last executing test programs: 22.767964287s ago: executing program 0 (id=555): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 22.536717437s ago: executing program 0 (id=561): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast]}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fcdbdf251800000005000500000000000500050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x2004040) 22.42624961s ago: executing program 0 (id=562): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x7, 0x110, 0x0, 0x0, @str=':[\x00'}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x7, 0x110, 0x0, 0x0, @str=':[\x00'}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) 22.244712406s ago: executing program 0 (id=563): r0 = socket(0x18, 0x6, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001240)=0x80000000, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x2, 0x8}, 0x2) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000000)={0x80004000}) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa1a6, 0x1000, 0x6, 0x8, 0x3ef, 0x2, 0x5, 0x4, 0x8, 0x5, 0xffffa251, 0xe4, 0xb, 0x4, 0xff, 0x0, 0x5, 0xffffbeab, 0x1, 0x1, 0x4, 0x1, 0x5, 0xfffffff8, 0x3, 0x8, 0xffff, 0xc98, 0xd, 0x8, 0x8, 0xc, 0x9, 0x8, 0x7cd, 0x9, 0xffffffff, 0x2, 0x8000, 0x401, 0x0, 0x3, 0x4, 0x2a36, 0x6, 0x8001, 0x10, 0x6, 0x101, 0x1, 0x1, 0x1, 0xfffeffff, 0x1, 0x80000000, 0xcd8, 0x8, 0x0, 0x4, 0x0, 0x1, 0x80000000, 0x3, 0x10001, 0xffffffff, 0x2, 0xfffffffe, 0x2, 0x2, 0xf, 0x6, 0xa, 0x2, 0x1, 0x6, 0x8, 0x2, 0x4, 0x8, 0x1fffe, 0x6, 0x3, 0x3, 0x7, 0x7fff, 0x5a4, 0x1, 0x4, 0x5, 0x1ff, 0xb9e5, 0xa4fc, 0xa, 0x0, 0x2, 0x3, 0x1, 0x5aa, 0x5, 0x0, 0x9, 0x365, 0xa0000, 0x9, 0x62, 0x4, 0x2, 0x20000000, 0xfffffff3, 0x1, 0x63b, 0x8, 0x100, 0x74, 0x8, 0x29b, 0x2f5716a0, 0x4, 0x1, 0x8, 0x800, 0x36a, 0xfffffff8, 0x8, 0x4a, 0x3c, 0x3, 0x7, 0x0, 0x1000, 0x2, 0x0, 0x7ff, 0x37c2, 0x9, 0xff000000, 0x8, 0x0, 0x2, 0x3a8, 0x10, 0x200, 0x8, 0x2, 0xb, 0x0, 0x7, 0x202f, 0x3, 0x11, 0x8, 0x3, 0xfff, 0x401, 0xfe, 0x42, 0x1ff, 0x8, 0x3, 0x9, 0x7fff, 0x0, 0x709f, 0xff, 0xff, 0x61, 0x7, 0x2690, 0x401, 0x7fffffff, 0x7fffffff, 0x5915, 0xffff, 0x80, 0x5, 0x0, 0xd, 0x1, 0x5, 0xfe4, 0x1000, 0x0, 0x7, 0x0, 0x40, 0x0, 0xfff, 0x8, 0xf, 0x1000, 0xfffff4a8, 0x1, 0x100, 0xfd, 0x5, 0xf, 0x4, 0x6, 0x10, 0x9, 0xfffffbed, 0x5, 0x9, 0x0, 0x4, 0x5, 0x0, 0x80000, 0x5, 0x58f, 0xeb, 0xfe, 0x9, 0x4000000, 0x1, 0x8, 0x61, 0x7, 0x4, 0x2, 0x5, 0x1, 0x2, 0x4, 0xdf3, 0x2fd, 0x200, 0x3, 0xf, 0x3, 0x6, 0x993e, 0xfffffff8, 0x8, 0x7, 0x8, 0x5f28, 0x5, 0xfffffff7, 0x1, 0x4f4, 0x0, 0x3, 0x5, 0x8, 0x2, 0xfffffffe, 0x0, 0x2, 0x8, 0x3, 0xb3c, 0x9, 0x3, 0x9, 0x2]}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x494}}, 0x0) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000340)="60c3ac3ce4b1fb9cdd25165cf2fa7198fcc4924f65d0357e799a9e986641200ce49bf5a42bc7e7ec0d4c8ed983c66c80104dfb1165870fafc9393e8e93b6b80a69e881c30d96b19991efab289e50ef878d86e2de628296470d") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 21.21939582s ago: executing program 0 (id=581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (async) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) (async) 20.882720926s ago: executing program 0 (id=586): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 20.493867741s ago: executing program 1 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}], 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) 20.087965746s ago: executing program 1 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00', 0x1000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.087541312s ago: executing program 4 (id=596): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {0xb}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=0x0, @ANYBLOB="0000000002000800b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00'}) (async) socket$pppoe(0x18, 0x1, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {0xb}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=0x0, @ANYBLOB="0000000002000800b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 19.799907384s ago: executing program 1 (id=599): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x100) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000000)="9e", &(0x7f0000000940)=""/4096, &(0x7f0000000100), &(0x7f00000001c0), 0x1, r2}, 0x38) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc1400000047888137", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x1a, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 19.799189571s ago: executing program 4 (id=601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008805, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000080)=0x20) 19.63089321s ago: executing program 1 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000580)={0x48, r1, 0xc1d, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000080)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01}, 0x810) 19.567947777s ago: executing program 4 (id=605): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @multicast1}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x9fab}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}], 0x1}, 0x20000000) 18.855797054s ago: executing program 4 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000200001002bbd700000ff00000a108000000000080400010014000200fc02000000000000000000000000000014000100200100"/67], 0x44}}, 0x40000) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, 0xfffffffffffffffd, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@ipv6_getaddr={0x8c, 0x16, 0x100, 0x70bd2c, 0x25dfdbfb, {0xa, 0x58, 0xc0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0x28b, 0x5}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7, 0x9, 0x3}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x2b8}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_RT_PRIORITY={0x8}]}, 0x8c}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth0_to_team\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@bridge_delvlan={0x78, 0x71, 0x400, 0x7, 0x25dfdbfc, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x80}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x8, 0x3}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={r6, 0x800, 0x8, [0x40, 0x34, 0x9, 0xf8e, 0x2, 0x2, 0x0, 0x9]}, &(0x7f0000000240)=0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000019c0)={0x2, 0x209, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @jumbo={0xc2, 0x4, 0xffffff29}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9a9}, @calipso={0x7, 0x30, {0x1, 0xa, 0x9, 0x4, [0x5, 0x4, 0x8, 0x4, 0x803]}}, @generic={0x4, 0x1000, "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"}]}, 0x1058) 18.855235083s ago: executing program 2 (id=609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800"], 0x3c}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f00000001c0)) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="460609007fff00002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="c41fe97ea6f6980d114d819d04ca66c0802136e2575b326a1adf7066e5fc08c2b394cb0fec8eb01ee6fce67f0f000000000000005ca99403e4893625a898721bbbaa55168f5a2f2525c9000299cb9ca2653701a15faab0c78d1f516d15b092cbc400ffacc9a0e540cc94277565e3da6042b75537"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 18.679721178s ago: executing program 3 (id=611): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@gettaction={0x184, 0x32, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44000}, 0x2400c0d1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002cf837888b0349508383139e41b6da1aa54420eca5eb645ff9b5f68dc89e5edab72f77610c08abff6aaa2e782d1ea039f34b25d2c9e2d1c893061cb02184201d8e23dbc8be", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='&'], 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@gettaction={0x184, 0x32, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44000}, 0x2400c0d1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002cf837888b0349508383139e41b6da1aa54420eca5eb645ff9b5f68dc89e5edab72f77610c08abff6aaa2e782d1ea039f34b25d2c9e2d1c893061cb02184201d8e23dbc8be", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='&'], 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 18.563909015s ago: executing program 3 (id=612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0x40, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x40000000, 0x0, 0xfb}, 0x0, 0x3, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@broadcast, 0xffffffde}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x5e, 0x0, 0x0, 0x0, 0xffffffffffffff40}}], 0x1, 0x40040d4) 18.538946527s ago: executing program 1 (id=613): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401fd, @void, @value}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x80000001}]}}]}, 0x3c}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/9, &(0x7f0000000040)=0x9) 18.50265558s ago: executing program 4 (id=614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffd}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r10, 0x60b, 0x2000, 0x10000, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x404, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xf}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r6}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x7, 0x2, 0x4, 0x6, 0x3, 0x983, 0x10000, {r6, @in={{0x2, 0x4e20, @empty}}, 0x10, 0x8001, 0x8, 0x800, 0xffffff45}}, &(0x7f0000000000)=0xb0) r13 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r13, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 18.447819181s ago: executing program 2 (id=615): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050044", @ANYRES32=r0, @ANYBLOB="deb4f659d8e5612b302978a433cdbcc37d5898c4f4df88025111599fb38d7be618fb03b69fa59420c8c9174cf02f83f20b1e64e2a985c3aa498c9e4129430da93791dc34a01efb93edd398c927064b5b18ad445373a33d3afa2e611e27f47ab7ddd2902d86a3a0f042cb2ef6e2eee17e9feb0c17757f1be9d534ca1656d4b80c309f6862f58ec26a815d850cbf767889771335591aaf0f3ce870d5697c4ea8a8b49cd576a6c684464e80c3c30465dc39615cb4c1cd2785d9152cd3292c446c38cf2ad2d52fe0bd91cca0a9c9171c61e777e1a681aecbf98823ae8480d4fe1edf739928543a953b"], 0x38}, 0x1, 0x300, 0x0, 0xc090}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1407, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4042894) r2 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x26, 0x200, 0x70bd28, 0x25dfdbfb, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x428, 0x26, 0x200, 0x70bd2d, 0x25dfdbff, {0x10}, [@typed={0x8, 0x8b, 0x0, 0x0, @fd=r0}, @nested={0xfd, 0x2, 0x0, 0x1, [@generic="07f982c7f8a8614042699e07f136bd18bc033565ec876996ad04c547c518a5c274ff61fe24f505fb5d0e043b1c1823622ae24b7143f555890acc2723b8409d7da083a3082d9cabb1d4ed31a7dfc883bd96bc9c4524c39ce80ca61ee5896689f9cf5580d2a33e7471e4638584ed9dad487a031aeae4911389ed1e9a10773254d5fcda59266b64c86fcae83f5492560d34bc00e5261a2b6c265863dbcd29ef7d7aa327fffa9bde48281a9b33dbd8fcdbd15088ac236e21ad544f35a83f21f7b3eb0a243c4c5fddd3f8eae9c29404258e501149d61027aab083c33065efedf524772d4e93f24483a00db520b7bf02", @typed={0x8, 0x64, 0x0, 0x0, @pid=r2}, @nested={0x4, 0xde}]}, @typed={0x8, 0x132, 0x0, 0x0, @pid}, @generic="24e236064e2dcd1029cf95dd912319eb074dc1eec08d12ab80e23bb984f83426c0b26a4dcb9206d4550863ae2053b7986e3ef3f24113d3458db6b54272e0a319f7c71e44b15d786c49b734bb1a8deb924c9181df739591ce45cb7914661f1b69ca1cec5d525188b7c458084cdbd1bc4b614696c4b45319eff3939650f11dd17f4a4a63adb6a981d74a02c50548d385af0d12751989898de803c35da8c817a9bcd096650772f253c10a4190a6d65d31bc2c40243d86348f61386379c75fb2e0b0ee01f1904d477c5981c335e3bfeb6f21588adcd807", @nested={0x10a, 0x105, 0x0, 0x1, [@generic="3632431731d868a5220ba6aec685", @typed={0xf5, 0xaf, 0x0, 0x0, @binary="3ffb2034ac519d18f5a19482514132845269aaac4403cbf369b8ca5dc0e5780703ce38939a40993b1dabdcec6a3817bb47fb7b4ed4ae20e52e390de885a49dea6476cf3019e1eb4fa3eb6d721907ac1f05b8c523eee16158a3a19dcf0b3a264884d76fb0eaa95ef1e4808ac2daf45599f7cad95cac2159fc0d867254d45dc66302d7bf39989b97825def81ff7ba79df0c9978691f9c3a1dcd2c0e1e4611cafcc27dce764f99cddb85fd2a8e187d4114e7430150bc42c36845ea48c13402431cdeca8704c86915516ca32ddcb1984ec34b46867644567a55622f200ceea1365dd7933ed311049e106d6ac2faf8e87440701"}]}, @generic="efb3fc22ab1f3ace416c51fb6e1526dfbd56f7415396a5b3383b58788ffcc15b1b06679bb2e252f88f43303e94426e216b8b0d2825ae9bf859e2961da2803391cf447fbf8bb7", @typed={0xda, 0x73, 0x0, 0x0, @binary="5d4b9d8b2598f13af199154d2a36c430b39f64e11ea5f813c4985ef2ce6adf3509bc2516fb899bf2f61fdfa50d9c6e5bd791527bc30d826cd4c44ad91979282a652a11222a76d206da8b749e035544095e52333b782aaaf08bbf21831d5950aad4e4874169d3f6452e5e98d26839afcc9f8a63da5030748e4822e1b1f514cb057c391ac8792d98e7d7ebdb7f86f6bb0c178285a68538e390b20903d89b81a535162be3c20772e01d5c57206036bd97914aa1afca58ded51613e0119338437506643cc5112c73287e3b9253ac144cb730a4cd5e046518"}]}, 0x428}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 18.429436878s ago: executing program 3 (id=616): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}]}, 0x30}}, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x7, r2, 0x39}, 0x10) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x7, r2, 0x39}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x34028800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x128, r5, 0x100, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xf8, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e26, @multicast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "394d73579a15a8bf7d751dc58ef04ed35890886d9e22774d8ed0bd635bba0922"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4b69aa106b5caa166a69b3f9045d57dfe22c62cfcbae97337793525dda5a584c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private2, 0x2}}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x128}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 18.244280193s ago: executing program 2 (id=617): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000002200)=""/4058, 0xfda}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000240)=""/159, 0x9f}], 0x3}, 0x40002002) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x8041) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48019}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000002200)=""/4058, 0xfda}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000240)=""/159, 0x9f}], 0x3}, 0x40002002) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x8041) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48019}, 0x20000000) (async) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) (async) 18.220626141s ago: executing program 1 (id=618): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000300)={0x3, 'caif0\x00', {}, 0x3}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000380)=0xa4a, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x18, 0x800, 0x10001, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="888beeb5a33dca219641316a69db90627153c612ad15e94d1db3731ee4e17f7109e4d0a7ab7e73936fc21cd810321e56b09168a023a73990a8045dc4263e6154b1da0cd69cab103ccc492d986081296fcbee281fa0d818b3", 0x58}, {&(0x7f00000001c0)="e9b3427f8fe392e2c9cfbe5ab852756a0e3e9834b78db87ea6773620984ae9ed2e597fcbc89b5a8d7a5c6a8b32ca1c276d52f6fe3b752965a1638cb31a296a508eb591fd253111fff3dc", 0x4a}], 0x2, &(0x7f0000000240)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}], 0x48, 0x44095}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delneigh={0x20, 0x1e, 0x1, 0x80000, 0x0, {0xa}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x5903963197640ec6}, 0x20004800) 18.155984326s ago: executing program 3 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="7608000000f688ee353b4e152e69fb592f8fa9000000006d115400008000000000000000000000000004000000000000002f0adea300b7fa5b0026d188a47ea4e89c2a1328648525b9d9fb2760bb18fbae693d2e15dc5d1e37f8e078935d9b021d76a5b08e7e972da419656e93a089e30dd69ea70c14a78c3ad0ea63906d41f65c80a0fc7be8123cd83fae7c1e6023839afa42222f9db7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 18.152752817s ago: executing program 4 (id=620): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c13e2dbd7000fedbdf25030000000c00050008000000000000000c000500210000000000000008000100000000000c0002000540000000000000"], 0x50}}, 0x4000000) syz_emit_ethernet(0x34e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 18.014522651s ago: executing program 3 (id=621): r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000005c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 17.943780494s ago: executing program 3 (id=622): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) 17.111951424s ago: executing program 2 (id=623): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000000240)="5b5c07831f0a9251f57a64c2a1e9abe0742d3ead8f2f641e24c9643976c78b04897d5a88e1194cfcbb3a8bdae6d422bfad42b96f93630e8ddda96bce3e1ba6", 0x3f}, {&(0x7f00000002c0)="68b206da2ddf4ecf9a7adc0db28307e274fb961f3ad296bd2626ff844c1c525807f54420002127ca7cb3a82956283df957afd5fe0eda286037766548a975bfe58751d3c95db96e8f3533f4f448ca0b921dc1c25ff210fa60ad6406652de02a9ed81f524bfd7b3152e31d6d7def0d5b", 0x6f}], 0x3}, 0x404c001) 16.228444037s ago: executing program 2 (id=624): epoll_wait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0x5244dd4f) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x1e}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000240)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000002"], 0xb8}}, 0x4040080) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x18, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001fdffffffffffffff00ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="bf050000000000007112180000000000bf200000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x58, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.940052482s ago: executing program 2 (id=625): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r2, 0x7, 0x0, 0x4}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7, 0x7, 0x9, 0x3eac, {{0x33, 0x4, 0x0, 0x17, 0xcc, 0x67, 0x0, 0x10, 0x2b, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0xb, 0x1b, [@multicast2, @multicast2]}, @ra={0x94, 0x4}, @generic={0x88, 0x7, "dfc2ceb630"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8e, 0x0, [{0x0, 0x12, "dab6dc9bc97d822aa8a1ef534a4b1914"}, {0x1, 0x11, "4aa428f34cd3ad589fb1c8650ee54b"}, {0x6, 0xd, "594e8b9b06155b3ad265f6"}, {0x1, 0xf, "31ee56481d3314e23a4acd2f05"}, {0x0, 0x12, "5563863a21fd5ceed64cd232349b6617"}, {0x2, 0x8, "3e53c5ffb47c"}, {0x2, 0x12, "942067a7eb51749033e6ff548d3047ff"}, {0x5, 0xf, "23853031169d42745edcd86074"}, {0x1, 0x7, "fc3b37a36a"}, {0x6, 0x7, "144ec6de5c"}]}, @generic={0x86, 0xf, "ddabe31773e9d21157744a24f3"}]}}}}}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, 0x0, 0x1a) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) sendmsg$nl_xfrm(r6, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@newae={0x224, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfb, {{@in=@remote, 0x4d6, 0xa}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, [@algo_auth={0x138, 0x1, {{'blake2b-160-generic\x00'}, 0x780, "fb0093a9314a85a9811f08d757c0b90ce314d7cde914fc88ecf1c9c3c49147e422846c20181250e91c22c060040d7883456521b7122c20cdf7588228ac65dbef4a1a5259924e6628b29939b55cfc60d6252917113b5b26b99258fd0a8c4b1924ea166091ad50ccb27feeb005a4aee250d6117c91088420d442ae6cb753ea0cb20aa6afd6e14cef93b89275cd6c2391fb97535605c6fb34b52b6e3db10159b83640875274b1147f0629c91e8e731e71db4cf3b2343be2f1ac16b9233b2aa22a800a5144b5061b5043140faa645c2b314ebce14392a84e5c19a69fe24c63b1ef601d9af6c8db93ef74674f11fe1cc6e5a1"}}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x80, 0x4e21, 0x9, 0xa, 0x0, 0x20, 0x3c, r7, r11}, {0x5, 0x7, 0x4, 0x8, 0x7f, 0x6, 0xb37, 0x600000000}, {0x1, 0xd93, 0x1, 0x7}, 0xb38a, 0x6e6bbc, 0x0, 0x0, 0x0, 0x2}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="06002bbd000008000000020000000800010000000000"], 0x1c}}, 0x20000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r2, 0x7, 0x0, 0x4}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7, 0x7, 0x9, 0x3eac, {{0x33, 0x4, 0x0, 0x17, 0xcc, 0x67, 0x0, 0x10, 0x2b, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0xb, 0x1b, [@multicast2, @multicast2]}, @ra={0x94, 0x4}, @generic={0x88, 0x7, "dfc2ceb630"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8e, 0x0, [{0x0, 0x12, "dab6dc9bc97d822aa8a1ef534a4b1914"}, {0x1, 0x11, "4aa428f34cd3ad589fb1c8650ee54b"}, {0x6, 0xd, "594e8b9b06155b3ad265f6"}, {0x1, 0xf, "31ee56481d3314e23a4acd2f05"}, {0x0, 0x12, "5563863a21fd5ceed64cd232349b6617"}, {0x2, 0x8, "3e53c5ffb47c"}, {0x2, 0x12, "942067a7eb51749033e6ff548d3047ff"}, {0x5, 0xf, "23853031169d42745edcd86074"}, {0x1, 0x7, "fc3b37a36a"}, {0x6, 0x7, "144ec6de5c"}]}, @generic={0x86, 0xf, "ddabe31773e9d21157744a24f3"}]}}}}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) setsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, 0x0, 0x1a) (async) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@newae={0x224, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfb, {{@in=@remote, 0x4d6, 0xa}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, [@algo_auth={0x138, 0x1, {{'blake2b-160-generic\x00'}, 0x780, "fb0093a9314a85a9811f08d757c0b90ce314d7cde914fc88ecf1c9c3c49147e422846c20181250e91c22c060040d7883456521b7122c20cdf7588228ac65dbef4a1a5259924e6628b29939b55cfc60d6252917113b5b26b99258fd0a8c4b1924ea166091ad50ccb27feeb005a4aee250d6117c91088420d442ae6cb753ea0cb20aa6afd6e14cef93b89275cd6c2391fb97535605c6fb34b52b6e3db10159b83640875274b1147f0629c91e8e731e71db4cf3b2343be2f1ac16b9233b2aa22a800a5144b5061b5043140faa645c2b314ebce14392a84e5c19a69fe24c63b1ef601d9af6c8db93ef74674f11fe1cc6e5a1"}}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x80, 0x4e21, 0x9, 0xa, 0x0, 0x20, 0x3c, r7, r11}, {0x5, 0x7, 0x4, 0x8, 0x7f, 0x6, 0xb37, 0x600000000}, {0x1, 0xd93, 0x1, 0x7}, 0xb38a, 0x6e6bbc, 0x0, 0x0, 0x0, 0x2}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="06002bbd000008000000020000000800010000000000"], 0x1c}}, 0x20000004) (async) 3.126786939s ago: executing program 32 (id=618): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000300)={0x3, 'caif0\x00', {}, 0x3}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000380)=0xa4a, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x18, 0x800, 0x10001, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="888beeb5a33dca219641316a69db90627153c612ad15e94d1db3731ee4e17f7109e4d0a7ab7e73936fc21cd810321e56b09168a023a73990a8045dc4263e6154b1da0cd69cab103ccc492d986081296fcbee281fa0d818b3", 0x58}, {&(0x7f00000001c0)="e9b3427f8fe392e2c9cfbe5ab852756a0e3e9834b78db87ea6773620984ae9ed2e597fcbc89b5a8d7a5c6a8b32ca1c276d52f6fe3b752965a1638cb31a296a508eb591fd253111fff3dc", 0x4a}], 0x2, &(0x7f0000000240)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}], 0x48, 0x44095}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delneigh={0x20, 0x1e, 0x1, 0x80000, 0x0, {0xa}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x5903963197640ec6}, 0x20004800) 3.078171806s ago: executing program 33 (id=620): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c13e2dbd7000fedbdf25030000000c00050008000000000000000c000500210000000000000008000100000000000c0002000540000000000000"], 0x50}}, 0x4000000) syz_emit_ethernet(0x34e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 2.034863791s ago: executing program 34 (id=622): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) 0s ago: executing program 35 (id=625): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r2, 0x7, 0x0, 0x4}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7, 0x7, 0x9, 0x3eac, {{0x33, 0x4, 0x0, 0x17, 0xcc, 0x67, 0x0, 0x10, 0x2b, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0xb, 0x1b, [@multicast2, @multicast2]}, @ra={0x94, 0x4}, @generic={0x88, 0x7, "dfc2ceb630"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8e, 0x0, [{0x0, 0x12, "dab6dc9bc97d822aa8a1ef534a4b1914"}, {0x1, 0x11, "4aa428f34cd3ad589fb1c8650ee54b"}, {0x6, 0xd, "594e8b9b06155b3ad265f6"}, {0x1, 0xf, "31ee56481d3314e23a4acd2f05"}, {0x0, 0x12, "5563863a21fd5ceed64cd232349b6617"}, {0x2, 0x8, "3e53c5ffb47c"}, {0x2, 0x12, "942067a7eb51749033e6ff548d3047ff"}, {0x5, 0xf, "23853031169d42745edcd86074"}, {0x1, 0x7, "fc3b37a36a"}, {0x6, 0x7, "144ec6de5c"}]}, @generic={0x86, 0xf, "ddabe31773e9d21157744a24f3"}]}}}}}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, 0x0, 0x1a) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) sendmsg$nl_xfrm(r6, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@newae={0x224, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfb, {{@in=@remote, 0x4d6, 0xa}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, [@algo_auth={0x138, 0x1, {{'blake2b-160-generic\x00'}, 0x780, "fb0093a9314a85a9811f08d757c0b90ce314d7cde914fc88ecf1c9c3c49147e422846c20181250e91c22c060040d7883456521b7122c20cdf7588228ac65dbef4a1a5259924e6628b29939b55cfc60d6252917113b5b26b99258fd0a8c4b1924ea166091ad50ccb27feeb005a4aee250d6117c91088420d442ae6cb753ea0cb20aa6afd6e14cef93b89275cd6c2391fb97535605c6fb34b52b6e3db10159b83640875274b1147f0629c91e8e731e71db4cf3b2343be2f1ac16b9233b2aa22a800a5144b5061b5043140faa645c2b314ebce14392a84e5c19a69fe24c63b1ef601d9af6c8db93ef74674f11fe1cc6e5a1"}}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x80, 0x4e21, 0x9, 0xa, 0x0, 0x20, 0x3c, r7, r11}, {0x5, 0x7, 0x4, 0x8, 0x7f, 0x6, 0xb37, 0x600000000}, {0x1, 0xd93, 0x1, 0x7}, 0xb38a, 0x6e6bbc, 0x0, 0x0, 0x0, 0x2}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="06002bbd000008000000020000000800010000000000"], 0x1c}}, 0x20000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r2, 0x7, 0x0, 0x4}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7, 0x7, 0x9, 0x3eac, {{0x33, 0x4, 0x0, 0x17, 0xcc, 0x67, 0x0, 0x10, 0x2b, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0xb, 0x1b, [@multicast2, @multicast2]}, @ra={0x94, 0x4}, @generic={0x88, 0x7, "dfc2ceb630"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8e, 0x0, [{0x0, 0x12, "dab6dc9bc97d822aa8a1ef534a4b1914"}, {0x1, 0x11, "4aa428f34cd3ad589fb1c8650ee54b"}, {0x6, 0xd, "594e8b9b06155b3ad265f6"}, {0x1, 0xf, "31ee56481d3314e23a4acd2f05"}, {0x0, 0x12, "5563863a21fd5ceed64cd232349b6617"}, {0x2, 0x8, "3e53c5ffb47c"}, {0x2, 0x12, "942067a7eb51749033e6ff548d3047ff"}, {0x5, 0xf, "23853031169d42745edcd86074"}, {0x1, 0x7, "fc3b37a36a"}, {0x6, 0x7, "144ec6de5c"}]}, @generic={0x86, 0xf, "ddabe31773e9d21157744a24f3"}]}}}}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) setsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, 0x0, 0x1a) (async) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=@newae={0x224, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfb, {{@in=@remote, 0x4d6, 0xa}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, [@algo_auth={0x138, 0x1, {{'blake2b-160-generic\x00'}, 0x780, "fb0093a9314a85a9811f08d757c0b90ce314d7cde914fc88ecf1c9c3c49147e422846c20181250e91c22c060040d7883456521b7122c20cdf7588228ac65dbef4a1a5259924e6628b29939b55cfc60d6252917113b5b26b99258fd0a8c4b1924ea166091ad50ccb27feeb005a4aee250d6117c91088420d442ae6cb753ea0cb20aa6afd6e14cef93b89275cd6c2391fb97535605c6fb34b52b6e3db10159b83640875274b1147f0629c91e8e731e71db4cf3b2343be2f1ac16b9233b2aa22a800a5144b5061b5043140faa645c2b314ebce14392a84e5c19a69fe24c63b1ef601d9af6c8db93ef74674f11fe1cc6e5a1"}}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x80, 0x4e21, 0x9, 0xa, 0x0, 0x20, 0x3c, r7, r11}, {0x5, 0x7, 0x4, 0x8, 0x7f, 0x6, 0xb37, 0x600000000}, {0x1, 0xd93, 0x1, 0x7}, 0xb38a, 0x6e6bbc, 0x0, 0x0, 0x0, 0x2}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="06002bbd000008000000020000000800010000000000"], 0x1c}}, 0x20000004) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 84.657470][ T5817] cgroup: Unknown subsys name 'net' [ 84.815685][ T5817] cgroup: Unknown subsys name 'cpuset' [ 84.824740][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.460987][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.548911][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.594223][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.595809][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.609340][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.617751][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.617972][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.626948][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.641794][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.645811][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.657015][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.665016][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.679887][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.695212][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.736206][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.743583][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.761307][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.765783][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.774846][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.776448][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.789866][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.793132][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.805630][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.816436][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.823857][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.836536][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.490371][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.505069][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.527191][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 91.687185][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 91.768117][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 91.849795][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.858017][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.865893][ T5836] bridge_slave_0: entered allmulticast mode [ 91.873765][ T5836] bridge_slave_0: entered promiscuous mode [ 91.883422][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.890662][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.897980][ T5836] bridge_slave_1: entered allmulticast mode [ 91.905996][ T5836] bridge_slave_1: entered promiscuous mode [ 91.931664][ T3077] cfg80211: failed to load regulatory.db [ 91.993800][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.001157][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.008329][ T5842] bridge_slave_0: entered allmulticast mode [ 92.015761][ T5842] bridge_slave_0: entered promiscuous mode [ 92.037024][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.044337][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.051617][ T5832] bridge_slave_0: entered allmulticast mode [ 92.058900][ T5832] bridge_slave_0: entered promiscuous mode [ 92.066789][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.074477][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.082236][ T5832] bridge_slave_1: entered allmulticast mode [ 92.089379][ T5832] bridge_slave_1: entered promiscuous mode [ 92.124903][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.132190][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.139338][ T5842] bridge_slave_1: entered allmulticast mode [ 92.147333][ T5842] bridge_slave_1: entered promiscuous mode [ 92.205167][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.250362][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.261108][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.268282][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.275980][ T5841] bridge_slave_0: entered allmulticast mode [ 92.284455][ T5841] bridge_slave_0: entered promiscuous mode [ 92.294306][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.322517][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.339223][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.349281][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.356987][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.364255][ T5841] bridge_slave_1: entered allmulticast mode [ 92.371910][ T5841] bridge_slave_1: entered promiscuous mode [ 92.398103][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.464376][ T5836] team0: Port device team_slave_0 added [ 92.515868][ T5832] team0: Port device team_slave_0 added [ 92.538117][ T5836] team0: Port device team_slave_1 added [ 92.547375][ T5842] team0: Port device team_slave_0 added [ 92.555237][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.562901][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.570070][ T5852] bridge_slave_0: entered allmulticast mode [ 92.577925][ T5852] bridge_slave_0: entered promiscuous mode [ 92.587385][ T5832] team0: Port device team_slave_1 added [ 92.610924][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.635606][ T5842] team0: Port device team_slave_1 added [ 92.656694][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.664017][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.671764][ T5852] bridge_slave_1: entered allmulticast mode [ 92.679024][ T5852] bridge_slave_1: entered promiscuous mode [ 92.701227][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.711514][ T5140] Bluetooth: hci1: command tx timeout [ 92.757005][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.764388][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.790462][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.801203][ T5140] Bluetooth: hci0: command tx timeout [ 92.822718][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.829699][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.856059][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.867926][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.870916][ T5140] Bluetooth: hci3: command tx timeout [ 92.879725][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.880351][ T5835] Bluetooth: hci2: command tx timeout [ 92.911395][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.924944][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.932093][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.958931][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.969862][ T5835] Bluetooth: hci4: command tx timeout [ 92.985813][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.992951][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.019353][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.044264][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.054091][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.080391][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.100864][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.118504][ T5841] team0: Port device team_slave_0 added [ 93.137666][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.164923][ T5841] team0: Port device team_slave_1 added [ 93.219141][ T5852] team0: Port device team_slave_0 added [ 93.302197][ T5852] team0: Port device team_slave_1 added [ 93.315367][ T5832] hsr_slave_0: entered promiscuous mode [ 93.322192][ T5832] hsr_slave_1: entered promiscuous mode [ 93.329371][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.336711][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.362993][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.376109][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.383178][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.409188][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.425763][ T5842] hsr_slave_0: entered promiscuous mode [ 93.432410][ T5842] hsr_slave_1: entered promiscuous mode [ 93.438590][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.446392][ T5842] Cannot create hsr debugfs directory [ 93.457140][ T5836] hsr_slave_0: entered promiscuous mode [ 93.464337][ T5836] hsr_slave_1: entered promiscuous mode [ 93.470491][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.478241][ T5836] Cannot create hsr debugfs directory [ 93.556158][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.566033][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.592397][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.605513][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.612687][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.638773][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.808785][ T5841] hsr_slave_0: entered promiscuous mode [ 93.815490][ T5841] hsr_slave_1: entered promiscuous mode [ 93.822250][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.829829][ T5841] Cannot create hsr debugfs directory [ 93.913651][ T5852] hsr_slave_0: entered promiscuous mode [ 93.920025][ T5852] hsr_slave_1: entered promiscuous mode [ 93.926955][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.934955][ T5852] Cannot create hsr debugfs directory [ 94.348201][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.367801][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.394131][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.407423][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.477154][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.488541][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.516661][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.527417][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.614974][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.643136][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.683724][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.715039][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.743453][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.756024][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.768150][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.791041][ T5835] Bluetooth: hci1: command tx timeout [ 94.800324][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.871211][ T5835] Bluetooth: hci0: command tx timeout [ 94.915746][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.955879][ T5140] Bluetooth: hci2: command tx timeout [ 94.961581][ T5835] Bluetooth: hci3: command tx timeout [ 94.966834][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.979669][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.999999][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.014126][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.031229][ T5835] Bluetooth: hci4: command tx timeout [ 95.047616][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.082775][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.117037][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.124489][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.135250][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.142480][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.217118][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.254289][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.261443][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.287276][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.307420][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.314604][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.353116][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.395528][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.438823][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.448082][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.455298][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.472444][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.479634][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.549373][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.556595][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.583436][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.616037][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.623227][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.765971][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.828857][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.836164][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.853943][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.861169][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.925260][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.048882][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.122923][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.309843][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.328540][ T5842] veth0_vlan: entered promiscuous mode [ 96.368020][ T5842] veth1_vlan: entered promiscuous mode [ 96.378819][ T5836] veth0_vlan: entered promiscuous mode [ 96.409212][ T5836] veth1_vlan: entered promiscuous mode [ 96.508402][ T5842] veth0_macvtap: entered promiscuous mode [ 96.550734][ T5842] veth1_macvtap: entered promiscuous mode [ 96.559930][ T5841] veth0_vlan: entered promiscuous mode [ 96.569848][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.616496][ T5841] veth1_vlan: entered promiscuous mode [ 96.651708][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.670348][ T5836] veth0_macvtap: entered promiscuous mode [ 96.684822][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.733103][ T5836] veth1_macvtap: entered promiscuous mode [ 96.747397][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.758057][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.767633][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.776501][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.812112][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.863447][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.877708][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.877902][ T5835] Bluetooth: hci1: command tx timeout [ 96.890258][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900018][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.909274][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.926439][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.952977][ T5835] Bluetooth: hci0: command tx timeout [ 96.982674][ T5841] veth0_macvtap: entered promiscuous mode [ 97.019955][ T5841] veth1_macvtap: entered promiscuous mode [ 97.034024][ T5140] Bluetooth: hci2: command tx timeout [ 97.039542][ T5835] Bluetooth: hci3: command tx timeout [ 97.111724][ T5835] Bluetooth: hci4: command tx timeout [ 97.148811][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.178465][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.202016][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.210002][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.217763][ T5852] veth0_vlan: entered promiscuous mode [ 97.255093][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.268175][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.277634][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.286696][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.315223][ T5852] veth1_vlan: entered promiscuous mode [ 97.324380][ T5832] veth0_vlan: entered promiscuous mode [ 97.347239][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.356003][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.404015][ T5832] veth1_vlan: entered promiscuous mode [ 97.453877][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.462477][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.504293][ T5002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.526268][ T5002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.555844][ T5852] veth0_macvtap: entered promiscuous mode [ 97.572715][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.576767][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.604790][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.627900][ T5852] veth1_macvtap: entered promiscuous mode [ 97.664877][ T5832] veth0_macvtap: entered promiscuous mode [ 97.694577][ T5832] veth1_macvtap: entered promiscuous mode [ 97.723608][ T5002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.738605][ T5002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.775693][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.836788][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.850139][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.887065][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.906981][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.932919][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.942135][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.954159][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.986985][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.006444][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.026393][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.044014][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.511434][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.519316][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.597034][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.631196][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.728868][ T5946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 98.746716][ T5947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.768377][ T5002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.795456][ T5002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.854795][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.894508][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.958215][ T5835] Bluetooth: hci1: command tx timeout [ 99.031922][ T5835] Bluetooth: hci0: command tx timeout [ 99.116981][ T5835] Bluetooth: hci3: command tx timeout [ 99.122466][ T5140] Bluetooth: hci2: command tx timeout [ 99.191192][ T5835] Bluetooth: hci4: command tx timeout [ 99.202843][ T5954] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.285979][ T5961] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 99.374467][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.427932][ T5961] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.584315][ T5964] nbd0: detected capacity change from 0 to 4096 [ 99.688234][ T5835] block nbd0: Receive control failed (result -104) [ 99.856122][ T5972] vlan2: entered allmulticast mode [ 99.861701][ T5972] bond0: entered allmulticast mode [ 99.895528][ T5972] bond_slave_0: entered allmulticast mode [ 99.908426][ T5972] bond_slave_1: entered allmulticast mode [ 99.939865][ T5972] bridge0: port 3(vlan2) entered blocking state [ 99.951109][ T5972] bridge0: port 3(vlan2) entered disabled state [ 99.952324][ T5987] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 99.978726][ T5972] vlan2: entered promiscuous mode [ 99.988652][ T5972] bond0: entered promiscuous mode [ 100.027234][ T5972] bond_slave_0: entered promiscuous mode [ 100.037916][ T5972] bond_slave_1: entered promiscuous mode [ 100.046990][ T5972] bridge0: port 3(vlan2) entered blocking state [ 100.053564][ T5972] bridge0: port 3(vlan2) entered forwarding state [ 100.366058][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 100.632607][ T6010] bridge0: port 3(vlan2) entered blocking state [ 100.652554][ T6010] bridge0: port 3(vlan2) entered disabled state [ 100.659061][ T6010] vlan2: entered allmulticast mode [ 100.687809][ T6010] bridge0: entered allmulticast mode [ 100.702089][ T6010] vlan2: left allmulticast mode [ 100.708695][ T6010] bridge0: left allmulticast mode [ 100.730228][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 100.832952][ T6011] Cannot find add_set index 0 as target [ 100.945047][ T6022] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 100.963345][ T5886] IPVS: starting estimator thread 0... [ 101.070902][ T6024] IPVS: using max 26 ests per chain, 62400 per kthread [ 101.173544][ T6029] trusted_key: syz.1.37 sent an empty control message without MSG_MORE. [ 101.208659][ T6032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.262060][ T6032] xt_policy: output policy not valid in PREROUTING and INPUT [ 101.276639][ T6035] ksmbd: Unknown IPC event: 3, ignore. [ 101.329798][ T6032] pim6reg1: entered promiscuous mode [ 101.368091][ T6032] pim6reg1: entered allmulticast mode [ 101.400591][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 101.504554][ T6045] netlink: 64 bytes leftover after parsing attributes in process `syz.4.42'. [ 101.526316][ T6039] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 101.558086][ T6039] team0: Device ipvlan2 is already an upper device of the team interface [ 102.138804][ T6072] Bluetooth: MGMT ver 1.23 [ 102.183165][ T6074] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 102.540052][ T6085] netlink: 11 bytes leftover after parsing attributes in process `syz.0.58'. [ 102.590120][ T6085] netlink: 11 bytes leftover after parsing attributes in process `syz.0.58'. [ 103.013100][ T6106] netlink: 'syz.1.63': attribute type 16 has an invalid length. [ 103.053423][ T6106] netlink: 'syz.1.63': attribute type 3 has an invalid length. [ 103.070482][ T6109] netlink: 696 bytes leftover after parsing attributes in process `syz.2.66'. [ 103.079644][ T6106] netlink: 132 bytes leftover after parsing attributes in process `syz.1.63'. [ 103.091960][ T6105] netlink: 'syz.4.64': attribute type 20 has an invalid length. [ 103.122844][ T6109] netlink: 'syz.2.66': attribute type 18 has an invalid length. [ 103.143702][ T6105] netlink: 'syz.4.64': attribute type 4 has an invalid length. [ 103.621840][ T6129] Zero length message leads to an empty skb [ 103.814235][ T6136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.75'. [ 103.873923][ T6136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.75'. [ 104.069225][ T6149] syz.1.79 uses obsolete (PF_INET,SOCK_PACKET) [ 104.313644][ T6122] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 104.527494][ T6166] netlink: 256 bytes leftover after parsing attributes in process `syz.4.84'. [ 105.188087][ T6193] netlink: 'syz.2.88': attribute type 39 has an invalid length. [ 105.225902][ T6195] bridge: RTM_NEWNEIGH with invalid ether address [ 105.301372][ T6196] ip6gretap0: mtu less than device minimum [ 105.511256][ T5835] Bluetooth: hci0: command 0x0401 tx timeout [ 105.638697][ T6217] virt_wifi0 speed is unknown, defaulting to 1000 [ 105.648749][ T6217] virt_wifi0 speed is unknown, defaulting to 1000 [ 105.660166][ T6217] virt_wifi0 speed is unknown, defaulting to 1000 [ 105.736749][ T6217] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.864033][ T6217] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 105.990203][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 106.044576][ T6227] netlink: 'syz.2.97': attribute type 5 has an invalid length. [ 106.096614][ T6217] virt_wifi0 speed is unknown, defaulting to 1000 [ 106.098468][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 106.194032][ T6232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.99'. [ 106.197169][ T6217] virt_wifi0 speed is unknown, defaulting to 1000 [ 106.301797][ T6217] virt_wifi0 speed is unknown, defaulting to 1000 [ 106.355405][ T6217] virt_wifi0 speed is unknown, defaulting to 1000 [ 106.376915][ T6217] virt_wifi0 speed is unknown, defaulting to 1000 [ 106.695586][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 107.619146][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 107.851340][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 108.484508][ T6326] netlink: 'syz.3.125': attribute type 39 has an invalid length. [ 108.495519][ T6320] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 108.785690][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'. [ 109.063637][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 109.237057][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 109.631769][ T6366] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 109.893411][ T6371] Cannot find set identified by id 752 to match [ 109.921541][ T6377] netlink: 'syz.3.141': attribute type 2 has an invalid length. [ 110.181309][ T6381] netlink: 36 bytes leftover after parsing attributes in process `syz.4.142'. [ 110.237158][ T6388] tipc: Can't bind to reserved service type 1 [ 110.266793][ T6381] macvlan2: entered promiscuous mode [ 110.615402][ T6406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.622985][ T6406] IPv6: NLM_F_CREATE should be set when creating new route [ 110.915146][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.150'. [ 111.249420][ T6434] sctp: [Deprecated]: syz.4.155 (pid 6434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.249420][ T6434] Use struct sctp_sack_info instead [ 111.339271][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'. [ 111.444396][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.154'. [ 111.481029][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.156'. [ 111.566982][ T6438] gretap1: entered promiscuous mode [ 111.641413][ T6438] gretap1: entered allmulticast mode [ 111.737859][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 112.126194][ T6460] xt_CT: No such helper "syz1" [ 112.377750][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 112.440777][ T6476] ip6gre1: entered allmulticast mode [ 112.707722][ T6491] netlink: 52 bytes leftover after parsing attributes in process `syz.4.168'. [ 113.249999][ T6506] sctp: [Deprecated]: syz.0.174 (pid 6506) Use of int in maxseg socket option. [ 113.249999][ T6506] Use struct sctp_assoc_value instead [ 113.647740][ T6540] FAULT_INJECTION: forcing a failure. [ 113.647740][ T6540] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.697138][ T6540] CPU: 1 UID: 0 PID: 6540 Comm: syz.3.183 Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 PREEMPT(full) [ 113.697168][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.697185][ T6540] Call Trace: [ 113.697200][ T6540] [ 113.697210][ T6540] dump_stack_lvl+0x189/0x250 [ 113.697258][ T6540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.697288][ T6540] ? __pfx__printk+0x10/0x10 [ 113.697325][ T6540] should_fail_ex+0x414/0x560 [ 113.697353][ T6540] _copy_from_user+0x2d/0xb0 [ 113.697391][ T6540] alg_setkey+0xb8/0x190 [ 113.697417][ T6540] alg_setsockopt+0x3da/0x4a0 [ 113.697438][ T6540] ? __pfx_alg_setsockopt+0x10/0x10 [ 113.697462][ T6540] do_sock_setsockopt+0x25a/0x3e0 [ 113.697494][ T6540] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 113.697519][ T6540] ? __fget_files+0x2a/0x420 [ 113.697552][ T6540] ? __fget_files+0x3a0/0x420 [ 113.697579][ T6540] ? __fget_files+0x2a/0x420 [ 113.697617][ T6540] __x64_sys_setsockopt+0x18b/0x220 [ 113.697653][ T6540] do_syscall_64+0xf6/0x210 [ 113.697682][ T6540] ? clear_bhb_loop+0x60/0xb0 [ 113.697709][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.697729][ T6540] RIP: 0033:0x7f54c258e969 [ 113.697752][ T6540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.697770][ T6540] RSP: 002b:00007f54c33a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.697792][ T6540] RAX: ffffffffffffffda RBX: 00007f54c27b5fa0 RCX: 00007f54c258e969 [ 113.697807][ T6540] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 113.697819][ T6540] RBP: 00007f54c33a6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.697831][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.697843][ T6540] R13: 0000000000000000 R14: 00007f54c27b5fa0 R15: 00007ffcbd0ad2f8 [ 113.697876][ T6540] [ 114.030453][ T6542] tipc: Started in network mode [ 114.060620][ T6542] tipc: Node identity , cluster identity 4711 [ 114.067222][ T6542] tipc: Started in network mode [ 114.072191][ T6542] tipc: Node identity , cluster identity 4711 [ 114.078495][ T6542] tipc: Started in network mode [ 114.083544][ T6542] tipc: Node identity , cluster identity 4711 [ 114.089818][ T6542] tipc: Started in network mode [ 114.094853][ T6542] tipc: Node identity , cluster identity 4711 [ 114.101282][ T6542] tipc: Started in network mode [ 114.106336][ T6542] tipc: Node identity , cluster identity 4711 [ 114.120937][ T6543] xt_CT: No such helper "pptp" [ 114.168113][ T6551] syz.3.186: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 114.218022][ T6551] CPU: 0 UID: 0 PID: 6551 Comm: syz.3.186 Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 PREEMPT(full) [ 114.218064][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.218077][ T6551] Call Trace: [ 114.218085][ T6551] [ 114.218095][ T6551] dump_stack_lvl+0x189/0x250 [ 114.218133][ T6551] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 114.218162][ T6551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.218193][ T6551] ? __pfx__printk+0x10/0x10 [ 114.218215][ T6551] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 114.218237][ T6551] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 114.218266][ T6551] warn_alloc+0x214/0x310 [ 114.218300][ T6551] ? __pfx___schedule+0x10/0x10 [ 114.218329][ T6551] ? __pfx_warn_alloc+0x10/0x10 [ 114.218359][ T6551] ? kasan_save_track+0x4f/0x80 [ 114.218383][ T6551] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 114.218410][ T6551] ? xskq_create+0x56/0x170 [ 114.218436][ T6551] ? __x64_sys_setsockopt+0x18b/0x220 [ 114.218464][ T6551] ? do_syscall_64+0xf6/0x210 [ 114.218489][ T6551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.218523][ T6551] __vmalloc_node_range_noprof+0x125/0x12c0 [ 114.218589][ T6551] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.218624][ T6551] ? __kasan_kmalloc+0x93/0xb0 [ 114.218656][ T6551] vmalloc_user_noprof+0x74/0x80 [ 114.218687][ T6551] ? xskq_create+0xbf/0x170 [ 114.218711][ T6551] xskq_create+0xbf/0x170 [ 114.218738][ T6551] xsk_init_queue+0xb0/0x110 [ 114.218766][ T6551] xsk_setsockopt+0x43f/0x710 [ 114.218794][ T6551] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.218833][ T6551] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 114.218858][ T6551] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.218883][ T6551] do_sock_setsockopt+0x25a/0x3e0 [ 114.218915][ T6551] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 114.218941][ T6551] ? __fget_files+0x2a/0x420 [ 114.218973][ T6551] ? __fget_files+0x3a0/0x420 [ 114.219001][ T6551] ? __fget_files+0x2a/0x420 [ 114.219039][ T6551] __x64_sys_setsockopt+0x18b/0x220 [ 114.219085][ T6551] do_syscall_64+0xf6/0x210 [ 114.219114][ T6551] ? clear_bhb_loop+0x60/0xb0 [ 114.219141][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.219160][ T6551] RIP: 0033:0x7f54c258e969 [ 114.219179][ T6551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.219196][ T6551] RSP: 002b:00007f54c33a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.219218][ T6551] RAX: ffffffffffffffda RBX: 00007f54c27b5fa0 RCX: 00007f54c258e969 [ 114.219234][ T6551] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 114.219245][ T6551] RBP: 00007f54c2610ab1 R08: 0000000000000004 R09: 0000000000000000 [ 114.219257][ T6551] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.219269][ T6551] R13: 0000000000000000 R14: 00007f54c27b5fa0 R15: 00007ffcbd0ad2f8 [ 114.219299][ T6551] [ 114.518032][ T6551] Mem-Info: [ 114.574352][ T6551] active_anon:9920 inactive_anon:0 isolated_anon:0 [ 114.574352][ T6551] active_file:1300 inactive_file:39833 isolated_file:0 [ 114.574352][ T6551] unevictable:768 dirty:191 writeback:0 [ 114.574352][ T6551] slab_reclaimable:9969 slab_unreclaimable:99007 [ 114.574352][ T6551] mapped:31552 shmem:5740 pagetables:938 [ 114.574352][ T6551] sec_pagetables:0 bounce:0 [ 114.574352][ T6551] kernel_misc_reclaimable:0 [ 114.574352][ T6551] free:1340904 free_pcp:1222 free_cma:0 [ 114.665642][ T6531] __nla_validate_parse: 3 callbacks suppressed [ 114.665661][ T6531] netlink: 292 bytes leftover after parsing attributes in process `syz.4.180'. [ 114.707596][ T6551] Node 0 active_anon:34380kB inactive_anon:0kB active_file:5200kB inactive_file:159132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129508kB dirty:764kB writeback:0kB shmem:16324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10932kB pagetables:3552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 114.741791][ T6551] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 114.775356][ T6551] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.803478][ T6551] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 114.809324][ T6551] Node 0 DMA32 free:1438200kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:34372kB inactive_anon:0kB active_file:5200kB inactive_file:159032kB unevictable:1536kB writepending:764kB present:3129332kB managed:2564124kB mlocked:0kB bounce:0kB free_pcp:10992kB local_pcp:10688kB free_cma:0kB [ 114.839991][ T6551] lowmem_reserve[]: 0 0 0 0 0 [ 114.844819][ T6551] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.941609][ T6551] lowmem_reserve[]: 0 0 0 0 0 [ 114.955258][ T6561] xt_TCPMSS: Only works on TCP SYN packets [ 114.997082][ T6551] Node 1 Normal free:3909388kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 115.118290][ T6551] lowmem_reserve[]: 0 0 0 0 0 [ 115.123232][ T6551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.160151][ T6551] Node 0 DMA32: 303*4kB (UME) 445*8kB (UME) 387*16kB (UME) 117*32kB (UME) 95*64kB (UME) 40*128kB (UME) 21*256kB (UME) 9*512kB (ME) 1*1024kB (M) 4*2048kB (UME) 344*4096kB (M) = 1454132kB [ 115.224615][ T6551] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 115.251723][ T6551] Node 1 Normal: 209*4kB (UE) 67*8kB (UME) 47*16kB (UME) 219*32kB (UME) 90*64kB (UME) 32*128kB (UME) 17*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3909420kB [ 115.284068][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 115.324621][ T6551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.341625][ T6551] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.357702][ T6551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.429310][ T6551] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.446959][ T6551] 42582 total pagecache pages [ 115.452427][ T6551] 0 pages in swap cache [ 115.456877][ T6551] Free swap = 124996kB [ 115.462822][ T6551] Total swap = 124996kB [ 115.467015][ T6551] 2097051 pages RAM [ 115.492275][ T6551] 0 pages HighMem/MovableOnly [ 115.497113][ T6551] 424362 pages reserved [ 115.522642][ T6551] 0 pages cma reserved [ 115.721602][ T6588] FAULT_INJECTION: forcing a failure. [ 115.721602][ T6588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.772895][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.1.196 Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 PREEMPT(full) [ 115.772942][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.772954][ T6588] Call Trace: [ 115.772962][ T6588] [ 115.772971][ T6588] dump_stack_lvl+0x189/0x250 [ 115.773009][ T6588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.773039][ T6588] ? __pfx__printk+0x10/0x10 [ 115.773073][ T6588] should_fail_ex+0x414/0x560 [ 115.773119][ T6588] _copy_to_user+0x31/0xb0 [ 115.773151][ T6588] simple_read_from_buffer+0xe1/0x170 [ 115.773183][ T6588] proc_fail_nth_read+0x1df/0x250 [ 115.773230][ T6588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.773263][ T6588] ? rw_verify_area+0x258/0x650 [ 115.773286][ T6588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.773317][ T6588] vfs_read+0x1fd/0x980 [ 115.773347][ T6588] ? __pfx___mutex_lock+0x10/0x10 [ 115.773375][ T6588] ? __pfx_vfs_read+0x10/0x10 [ 115.773400][ T6588] ? __fget_files+0x2a/0x420 [ 115.773430][ T6588] ? __fget_files+0x3a0/0x420 [ 115.773457][ T6588] ? __fget_files+0x2a/0x420 [ 115.773494][ T6588] ksys_read+0x145/0x250 [ 115.773521][ T6588] ? __pfx_ksys_read+0x10/0x10 [ 115.773549][ T6588] ? do_syscall_64+0xba/0x210 [ 115.773579][ T6588] do_syscall_64+0xf6/0x210 [ 115.773607][ T6588] ? clear_bhb_loop+0x60/0xb0 [ 115.773632][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.773650][ T6588] RIP: 0033:0x7f2ce398d37c [ 115.773668][ T6588] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.773685][ T6588] RSP: 002b:00007f2ce47c0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.773706][ T6588] RAX: ffffffffffffffda RBX: 00007f2ce3bb5fa0 RCX: 00007f2ce398d37c [ 115.773721][ T6588] RDX: 000000000000000f RSI: 00007f2ce47c00a0 RDI: 0000000000000004 [ 115.773733][ T6588] RBP: 00007f2ce47c0090 R08: 0000000000000000 R09: 0000000000000000 [ 115.773746][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.773757][ T6588] R13: 0000000000000000 R14: 00007f2ce3bb5fa0 R15: 00007fffb5ba9ec8 [ 115.773789][ T6588] [ 116.419988][ T6610] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 117.346876][ T6605] batadv0: entered promiscuous mode [ 117.353655][ T6605] team0: entered promiscuous mode [ 117.358729][ T6605] team_slave_0: entered promiscuous mode [ 117.364953][ T6605] team_slave_1: entered promiscuous mode [ 117.378290][ T6605] hsr1: entered promiscuous mode [ 117.383382][ T6605] hsr1: entered allmulticast mode [ 117.388417][ T6605] batadv0: entered allmulticast mode [ 117.393777][ T6605] team0: entered allmulticast mode [ 117.398923][ T6605] team_slave_0: entered allmulticast mode [ 117.404740][ T6605] team_slave_1: entered allmulticast mode [ 117.412268][ T6610] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 117.430565][ T6611] netlink: 'syz.3.203': attribute type 2 has an invalid length. [ 117.505197][ T6612] veth3: entered promiscuous mode [ 117.798089][ T6633] tipc: Enabling of bearer rejected, failed to enable media [ 118.360638][ T6661] tipc: Started in network mode [ 118.366240][ T6661] tipc: Node identity ac1414aa, cluster identity 4711 [ 118.405116][ T6661] tipc: Enabled bearer , priority 10 [ 118.763103][ T6685] netlink: 92 bytes leftover after parsing attributes in process `syz.3.226'. [ 119.095067][ T6704] netlink: 788 bytes leftover after parsing attributes in process `syz.0.234'. [ 119.521879][ T5907] tipc: Node number set to 2886997162 [ 119.722260][ T6726] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20000 [ 120.213761][ T6742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.245'. [ 120.468919][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 120.521201][ T6755] netlink: 'syz.2.248': attribute type 21 has an invalid length. [ 120.536449][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'. [ 120.551224][ T6746] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 120.566343][ T6755] netlink: 152 bytes leftover after parsing attributes in process `syz.2.248'. [ 120.568750][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.247'. [ 120.639585][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.247'. [ 120.678877][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.247'. [ 120.751123][ T6752] gretap1: entered promiscuous mode [ 120.776110][ T6752] gretap1: entered allmulticast mode [ 121.242952][ T6783] x_tables: duplicate underflow at hook 1 [ 121.481147][ T6795] SET target dimension over the limit! [ 121.580327][ T6801] netlink: 'syz.1.258': attribute type 1 has an invalid length. [ 121.626466][ T6801] netlink: 'syz.1.258': attribute type 3 has an invalid length. [ 121.641354][ T6801] netlink: 224 bytes leftover after parsing attributes in process `syz.1.258'. [ 121.666565][ T6801] NCSI netlink: No device for ifindex 0 [ 121.711053][ T6806] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 121.914978][ T6817] netlink: 'syz.3.263': attribute type 8 has an invalid length. [ 121.965281][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 122.355518][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'. [ 122.949861][ T6868] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 123.109710][ T6868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.204239][ T6870] bond1: (slave veth3): Enslaving as an active interface with a down link [ 123.264502][ T6871] veth5: entered promiscuous mode [ 124.192488][ T6932] netlink: 'syz.4.300': attribute type 4 has an invalid length. [ 124.232728][ T6932] netlink: 'syz.4.300': attribute type 4 has an invalid length. [ 124.261650][ T6934] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 124.295685][ T6934] tls_set_device_offload_rx: netdev not found [ 125.018554][ T6968] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 125.093572][ T6968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.231994][ T6976] blkio.reset_stats is deprecated [ 125.498609][ T6998] veth0: entered promiscuous mode [ 125.554480][ T7001] __nla_validate_parse: 3 callbacks suppressed [ 125.554515][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 125.570042][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 125.591362][ T6998] veth0: left promiscuous mode [ 126.004449][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 126.055801][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 126.268545][ T7045] xt_ecn: cannot match TCP bits for non-tcp packets [ 126.437081][ T7055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 126.459176][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 126.498125][ T7055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 126.585023][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.344'. [ 126.757222][ T7075] openvswitch: netlink: Key 5 has unexpected len 8 expected 2 [ 126.819768][ T7076] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 127.073054][ T7092] veth1: entered promiscuous mode [ 127.100813][ T7092] veth1: entered allmulticast mode [ 127.272240][ T7103] netlink: 'syz.4.353': attribute type 3 has an invalid length. [ 127.296287][ T7103] netlink: 'syz.4.353': attribute type 3 has an invalid length. [ 127.847772][ T7139] netlink: 'syz.4.363': attribute type 9 has an invalid length. [ 128.029372][ T7142] netlink: 48 bytes leftover after parsing attributes in process `syz.4.363'. [ 128.335120][ T7168] ipt_rpfilter: unknown options [ 128.399514][ T7171] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 128.648991][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 129.145678][ T7214] netlink: 'syz.4.381': attribute type 1 has an invalid length. [ 129.389977][ T7228] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 129.662521][ T7253] xt_CT: No such helper "syz1" [ 129.688469][ T41] block nbd0: Possible stuck request ffff888024a87000: control (read@0,4096B). Runtime 30 seconds [ 130.047553][ T7283] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 130.597684][ T7307] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 130.665085][ T7307] team0: Device veth0_macvtap failed to register rx_handler [ 130.724019][ T7310] __nla_validate_parse: 4 callbacks suppressed [ 130.724041][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 130.788014][ T7310] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.400'. [ 130.870585][ T5886] IPVS: starting estimator thread 0... [ 130.972730][ T7318] IPVS: using max 26 ests per chain, 62400 per kthread [ 130.997644][ T7324] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 131.079140][ T7330] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 131.194203][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 131.305939][ T7338] xt_CT: No such helper "netbios-ns" [ 131.313535][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 131.336407][ T7344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.412'. [ 131.353719][ T7344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.412'. [ 131.374374][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 131.541528][ T7355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.660262][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 131.685640][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 131.704888][ T7361] netlink: 'syz.2.419': attribute type 5 has an invalid length. [ 131.734465][ T7364] netlink: 288 bytes leftover after parsing attributes in process `syz.2.419'. [ 132.859460][ T7421] netlink: 'syz.2.443': attribute type 2 has an invalid length. [ 132.877938][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.897159][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.023455][ T7428] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 133.209850][ T7437] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 133.535334][ T7464] syzkaller1: entered promiscuous mode [ 133.546152][ T7464] syzkaller1: entered allmulticast mode [ 134.026858][ T7480] netlink: 'syz.2.461': attribute type 8 has an invalid length. [ 134.342767][ T7501] netlink: 'syz.3.465': attribute type 10 has an invalid length. [ 134.406478][ T7503] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 134.452611][ T7501] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 134.505151][ T7501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.635329][ T7521] bridge0: port 4(gretap0) entered blocking state [ 134.658507][ T7521] bridge0: port 4(gretap0) entered disabled state [ 134.675645][ T7521] gretap0: entered allmulticast mode [ 134.683965][ T7521] gretap0: entered promiscuous mode [ 134.690320][ T7521] bridge0: port 4(gretap0) entered blocking state [ 134.697205][ T7521] bridge0: port 4(gretap0) entered forwarding state [ 134.710400][ T7526] netlink: 'syz.3.471': attribute type 21 has an invalid length. [ 134.768763][ T7530] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 134.783878][ T7530] netlink: 'syz.1.472': attribute type 7 has an invalid length. [ 134.799586][ T7526] netlink: 'syz.3.471': attribute type 15 has an invalid length. [ 134.830793][ T7527] vlan2: entered allmulticast mode [ 134.837956][ T7527] bond0: entered allmulticast mode [ 134.848676][ T7527] bond_slave_0: entered allmulticast mode [ 134.854842][ T7527] bond_slave_1: entered allmulticast mode [ 134.860615][ T7527] batadv0: entered allmulticast mode [ 134.875692][ T7527] bridge0: port 3(vlan2) entered blocking state [ 134.887037][ T7527] bridge0: port 3(vlan2) entered disabled state [ 134.898852][ T7527] vlan2: entered promiscuous mode [ 134.904378][ T7527] bond0: entered promiscuous mode [ 134.909611][ T7527] bond_slave_0: entered promiscuous mode [ 134.916374][ T7527] bond_slave_1: entered promiscuous mode [ 134.922512][ T7527] batadv0: entered promiscuous mode [ 134.930233][ T7527] bridge0: port 3(vlan2) entered blocking state [ 134.936746][ T7527] bridge0: port 3(vlan2) entered forwarding state [ 134.957785][ T7530] : entered promiscuous mode [ 135.340373][ T7557] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 135.469857][ T7562] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 135.702381][ T7580] netlink: 'syz.4.487': attribute type 23 has an invalid length. [ 136.228919][ T7610] __nla_validate_parse: 12 callbacks suppressed [ 136.228938][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 136.234498][ T7611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.251427][ T7611] IPv6: NLM_F_CREATE should be set when creating new route [ 136.276811][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 136.302536][ T7610] netlink: 'syz.3.495': attribute type 20 has an invalid length. [ 136.313065][ T7612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.323786][ T7616] gretap0: left allmulticast mode [ 136.335077][ T7616] gretap0: left promiscuous mode [ 136.341320][ T7616] bridge0: port 4(gretap0) entered disabled state [ 136.368748][ T7616] bridge_slave_0: left allmulticast mode [ 136.380259][ T7616] bridge_slave_0: left promiscuous mode [ 136.390552][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.408539][ T7616] bridge_slave_1: left allmulticast mode [ 136.414464][ T7616] bridge_slave_1: left promiscuous mode [ 136.420200][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.435527][ T7616] vlan2: left promiscuous mode [ 136.444689][ T7616] bond0: left promiscuous mode [ 136.454687][ T7616] bond0: (slave bond_slave_0): Releasing backup interface [ 136.467346][ T7616] bond_slave_0: left allmulticast mode [ 136.473563][ T7616] bond_slave_0: left promiscuous mode [ 136.493307][ T7616] bond0: (slave bond_slave_1): Releasing backup interface [ 136.508772][ T7616] bond_slave_1: left allmulticast mode [ 136.514919][ T7616] bond_slave_1: left promiscuous mode [ 136.530453][ T7616] team_slave_0: left promiscuous mode [ 136.536877][ T7616] team_slave_0: left allmulticast mode [ 136.549519][ T7616] team0: Port device team_slave_0 removed [ 136.572106][ T7616] team_slave_1: left promiscuous mode [ 136.577706][ T7616] team_slave_1: left allmulticast mode [ 136.602410][ T7616] team0: Port device team_slave_1 removed [ 136.609645][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.617411][ T7616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.626747][ T7616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.636408][ T7616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.656378][ T7616] bridge0: port 3(vlan2) entered disabled state [ 136.666436][ T7614] tipc: Enabling of bearer rejected, failed to enable media [ 136.684267][ T7616] syz.2.499 (7616) used greatest stack depth: 20232 bytes left [ 136.859899][ T7626] netlink: 'syz.4.502': attribute type 10 has an invalid length. [ 136.877503][ T7626] macvlan0: entered promiscuous mode [ 136.886335][ T7626] macvlan0: entered allmulticast mode [ 136.909175][ T7626] veth1_vlan: entered allmulticast mode [ 136.950387][ T7626] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 136.962840][ T7637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.503'. [ 137.143469][ T7651] netlink: 88 bytes leftover after parsing attributes in process `syz.3.506'. [ 137.204119][ T7650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.364062][ T7658] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.545534][ T976] IPVS: starting estimator thread 0... [ 137.548186][ T7665] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 137.563388][ T7664] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 137.588157][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 137.603570][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 137.651028][ T7666] IPVS: using max 24 ests per chain, 57600 per kthread [ 137.797565][ T7672] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 137.818498][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.826713][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.842091][ T7676] x_tables: duplicate underflow at hook 2 [ 137.940224][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 137.946509][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.519'. [ 137.977692][ T7684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.519'. [ 138.332710][ T7697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.348056][ T7703] openvswitch: netlink: Key type 141 is out of range max 32 [ 138.472931][ T7704] vlan2: entered allmulticast mode [ 138.478114][ T7704] bond2: entered allmulticast mode [ 138.559622][ T7713] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 138.679132][ T7713] bond1: entered promiscuous mode [ 138.730919][ T7713] bond1: entered allmulticast mode [ 138.759435][ T7713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.781778][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 139.296741][ T7753] sctp: [Deprecated]: syz.2.540 (pid 7753) Use of int in maxseg socket option. [ 139.296741][ T7753] Use struct sctp_assoc_value instead [ 139.311482][ T7752] sctp: [Deprecated]: syz.2.540 (pid 7752) Use of int in maxseg socket option. [ 139.311482][ T7752] Use struct sctp_assoc_value instead [ 139.405995][ T7754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.737456][ T7775] validate_nla: 1 callbacks suppressed [ 139.737475][ T7775] netlink: 'syz.0.545': attribute type 11 has an invalid length. [ 139.861378][ T7787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.045381][ T7772] team0 (unregistering): Port device team_slave_0 removed [ 140.066207][ T7772] team0 (unregistering): Port device team_slave_1 removed [ 140.404574][ T7808] bond0: entered allmulticast mode [ 140.409775][ T7808] bond_slave_0: entered allmulticast mode [ 140.435290][ T7808] bond_slave_1: entered allmulticast mode [ 140.459250][ T7814] netlink: 'syz.4.557': attribute type 30 has an invalid length. [ 140.495530][ T7813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.525035][ T7814] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.534257][ T7814] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.543134][ T7814] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.552433][ T7814] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.597785][ T7814] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.606829][ T7814] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.615818][ T7814] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.624769][ T7814] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.696152][ T7813] vlan1: entered allmulticast mode [ 140.701472][ T7813] bond2: entered allmulticast mode [ 140.724586][ T7829] netlink: 'syz.1.559': attribute type 3 has an invalid length. [ 140.747008][ T7830] openvswitch: netlink: Key type 272 is out of range max 32 [ 140.803380][ T7828] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 140.834281][ T7828] netlink: 'syz.3.560': attribute type 11 has an invalid length. [ 141.034710][ T7845] netlink: 'syz.1.566': attribute type 32 has an invalid length. [ 141.074509][ T7847] netlink: 'syz.4.564': attribute type 10 has an invalid length. [ 141.095299][ T7847] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 141.141611][ T7847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.727354][ T7874] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.756778][ T7881] vlan3: entered allmulticast mode [ 141.764538][ T7881] bond5: entered allmulticast mode [ 141.940254][ T7890] netlink: 'syz.2.580': attribute type 11 has an invalid length. [ 141.991155][ T7890] __nla_validate_parse: 12 callbacks suppressed [ 141.991176][ T7890] netlink: 224 bytes leftover after parsing attributes in process `syz.2.580'. [ 142.118642][ T7891] netlink: 'syz.2.580': attribute type 11 has an invalid length. [ 142.147237][ T7891] netlink: 224 bytes leftover after parsing attributes in process `syz.2.580'. [ 142.314805][ T5002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.368468][ T7899] netlink: 232 bytes leftover after parsing attributes in process `syz.3.583'. [ 142.413485][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 142.466754][ T5002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.571370][ T5002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.709763][ T5002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.808207][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.824592][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.931601][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 142.951165][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 142.996987][ T7923] netlink: 'syz.3.594': attribute type 29 has an invalid length. [ 143.070025][ T7923] netlink: 'syz.3.594': attribute type 29 has an invalid length. [ 143.203409][ T7932] x_tables: duplicate underflow at hook 1 [ 143.275037][ T5002] bridge_slave_1: left allmulticast mode [ 143.283903][ T5002] bridge_slave_1: left promiscuous mode [ 143.299876][ T5140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.309363][ T5140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.318190][ T5140] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.327875][ T5002] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.336966][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.345220][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.395059][ T5002] bridge_slave_0: left allmulticast mode [ 143.401413][ T5002] bridge_slave_0: left promiscuous mode [ 143.407227][ T5002] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.928787][ T5002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.940325][ T5002] bond_slave_0: left allmulticast mode [ 143.948662][ T5002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.958067][ T5002] bond_slave_1: left allmulticast mode [ 143.965197][ T5002] bond0 (unregistering): Released all slaves [ 143.980641][ T5002] bond1 (unregistering): Released all slaves [ 144.062793][ T5002] bond2 (unregistering): Released all slaves [ 144.083419][ T7949] tipc: Started in network mode [ 144.088396][ T7949] tipc: Node identity 4, cluster identity 4711 [ 144.100387][ T7949] tipc: Node number set to 4 [ 144.141083][ T7958] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 144.172520][ T7961] bridge0: port 3(vlan2) entered blocking state [ 144.182966][ T7961] bridge0: port 3(vlan2) entered disabled state [ 144.214245][ T7961] vlan2: entered allmulticast mode [ 144.219443][ T7961] bridge0: entered allmulticast mode [ 144.253716][ T7961] vlan2: left allmulticast mode [ 144.258663][ T7961] bridge0: left allmulticast mode [ 144.299732][ T7969] Cannot find set identified by id 0 to match [ 144.345995][ T7966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.408970][ T7971] vlan1: entered allmulticast mode [ 144.424964][ T7971] bond3: entered allmulticast mode [ 144.501382][ T7983] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 144.567168][ T7935] virt_wifi0 speed is unknown, defaulting to 1000 [ 144.696864][ T7994] sctp: [Deprecated]: syz.4.614 (pid 7994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.696864][ T7994] Use struct sctp_sack_info instead [ 144.956580][ T8003] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 144.986087][ T8003] netlink: 224 bytes leftover after parsing attributes in process `syz.1.618'. [ 145.007246][ T8002] netlink: 'syz.2.617': attribute type 29 has an invalid length. [ 145.020162][ T8009] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 145.051497][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 145.063060][ T8006] netlink: 'syz.2.617': attribute type 29 has an invalid length. [ 145.123758][ T5002] hsr_slave_0: left promiscuous mode [ 145.129891][ T5002] hsr_slave_1: left promiscuous mode [ 145.148434][ T5002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.157780][ T5002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.171366][ T5002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.178949][ T5002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.208109][ T5002] veth1_macvtap: left promiscuous mode [ 145.214099][ T5002] veth0_macvtap: left promiscuous mode [ 145.219878][ T5002] veth1_vlan: left promiscuous mode [ 145.227407][ T5002] veth0_vlan: left promiscuous mode [ 145.431686][ T5835] Bluetooth: hci4: command tx timeout [ 145.888581][ T8006] netlink: 'syz.2.617': attribute type 29 has an invalid length. [ 145.959116][ T8018] syzkaller0: entered promiscuous mode [ 145.964752][ T8018] syzkaller0: entered allmulticast mode [ 147.224455][ T7935] chnl_net:caif_netlink_parms(): no params data found [ 147.332119][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.339407][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.346890][ T7935] bridge_slave_0: entered allmulticast mode [ 147.354375][ T7935] bridge_slave_0: entered promiscuous mode [ 147.365042][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.372483][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.379740][ T7935] bridge_slave_1: entered allmulticast mode [ 147.388358][ T7935] bridge_slave_1: entered promiscuous mode [ 147.427108][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.429030][ T5002] IPVS: stop unused estimator thread 0... [ 147.440624][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.492823][ T7935] team0: Port device team_slave_0 added [ 147.502112][ T7935] team0: Port device team_slave_1 added [ 147.511988][ T5835] Bluetooth: hci4: command tx timeout [ 147.545547][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.552731][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.579390][ T7935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.592595][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.599653][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.627785][ T7935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.682048][ T7935] hsr_slave_0: entered promiscuous mode [ 147.688499][ T7935] hsr_slave_1: entered promiscuous mode [ 147.695103][ T7935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.703340][ T7935] Cannot create hsr debugfs directory [ 149.601161][ T5835] Bluetooth: hci4: command tx timeout [ 151.681166][ T5835] Bluetooth: hci4: command tx timeout [ 159.753824][ T41] block nbd0: Possible stuck request ffff888024a87000: control (read@0,4096B). Runtime 60 seconds [ 160.306410][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.318180][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.333155][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.347514][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.355439][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.371726][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.380234][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.389172][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.406591][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.411027][ T8041] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.415943][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.496690][ T8043] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.709707][ T8041] chnl_net:caif_netlink_parms(): no params data found [ 160.822900][ T8043] chnl_net:caif_netlink_parms(): no params data found [ 160.852949][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.860167][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.868385][ T8041] bridge_slave_0: entered allmulticast mode [ 160.876781][ T8041] bridge_slave_0: entered promiscuous mode [ 160.889763][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.897256][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.904663][ T8041] bridge_slave_1: entered allmulticast mode [ 160.912618][ T8041] bridge_slave_1: entered promiscuous mode [ 160.994644][ T8041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.012556][ T8041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.127435][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.138952][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.157052][ T8043] bridge_slave_0: entered allmulticast mode [ 161.166882][ T8043] bridge_slave_0: entered promiscuous mode [ 161.206068][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.222234][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.229866][ T8043] bridge_slave_1: entered allmulticast mode [ 161.256045][ T8043] bridge_slave_1: entered promiscuous mode [ 161.271506][ T8041] team0: Port device team_slave_0 added [ 161.298130][ T8041] team0: Port device team_slave_1 added [ 161.343191][ T8043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.373066][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.380026][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.438632][ T8041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.450612][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.459362][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.468095][ T8043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.479675][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.495605][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.503575][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.520613][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.535045][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.562812][ T8041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.609591][ T8043] team0: Port device team_slave_0 added [ 161.623089][ T8043] team0: Port device team_slave_1 added [ 161.683088][ T8041] hsr_slave_0: entered promiscuous mode [ 161.689471][ T8041] hsr_slave_1: entered promiscuous mode [ 161.697458][ T8041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.705992][ T8041] Cannot create hsr debugfs directory [ 161.738722][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.745955][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.773942][ T8043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.812452][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.819430][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.847063][ T8043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.871837][ T8058] virt_wifi0 speed is unknown, defaulting to 1000 [ 161.998388][ T8043] hsr_slave_0: entered promiscuous mode [ 162.005337][ T8043] hsr_slave_1: entered promiscuous mode [ 162.013684][ T8043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.021915][ T8043] Cannot create hsr debugfs directory [ 162.391431][ T5849] Bluetooth: hci5: command tx timeout [ 162.437109][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 162.471484][ T5849] Bluetooth: hci6: command tx timeout [ 162.561884][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.569069][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.578284][ T8058] bridge_slave_0: entered allmulticast mode [ 162.586871][ T8058] bridge_slave_0: entered promiscuous mode [ 162.595970][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.603759][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.611971][ T8058] bridge_slave_1: entered allmulticast mode [ 162.619258][ T8058] bridge_slave_1: entered promiscuous mode [ 162.668348][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.683035][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.721321][ T8058] team0: Port device team_slave_0 added [ 162.729454][ T8058] team0: Port device team_slave_1 added [ 162.762081][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.769058][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.797352][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.809610][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.816666][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.842731][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.897136][ T8058] hsr_slave_0: entered promiscuous mode [ 162.904191][ T8058] hsr_slave_1: entered promiscuous mode [ 162.910565][ T8058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.918897][ T8058] Cannot create hsr debugfs directory [ 163.335719][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 163.346429][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 163.354521][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 163.364059][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 163.377094][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 163.418743][ T8067] virt_wifi0 speed is unknown, defaulting to 1000 [ 163.585229][ T8067] chnl_net:caif_netlink_parms(): no params data found [ 163.604447][ T5849] Bluetooth: hci7: command tx timeout [ 163.694579][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.703350][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.710563][ T8067] bridge_slave_0: entered allmulticast mode [ 163.719406][ T8067] bridge_slave_0: entered promiscuous mode [ 163.727587][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.734941][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.742316][ T8067] bridge_slave_1: entered allmulticast mode [ 163.749575][ T8067] bridge_slave_1: entered promiscuous mode [ 163.790154][ T8067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.809449][ T8067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.852456][ T8067] team0: Port device team_slave_0 added [ 163.862352][ T8067] team0: Port device team_slave_1 added [ 163.897174][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.904323][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.932754][ T8067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.946483][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.953577][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.980152][ T8067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.039131][ T8067] hsr_slave_0: entered promiscuous mode [ 164.045916][ T8067] hsr_slave_1: entered promiscuous mode [ 164.052383][ T8067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.059965][ T8067] Cannot create hsr debugfs directory [ 164.470943][ T5849] Bluetooth: hci5: command tx timeout [ 164.551441][ T5849] Bluetooth: hci6: command tx timeout [ 165.431040][ T5849] Bluetooth: hci8: command tx timeout [ 165.671283][ T5849] Bluetooth: hci7: command tx timeout [ 166.551017][ T5849] Bluetooth: hci5: command tx timeout [ 166.630995][ T5849] Bluetooth: hci6: command tx timeout [ 167.510907][ T5849] Bluetooth: hci8: command tx timeout [ 167.761036][ T5849] Bluetooth: hci7: command tx timeout [ 168.630909][ T5849] Bluetooth: hci5: command tx timeout [ 168.711771][ T5849] Bluetooth: hci6: command tx timeout [ 169.591095][ T5849] Bluetooth: hci8: command tx timeout [ 169.830946][ T5849] Bluetooth: hci7: command tx timeout [ 171.670910][ T5849] Bluetooth: hci8: command tx timeout [ 189.837523][ T41] block nbd0: Possible stuck request ffff888024a87000: control (read@0,4096B). Runtime 90 seconds [ 194.315331][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.322979][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.755791][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 203.766251][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 203.777084][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 203.786716][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 203.794862][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 203.828029][ T8076] virt_wifi0 speed is unknown, defaulting to 1000 [ 203.995496][ T8076] chnl_net:caif_netlink_parms(): no params data found [ 204.086872][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.094656][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.102124][ T8076] bridge_slave_0: entered allmulticast mode [ 204.109468][ T8076] bridge_slave_0: entered promiscuous mode [ 204.119660][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.126937][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.134315][ T8076] bridge_slave_1: entered allmulticast mode [ 204.142075][ T8076] bridge_slave_1: entered promiscuous mode [ 204.183615][ T8076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.196706][ T8076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.243532][ T8076] team0: Port device team_slave_0 added [ 204.254584][ T8076] team0: Port device team_slave_1 added [ 204.287881][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.295067][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.321413][ T8076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.334413][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.342277][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.371545][ T8076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.426397][ T8076] hsr_slave_0: entered promiscuous mode [ 204.435728][ T8076] hsr_slave_1: entered promiscuous mode [ 204.442294][ T8076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.449877][ T8076] Cannot create hsr debugfs directory [ 205.831134][ T5849] Bluetooth: hci9: command tx timeout [ 207.910997][ T5849] Bluetooth: hci9: command tx timeout [ 209.990814][ T5849] Bluetooth: hci9: command tx timeout [ 212.070985][ T5849] Bluetooth: hci9: command tx timeout [ 216.873470][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 216.874897][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 216.879509][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 219.926401][ T41] block nbd0: Possible stuck request ffff888024a87000: control (read@0,4096B). Runtime 120 seconds [ 220.271022][ T5140] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 220.279484][ T5140] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 220.288720][ T5140] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 220.297923][ T5140] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 220.305814][ T5140] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 220.348733][ T8085] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.512308][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 220.621456][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.628668][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.638497][ T8085] bridge_slave_0: entered allmulticast mode [ 220.647163][ T8085] bridge_slave_0: entered promiscuous mode [ 220.655264][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.662725][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.669958][ T8085] bridge_slave_1: entered allmulticast mode [ 220.677996][ T8085] bridge_slave_1: entered promiscuous mode [ 220.716930][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.729575][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.775159][ T8085] team0: Port device team_slave_0 added [ 220.784140][ T8085] team0: Port device team_slave_1 added [ 220.823266][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.830533][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.857936][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.877695][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.885217][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.911278][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.971355][ T8085] hsr_slave_0: entered promiscuous mode [ 220.977779][ T8085] hsr_slave_1: entered promiscuous mode [ 220.984725][ T8085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.992393][ T8085] Cannot create hsr debugfs directory [ 221.367683][ T5140] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 221.380500][ T5140] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 221.389624][ T5140] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 221.399024][ T5140] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 221.406826][ T5140] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 221.445679][ T8094] virt_wifi0 speed is unknown, defaulting to 1000 [ 221.697942][ T8094] chnl_net:caif_netlink_parms(): no params data found [ 221.798513][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.806178][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.814997][ T8094] bridge_slave_0: entered allmulticast mode [ 221.824071][ T8094] bridge_slave_0: entered promiscuous mode [ 221.833188][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.840377][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.848210][ T8094] bridge_slave_1: entered allmulticast mode [ 221.856262][ T8094] bridge_slave_1: entered promiscuous mode [ 221.899300][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.918128][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.969789][ T8094] team0: Port device team_slave_0 added [ 221.979463][ T8094] team0: Port device team_slave_1 added [ 222.021960][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.028946][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.055326][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.073769][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.090748][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.118533][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.250461][ T8094] hsr_slave_0: entered promiscuous mode [ 222.267009][ T8094] hsr_slave_1: entered promiscuous mode [ 222.281766][ T8094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.289466][ T8094] Cannot create hsr debugfs directory [ 222.390952][ T5140] Bluetooth: hci10: command tx timeout [ 222.434940][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 222.450273][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 222.459453][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 222.468747][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 222.479232][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 222.565695][ T8103] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.781253][ T8103] chnl_net:caif_netlink_parms(): no params data found [ 222.984955][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.993465][ T8103] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.001251][ T8103] bridge_slave_0: entered allmulticast mode [ 223.013091][ T8103] bridge_slave_0: entered promiscuous mode [ 223.027856][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.038151][ T8103] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.050463][ T8103] bridge_slave_1: entered allmulticast mode [ 223.060345][ T8103] bridge_slave_1: entered promiscuous mode [ 223.111074][ T8103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.133063][ T8103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.192552][ T8103] team0: Port device team_slave_0 added [ 223.213094][ T8103] team0: Port device team_slave_1 added [ 223.295214][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.310952][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.347580][ T8103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.372667][ T8103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.379643][ T8103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.418860][ T8103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.430984][ T5140] Bluetooth: hci11: command tx timeout [ 223.513189][ T8103] hsr_slave_0: entered promiscuous mode [ 223.519946][ T8103] hsr_slave_1: entered promiscuous mode [ 223.535000][ T55] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 223.542623][ T8103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.544479][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 223.550202][ T8103] Cannot create hsr debugfs directory [ 223.558587][ T55] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 223.573189][ T55] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 223.581091][ T55] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 223.738590][ T8112] virt_wifi0 speed is unknown, defaulting to 1000 [ 224.019446][ T8112] chnl_net:caif_netlink_parms(): no params data found [ 224.209957][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.217840][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.226882][ T8112] bridge_slave_0: entered allmulticast mode [ 224.236141][ T8112] bridge_slave_0: entered promiscuous mode [ 224.245050][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.252394][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.259626][ T8112] bridge_slave_1: entered allmulticast mode [ 224.267858][ T8112] bridge_slave_1: entered promiscuous mode [ 224.313207][ T8112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.326686][ T8112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.371979][ T8112] team0: Port device team_slave_0 added [ 224.380257][ T8112] team0: Port device team_slave_1 added [ 224.420909][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.428974][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.455155][ T8112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.468345][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.475583][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.501982][ T55] Bluetooth: hci10: command tx timeout [ 224.507697][ T8112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.550936][ T55] Bluetooth: hci12: command tx timeout [ 224.576987][ T8112] hsr_slave_0: entered promiscuous mode [ 224.583604][ T8112] hsr_slave_1: entered promiscuous mode [ 224.589787][ T8112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.597446][ T8112] Cannot create hsr debugfs directory [ 225.521050][ T55] Bluetooth: hci11: command tx timeout [ 225.671203][ T5140] Bluetooth: hci13: command tx timeout [ 226.550991][ T5140] Bluetooth: hci10: command tx timeout [ 226.631184][ T5140] Bluetooth: hci12: command tx timeout [ 227.590882][ T5140] Bluetooth: hci11: command tx timeout [ 227.750879][ T5140] Bluetooth: hci13: command tx timeout [ 228.631107][ T5140] Bluetooth: hci10: command tx timeout [ 228.710870][ T5140] Bluetooth: hci12: command tx timeout [ 229.670804][ T5140] Bluetooth: hci11: command tx timeout [ 229.830970][ T5140] Bluetooth: hci13: command tx timeout [ 230.791067][ T5140] Bluetooth: hci12: command tx timeout [ 231.911362][ T5140] Bluetooth: hci13: command tx timeout [ 250.000848][ T41] block nbd0: Possible stuck request ffff888024a87000: control (read@0,4096B). Runtime 150 seconds [ 255.754363][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.762080][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.340367][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 264.351573][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 264.363015][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 264.373026][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 264.382349][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 264.438370][ T8121] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.637721][ T8121] chnl_net:caif_netlink_parms(): no params data found [ 264.752730][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.759961][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.768659][ T8121] bridge_slave_0: entered allmulticast mode [ 264.778340][ T8121] bridge_slave_0: entered promiscuous mode [ 264.788398][ T8121] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.797199][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.805115][ T8121] bridge_slave_1: entered allmulticast mode [ 264.814191][ T8121] bridge_slave_1: entered promiscuous mode [ 264.859644][ T8121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.875891][ T8121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.921644][ T8121] team0: Port device team_slave_0 added [ 264.931968][ T8121] team0: Port device team_slave_1 added [ 264.972781][ T8121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.981458][ T8121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.007524][ T8121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.020218][ T8121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.027327][ T8121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.053790][ T8121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.119383][ T8121] hsr_slave_0: entered promiscuous mode [ 265.126213][ T8121] hsr_slave_1: entered promiscuous mode [ 265.133218][ T8121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.140904][ T8121] Cannot create hsr debugfs directory [ 266.471148][ T5140] Bluetooth: hci14: command tx timeout [ 268.070914][ T5140] Bluetooth: hci4: command 0x0406 tx timeout [ 268.561755][ T55] Bluetooth: hci14: command tx timeout [ 270.631077][ T55] Bluetooth: hci14: command tx timeout [ 272.711085][ T55] Bluetooth: hci14: command tx timeout [ 280.076382][ T41] block nbd0: Possible stuck request ffff888024a87000: control (read@0,4096B). Runtime 180 seconds [ 280.372828][ T5140] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 280.380891][ T5140] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 280.389465][ T5140] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 280.401925][ T5140] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 280.409760][ T5140] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 280.455574][ T8130] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.650539][ T8130] chnl_net:caif_netlink_parms(): no params data found [ 280.762669][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.769986][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.777486][ T8130] bridge_slave_0: entered allmulticast mode [ 280.786159][ T8130] bridge_slave_0: entered promiscuous mode [ 280.798187][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.805567][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.815716][ T8130] bridge_slave_1: entered allmulticast mode [ 280.823898][ T8130] bridge_slave_1: entered promiscuous mode [ 280.871900][ T8130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.885233][ T8130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.933847][ T8130] team0: Port device team_slave_0 added [ 280.943224][ T8130] team0: Port device team_slave_1 added [ 280.984639][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.991766][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.018306][ T8130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.030766][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.037837][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.066159][ T8130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.129126][ T8130] hsr_slave_0: entered promiscuous mode [ 281.142333][ T8130] hsr_slave_1: entered promiscuous mode [ 281.151447][ T8130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.160131][ T8130] Cannot create hsr debugfs directory [ 281.532180][ T5847] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 281.541022][ T5847] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 281.548952][ T5847] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 281.569695][ T5847] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 281.580573][ T5847] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 281.655469][ T8139] virt_wifi0 speed is unknown, defaulting to 1000 [ 281.925109][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 282.037552][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.045215][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.052740][ T8139] bridge_slave_0: entered allmulticast mode [ 282.060874][ T8139] bridge_slave_0: entered promiscuous mode [ 282.070181][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.079414][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.086860][ T8139] bridge_slave_1: entered allmulticast mode [ 282.094962][ T8139] bridge_slave_1: entered promiscuous mode [ 282.134020][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.147069][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.217884][ T8139] team0: Port device team_slave_0 added [ 282.228343][ T8139] team0: Port device team_slave_1 added [ 282.283403][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.290388][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.317851][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.331367][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.338354][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.364753][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.444829][ T8139] hsr_slave_0: entered promiscuous mode [ 282.456086][ T8139] hsr_slave_1: entered promiscuous mode [ 282.471704][ T5847] Bluetooth: hci15: command tx timeout [ 282.478937][ T8139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.500692][ T8139] Cannot create hsr debugfs directory [ 282.681076][ T5840] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 282.693736][ T5840] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 282.702813][ T5840] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 282.712446][ T5840] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 282.721925][ T5840] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 282.822032][ T8148] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.053916][ T8148] chnl_net:caif_netlink_parms(): no params data found [ 283.309563][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.317269][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.340064][ T8148] bridge_slave_0: entered allmulticast mode [ 283.361055][ T8148] bridge_slave_0: entered promiscuous mode [ 283.372938][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.390992][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.398356][ T8148] bridge_slave_1: entered allmulticast mode [ 283.423714][ T8148] bridge_slave_1: entered promiscuous mode [ 283.431839][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 283.437905][ T5847] Bluetooth: hci6: command 0x0406 tx timeout [ 283.525977][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.554122][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.606098][ T55] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 283.625252][ T55] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 283.634376][ T55] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 283.645747][ T55] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 283.649793][ T8148] team0: Port device team_slave_0 added [ 283.660367][ T55] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 283.666293][ T8148] team0: Port device team_slave_1 added [ 283.673263][ T55] Bluetooth: hci16: command tx timeout [ 283.731067][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.738068][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.765072][ T8148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.778597][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.785719][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.812243][ T8148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.861233][ T8157] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.908385][ T8148] hsr_slave_0: entered promiscuous mode [ 283.922894][ T8148] hsr_slave_1: entered promiscuous mode [ 283.929428][ T8148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.938195][ T8148] Cannot create hsr debugfs directory [ 284.322588][ T8157] chnl_net:caif_netlink_parms(): no params data found [ 284.511779][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.519077][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.526485][ T8157] bridge_slave_0: entered allmulticast mode [ 284.536430][ T8157] bridge_slave_0: entered promiscuous mode [ 284.551408][ T5140] Bluetooth: hci15: command tx timeout [ 284.559245][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.566627][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.574073][ T8157] bridge_slave_1: entered allmulticast mode [ 284.583199][ T8157] bridge_slave_1: entered promiscuous mode [ 284.628045][ T8157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.644927][ T8157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.693627][ T8157] team0: Port device team_slave_0 added [ 284.704104][ T8157] team0: Port device team_slave_1 added [ 284.759419][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.766498][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.792796][ T5140] Bluetooth: hci17: command tx timeout [ 284.799142][ T8157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.812980][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.819990][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.848638][ T8157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.917804][ T8157] hsr_slave_0: entered promiscuous mode [ 284.925287][ T8157] hsr_slave_1: entered promiscuous mode [ 284.931762][ T8157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.939342][ T8157] Cannot create hsr debugfs directory [ 285.751021][ T5140] Bluetooth: hci18: command tx timeout [ 285.755323][ T55] Bluetooth: hci16: command tx timeout [ 286.631048][ T55] Bluetooth: hci15: command tx timeout [ 286.880884][ T55] Bluetooth: hci17: command tx timeout [ 287.830841][ T55] Bluetooth: hci16: command tx timeout [ 287.831453][ T5840] Bluetooth: hci18: command tx timeout [ 288.555259][ T5840] Bluetooth: hci8: command 0x0406 tx timeout [ 288.555281][ T55] Bluetooth: hci7: command 0x0406 tx timeout [ 288.711293][ T5140] Bluetooth: hci15: command tx timeout [ 288.951916][ T5140] Bluetooth: hci17: command tx timeout [ 289.031065][ T31] INFO: task syz.1.618:8014 blocked for more than 143 seconds. [ 289.040476][ T31] Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 [ 289.048622][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.057841][ T31] task:syz.1.618 state:D stack:28536 pid:8014 tgid:8001 ppid:5842 task_flags:0x400040 flags:0x00000004 [ 289.069901][ T31] Call Trace: [ 289.074495][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 289.077456][ T31] __schedule+0x16e2/0x4cd0 [ 289.082123][ T31] ? __lock_acquire+0xaac/0xd20 [ 289.087441][ T31] ? schedule+0x165/0x360 [ 289.092946][ T31] ? __pfx___schedule+0x10/0x10 [ 289.097863][ T31] ? schedule+0x91/0x360 [ 289.102220][ T31] schedule+0x165/0x360 [ 289.106415][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.112137][ T31] __mutex_lock+0x724/0xe80 [ 289.116694][ T31] ? __mutex_lock+0x51b/0xe80 [ 289.122634][ T31] ? genl_rcv_msg+0x10d/0x790 [ 289.128459][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.170753][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 289.175958][ T31] ? radix_tree_lookup+0x240/0x290 [ 289.203137][ T31] genl_rcv_msg+0x10d/0x790 [ 289.207723][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.213757][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 289.218850][ T31] ? __copy_skb_header+0xa7/0x550 [ 289.225045][ T31] netlink_rcv_skb+0x219/0x490 [ 289.229854][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.237100][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.245441][ T31] ? down_read+0x1ad/0x2e0 [ 289.249915][ T31] genl_rcv+0x28/0x40 [ 289.254853][ T31] netlink_unicast+0x75b/0x8d0 [ 289.260512][ T31] netlink_sendmsg+0x805/0xb30 [ 289.266531][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.272779][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 289.277761][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.283965][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.289298][ T31] __sock_sendmsg+0x21c/0x270 [ 289.295111][ T31] __sys_sendto+0x3bd/0x520 [ 289.299669][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 289.305100][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 289.310464][ T31] __x64_sys_sendto+0xde/0x100 [ 289.315695][ T31] do_syscall_64+0xf6/0x210 [ 289.320236][ T31] ? clear_bhb_loop+0x60/0xb0 [ 289.327129][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.333629][ T31] RIP: 0033:0x7f2ce39907fc [ 289.338095][ T31] RSP: 002b:00007f2ce479dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 289.349453][ T31] RAX: ffffffffffffffda RBX: 00007f2ce479dfc0 RCX: 00007f2ce39907fc [ 289.357690][ T31] RDX: 0000000000000020 RSI: 00007f2ce479e010 RDI: 0000000000000009 [ 289.365741][ T31] RBP: 0000000000000000 R08: 00007f2ce479df14 R09: 000000000000000c [ 289.374121][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 289.382154][ T31] R13: 00007f2ce479df68 R14: 00007f2ce479e010 R15: 0000000000000000 [ 289.390161][ T31] [ 289.393381][ T31] INFO: task syz.4.620:8008 blocked for more than 143 seconds. [ 289.402190][ T31] Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 [ 289.409844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.418793][ T31] task:syz.4.620 state:D stack:26136 pid:8008 tgid:8007 ppid:5832 task_flags:0x480140 flags:0x00004004 [ 289.431064][ T31] Call Trace: [ 289.435185][ T31] [ 289.438162][ T31] __schedule+0x16e2/0x4cd0 [ 289.442779][ T31] ? __lock_acquire+0xaac/0xd20 [ 289.447697][ T31] ? schedule+0x165/0x360 [ 289.455342][ T31] ? __pfx___schedule+0x10/0x10 [ 289.460258][ T31] ? schedule+0x91/0x360 [ 289.464624][ T31] schedule+0x165/0x360 [ 289.468820][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 289.474429][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 289.480547][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 289.486915][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 289.492931][ T31] queue_limits_commit_update_frozen+0x5e/0x360 [ 289.499211][ T31] ? nbd_set_size+0x2bd/0x6c0 [ 289.503965][ T31] nbd_set_size+0x496/0x6c0 [ 289.508512][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 289.514024][ T31] ? __mutex_trylock_common+0x153/0x260 [ 289.519924][ T31] ? __mutex_lock+0x330/0xe80 [ 289.525620][ T31] ? nla_memcpy+0x5b/0xc0 [ 289.530004][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 289.536136][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 289.542298][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 289.548331][ T31] ? bpf_lsm_capable+0x9/0x20 [ 289.556174][ T31] ? security_capable+0x7e/0x2e0 [ 289.561838][ T31] ? radix_tree_lookup+0x240/0x290 [ 289.566995][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 289.573474][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 289.579242][ T31] ? __nla_parse+0x40/0x60 [ 289.584624][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 289.592261][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 289.597886][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 289.605248][ T31] ? stack_depot_save_flags+0x40/0x910 [ 289.611375][ T31] genl_rcv_msg+0x60e/0x790 [ 289.615936][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.622735][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 289.628512][ T31] netlink_rcv_skb+0x219/0x490 [ 289.634309][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.639376][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.646040][ T31] ? down_read+0x1ad/0x2e0 [ 289.650497][ T31] genl_rcv+0x28/0x40 [ 289.656472][ T31] netlink_unicast+0x75b/0x8d0 [ 289.662179][ T31] netlink_sendmsg+0x805/0xb30 [ 289.667020][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.673357][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 289.678343][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.683771][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.689100][ T31] __sock_sendmsg+0x21c/0x270 [ 289.693950][ T31] ____sys_sendmsg+0x505/0x830 [ 289.698796][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.705422][ T31] ? import_iovec+0x74/0xa0 [ 289.709977][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 289.714774][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.720117][ T31] ? __fget_files+0x2a/0x420 [ 289.724832][ T31] ? __fget_files+0x3a0/0x420 [ 289.729651][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 289.735678][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.741360][ T31] ? do_syscall_64+0xba/0x210 [ 289.746086][ T31] do_syscall_64+0xf6/0x210 [ 289.750696][ T31] ? clear_bhb_loop+0x60/0xb0 [ 289.758357][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.765112][ T31] RIP: 0033:0x7f79c598e969 [ 289.769565][ T31] RSP: 002b:00007f79c688f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.778318][ T31] RAX: ffffffffffffffda RBX: 00007f79c5bb5fa0 RCX: 00007f79c598e969 [ 289.786413][ T31] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 289.795549][ T31] RBP: 00007f79c5a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 289.803642][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.811879][ T31] R13: 0000000000000000 R14: 00007f79c5bb5fa0 R15: 00007fff284a11a8 [ 289.819897][ T31] [ 289.823312][ T31] INFO: task syz.3.622:8021 blocked for more than 144 seconds. [ 289.839551][ T31] Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 [ 289.847536][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.860133][ T31] task:syz.3.622 state:D stack:27288 pid:8021 tgid:8017 ppid:5841 task_flags:0x400140 flags:0x00000004 [ 289.872397][ T31] Call Trace: [ 289.875709][ T31] [ 289.878673][ T31] __schedule+0x16e2/0x4cd0 [ 289.883318][ T31] ? __lock_acquire+0xaac/0xd20 [ 289.888230][ T31] ? schedule+0x165/0x360 [ 289.892745][ T31] ? __pfx___schedule+0x10/0x10 [ 289.897648][ T31] ? schedule+0x91/0x360 [ 289.902120][ T31] schedule+0x165/0x360 [ 289.906327][ T31] schedule_preempt_disabled+0x13/0x30 [ 289.912058][ T5140] Bluetooth: hci18: command tx timeout [ 289.918117][ T31] __mutex_lock+0x724/0xe80 [ 289.921175][ T5140] Bluetooth: hci16: command tx timeout [ 289.922756][ T31] ? __mutex_lock+0x51b/0xe80 [ 289.933140][ T31] ? genl_rcv_msg+0x10d/0x790 [ 289.937876][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 289.943024][ T31] ? stack_depot_save_flags+0x40/0x910 [ 289.948540][ T31] ? radix_tree_lookup+0x240/0x290 [ 289.954290][ T31] genl_rcv_msg+0x10d/0x790 [ 289.958855][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.967892][ T31] ? __lock_acquire+0xaac/0xd20 [ 289.973321][ T31] netlink_rcv_skb+0x219/0x490 [ 289.978130][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.984196][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.989539][ T31] ? down_read+0x1ad/0x2e0 [ 289.995173][ T31] genl_rcv+0x28/0x40 [ 289.999210][ T31] netlink_unicast+0x75b/0x8d0 [ 290.005075][ T31] netlink_sendmsg+0x805/0xb30 [ 290.009904][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.016195][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 290.023753][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.029088][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.035328][ T31] __sock_sendmsg+0x21c/0x270 [ 290.040038][ T31] __sys_sendto+0x3bd/0x520 [ 290.046722][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 290.052400][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 290.057752][ T31] __x64_sys_sendto+0xde/0x100 [ 290.065613][ T31] do_syscall_64+0xf6/0x210 [ 290.070175][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.075923][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.082559][ T31] RIP: 0033:0x7f54c25907fc [ 290.087008][ T31] RSP: 002b:00007f54c3383ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 290.095951][ T31] RAX: ffffffffffffffda RBX: 00007f54c3383fc0 RCX: 00007f54c25907fc [ 290.104332][ T31] RDX: 0000000000000028 RSI: 00007f54c3384010 RDI: 0000000000000005 [ 290.112653][ T31] RBP: 0000000000000000 R08: 00007f54c3383f14 R09: 000000000000000c [ 290.120819][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 290.128820][ T31] R13: 00007f54c3383f68 R14: 00007f54c3384010 R15: 0000000000000000 [ 290.136918][ T31] [ 290.140015][ T31] [ 290.140015][ T31] Showing all locks held in the system: [ 290.147854][ T31] 1 lock held by khungtaskd/31: [ 290.153250][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 290.163374][ T31] 4 locks held by kworker/u8:7/4302: [ 290.169698][ T31] 4 locks held by kworker/u8:8/5002: [ 290.175150][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 290.185255][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 290.196882][ T31] #2: ffff8880292a0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460 [ 290.207324][ T31] #3: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc3/0x330 [ 290.217735][ T31] 2 locks held by getty/5589: [ 290.223135][ T31] #0: ffff88814d7df0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 290.233798][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 290.244097][ T31] 1 lock held by udevd/5845: [ 290.248731][ T31] #0: ffff888024a16358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 290.258201][ T31] 2 locks held by syz-executor/7935: [ 290.263821][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.273232][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.282351][ T31] 2 locks held by syz.1.618/8014: [ 290.287384][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.295685][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.304823][ T31] 6 locks held by syz.4.620/8008: [ 290.309873][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.319867][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.329367][ T31] #2: ffff888024a1b998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 290.339857][ T31] #3: ffff8880249554f8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a4/0x6c0 [ 290.349528][ T31] #4: ffff888024954ea8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 290.361999][ T31] #5: ffff888024954ee0 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 290.376996][ T31] 2 locks held by syz.3.622/8021: [ 290.382197][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.390465][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.399663][ T31] 2 locks held by syz.2.625/8032: [ 290.404896][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.413231][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.422618][ T31] 2 locks held by syz.2.625/8033: [ 290.427681][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.437098][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.446484][ T31] 2 locks held by syz-executor/8041: [ 290.451878][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.460128][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.469236][ T31] 2 locks held by syz-executor/8043: [ 290.475834][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.484271][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.493349][ T31] 2 locks held by syz-executor/8058: [ 290.498667][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.507036][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.516193][ T31] 2 locks held by syz-executor/8067: [ 290.521614][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.529868][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.538931][ T31] 2 locks held by syz-executor/8076: [ 290.544396][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.552887][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.562031][ T31] 2 locks held by syz-executor/8085: [ 290.567336][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.577579][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.587121][ T31] 2 locks held by syz-executor/8094: [ 290.593914][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.602264][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.611389][ T31] 2 locks held by syz-executor/8103: [ 290.616686][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.625892][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.635528][ T31] 2 locks held by syz-executor/8112: [ 290.640946][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.649205][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.658443][ T31] 2 locks held by syz-executor/8121: [ 290.663821][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.672152][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.682569][ T31] 2 locks held by syz-executor/8130: [ 290.687949][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.696307][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.705946][ T31] 2 locks held by syz-executor/8139: [ 290.711717][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.719989][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.729113][ T31] 2 locks held by syz-executor/8148: [ 290.734551][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.742957][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.752129][ T31] 2 locks held by syz-executor/8157: [ 290.757448][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.765862][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 290.774985][ T31] [ 290.777335][ T31] ============================================= [ 290.777335][ T31] [ 290.786990][ T31] NMI backtrace for cpu 1 [ 290.787013][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 PREEMPT(full) [ 290.787040][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.787053][ T31] Call Trace: [ 290.787060][ T31] [ 290.787068][ T31] dump_stack_lvl+0x189/0x250 [ 290.787102][ T31] ? __wake_up_klogd+0xd9/0x110 [ 290.787129][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.787159][ T31] ? __pfx__printk+0x10/0x10 [ 290.787194][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 290.787219][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 290.787237][ T31] ? _printk+0xcf/0x120 [ 290.787262][ T31] ? __pfx__printk+0x10/0x10 [ 290.787285][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.787310][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 290.787335][ T31] watchdog+0xfee/0x1030 [ 290.787365][ T31] ? watchdog+0x1de/0x1030 [ 290.787402][ T31] kthread+0x711/0x8a0 [ 290.787430][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.787456][ T31] ? __pfx_kthread+0x10/0x10 [ 290.787482][ T31] ? __pfx_kthread+0x10/0x10 [ 290.787506][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.787528][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.787563][ T31] ? __pfx_kthread+0x10/0x10 [ 290.787587][ T31] ret_from_fork+0x4b/0x80 [ 290.787608][ T31] ? __pfx_kthread+0x10/0x10 [ 290.787633][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.787669][ T31] [ 290.787676][ T31] Sending NMI from CPU 1 to CPUs 0: [ 290.936892][ C0] NMI backtrace for cpu 0 [ 290.936910][ C0] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 PREEMPT(full) [ 290.936931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.936944][ C0] Workqueue: bat_events batadv_nc_worker [ 290.936968][ C0] RIP: 0010:check_preemption_disabled+0x5c/0x120 [ 290.936996][ C0] Code: 1e 1f 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 d1 b5 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 90 75 92 41 f6 47 2f [ 290.937012][ C0] RSP: 0018:ffffc90000be79e8 EFLAGS: 00000046 [ 290.937027][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000000 [ 290.937039][ C0] RDX: 0000000000000000 RSI: ffffffff8d9371c5 RDI: ffffffff8bc1d9a0 [ 290.937051][ C0] RBP: ffffffff8b244e42 R08: 0000000000000000 R09: 0000000000000000 [ 290.937062][ C0] R10: 0000000000000000 R11: ffffffff8b244e42 R12: 0000000000000002 [ 290.937073][ C0] R13: ffffffff8df3dce0 R14: 0000000000000000 R15: 0000000000000246 [ 290.937086][ C0] FS: 0000000000000000(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 290.937100][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.937112][ C0] CR2: 00007f8b23ee7d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 290.937128][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.937138][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.937149][ C0] Call Trace: [ 290.937156][ C0] [ 290.937166][ C0] ? batadv_nc_worker+0xd2/0x610 [ 290.937184][ C0] lock_acquire+0x130/0x360 [ 290.937213][ C0] ? batadv_nc_worker+0xd2/0x610 [ 290.937231][ C0] ? batadv_nc_worker+0xd2/0x610 [ 290.937249][ C0] batadv_nc_worker+0xef/0x610 [ 290.937266][ C0] ? batadv_nc_worker+0xd2/0x610 [ 290.937285][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 290.937303][ C0] process_scheduled_works+0xade/0x17a0 [ 290.937332][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.937369][ C0] worker_thread+0x8a0/0xda0 [ 290.937398][ C0] kthread+0x711/0x8a0 [ 290.937421][ C0] ? __pfx_worker_thread+0x10/0x10 [ 290.937437][ C0] ? __pfx_kthread+0x10/0x10 [ 290.937458][ C0] ? __pfx_kthread+0x10/0x10 [ 290.937491][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.937509][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.937529][ C0] ? __pfx_kthread+0x10/0x10 [ 290.937549][ C0] ret_from_fork+0x4b/0x80 [ 290.937566][ C0] ? __pfx_kthread+0x10/0x10 [ 290.937586][ C0] ret_from_fork_asm+0x1a/0x30 [ 290.937609][ C0] [ 290.938094][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 291.195157][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 PREEMPT(full) [ 291.207061][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.217130][ T31] Call Trace: [ 291.220421][ T31] [ 291.223360][ T31] dump_stack_lvl+0x99/0x250 [ 291.227970][ T31] ? __asan_memcpy+0x40/0x70 [ 291.232571][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.237789][ T31] ? __pfx__printk+0x10/0x10 [ 291.242398][ T31] panic+0x2db/0x790 [ 291.246324][ T31] ? __pfx_panic+0x10/0x10 [ 291.250753][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 291.256573][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 291.261958][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 291.268126][ T31] watchdog+0x102d/0x1030 [ 291.272485][ T31] ? watchdog+0x1de/0x1030 [ 291.276937][ T31] kthread+0x711/0x8a0 [ 291.281054][ T31] ? __pfx_watchdog+0x10/0x10 [ 291.285740][ T31] ? __pfx_kthread+0x10/0x10 [ 291.290344][ T31] ? __pfx_kthread+0x10/0x10 [ 291.294946][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.300158][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.305376][ T31] ? __pfx_kthread+0x10/0x10 [ 291.309984][ T31] ret_from_fork+0x4b/0x80 [ 291.314412][ T31] ? __pfx_kthread+0x10/0x10 [ 291.319016][ T31] ret_from_fork_asm+0x1a/0x30 [ 291.323800][ T31] [ 291.327124][ T31] Kernel Offset: disabled [ 291.331457][ T31] Rebooting in 86400 seconds..