266.394475][ T7835] Bluetooth: hci12: command tx timeout [ 266.407142][ T8376] team0: Port device team_slave_0 added [ 266.421188][ T8376] team0: Port device team_slave_1 added [ 266.492453][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.500284][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.526919][ T8376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.539995][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.547042][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.573394][ T8376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.649616][ T8376] hsr_slave_0: entered promiscuous mode [ 266.656900][ T8376] hsr_slave_1: entered promiscuous mode [ 266.662951][ T8376] debugfs: 'hsr0' already exists in 'hsr' [ 266.669020][ T8376] Cannot create hsr debugfs directory [ 266.874395][ T7835] Bluetooth: hci13: command tx timeout [ 266.948457][ T8390] chnl_net:caif_netlink_parms(): no params data found [ 267.069726][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.077700][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.087001][ T8390] bridge_slave_0: entered allmulticast mode [ 267.094396][ T8390] bridge_slave_0: entered promiscuous mode [ 267.102000][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.109237][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.119590][ T8390] bridge_slave_1: entered allmulticast mode [ 267.127566][ T8390] bridge_slave_1: entered promiscuous mode [ 267.168992][ T8390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.183448][ T8390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.194366][ T7835] Bluetooth: hci10: command tx timeout [ 267.236820][ T8390] team0: Port device team_slave_0 added [ 267.245103][ T8390] team0: Port device team_slave_1 added [ 267.294299][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.301301][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.329240][ T8390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.341984][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.349200][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.376059][ T8390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.451272][ T8390] hsr_slave_0: entered promiscuous mode [ 267.458367][ T8390] hsr_slave_1: entered promiscuous mode [ 267.465874][ T8390] debugfs: 'hsr0' already exists in 'hsr' [ 267.471612][ T8390] Cannot create hsr debugfs directory [ 267.834399][ T7835] Bluetooth: hci11: command tx timeout [ 268.394513][ T7835] Bluetooth: hci14: command tx timeout [ 268.474381][ T7835] Bluetooth: hci12: command tx timeout [ 268.954149][ T7835] Bluetooth: hci13: command tx timeout [ 269.274118][ T7835] Bluetooth: hci10: command tx timeout [ 269.924145][ T7835] Bluetooth: hci11: command tx timeout [ 270.474080][ T7835] Bluetooth: hci14: command tx timeout [ 270.554382][ T7835] Bluetooth: hci12: command tx timeout [ 271.044061][ T7835] Bluetooth: hci13: command tx timeout [ 271.354107][ T7835] Bluetooth: hci10: command tx timeout [ 271.994135][ T7835] Bluetooth: hci11: command tx timeout [ 272.554552][ T7835] Bluetooth: hci14: command tx timeout [ 272.634381][ T7835] Bluetooth: hci12: command tx timeout [ 273.114182][ T7835] Bluetooth: hci13: command tx timeout [ 274.634417][ T7835] Bluetooth: hci14: command tx timeout [ 278.556139][ T55] block nbd3: Possible stuck request ffff888025590000: control (read@0,1024B). Runtime 90 seconds [ 278.566906][ T55] block nbd3: Possible stuck request ffff8880255901c0: control (read@1024,1024B). Runtime 90 seconds [ 278.577919][ T55] block nbd3: Possible stuck request ffff888025590380: control (read@2048,1024B). Runtime 90 seconds [ 278.588893][ T55] block nbd3: Possible stuck request ffff888025590540: control (read@3072,1024B). Runtime 90 seconds [ 308.635972][ T55] block nbd3: Possible stuck request ffff888025590000: control (read@0,1024B). Runtime 120 seconds [ 308.646943][ T55] block nbd3: Possible stuck request ffff8880255901c0: control (read@1024,1024B). Runtime 120 seconds [ 308.658036][ T55] block nbd3: Possible stuck request ffff888025590380: control (read@2048,1024B). Runtime 120 seconds [ 308.669067][ T55] block nbd3: Possible stuck request ffff888025590540: control (read@3072,1024B). Runtime 120 seconds [ 316.958827][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.966172][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.733676][ T8305] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 323.748733][ T8305] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 323.759793][ T8305] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 323.768804][ T8305] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 323.776972][ T8305] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 323.880310][ T8305] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 323.890641][ T8305] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 323.898633][ T8305] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 323.919697][ T8305] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 323.928436][ T8305] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 324.108212][ T8400] chnl_net:caif_netlink_parms(): no params data found [ 324.347535][ T8305] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 324.356258][ T8305] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 324.365835][ T8305] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 324.374667][ T8305] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 324.382314][ T8305] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 324.443193][ T8402] chnl_net:caif_netlink_parms(): no params data found [ 324.469804][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.484464][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.491737][ T8400] bridge_slave_0: entered allmulticast mode [ 324.499644][ T8400] bridge_slave_0: entered promiscuous mode [ 324.521201][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.529284][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.548552][ T8400] bridge_slave_1: entered allmulticast mode [ 324.564540][ T8400] bridge_slave_1: entered promiscuous mode [ 324.758768][ T7835] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 324.761353][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.768963][ T7835] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 324.783651][ T7835] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 324.791772][ T7835] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 324.799863][ T7835] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 324.807852][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.913613][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.921331][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.929151][ T8402] bridge_slave_0: entered allmulticast mode [ 324.937379][ T8402] bridge_slave_0: entered promiscuous mode [ 324.948418][ T8400] team0: Port device team_slave_0 added [ 324.965406][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.972594][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.980155][ T8402] bridge_slave_1: entered allmulticast mode [ 324.987465][ T8402] bridge_slave_1: entered promiscuous mode [ 325.010743][ T8400] team0: Port device team_slave_1 added [ 325.103612][ T8402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.116729][ T8402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.127072][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.135388][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.161809][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.193257][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.200819][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.227219][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.264732][ T8402] team0: Port device team_slave_0 added [ 325.273577][ T8402] team0: Port device team_slave_1 added [ 325.353532][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.362751][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.389902][ T8402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.418532][ T8400] hsr_slave_0: entered promiscuous mode [ 325.426029][ T8400] hsr_slave_1: entered promiscuous mode [ 325.432525][ T8400] debugfs: 'hsr0' already exists in 'hsr' [ 325.438445][ T8400] Cannot create hsr debugfs directory [ 325.463389][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.470708][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.497908][ T8402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.759385][ T8402] hsr_slave_0: entered promiscuous mode [ 325.768147][ T8402] hsr_slave_1: entered promiscuous mode [ 325.775156][ T8402] debugfs: 'hsr0' already exists in 'hsr' [ 325.780912][ T8402] Cannot create hsr debugfs directory [ 325.821278][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 325.835068][ T7835] Bluetooth: hci15: command tx timeout [ 325.994418][ T7835] Bluetooth: hci16: command tx timeout [ 326.093451][ T8419] chnl_net:caif_netlink_parms(): no params data found [ 326.297426][ T8305] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 326.306358][ T8305] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 326.314414][ T8305] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 326.323090][ T8305] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 326.331081][ T8305] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 326.456088][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.463344][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.471320][ T8414] bridge_slave_0: entered allmulticast mode [ 326.478053][ T8305] Bluetooth: hci17: command tx timeout [ 326.487526][ T8414] bridge_slave_0: entered promiscuous mode [ 326.496878][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.504106][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.511428][ T8414] bridge_slave_1: entered allmulticast mode [ 326.525435][ T8414] bridge_slave_1: entered promiscuous mode [ 326.629030][ T8419] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.637139][ T8419] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.645431][ T8419] bridge_slave_0: entered allmulticast mode [ 326.652961][ T8419] bridge_slave_0: entered promiscuous mode [ 326.661774][ T8419] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.669288][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.677311][ T8419] bridge_slave_1: entered allmulticast mode [ 326.688471][ T8419] bridge_slave_1: entered promiscuous mode [ 326.698343][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.761227][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.874611][ T8305] Bluetooth: hci18: command tx timeout [ 326.882906][ T8419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.904160][ T8419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.915983][ T8414] team0: Port device team_slave_0 added [ 326.931842][ T8414] team0: Port device team_slave_1 added [ 327.031670][ T8419] team0: Port device team_slave_0 added [ 327.052086][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.059164][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.086393][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.099940][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.107184][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.133808][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.148381][ T8419] team0: Port device team_slave_1 added [ 327.246665][ T8419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.253735][ T8419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.280765][ T8419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.294797][ T8419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.301767][ T8419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.334817][ T8419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.435353][ T8419] hsr_slave_0: entered promiscuous mode [ 327.442145][ T8419] hsr_slave_1: entered promiscuous mode [ 327.448945][ T8419] debugfs: 'hsr0' already exists in 'hsr' [ 327.455037][ T8419] Cannot create hsr debugfs directory [ 327.489597][ T8414] hsr_slave_0: entered promiscuous mode [ 327.496216][ T8414] hsr_slave_1: entered promiscuous mode [ 327.502418][ T8414] debugfs: 'hsr0' already exists in 'hsr' [ 327.509641][ T8414] Cannot create hsr debugfs directory [ 327.829025][ T8432] chnl_net:caif_netlink_parms(): no params data found [ 327.928858][ T8303] Bluetooth: hci15: command tx timeout [ 328.090504][ T8303] Bluetooth: hci16: command tx timeout [ 328.120880][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.128246][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.136498][ T8432] bridge_slave_0: entered allmulticast mode [ 328.145082][ T8432] bridge_slave_0: entered promiscuous mode [ 328.165724][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.173337][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.182556][ T8432] bridge_slave_1: entered allmulticast mode [ 328.190757][ T8432] bridge_slave_1: entered promiscuous mode [ 328.243368][ T8432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.256920][ T8432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.306346][ T8432] team0: Port device team_slave_0 added [ 328.326266][ T8432] team0: Port device team_slave_1 added [ 328.368163][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.375494][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.402882][ T8432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.415849][ T8303] Bluetooth: hci19: command tx timeout [ 328.426632][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.433690][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.466591][ T8432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.554113][ T8303] Bluetooth: hci17: command tx timeout [ 328.569391][ T8432] hsr_slave_0: entered promiscuous mode [ 328.576650][ T8432] hsr_slave_1: entered promiscuous mode [ 328.582905][ T8432] debugfs: 'hsr0' already exists in 'hsr' [ 328.588777][ T8432] Cannot create hsr debugfs directory [ 328.955033][ T8303] Bluetooth: hci18: command tx timeout [ 329.276428][ T8303] Bluetooth: hci8: command 0x0406 tx timeout [ 329.278753][ T5864] Bluetooth: hci5: command 0x0406 tx timeout [ 329.282527][ T8303] Bluetooth: hci6: command 0x0406 tx timeout [ 329.288851][ T5864] Bluetooth: hci7: command 0x0406 tx timeout [ 329.298297][ T8303] Bluetooth: hci9: command 0x0406 tx timeout [ 329.994096][ T51] Bluetooth: hci15: command tx timeout [ 330.154171][ T51] Bluetooth: hci16: command tx timeout [ 330.474173][ T51] Bluetooth: hci19: command tx timeout [ 330.644112][ T51] Bluetooth: hci17: command tx timeout [ 331.034502][ T51] Bluetooth: hci18: command tx timeout [ 332.074214][ T51] Bluetooth: hci15: command tx timeout [ 332.234516][ T51] Bluetooth: hci16: command tx timeout [ 332.564303][ T51] Bluetooth: hci19: command tx timeout [ 332.714396][ T51] Bluetooth: hci17: command tx timeout [ 333.114140][ T51] Bluetooth: hci18: command tx timeout [ 334.634241][ T51] Bluetooth: hci19: command tx timeout [ 338.074506][ T31] INFO: task syz.3.596:8264 blocked for more than 143 seconds. [ 338.082266][ T31] Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 [ 338.089837][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.098993][ T31] task:syz.3.596 state:D stack:25288 pid:8264 tgid:8251 ppid:5866 task_flags:0x400140 flags:0x00004004 [ 338.111134][ T31] Call Trace: [ 338.114510][ T31] [ 338.117513][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 338.122045][ T31] ? validate_chain+0x897/0x2140 [ 338.134015][ T31] ? __lock_acquire+0xab9/0xd20 [ 338.138997][ T31] ? __pfx___schedule+0x10/0x10 [ 338.144710][ T31] ? schedule+0x91/0x360 [ 338.149002][ T31] schedule+0x165/0x360 [ 338.153191][ T31] schedule_timeout+0x9a/0x270 [ 338.204456][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 338.209914][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.234217][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.239490][ T31] ? wait_for_completion+0x267/0x5d0 [ 338.254227][ T31] wait_for_completion+0x2bf/0x5d0 [ 338.259425][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 338.265434][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 338.271277][ T31] ? check_flush_dependency+0x88/0x400 [ 338.276811][ T31] __flush_workqueue+0x6f7/0x14b0 [ 338.281931][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 338.287918][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.293153][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 338.298770][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 338.305032][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 338.310527][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 338.316449][ T31] nbd_genl_disconnect+0x485/0x570 [ 338.321609][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 338.327558][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 338.334056][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 338.339641][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 338.345812][ T31] ? stack_trace_save+0x9c/0xe0 [ 338.350686][ T31] genl_rcv_msg+0x60e/0x790 [ 338.355306][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.360352][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 338.366127][ T31] netlink_rcv_skb+0x208/0x470 [ 338.370921][ T31] ? __lock_acquire+0xab9/0xd20 [ 338.375885][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.380925][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.386407][ T31] ? down_read+0x1ad/0x2e0 [ 338.390850][ T31] genl_rcv+0x28/0x40 [ 338.394993][ T31] netlink_unicast+0x82f/0x9e0 [ 338.399788][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 338.405236][ T31] ? netlink_sendmsg+0x642/0xb30 [ 338.410198][ T31] ? skb_put+0x11b/0x210 [ 338.414520][ T31] netlink_sendmsg+0x805/0xb30 [ 338.419309][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.424864][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.429829][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.435365][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.440686][ T31] __sock_sendmsg+0x219/0x270 [ 338.445468][ T31] ____sys_sendmsg+0x505/0x830 [ 338.450272][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.455641][ T31] ? import_iovec+0x74/0xa0 [ 338.460156][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 338.464966][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.470240][ T31] ? __fget_files+0x2a/0x420 [ 338.475072][ T31] ? __fget_files+0x3a0/0x420 [ 338.479783][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 338.484926][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.490581][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 338.496238][ T31] ? do_syscall_64+0xbe/0x3b0 [ 338.500969][ T31] do_syscall_64+0xfa/0x3b0 [ 338.505588][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.510813][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.517050][ T31] ? clear_bhb_loop+0x60/0xb0 [ 338.521755][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.527799][ T31] RIP: 0033:0x7fae84b8ebe9 [ 338.532237][ T31] RSP: 002b:00007fae82db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.540920][ T31] RAX: ffffffffffffffda RBX: 00007fae84db6180 RCX: 00007fae84b8ebe9 [ 338.549137][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000008 [ 338.557292][ T31] RBP: 00007fae84c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 338.565458][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.573464][ T31] R13: 00007fae84db6218 R14: 00007fae84db6180 R15: 00007ffe284f2208 [ 338.581548][ T31] [ 338.584725][ T31] INFO: task syz.2.599:8265 blocked for more than 143 seconds. [ 338.592390][ T31] Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 [ 338.599837][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.608681][ T31] task:syz.2.599 state:D stack:22760 pid:8265 tgid:8262 ppid:5870 task_flags:0x400140 flags:0x00004004 [ 338.621972][ T31] Call Trace: [ 338.625434][ T31] [ 338.628384][ T31] __schedule+0x1798/0x4cc0 [ 338.632924][ T31] ? __lock_acquire+0xab9/0xd20 [ 338.638050][ T31] ? __lock_acquire+0xab9/0xd20 [ 338.642933][ T31] ? __pfx___schedule+0x10/0x10 [ 338.647941][ T31] ? schedule+0x91/0x360 [ 338.652211][ T31] schedule+0x165/0x360 [ 338.656525][ T31] schedule_preempt_disabled+0x13/0x30 [ 338.662009][ T31] __mutex_lock+0x7e6/0x1360 [ 338.666864][ T31] ? __mutex_lock+0x5b6/0x1360 [ 338.671661][ T31] ? genl_rcv_msg+0x10d/0x790 [ 338.676778][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 338.681847][ T31] ? stack_trace_save+0x9c/0xe0 [ 338.686792][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 338.692395][ T31] ? radix_tree_lookup+0x240/0x290 [ 338.697630][ T31] genl_rcv_msg+0x10d/0x790 [ 338.702166][ T31] ? __lock_acquire+0xab9/0xd20 [ 338.707278][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.712344][ T31] netlink_rcv_skb+0x208/0x470 [ 338.723659][ T31] ? __lock_acquire+0xab9/0xd20 [ 338.728709][ T55] block nbd3: Possible stuck request ffff888025590000: control (read@0,1024B). Runtime 150 seconds [ 338.739545][ T55] block nbd3: Possible stuck request ffff8880255901c0: control (read@1024,1024B). Runtime 150 seconds [ 338.739549][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.739581][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.750623][ T55] block nbd3: Possible stuck request ffff888025590380: control (read@2048,1024B). Runtime 150 seconds [ 338.750680][ T55] block nbd3: Possible stuck request ffff888025590540: control (read@3072,1024B). Runtime 150 seconds [ 338.783554][ T31] ? down_read+0x1ad/0x2e0 [ 338.788062][ T31] genl_rcv+0x28/0x40 [ 338.792076][ T31] netlink_unicast+0x82f/0x9e0 [ 338.797250][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 338.802581][ T31] ? netlink_sendmsg+0x642/0xb30 [ 338.807654][ T31] ? skb_put+0x11b/0x210 [ 338.811940][ T31] netlink_sendmsg+0x805/0xb30 [ 338.816820][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.822140][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.827196][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.832522][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.838226][ T31] __sock_sendmsg+0x219/0x270 [ 338.842940][ T31] __sys_sendto+0x3bd/0x520 [ 338.848180][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 338.853272][ T31] ? fd_install+0x97/0x540 [ 338.857825][ T31] ? fd_install+0x30d/0x540 [ 338.862539][ T31] __x64_sys_sendto+0xde/0x100 [ 338.867459][ T31] do_syscall_64+0xfa/0x3b0 [ 338.872005][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.877457][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.883557][ T31] ? clear_bhb_loop+0x60/0xb0 [ 338.888506][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.894529][ T31] RIP: 0033:0x7fc36e790a7c [ 338.898979][ T31] RSP: 002b:00007fc36f579ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 338.907538][ T31] RAX: ffffffffffffffda RBX: 00007fc36f579fc0 RCX: 00007fc36e790a7c [ 338.915629][ T31] RDX: 0000000000000020 RSI: 00007fc36f57a010 RDI: 0000000000000009 [ 338.923623][ T31] RBP: 0000000000000000 R08: 00007fc36f579f14 R09: 000000000000000c [ 338.931844][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 338.939934][ T31] R13: 00007fc36f579f68 R14: 00007fc36f57a010 R15: 0000000000000000 [ 338.948124][ T31] [ 338.951227][ T31] INFO: task syz.1.602:8276 blocked for more than 144 seconds. [ 338.968180][ T31] Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 [ 338.976504][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.985291][ T31] task:syz.1.602 state:D stack:28328 pid:8276 tgid:8275 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 338.997555][ T31] Call Trace: [ 339.000858][ T31] [ 339.003810][ T31] __schedule+0x1798/0x4cc0 [ 339.008455][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.013366][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.018314][ T31] ? __pfx___schedule+0x10/0x10 [ 339.023210][ T31] ? schedule+0x91/0x360 [ 339.027616][ T31] schedule+0x165/0x360 [ 339.031802][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.037490][ T31] __mutex_lock+0x7e6/0x1360 [ 339.042127][ T31] ? __mutex_lock+0x5b6/0x1360 [ 339.047055][ T31] ? genl_rcv_msg+0x10d/0x790 [ 339.051760][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.056930][ T31] ? stack_trace_save+0x9c/0xe0 [ 339.061813][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 339.067306][ T31] ? radix_tree_lookup+0x240/0x290 [ 339.072446][ T31] genl_rcv_msg+0x10d/0x790 [ 339.077068][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.082077][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.087519][ T31] netlink_rcv_skb+0x208/0x470 [ 339.092318][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.097331][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.102503][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.107879][ T31] ? down_read+0x1ad/0x2e0 [ 339.112331][ T31] genl_rcv+0x28/0x40 [ 339.116510][ T31] netlink_unicast+0x82f/0x9e0 [ 339.121314][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 339.126776][ T31] ? netlink_sendmsg+0x642/0xb30 [ 339.131747][ T31] ? skb_put+0x11b/0x210 [ 339.136142][ T31] netlink_sendmsg+0x805/0xb30 [ 339.140942][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.146479][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.151456][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.158159][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.163531][ T31] __sock_sendmsg+0x219/0x270 [ 339.168572][ T31] __sys_sendto+0x3bd/0x520 [ 339.173114][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 339.178631][ T31] ? count_memcg_event_mm+0x21/0x260 [ 339.184068][ T31] ? exc_page_fault+0x76/0xf0 [ 339.188775][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 339.194422][ T31] __x64_sys_sendto+0xde/0x100 [ 339.199223][ T31] do_syscall_64+0xfa/0x3b0 [ 339.203761][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.209094][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.215304][ T31] ? clear_bhb_loop+0x60/0xb0 [ 339.220010][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.225999][ T31] RIP: 0033:0x7f1638790a7c [ 339.230432][ T31] RSP: 002b:00007f163968aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 339.238994][ T31] RAX: ffffffffffffffda RBX: 00007f163968afc0 RCX: 00007f1638790a7c [ 339.247074][ T31] RDX: 0000000000000028 RSI: 00007f163968b010 RDI: 0000000000000004 [ 339.255147][ T31] RBP: 0000000000000000 R08: 00007f163968af14 R09: 000000000000000c [ 339.263136][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 339.271313][ T31] R13: 00007f163968af68 R14: 00007f163968b010 R15: 0000000000000000 [ 339.279426][ T31] [ 339.282519][ T31] INFO: task syz.4.607:8296 blocked for more than 144 seconds. [ 339.290349][ T31] Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 [ 339.297750][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.306640][ T31] task:syz.4.607 state:D stack:26856 pid:8296 tgid:8295 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 339.318723][ T31] Call Trace: [ 339.322016][ T31] [ 339.325045][ T31] __schedule+0x1798/0x4cc0 [ 339.329596][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.334574][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.339459][ T31] ? __pfx___schedule+0x10/0x10 [ 339.344422][ T31] ? schedule+0x91/0x360 [ 339.348693][ T31] schedule+0x165/0x360 [ 339.352870][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.358676][ T31] __mutex_lock+0x7e6/0x1360 [ 339.363308][ T31] ? __mutex_lock+0x5b6/0x1360 [ 339.368200][ T31] ? genl_rcv_msg+0x10d/0x790 [ 339.373045][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.378186][ T31] ? stack_trace_save+0x9c/0xe0 [ 339.383219][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 339.388726][ T31] ? radix_tree_lookup+0x240/0x290 [ 339.394014][ T31] genl_rcv_msg+0x10d/0x790 [ 339.398531][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.403398][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.408613][ T31] netlink_rcv_skb+0x208/0x470 [ 339.413395][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.418431][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.423491][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.428959][ T31] ? down_read+0x1ad/0x2e0 [ 339.433394][ T31] genl_rcv+0x28/0x40 [ 339.437558][ T31] netlink_unicast+0x82f/0x9e0 [ 339.442443][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 339.447837][ T31] ? netlink_sendmsg+0x642/0xb30 [ 339.452811][ T31] ? skb_put+0x11b/0x210 [ 339.457172][ T31] netlink_sendmsg+0x805/0xb30 [ 339.461999][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.467357][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.472322][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.477808][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.483109][ T31] __sock_sendmsg+0x219/0x270 [ 339.487890][ T31] __sys_sendto+0x3bd/0x520 [ 339.492417][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 339.497544][ T31] ? count_memcg_event_mm+0x21/0x260 [ 339.502880][ T31] ? exc_page_fault+0x76/0xf0 [ 339.507658][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 339.512963][ T31] __x64_sys_sendto+0xde/0x100 [ 339.524038][ T31] do_syscall_64+0xfa/0x3b0 [ 339.528590][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.533807][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.540159][ T31] ? clear_bhb_loop+0x60/0xb0 [ 339.544926][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.550839][ T31] RIP: 0033:0x7f5aa3d90a7c [ 339.555331][ T31] RSP: 002b:00007f5aa4b7cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 339.563758][ T31] RAX: ffffffffffffffda RBX: 00007f5aa4b7cfc0 RCX: 00007f5aa3d90a7c [ 339.571820][ T31] RDX: 0000000000000028 RSI: 00007f5aa4b7d010 RDI: 0000000000000004 [ 339.579879][ T31] RBP: 0000000000000000 R08: 00007f5aa4b7cf14 R09: 000000000000000c [ 339.587963][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 339.596163][ T31] R13: 00007f5aa4b7cf68 R14: 00007f5aa4b7d010 R15: 0000000000000000 [ 339.604259][ T31] [ 339.607319][ T31] INFO: task syz.0.608:8299 blocked for more than 144 seconds. [ 339.614991][ T31] Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 [ 339.622285][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.631070][ T31] task:syz.0.608 state:D stack:24968 pid:8299 tgid:8298 ppid:5873 task_flags:0x400140 flags:0x00004004 [ 339.643195][ T31] Call Trace: [ 339.646676][ T31] [ 339.649629][ T31] __schedule+0x1798/0x4cc0 [ 339.654243][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.659131][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.664067][ T31] ? __pfx___schedule+0x10/0x10 [ 339.668977][ T31] ? schedule+0x91/0x360 [ 339.673235][ T31] schedule+0x165/0x360 [ 339.677567][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.683053][ T31] __mutex_lock+0x7e6/0x1360 [ 339.687791][ T31] ? __mutex_lock+0x5b6/0x1360 [ 339.692596][ T31] ? genl_rcv_msg+0x10d/0x790 [ 339.697403][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.702476][ T31] ? stack_trace_save+0x9c/0xe0 [ 339.707441][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 339.712833][ T31] ? radix_tree_lookup+0x240/0x290 [ 339.718010][ T31] genl_rcv_msg+0x10d/0x790 [ 339.722534][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.727536][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.732610][ T31] netlink_rcv_skb+0x208/0x470 [ 339.737464][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.742347][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.747474][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.752898][ T31] ? down_read+0x1ad/0x2e0 [ 339.757621][ T31] genl_rcv+0x28/0x40 [ 339.761630][ T31] netlink_unicast+0x82f/0x9e0 [ 339.766538][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 339.771865][ T31] ? netlink_sendmsg+0x642/0xb30 [ 339.776929][ T31] ? skb_put+0x11b/0x210 [ 339.781212][ T31] netlink_sendmsg+0x805/0xb30 [ 339.786073][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.791376][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.796403][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.801732][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.807142][ T31] __sock_sendmsg+0x219/0x270 [ 339.811843][ T31] __sys_sendto+0x3bd/0x520 [ 339.816433][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 339.821518][ T31] ? count_memcg_event_mm+0x21/0x260 [ 339.826941][ T31] ? exc_page_fault+0x76/0xf0 [ 339.831644][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 339.837274][ T31] __x64_sys_sendto+0xde/0x100 [ 339.842078][ T31] do_syscall_64+0xfa/0x3b0 [ 339.846689][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.851914][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.858063][ T31] ? clear_bhb_loop+0x60/0xb0 [ 339.862754][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.868990][ T31] RIP: 0033:0x7f66ee990a7c [ 339.873418][ T31] RSP: 002b:00007f66ef79dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 339.881894][ T31] RAX: ffffffffffffffda RBX: 00007f66ef79dfc0 RCX: 00007f66ee990a7c [ 339.889967][ T31] RDX: 0000000000000020 RSI: 00007f66ef79e010 RDI: 000000000000000b [ 339.898040][ T31] RBP: 0000000000000000 R08: 00007f66ef79df14 R09: 000000000000000c [ 339.906090][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 339.914251][ T31] R13: 00007f66ef79df68 R14: 00007f66ef79e010 R15: 0000000000000000 [ 339.922257][ T31] [ 339.925480][ T31] [ 339.925480][ T31] Showing all locks held in the system: [ 339.933205][ T31] 1 lock held by khungtaskd/31: [ 339.938181][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 339.948124][ T31] 2 locks held by kworker/u8:2/36: [ 339.953239][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 339.963258][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 339.972306][ T31] 2 locks held by kworker/u9:1/5182: [ 339.977722][ T31] #0: ffff888024f8e948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.989046][ T31] #1: ffffc9000f207bc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 340.001276][ T31] 2 locks held by getty/5626: [ 340.006076][ T31] #0: ffff8880300720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 340.016387][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 340.027192][ T31] 1 lock held by udevd/7942: [ 340.031958][ T31] #0: ffff8880254c7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 340.041663][ T31] 3 locks held by syz.3.596/8264: [ 340.046937][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.055354][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.064584][ T31] #2: ffff888024f8aa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 340.075281][ T31] 2 locks held by syz.2.599/8265: [ 340.080322][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.088872][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.098064][ T31] 2 locks held by syz.1.602/8276: [ 340.103104][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.111457][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.120533][ T31] 2 locks held by syz.4.607/8296: [ 340.125662][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.133929][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.142930][ T31] 2 locks held by syz.0.608/8299: [ 340.148018][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.156314][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.165622][ T31] 2 locks held by syz-executor/8309: [ 340.170927][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.179389][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.188569][ T31] 2 locks held by syz-executor/8319: [ 340.193859][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.202143][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.211340][ T31] 2 locks held by syz-executor/8321: [ 340.216685][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.225175][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.234965][ T31] 2 locks held by syz-executor/8336: [ 340.240266][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.248620][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.257688][ T31] 2 locks held by syz-executor/8345: [ 340.263000][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.271316][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.280352][ T31] 2 locks held by syz-executor/8354: [ 340.285747][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.294002][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.303010][ T31] 2 locks held by syz-executor/8363: [ 340.308347][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.316815][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.326031][ T31] 2 locks held by syz-executor/8369: [ 340.331332][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.339656][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.348717][ T31] 2 locks held by syz-executor/8376: [ 340.354072][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.362320][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.371478][ T31] 2 locks held by syz-executor/8390: [ 340.376824][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.385121][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.394197][ T31] 2 locks held by syz-executor/8400: [ 340.399497][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.407859][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.416922][ T31] 2 locks held by syz-executor/8402: [ 340.422248][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.430594][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.439665][ T31] 2 locks held by syz-executor/8414: [ 340.445039][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.453265][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.462350][ T31] 2 locks held by syz-executor/8419: [ 340.467681][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.475995][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.485076][ T31] 2 locks held by syz-executor/8432: [ 340.490384][ T31] #0: ffffffff8f599ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 340.498697][ T31] #1: ffffffff8f599e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 340.507756][ T31] [ 340.510116][ T31] ============================================= [ 340.510116][ T31] [ 340.518620][ T31] NMI backtrace for cpu 1 [ 340.518635][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 340.518656][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.518667][ T31] Call Trace: [ 340.518675][ T31] [ 340.518682][ T31] dump_stack_lvl+0x189/0x250 [ 340.518711][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.518734][ T31] ? __pfx__printk+0x10/0x10 [ 340.518773][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 340.518796][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 340.518818][ T31] ? __pfx__printk+0x10/0x10 [ 340.518849][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.518881][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 340.518904][ T31] watchdog+0xf93/0xfe0 [ 340.518936][ T31] ? watchdog+0x1de/0xfe0 [ 340.518968][ T31] kthread+0x70e/0x8a0 [ 340.518995][ T31] ? __pfx_watchdog+0x10/0x10 [ 340.519020][ T31] ? __pfx_kthread+0x10/0x10 [ 340.519045][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.519066][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.519086][ T31] ? __pfx_kthread+0x10/0x10 [ 340.519111][ T31] ret_from_fork+0x3fc/0x770 [ 340.519134][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 340.519159][ T31] ? __switch_to_asm+0x39/0x70 [ 340.519182][ T31] ? __switch_to_asm+0x33/0x70 [ 340.519205][ T31] ? __pfx_kthread+0x10/0x10 [ 340.519229][ T31] ret_from_fork_asm+0x1a/0x30 [ 340.519268][ T31] [ 340.519274][ T31] Sending NMI from CPU 1 to CPUs 0: [ 340.667299][ C0] NMI backtrace for cpu 0 [ 340.667314][ C0] CPU: 0 UID: 0 PID: 6768 Comm: kworker/u8:16 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 340.667342][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.667352][ C0] Workqueue: bat_events batadv_nc_worker [ 340.667373][ C0] RIP: 0010:lock_release+0x3c/0x3e0 [ 340.667397][ C0] Code: 49 89 f5 49 89 fe 65 48 8b 05 10 84 02 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 13 84 02 11 83 f8 08 0f 83 9a 02 00 00 89 c0 <48> 0f a3 05 fc da 05 0e 73 16 e8 45 f1 08 00 84 c0 75 0d f6 05 3f [ 340.667412][ C0] RSP: 0018:ffffc90019e979b8 EFLAGS: 00000293 [ 340.667425][ C0] RAX: 0000000000000000 RBX: ffff88802e9cf740 RCX: ffff88807eb91e00 [ 340.667436][ C0] RDX: 0000000000000000 RSI: ffffffff8b464912 RDI: ffffffff8e139ee0 [ 340.667446][ C0] RBP: fffffffffffffe38 R08: 0000000000000000 R09: ffffffff8b464912 [ 340.667457][ C0] R10: dffffc0000000000 R11: ffffffff8b464840 R12: dffffc0000000000 [ 340.667467][ C0] R13: ffffffff8b464912 R14: ffffffff8e139ee0 R15: 0000000000000036 [ 340.667478][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 340.667490][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.667500][ C0] CR2: 000055a6e426dfb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 340.667514][ C0] Call Trace: [ 340.667519][ C0] [ 340.667528][ C0] ? batadv_nc_worker+0xd2/0x610 [ 340.667545][ C0] batadv_nc_worker+0x28c/0x610 [ 340.667562][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 340.667579][ C0] process_scheduled_works+0xade/0x17b0 [ 340.667608][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 340.667632][ C0] worker_thread+0x8a0/0xda0 [ 340.667660][ C0] kthread+0x70e/0x8a0 [ 340.667681][ C0] ? __pfx_worker_thread+0x10/0x10 [ 340.667695][ C0] ? __pfx_kthread+0x10/0x10 [ 340.667715][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.667733][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.667750][ C0] ? __pfx_kthread+0x10/0x10 [ 340.667770][ C0] ret_from_fork+0x3fc/0x770 [ 340.667786][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 340.667805][ C0] ? __switch_to_asm+0x39/0x70 [ 340.667825][ C0] ? __switch_to_asm+0x33/0x70 [ 340.667844][ C0] ? __pfx_kthread+0x10/0x10 [ 340.667863][ C0] ret_from_fork_asm+0x1a/0x30 [ 340.667891][ C0] [ 340.671250][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 340.901836][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 340.913287][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.923341][ T31] Call Trace: [ 340.926634][ T31] [ 340.929563][ T31] dump_stack_lvl+0x99/0x250 [ 340.934147][ T31] ? __asan_memcpy+0x40/0x70 [ 340.938754][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.943952][ T31] ? __pfx__printk+0x10/0x10 [ 340.948558][ T31] vpanic+0x281/0x750 [ 340.952539][ T31] ? __pfx_vpanic+0x10/0x10 [ 340.957041][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 340.962584][ T31] ? preempt_schedule+0xae/0xc0 [ 340.967442][ T31] ? preempt_schedule_common+0x83/0xd0 [ 340.972914][ T31] panic+0xb9/0xc0 [ 340.976625][ T31] ? __pfx_panic+0x10/0x10 [ 340.981042][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 340.986425][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 340.992570][ T31] watchdog+0xfd2/0xfe0 [ 340.996729][ T31] ? watchdog+0x1de/0xfe0 [ 341.001065][ T31] kthread+0x70e/0x8a0 [ 341.005136][ T31] ? __pfx_watchdog+0x10/0x10 [ 341.009823][ T31] ? __pfx_kthread+0x10/0x10 [ 341.014407][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.019616][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.024805][ T31] ? __pfx_kthread+0x10/0x10 [ 341.029391][ T31] ret_from_fork+0x3fc/0x770 [ 341.033976][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 341.039089][ T31] ? __switch_to_asm+0x39/0x70 [ 341.043859][ T31] ? __switch_to_asm+0x33/0x70 [ 341.048635][ T31] ? __pfx_kthread+0x10/0x10 [ 341.053247][ T31] ret_from_fork_asm+0x1a/0x30 [ 341.058021][ T31] [ 341.061389][ T31] Kernel Offset: disabled [ 341.065717][ T31] Rebooting in 86400 seconds..