last executing test programs: 32.423749054s ago: executing program 2 (id=964): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x120, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x38}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x4001}) socket$inet(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r5, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 31.500351303s ago: executing program 2 (id=970): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000400)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1a, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000004f0c00000000040058b8ea638116290000e400009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x40241, 0x0) (async) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x500}}], 0x2, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000a00)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x5}}}}, 0x3a) (async) close(0x3) 31.26056397s ago: executing program 4 (id=971): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x1000) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000000c0)={0x7, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000200)={0xffffffff, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}, {{0x2, 0x4e20, @local}}}, 0x108) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14, 0x80000) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', r3, 0x29, 0x7f, 0x4, 0x0, 0x6e, @mcast2, @local, 0x20, 0x8000, 0xffffff7f, 0x3}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002080)={&(0x7f0000000540)=@newtaction={0x1b10, 0x30, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{0x1afc, 0x1, [@m_police={0x185c, 0x1, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x9, 0x6, 0x6, 0x800, 0x9, 0x9d21, 0xe1, 0x87e1, 0x3bfa, 0x0, 0x806, 0x200, 0x218e, 0x5, 0x4, 0x4, 0x0, 0x2, 0x80000000, 0x5, 0x9, 0x492, 0x5, 0x6, 0x800, 0x0, 0x40, 0xfa85, 0xffff2283, 0x6, 0x800, 0x67, 0x4, 0x7, 0xe, 0x81, 0x3, 0x9, 0x5, 0x1ff, 0xfffffff0, 0x2811, 0x5, 0x3, 0x9, 0x2, 0x465, 0xff, 0x4, 0xfffffffe, 0x2, 0x81, 0x101, 0x2, 0x0, 0x6, 0x1, 0x7ff, 0x5, 0x5, 0x3ff, 0xb32c, 0xf05, 0x6255, 0x7, 0x6, 0x7, 0x0, 0x10, 0x8, 0x9, 0x8, 0x40e83a88, 0xd, 0x1, 0x2, 0x8, 0x4, 0x4, 0x2, 0x6, 0x68, 0x4, 0x0, 0x5, 0x5, 0x8, 0xaaa, 0x549, 0x910, 0x0, 0x1, 0x2, 0x6, 0x1, 0x4, 0x51, 0x6, 0x1, 0xa79, 0xc, 0xa, 0x7, 0xd, 0xa2, 0x569, 0xab3, 0x2, 0x1, 0x9, 0x8, 0x3, 0xc2, 0x8, 0x1, 0xb947, 0x7, 0x8000, 0xa6, 0x1, 0x8, 0x74, 0xb, 0x8, 0xffffcdbc, 0x8, 0xb9e, 0xf, 0xd, 0x3, 0xc8, 0xfffffffb, 0x1, 0x2, 0x9, 0x1, 0x10000000, 0x8, 0x2, 0xe75, 0x400, 0x3ff, 0x7, 0x5, 0xde, 0x5, 0x3, 0x8, 0x8, 0x8001, 0x2, 0xfffffff9, 0x33, 0x9, 0xffff, 0x9, 0x3, 0x8, 0x7, 0x6, 0x2, 0x1, 0x9, 0x3, 0x400, 0xffff3781, 0x0, 0x2, 0x3, 0x7, 0xc3, 0x6, 0x8f6, 0x40f878ce, 0x3, 0x2, 0x4, 0x5, 0x7, 0x68bf, 0x7, 0x8, 0x0, 0x2, 0x4, 0xa, 0x4, 0xd68, 0xffff7fff, 0x4e50, 0x2, 0xb, 0x2ab9, 0x4, 0xf32, 0xcb6, 0x2, 0x2, 0x2, 0x9, 0x2, 0x5, 0x54, 0x3, 0x4, 0x7fff, 0x2, 0x2, 0x3, 0xffffffff, 0x4, 0x1, 0x8, 0xf47, 0x1000, 0x4, 0x7, 0x4, 0x1, 0x51ad, 0x0, 0x1, 0x4, 0x5, 0x8, 0x3f, 0x7f, 0x5, 0x3, 0x5, 0x2, 0x2, 0x2, 0x7ff, 0x9, 0x269c, 0x7, 0xffffff15, 0x1, 0x3, 0x22d9, 0x8, 0x2, 0xff, 0x9, 0xfffff800, 0x0, 0x0, 0x10000, 0x2, 0x90c, 0x2, 0xdac, 0x7, 0x100]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xa, 0x9, 0x0, 0xffff, 0x7, 0x10, 0x3, 0x1c2, 0x5, 0x7, 0x9, 0x5a76, 0x1, 0x9, 0x0, 0x7f, 0x4, 0x6, 0x7, 0xce, 0x7f, 0x80000001, 0x4, 0x4, 0x4d, 0x4fe, 0x6, 0x10aa, 0x1, 0x9, 0x8, 0x5, 0x4, 0x1000, 0x7, 0x8000, 0x1000, 0xffff, 0xa, 0x2, 0xffff, 0x1, 0x6, 0x3, 0x5, 0x3320, 0x1, 0x7, 0x6, 0xfff, 0x7, 0x5, 0x7, 0x6, 0xfffffffd, 0x3, 0x4, 0x7fffffff, 0x3, 0xd4, 0x4, 0x5, 0x5, 0x15f2, 0x1ff, 0x3ff, 0x80, 0x7, 0x6, 0x2, 0x4, 0x9, 0x4e, 0x7, 0x3, 0x401, 0x4, 0xfffffffa, 0x3, 0x8, 0x9, 0x40, 0xeb2, 0xca5, 0x0, 0x4421727b, 0x0, 0xfffffffd, 0x4, 0x7fff, 0x873c, 0x4, 0x4, 0x4, 0x9bdd, 0xb, 0x2, 0x0, 0xfffff801, 0x9, 0x400, 0x1, 0x7, 0x9, 0x0, 0x4, 0x3, 0x7ff, 0x8, 0x8, 0xfffffff8, 0x5, 0xa13, 0x80000000, 0xe3, 0x7, 0x3, 0xf98, 0x8, 0x9, 0x4, 0x0, 0x80000001, 0xd, 0xb4f0, 0x0, 0x7, 0x7fffffff, 0x1, 0x1000, 0xab, 0x7fffffff, 0x0, 0x8, 0x24000000, 0x8, 0xfffffff7, 0x2, 0x7, 0x8, 0xe25, 0x7, 0x776d, 0x1ff, 0x6, 0x40, 0x0, 0x2d, 0x2, 0x800, 0x7f, 0x0, 0xc7, 0x7fffffff, 0x9, 0x4e4, 0x1, 0x0, 0x7, 0x6, 0x7f, 0x1, 0x2, 0x7, 0x5fc7, 0x7, 0x47, 0x5, 0x1, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x5, 0x6, 0x6, 0x1ff, 0xbd80, 0x7, 0x1, 0x2, 0xcd, 0x4, 0x4, 0xe, 0x9, 0x1, 0x2, 0x1, 0x8, 0xc35, 0x5, 0xea, 0x4, 0x20000000, 0x7, 0x5, 0x9, 0x1, 0x10000, 0x7f, 0x7, 0x2, 0x0, 0x4, 0x7, 0xa, 0xaf, 0x2, 0x6, 0x7, 0x401, 0x6000000, 0x0, 0x8, 0x40000000, 0xc, 0x800000, 0x3, 0x7, 0x17, 0x9, 0x7ba8, 0x401, 0x8001, 0x5, 0x8, 0x8, 0xee2a, 0x1000, 0x0, 0x8, 0x0, 0x3, 0xbdc, 0x2, 0x3, 0xd, 0x1, 0x2, 0x0, 0x7, 0x80000000, 0x7ff, 0x8, 0x4, 0x0, 0x2b1, 0xa, 0x2, 0x7, 0x3, 0x8, 0x3]}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_gact={0x144, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x161d, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18fb, 0x8}}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x158, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x0, 0x0, 0x10001}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x8, 0x8}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xc4c, 0xfffffffffffffff8, 0x2, 0x7ff}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x0, 0x2, 0x9}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0xc3b3, 0x8, 0x5, 0x3}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x0, 0x1, 0x2, 0x9}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4a7, 0x3, 0x2, 0x1000}, 0x72}}]}, {0x68, 0x6, "c50a01b826c42e6ff7ae0de3c49ee2089cc6b12d61dcecad7040bde4943c82c9c94c5f6586871fc9a1221de3af046f7d76125534bdb7e8f00509c518f72617316c45c859585e7f9b73b07adb936f98a14c8267d805d274f5b3c580eff4334ed951c660ab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}, 0x1b10}, 0x1, 0x0, 0x0, 0x24000040}, 0x44) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002100)={'pim6reg0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x1, 0x4, 0x200, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000002240), 0x8) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000002280)=0x80) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000022c0)={r5, 0x1, 0x6, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x248500, 0x0) write$tun(r8, &(0x7f0000002340)={@void, @void, @x25={0x2, 0x4, 0xf, "a09bb1e6b403312c376f56dd4b6b7a9cd9df36bef30a5ae23f826e281c6112f2e8bfb240ec48aeb3bd84a29b0457f840d3a20530bdd15bc7d94cf052168d6804f51ed130caea608e93f4542ffebbe31111e3e0bbf8310c1e0dfa53116999cc729fc788c7f2cdcfc5a3fc570a568f73eb9d55937ac8865a692af67f35739aa88d9b218b58a39e71884885141751d26261ab080d2c253ed414f36255b844b536c840b6905f23f03541763d089c6bd4e43c6a1399609b895d6cbff1099e3a87190a8e30d9c003a43cb5ac10c155bba285e9b87421"}}, 0xd6) sendmsg$inet6(r7, &(0x7f00000038c0)={&(0x7f0000002440)={0xa, 0x4e21, 0x43, @mcast1, 0x6}, 0x1c, &(0x7f0000003700)=[{&(0x7f0000002480)="e981e07a310ed7bf9bdec72a1d36781eb199928630c0a6dae59decfa176c3b23face598d3a8c4fdbf813eb356a7caaf24be7494887204379435e2e870c994ac849266dff7d2e73f09a8d5609dd369045517a9ecde04749", 0x57}, {&(0x7f0000002500)="bb7f7d642f05cda0a5e94ad61cdeab615ea1fa98017cd1b0e663e0b4d41c45a46e963913fe9ded7c8db0da13f290f7b064e4f1c339ff33b0dfd31c68ef64dd8815f6d9cd8825008672af13fc15ba59141c1973a2b9", 0x55}, {&(0x7f0000002580)="5ea0431c8ffbb1c17bf4b4d2d5dda79340a21d0383bd481fa7884653ed772ac431d4456203b0ba68b2074bb774bb0eedc0d40ed7543c9086d158f8e366cf1ad6ee56ca728e0b8b13f38e6c526f016f87bc4ee42e7fcac06e808213658db01b4b82d14e90ce3164f989fe52f017fd6d5a75cb5178d58ecece4ead3e237c1561e9dd3058b10c4775f88e1aab0f93604b01f539b1656981df4be4e8d03513d5fab674b7385bc1b6f1137d2ba50f3ab99719c6cb3738631c7cdd07a23380955c3c3df78234b651b9b88b981c9405f3e3bc541f0f7f42c6c6050457ae8382c1b15a711e29b5310b326499b594a2c21e00d980a132e9a9d1f35a", 0xf7}, {&(0x7f0000002680)="c1c42e16b8f5dba2aecfe027cc3df5d811a5afd803174a6f09dde9029a784a42e681a29a80a4ea4bf8ad766f5b9db32150cdad56a220436648df0b904cdbf30baaea28fd0494", 0x46}, {&(0x7f0000002700)="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", 0x1000}], 0x5, &(0x7f0000003780)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x1d, 0xa, '\x00', [@pad1, @pad1, @calipso={0x7, 0x48, {0x0, 0x10, 0x5, 0x1, [0x11cb, 0x9f3, 0x8, 0x0, 0xfffffffffffffff9, 0x101, 0x8, 0x3]}}, @enc_lim={0x4, 0x1, 0x6}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @flowinfo={{0x14}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x8, 0x7, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x3, 0x60, [0x98, 0x3, 0x2, 0x1, 0x6, 0x7]}}]}}}], 0x110}, 0x10) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000003900)={0xffffffff, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @local}}}, 0x108) ioctl$NILFS_IOCTL_GET_SUSTAT(r7, 0x80306e85, &(0x7f0000003a40)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r7) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x30, r9, 0x20, 0x70bd2d, 0x8, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xff}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x30}}, 0x8840) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000003c00), r7) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000003cc0)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x1c, r10, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0x8005) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000003d00), r11) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000003d80)={0x2, 0x2c, &(0x7f0000003d40)=[@in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000003dc0)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000003e00)=@sack_info={r12, 0x3, 0x7}, 0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000003e40)={r12, 0x36}, 0x8) 30.615989448s ago: executing program 4 (id=975): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x100000001, {{0xa, 0x0, 0x0, @mcast2, 0x7c}}}, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0xffff, @local, 0xff800000}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20048940) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x28, 0x18, 0x8, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x4, 0x400}, [@RTA_MULTIPATH={0xc, 0x9, {0x8d8, 0x27, 0x81, r4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000740)=""/179, 0xb3}], 0x7) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x6622586b, {{0xa, 0x0, 0x3a, @loopback, 0x9}}, {{0xa, 0x2, 0x400, @mcast2, 0x10000}}}, 0x108) 30.242869056s ago: executing program 2 (id=977): syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x31, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x23, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf, 0x0, @gue={{0x1, 0x1, 0x1, 0xc, 0x0, @void}, "e73897"}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x48}}, 0x0) unshare(0x20000400) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000240)=0x7b, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 29.519593763s ago: executing program 0 (id=979): r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000380)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) write(r3, &(0x7f0000000380)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r6) (async) close(r6) close(r4) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r7, &(0x7f0000000480)=0x2, 0x12) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x3) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x3) connect$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000000180)={r8, &(0x7f0000000000)='@$\\\'\x00', 0x0, &(0x7f0000000040)={@align=0x81, {0x8ce, 0x400, 0x0, 0x8}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}) 29.257480929s ago: executing program 4 (id=980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x58}}, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0xa04, 0x409}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x24008844) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf2514feffffff001c00", @ANYRES32=0x0, @ANYBLOB="0800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000740)={'syzkaller1\x00', 0xc201}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000780)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r10, &(0x7f0000000a00)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast}}}, 0x22) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@ipv4_newrule={0x4c, 0x20, 0x800, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x5, 0xa, 0x0, 0x0, 0x3, 0x1001a}, [@FRA_FLOW={0x8, 0xb, 0x5}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syz_tun\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xf}]}, 0x4c}}, 0x8000) 28.708185701s ago: executing program 2 (id=982): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x370, 0x280, 0x1b0, 0x280, 0x280, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010101, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x7, 0x8, 0xdb1, 0x3, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1, 0x0, &(0x7f0000000a40)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000000f56314f75a"], 0x2c) sendmsg$nl_route(r0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x1005, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}}, 0x24008850) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb000006000000080045c8003c006400007f2990780a010101e000000128afdea0cbfe7114878929d3fe4e3179c0cf335b939370f8401e8c8469283a9952366f3d77b16ea2"], 0x0) 22.246640119s ago: executing program 0 (id=984): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x10, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000cc0)='GPL\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x10, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000cc0)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000d40)=r1, 0x4) (async) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000d40)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000d80)={r2, r0, 0x4}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000d80)={r2, r0, 0x4}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000380)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0xf, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {@dev={0xac, 0x14, 0x14, 0x4}}, {@private, 0x8000}]}]}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4065, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @multicast1}, {{0x0, 0x4e22, r3, r3, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x0, 0xfffffffb) syz_emit_ethernet(0x18a, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x0, 0x1, 0x17c, 0x64, 0x0, 0x8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, {[@lsrr={0x83, 0xf, 0xd3, [@multicast2, @empty, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x83, 0x12, "2a902bbb95c19078b19dbfb06c348d20"}, @ssrr={0x89, 0x7, 0x5c, [@local]}, @generic={0x7, 0xf, "24c70accfca3d58d17723db0ad"}]}}, {{0x4e24, 0x4e23, r3, r5, 0x1, 0x0, 0x11, 0x1, 0x4, 0x0, 0x6, {[@mptcp=@capable={0x1e, 0x14, 0x4, 0x8, 0x5, 0xf4c, [0x9]}, @sack={0x5, 0x16, [0x8, 0x3, 0x7, 0x101, 0x6]}, @mss={0x2, 0x4, 0xfff}, @sack_perm={0x4, 0x2}]}}, {"7ecb95190b7789226b76e0271e20f56f3e7f6eaad08e39c56db816c42a8134e5a5c8aacd2351c6ee648ee2b9b639fb71ef208ace473de0b4e9fe56251cb8f5e90c99ac48f7c772f268addcc16500e940e566da38ad2fcb33de54ce027c6037980536747cd7bf08afe92e2f3caf00a6b81a85143537afeb36b02a072c7275d172132049ab121c4f4d5db891e46109221d6b5e1cf4d8d79b251e0bef8b1817b012e0713bba765acc7849638cb465fc16ed82936433961d2ccd80062cd9f978d495f4b74b9506a1746c853029a2f1d7e5474e826b4dd7324da30656762b956d46770cefd79a4f7bf40e"}}}}}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000e40)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000e40)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f3, &(0x7f0000000e80)) sendmsg(r4, &(0x7f0000000b80)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x8, @remote, 0x4, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)="aa99e93a4be625f0f5cbc688520ba1022d0cd7362b2f7d4fad16401ac933e448b127f4993d33e85065d580a178519c5b0b4881f70c3226641d567a875a14b5fe8b484df15c1faf074445d02464e867f9be7e279d6ccd1f82ffae47d73a4ec5cac69017dbc17ed37fce403f888f206f40ee2a8ba549aa0957ba9997e04949750d02ed3b4290081add7e9cd693005157ef7e026b565437c69db9738a5ece4e2f7bbfe36f87982e3ba66627fe958a4c2351dbaa269665095f67242f1d557093ec2671088264708a9d08863f04aaacdc6846f533012f3e8f2f5ab0c9b180f108ab7de7d40f6ff6f9fc1c34f1dbe2b7f22a61d2c7fc59a06534fb78", 0xf9}, {&(0x7f0000000580)="d1d78c25c07a4bccc03d9bf279c7d6bd3049741d57c9bd6b2633e03c4ba8c25b870192c957b57b4f175e0f2f776825bb05425f803266d6b70325b2b4e57ee1f72b9bbc133c3366a1ec7b71a5d2c82708c11f816d145072cf2541c477b2126922ea534df5db78356198debc3f0dcef6", 0x6f}, {&(0x7f0000000600)="37c421ecacd0d0ab8a6d2b173707fa82881d1cb0908c8f8a8f6f31f247c7ab7d28cadb05699b79290d5051fb74959baf3b851fbab16bfc0d524bb1eeaa3a4905ff5a83ec55e4590a415cf012391be5d8aadbe3bf0b2fb98374bd831808f5f095b1f715fd219a14836b0f4341b55e772425ccd3a999fe462c11c3bfe45fcfacbf88b1a9c0ce87438ceeb368c9f87c5623775a8b74b9d33fe8b3b667c55f1bbd74dde39bec0fb812374a8bca141651b23e895d8f6057838a1af6c09bdf92f20232ef36b52d6e0ae8825ae9035880a9d5798253231726760e12345a64fdbfaa6ce2cd2f9522183aa011aac39acc365a", 0xee}, {&(0x7f0000000700)="2b07fe8abdb54a31ba43789bbb2d8c557a01b2ae6091152d6a", 0x19}, {&(0x7f0000000740)="c0b89b37e9eb1686ea04b9fcef43acb9b05897de94659ea79cbeb6eeadc6ac7aa1db607bb41229f6c5bb29315196221fd87e02a9fa0446581d381c8f52faf9c5e5880ed0c6ea9bc717622d8a109c2f9bc93b541998066f6554dac2da2f571bf9523f66a3b4e4513fb2a22f60e9ab19d4b6b0ce14a4cf3e00ee350cc9cb3649422e1ddc3a4794184766b67f3355da675f83c879755205b10b1edd9f4fd7e6841bd0aea99b4feb1e508043b040d1cbcebfc22d1a857e90908f9612b975a6894d5f83faadafd60bc49c6504e49f8edbdf3a389cffdb541b1f70c7db420dade24d6d9181f9088da9e0eed8", 0xe9}, {&(0x7f0000000840)="248a718a", 0x4}, {&(0x7f0000000880)="1970f4c469b1f096877d6205d422bdc055ad2f7d02c6bea045a4d37c0aee02171c694fc1ce8a10b66ee26e24a4e44b14aa1ac7cc409418305cc075eeb53bc15cce9004", 0x43}, {&(0x7f0000000900)="0780a0e363ff440a2bcbf7857239a8f0fcf55c9d20f07e7dd3c0d2f2", 0x1c}, {&(0x7f0000000940)="98c2ed9ab528d437954cc472364896fbf5de69320c229fe2a4cf67307eb94eedb9dbaf7fb2e51faf6f66eb54335e80aafdfb87587bb9e0838b331c36be33eafca170f8db23681482445b7255591210e1c4a2525cd3f0ef7a0c6560a0b14d0db86503aec08312812d37e653", 0x6b}], 0x9, &(0x7f0000000a80)=[{0x30, 0x10a, 0x7, "0c42825e5896d94cdff1f3980757d35c915b135a66c9d4f3afaf8ff9"}, {0x20, 0x10d, 0x0, "c2c8cf39a1c33ca52da1a9d04c47f3cb"}, {0xb0, 0x10f, 0x5f3, "88eb48188949fc5325e068856b3f807638dc9c4410d2df2ecf11c618443f3de006e0a5c3f3f78dab488437da88d58e8e41af66393ae45cfebb72978145f937219939062960b3ec09b137180aa9be0839816f52bfdddd62e1848f2d2b58d8d4f033b9abcd16f9b89c40be054b1b42a8b014a9e20d0116d405f82e720fe6587ab79ee3198ad953757fc50c9a03e22159fb015ecffa08775303ddbe99740b5b"}], 0x100}, 0x4048014) 21.977514714s ago: executing program 1 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="00008259a7b4ffe90648723485fa10aa92"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000005c0)={0x1f, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000640)=ANY=[@ANYRES64=r6], 0x25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010000000000000000000a000000000000000000000014000500fe80000000000000400000000000000010e4c02de84adadce91f4bfc9a2d4864e9aa54f43472dbbac7aebd065968878e2a630e2ac585c035940066d5dfd3fab2ba82c04485c535a0e1694ba98c7986fbcf993700de757ac514e4e02d86c20297ad28a7b4d45a3d6fd6b5e0555eca7dfd8e113658a027b93ce50a720dcbfc0e8241903e5a5f4ea3bd749afb5505000000667d15004353b57830475661bbd6eb54dd2dc3d13640b9a1bfbbdee635c49f6b341163a8258553fa3017861d889845edcb39d6a8f3e050fd24b25fd039fe3caaa2477f919a9c0b6252d489801f11fe48d4ab5116a479e9610f535ec59ef339a626ee76e452c620deb3d4cdae7a153bd0431889f740aeda06975411d129f70d6d6811ee6244da58660bb7b506f2ac54f01b"], 0x30}}, 0x0) 21.898712501s ago: executing program 2 (id=987): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000007c8000000000000018000000fdffffff0000000000000000950000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0100", 0x4d, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x4d, 0x0, @opaque="1a853f057d9c1006f9fb39ca87a3aa7b1fe08ff6394be4ed89d6ed192091bd632917a41f24edb56e3468d8f90eeef46cb2c3926f2e16c4659346780b6894cb8efcc5305595"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000005087692235016ecc131af5c101000000800000009884685a7a0f7b1951a8838a9ffc09daf601aff9cf18000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001b40)={@fallback=r2, r2, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b80)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00\x00\x00\x00 '], 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 21.720517157s ago: executing program 3 (id=988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x2005) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) connect$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0xffffffff}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x18, 0x200, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700200100000000000000000000000000020400120008000100", @ANYRES32=r4, @ANYBLOB], 0x6c}}, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc) 21.418595153s ago: executing program 4 (id=989): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmmsg(r7, &(0x7f00000006c0), 0x40000000000009f, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r10, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x20028011) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@updpolicy={0x13c, 0x19, 0x1, 0x2, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x5}]}]}, 0x13c}}, 0x20000000) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 21.326989714s ago: executing program 0 (id=990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002100)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000e80)={0x122c, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NODE={0x1054, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "bde118e9bf5df7ffcef6b4665051d124301a4955eac120b4c1b84c6a41ac2808"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "1aff8b4ce7deb2093087c41470d8bab6e16492dec8eadcd813d46a404a768a81afec339012fb25cbfc73da7dad14ae4c406a685e3b2a6123497d70194b882b5b7dadd9b68fb145a7c9c12af36245d9a7ef449f4d759ac79809aedfba64d901a08807f9018dd7ae654f04c46fb98506de925d90d98b8db9766d4c7eb6cf62bb76fa974a8892f1ae9c7366cc985122daf1d20f2169414e89f55f04c270bc05885b01b492b2eea946fcb9844e985ea914968019b4cba74a7d6866e6b3fcf5991043fe47bf8e371c22c4698098abc843f7535f6938589076c2fc6b35c0c457138e36960522112b9aeff8d66e8883e149d1905b60ce496f2c6852da61765babcf49a663c06cae97bb73d2b3c4fca8617397528880f6ef80ea4fd7b111a910a0be98a90c410d510616e2f55c1276f404ea0f28ae46ae3471c9e9f25c48027eb3cefad9954a376013bf49895137bc050696422f00a553ab26f732b094883e37eaaf8773ca4068673711380705b0d956d1e618ae424d632df5893aa15dc2c286bc11534af9f9a0b1bf792a49d375c720041997a4020d6057572d09bc0a9ce24bd3502cab365fd3a3f003a3200141ae82f30e58cffeb435ed5a29890b0e626f05fd06317fbd9c7bbec60d62772801244c61b60e207fa43ffca5d4bcc78c284c39698b095eef90d1e1658852fb984b1408679dce5bcda4af571d6b1c37e302161da32fd8ab3c56f43c8232c2398cc2205b685510e7e0505508be2ce7bcc47b0aa50dfbb7d1998889f1726401c028051e1d40bbced992b2da80452a1513f319f38eddc44806277c3d639ac21aba178d634cd49e8f1a8d560383cb546c72929b5a5ba259af5c2e8bf13a8ad8006338599cae10a56568d75c1e315213e94bdc70f123cc5c67c89b76dd75291a5537143740709a6a5d93b46258dbdc209c74c7438f13a92f751452dbc3f0089dd5d27e358f4490acf71cefd5ac493db79baccee0fb135bf5afe0d6f7b6c3c4098fd90fd3d1298b03e5c4dc4e76074c7f84cfc3a6b7f3af1c2d09b7c92cd2ee5470302d58c19d5b447cdc6d11f91230ef7db2ff5abcd00eeff9cf0f60569e006368d5bb329b74c6b7c558c4f0229c87009b291f40bf15f579980e2ea0df8d24e1f0513c5d27d3e8054f163bd1e0196735616df5e8c97631cff265deb4c3061a3423eb827b9dd5d7ae55a367f6c5ac900315f51c8de80e1b1d44f3dbfa049a3e3e271f368e44bbcf39ab38dd247b7224d9afb274e2693d6da84e72aae5ae24473409465d5265f60ddc84160e4aaa4e3f120db17f17b6f43f9543f2deecc36b9b25aaeeab834996aaeb5e75baa587e9e73a4e6a5abc6d7af4181fc25c573de35a75bfa05da837cdf973a3f12d3a25ab4dffaaec9cd2598d3ade4edfbe7d00358076c957458bc7bc0c46c1301618208400f7117bcc10a494ee88efb33b41b4ea15d30f7ff3aeddb0df66bff784454db1c88a6f76382b37987bf83683f540afe8a9e977c32a448d21cb039917b36e9c8462e1a97c7a8896905ff2633ea60db346a2ba30f9b90af13014002abf098e0ce172366b07ee98984004af5991fa5c3248df523ca1b73ce950642c0524443102c3c626faec9b413451b6870b45c06615edd6269ad7b89200aaf83c82e0258565f34f5d48fd5f51e142bb55e3ac934cad45105acd243ee3638b92cfafd149e1708ebf07983d8905dfebf059488d00ace011c2e89d86c3f76b7d1f5a80f71f7b888ff744c19b114ecc0429613b3f680aaf4fc5a337bf24dc43f4f8987203411658dc561ceb919ad59e70ec815b130cda082921d5c98fb15c553541e6a4de89e88af1a1b180de60efc138a58e4696ef3a0912bb57637f490954c39c61bd13d16b47fb682db83b6ae2383c3df90c51e1df408bd9d212d7d53b26f1d4dccfd14fa020e435206c2f5476daff200dcf3a1f602d0d45da0c2739890d5ff8ca081e821cf8b9487b7b5ce27751decafd3a34c523be26a5b6783749c2151d56059d4716a0807d22379490bf81093179eaa16195e98c80277349cb79fd26b8f110f94aa259f93d48254fe9b227f17fa8d7c28bcb4e7cafcce726cfcccdc0af259c9126b27b1e05eb719b12692c35d9266ecd2bddcd9fd0c4018a1eee7645dae1ae774a891259ee62d355b7d6dbd082893c8b51ef0481f402010b9614e46c485c4af716b993c4f0646f3f244c1ed6494d60a80135c6cbe5676152dd8797bdbbab488073d015e5571166430051a3978fa1ea407b90d1a1c7713285fec6319e4583ff29236902634082ea4edee77ad01479c38f0b12038a36b7459f60dd3126ba65df05547f6d12f597b4514452712189582f4dfe5e3104a2a2c03ea5a16f981de16314eda261a820084e33f2bfdf527410b9444454cae6223852314e9ab1b21d31a4aaaaf0a2cafeb7937a3764113d2b684ba2f3a7d5a1d89085c707259b7856abaefc07bccd1243d6c7d3c111001f773630e1518cc769f52c854853a569d62d15a84ff2b043c0ef2e0dffea70cfb90030c45a0a9737586a4930f8949a3a666351390dd433609241fb9b3e949bf4cf5ca2a4d8f7c29aa586d802f6021cb79bf6a3ce58c77dbe56c32928fd632c539ce71ce788e87e7f65abfa492568dd9497902814ee8191e9aef7e45cc320d465a18ac7df1235fe722b85164b7aff3b3caf11fa1ea118f39df52ce73824ff509f6acb48ac75f58e887fcd4cfb339b4ea734bdea15431e6aa62c6dd05bfba887daacd616eeb5f5cde3ec81f31a25092de6d02750e08b93e574ae1c42a48286c475b0d22a01deca0a1daf0fd8c4bab4c0727136f571692510a08eea530be2a97e77794253e6e2c12a7bf4b7fa4eff1c84261d757dd478f8f20d458b2dc11608d4ae9b5018b60ae5db3dc4e86277d878e79688aa11290ffd639075a0909819aabb8cb90e3a14c4d823af0f5f29226a0a625ca3f5f834cb8a73e09f91f773145f2f5190c26470f935941c8f1bc5b446ebda712d7d95943211fbd76ec87f5000fc43ae1720ccb365de8613ddb0f8eff3d80440aefdd5bef5cbc9c36290f4556fc61d1286fd72a220d7dfbf835c8d3915ab960d5b1514c920460a74e0913390fc853ee636d6a82a90d3f00b6e9e9f565ac2d9261f30d540121ef731246f6c41f90c83fefa4aeae0eb9d9770aa6661e2055fb8eb2f16b22f565d371d1247c329090c25e2fbc966436fc756154231aa92b0831916955ba668d48523d29cfd062d40bffcd69b2e2fc119ccc2d9307dde5e0fb0b986cbcdf4c261fa87a53b7b7bddae3c8925c2f1f5b41db6d205690525579f3f4534e265bc361b81a635f3e527fce47c0a81d4da26da865852ddd6cc1740c6b9c9067ea66ab463aa78550cbd28c49eb6bb93715e41f09ec9485341b8f877e49a36a9116859da88983e1855d84c37848fccd49d50a2adb6b7656f493b92eb588c7eb9082acbca6a9d963583ac848b9c42ff32f478fd9cb19ec57020dbda59f8d91ad5765eea96ac22bc9f0353fb63762e287bb0e610e775109123b63abae6413449330ff4688cf8df3b8d9d919e85e155ff22b678c22724e4e6b7ea5f43f6c458b3599fe6dea961d96e8382138da53b385ec5edac4a5b5ea26810548f172b366ea5cdfdec0eba55fe4170f5732261e5d4266959f6cfd28c6c1737b5144035916faefb5cb8625fd92d5661efbc1008011db6bf76364b9ff745fc9beded34261968a328f751ae9ed278659869038d2d489b686456975d74993ee73c3d6f34003c864d433e838850ed0259bdf3d25011229f26efb84b7d1eb2ab484e787efbb741e7eb70c996846d382a98050041aea74a87dd0f7b6d9bc5fffeba25514861cb7677b32db08a0c2fadad763438a02bda553b8731f643114f7532359a50fc43ee3b7a6ed67886a505b33ed3f3b3ab8f2aad5e47d03081978864d79fbee92bcbb43178625a38cb42e26d2f59c6491def3f7c023eea2f48106f7c52e5dc222269e768155e7df5c2ec5c7a56d38c7fc1d11138ba6c9f17e8ccf958ed6eecd7565527c09ebf56800b262530c4892a7f783e4a42b651aac4c2fbd22730429992994fc18c1a344c1b1d9e20241b189898f31a74e5163e3f562713c76b9451951647629dde022234324b59be6f21e323b8b84ce33dc6ac10343437a506bf07c2c31929ef5167d309547482989f59e13b339f7bdf334c68bf4bef700ac58a076fd117827560138e5cb5e621fe707853c6e2790d0082310a258bf17aabf8f600b8ec31170f758be4989a4f1d9ae8b34b8b729c33c77d084e0c271b345bbd19ad1d2f4596e8b62b184ffafc4b0125fa0d226b6eb668f630ab57d23567f48133a07aa22476e71896d8b5481adfbd9139f2e82f1d85e01690900f6405aa616d0b7989c63aa7124582ed7c948075c5d9947a0c7e75dc367dc0c076ce42334a0a167c7489c26f02a2f510f190a36c5cab95b4c5ac203f8af9eadf22f86579fcc28c2b6d28b01f51e28be33c2b65e268c6ac05470938a94871046b7b2a011de62b86589937f9eede52ecc108c8979310d35d20f67fd3222a0d08274a3fa0147ade9cf5cf2867c69547d6756011f98d42832b2270725f45ca11c978e5f3125bbb3c57b59035177a4986d07549a8134267ad52b4f48a3d4339af9c7b9ce4176ed0453101c3096e5375ae697917a2ab886c85561fae5fddede170943a93bd95c24b00df1f5f6bcc392cdfa95d5be1de6515a1f768d91acdffcc22a0c7cef85a6a54efc6d342e4720cc15a85660996090b5ea040ff2d35566455718c521dfd2c08d99d7852643749290eaedf1af9411025a17a64ddc6927802eb05e1df4039a112e8af9071d6e71607a79f5867d5e5e4c1f3529519aa2efac1570b4f2afb25f85e3a563598dc9d5e606ae6315aec8650274dabb5b0d81275433094a49686cac369ba4115f6b390ce95ae4542544268ddc03895f7358ec243dcacab8615cc8724c1f8d6d5c139b8d5fc23cd33fdaa304dd1cadc207b6e4981fab81032e0aa7ddfb94827b514770eb42d94a183a5d01167af0d29276d3563854d86c21729c40712b64ef78cc5f1c5e1534df5fef0f079df9432c453a602d978cdbc5eeacfe94c5b8a5e0ca1b0550a32dd74580738611e15f453073b5146de183a8ac9a9918e24ca65c9774e5e2e73cb3f1b8189dc4d1a492e2ed3ab9bbdd2edb11f3e5937ec2fa904a7d41ade7fea085f1a82de96285a185ea322a179a0f36df61e383068ccdb8f462effcc1fe0e5d60d07d9f8cbbf7b9abe38ced04116527a94de2aa6a7292fba9b316428293a9a8278e626a59527293620154ff5dba3d3d0598f9825654ca7e1da82c4c1645d3ee195bf378fc24131698d87a4dc1cca72611d6e2739af28ac4e33fd5035b9b36738604da4d13ba84111f08ca648ac944b30df3b9cc9cee47025e28da91ff6969d2a1a955d37773bbe94543a791afd38500aac65176de3e302d49ad08a7ae4db1953c2548cd43377fc8fc338b0c0963a934d6c8c10d3a31d788ce63a8409ff5bb4328de8f443c1333aad37ea1f97fdbd0c60acafafbc1d9ae3dc952e0ef30a068a0c1a90c99cb418cb94bea69f3df3f94ce9d582ba49ac8f83c56c4e69f5e35d13002e51a39f39fed5e6eee76ffef954364a2c7e942c16c9ec84745bb02135785f7b8843be449fe83a545b159542eebbb29d6d7ec706e6cec93b1fcfa6c1cbc2b9db77f9e700fa4a3069d42d17de6c93580039a00e628ae83990a4e3bd3db8ba28d3cb039f82253679d39cdfb2010dcb29ab68f4f13b57056cabcb31a29c"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff2d3d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec0c}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb51}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x122c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x200000}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r6, 0x64e89, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x200088c2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.260532652s ago: executing program 1 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000000240)='GPL\x00', 0x8, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="1400030076657468315f746f5fb0e7e13ed58465"], 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d3009"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) 21.25992837s ago: executing program 2 (id=992): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200020000000000000008000100000000000c000400"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000440)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f00000004c0), 0x4) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xf) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000c40)) clock_gettime(0xffefff1f, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x244, r11, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xd06}, {0xc, 0x90, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xffffffffffffff81}, {0xc, 0x90, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x40fc7e}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xb15ea2fe15b8f9a8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r10) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x34, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x6, 0x9d, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x1, 0xef}}]}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f0000000b40)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r12, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000600", @ANYRES16=r13, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08004d0100000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) socket$kcm(0x10, 0x2, 0x0) 21.209399164s ago: executing program 3 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x114, 0x30, 0x1, 0x0, 0x0, {}, [{0x100, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0xd0, 0x3fff, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x17}]}, {0x92, 0x6, "8e6cdbb152d9becb62f2cb88840c14874ebc0e6a8264044f3501e6c3fc3c11efd4ab3cfe91602593e6b3075bd640242649b7ff8ef404d76d87af94e5f24c86a325e7c1ed27716faf930b8b5f3f3f62097cc44a2a907ee9ef1eef65953c6f6c33469835ce085da724ed288c2bc2e9cdb13928a9fad7d74f34205b53b6402bf64d21df793ae03877ea1d8ee8ed92c4"}, {0xc}, {0xc}}}]}]}, 0x114}}, 0x0) 20.800521517s ago: executing program 1 (id=994): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000100), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff03, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390f56000000fbdb5f02b1bf8d9b2900"/31, @ANYRES32=0x0, @ANYBLOB="1198040051d801001800128008000100736974000c0002800600100007000000"], 0x38}}, 0x0) 20.462637659s ago: executing program 3 (id=995): r0 = socket(0x1e, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010"], 0x78}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r1, &(0x7f0000000500)}, 0x20) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000240)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000280), &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0xb6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a656374000014000280080001400000000205000200fdff000008000b40000000000900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 20.145337278s ago: executing program 0 (id=996): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000000c0), 0x800001d, 0x300) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000140), 0x291962b, 0x45833af92e4b39ff, 0x0) socket(0x400000000010, 0x3, 0x0) 20.123357037s ago: executing program 4 (id=997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x20, 0x0, 0x0, {}, [@NDTA_NAME={0x65, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) 20.07220445s ago: executing program 1 (id=998): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xa0}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x2196, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc6, &(0x7f0000000080)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 19.744056215s ago: executing program 3 (id=999): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000300), &(0x7f0000000340)=@udp=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095", @ANYRES16=r2, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESOCT=r1], &(0x7f0000000500)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600), 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 19.661663341s ago: executing program 4 (id=1000): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x37c3faf85371aca0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0xfff, "468d97"}, 0x6) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x54) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000440)={{r1, &(0x7f0000000280)='wg0\x00', 0x80200, &(0x7f00000002c0)={@align=0x9, {0x8, 0x0, 0x400, 0x200}}, 0x7f, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x7}, {[0x5d6, 0x5, 0x3ff, 0x10001]}, 0x6, 0xa0, &(0x7f0000000380)=""/160}) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000004c0)=""/201, &(0x7f00000005c0)=0xc9) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9d82, 0x3, 0x10000, 0x3000, r3, 0xc, '\x00', r2, r3, 0x1, 0x4, 0x0, 0x6}, 0x50) r4 = accept4$x25(r3, &(0x7f0000000680), &(0x7f00000006c0)=0x12, 0x80000) connect$x25(r4, &(0x7f0000000700)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000740)={0x200, 0x5, 0x1, 0xa, 0x1, 0x18, 0x3, "c703b36f8e01ca9498f5b0d95f6431141370adb6", "2bd93de894e9af373418a14a9cbdecf7858f5cf1"}) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000780)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r5, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10, 0x28}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c845}, 0x20000080) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r5, 0x202, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe6ece6457ac2f9209343489876b3bc19691c5912dbe6edb"}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x8880) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'syztnl2\x00', r2, 0x29, 0xcb, 0x5, 0x929a, 0x1, @private0, @empty, 0x80, 0x40, 0x1, 0xa}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', r2, 0x29, 0x2, 0x9, 0xfffffffd, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x700, 0x4, 0x80}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d00)={0x0, @initdev, @broadcast}, &(0x7f0000000d40)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000dc0)={'gre0\x00', r2, 0x8000, 0x1, 0x4446, 0x4, {{0x40, 0x4, 0x3, 0x8, 0x100, 0x67, 0x0, 0x9, 0x29, 0x0, @local, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x8d, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0x18, 0x1, 0xb, [{@empty}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0x9}, {@local, 0xffffffff}, {@rand_addr=0x64010102, 0x6}]}, @ra={0x94, 0x4, 0x8}, @timestamp_prespec={0x44, 0x14, 0x66, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010102, 0x7}]}, @cipso={0x86, 0x28, 0x3, [{0x1, 0x4, "a643"}, {0x0, 0xb, "fefb03482946fee097"}, {0x5, 0x8, "6dc13e8a95b9"}, {0x2, 0xb, "41919a2d8af2503c31"}]}, @cipso={0x86, 0x53, 0x3, [{0x1, 0x3, "a6"}, {0x7, 0xf, "8e72eff2255a284209ea156123"}, {0x5, 0x11, "0f8b90243653eb7532591afc6cba26"}, {0x984107d6bead1038, 0x10, "d34d5c5774f106832ce7f5da1eea"}, {0x7, 0xf, "4baafca7f3376eabd78cd03f03"}, {0x0, 0xb, "932fc8b785eb9d97a7"}]}, @noop, @ssrr={0x89, 0xf, 0xa7, [@local, @remote, @rand_addr=0x64010100]}, @rr={0x7, 0xf, 0x2a, [@private=0xa010100, @multicast2, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000fc0)={@rand_addr, 0x0}, &(0x7f0000001000)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000011c0)={0x96c, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x376, 0xf7, 0x8, 0x3}, {0xf, 0x7, 0xaf, 0xf}, {0x9, 0x1, 0x6, 0xc}, {0x8, 0x2, 0x3, 0x3}, {0x6, 0x80, 0x7, 0x24}, {0x1, 0x1, 0x6, 0xf}, {0x8, 0xca, 0x1, 0x1ff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}, {{0x8, 0x1, r13}, {0x4}}, {{0x8, 0x1, r14}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}, {{0x8, 0x1, r15}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r16}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}]}, 0x96c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 19.363755801s ago: executing program 1 (id=1001): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) listen(r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='Fcpu'], 0x5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 19.217173356s ago: executing program 3 (id=1002): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) unshare(0x4000400) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'tunl0\x00', &(0x7f0000000e80)={'gre0\x00', 0x0, 0x8, 0x40, 0x6, 0x5, {{0x16, 0x4, 0x1, 0x3, 0x58, 0x67, 0x0, 0x5, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0x2d, [@rand_addr=0x64010101, @multicast2, @broadcast, @private=0xa010100, @private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0x74, 0x3, 0x1, [{@loopback, 0xfffff801}, {@loopback, 0x40}, {@broadcast, 0xfff}, {@broadcast, 0x1999}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}]}}}}}) sendto$packet(r0, &(0x7f0000000500)="f2be6984560714c03231a1ce97e832985948c4ca61a7a9494d267c74c8c1649954abc03cb6318636ec88e62ea7708ce5701cb42ff790033c397f", 0x3a, 0x20000030, &(0x7f0000000dc0)={0x11, 0x16, r2, 0x1, 0xc, 0x6, @remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c00000020000103000000000000000002000004000000011f0000e400877908f5b1eed05986de3b3944b9f4647880a3e618b7bde8752bfe1b4de0c999144454de5b5b7c5eefc199e62308627a5d0a8dea0b000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000001c0)={@local, @broadcast}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) socket$unix(0x1, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000cc0)=[{{&(0x7f00000009c0)=@caif=@dbg, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/43, 0x2b}, {&(0x7f0000000a80)=""/64, 0x40}, {&(0x7f0000000ac0)=""/240, 0xf0}, {&(0x7f0000000bc0)=""/159, 0x9f}], 0x4}, 0x10001}], 0x1, 0x100c2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@ipv4_newaddr={0x84, 0x14, 0x200, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x5, 0xfe, r7}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x0, 0x0, 0x4}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0xa33, 0x2, 0x36}}, @IFA_LABEL={0x14, 0x3, 'ip6erspan0\x00'}, @IFA_ADDRESS={0x8, 0x1, @private=0xbe}]}, 0x84}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB="702f3f78f3aa673d8048e412982787ad28b25cbdfd2601e57f6fe82662ebb38d77dccbaf46e756c04e0d188d9c76948fad8a0f9b78e8540f233f4d2500dbfc31364e98b4e99c426b000000000000958ea70af1ea8ac98938a4a35b35b8a69a5142f8864e0162000000000000"], 0x38}}, 0x10) 18.499848238s ago: executing program 1 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000580)=""/249, 0x46, 0xf9, 0x6}, 0x28) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000006c0)={0x0, 0x0, 0x3}, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000e9ffffffffffffff000004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$int_in(r4, 0x5421, &(0x7f0000000680)=0x5) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000044000480400001800e000100627974656f726465720000002c000280080004400000006d080001400000000e0800034000000065080002400000000e080005"], 0x98}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) 17.700001167s ago: executing program 3 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001000)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000001040)={&(0x7f0000001080), 0x10, 0x0}, 0x0) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="78e6add5", @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf25860000000c009900000000001e0000000800a00002000000080022011b0200000800270003000000080026006c090000080022014e0200000800a00001040000080026008c1400000800a000000000000800220122000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x400c808) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYBLOB="60040000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="2c02028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000059fc040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000008000100", @ANYRES32=0x0, @ANYBLOB="b000028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000400003c00010024000100757365725f6c696e6b75705f656e61626c6564000000a231aa188b4a9a248b026452156c416a00"/116, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRESHEX=0x0, @ANYBLOB="8400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004006200000008000600", @ANYRES64=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000e0027fbbc720baa968056985da3fc35fb9d54f0df97ab772364d9", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cd0f000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x460}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008081) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000000840)={0x1d, r11}, 0x10) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x7f, 0x1, 0x8, @mcast2, @local, 0x7, 0x7, 0x2, 0xc}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r2, 0x58, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)={0x1ec, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x3b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0xfffffffffffffdfb}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) 16.237499719s ago: executing program 0 (id=1005): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16.034564993s ago: executing program 0 (id=1006): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b80)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000150a0102000000000000000000000001090001"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004880c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r9, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x724, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r13, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000005) 5.650642167s ago: executing program 32 (id=992): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200020000000000000008000100000000000c000400"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000440)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f00000004c0), 0x4) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xf) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000c40)) clock_gettime(0xffefff1f, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x244, r11, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xd06}, {0xc, 0x90, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xffffffffffffff81}, {0xc, 0x90, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x40fc7e}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xb15ea2fe15b8f9a8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r10) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x34, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x6, 0x9d, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x1, 0xef}}]}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f0000000b40)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r12, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000600", @ANYRES16=r13, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08004d0100000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) socket$kcm(0x10, 0x2, 0x0) 4.588453455s ago: executing program 33 (id=1000): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x37c3faf85371aca0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0xfff, "468d97"}, 0x6) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x54) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000440)={{r1, &(0x7f0000000280)='wg0\x00', 0x80200, &(0x7f00000002c0)={@align=0x9, {0x8, 0x0, 0x400, 0x200}}, 0x7f, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x7}, {[0x5d6, 0x5, 0x3ff, 0x10001]}, 0x6, 0xa0, &(0x7f0000000380)=""/160}) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000004c0)=""/201, &(0x7f00000005c0)=0xc9) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9d82, 0x3, 0x10000, 0x3000, r3, 0xc, '\x00', r2, r3, 0x1, 0x4, 0x0, 0x6}, 0x50) r4 = accept4$x25(r3, &(0x7f0000000680), &(0x7f00000006c0)=0x12, 0x80000) connect$x25(r4, &(0x7f0000000700)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000740)={0x200, 0x5, 0x1, 0xa, 0x1, 0x18, 0x3, "c703b36f8e01ca9498f5b0d95f6431141370adb6", "2bd93de894e9af373418a14a9cbdecf7858f5cf1"}) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000780)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r5, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10, 0x28}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c845}, 0x20000080) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r5, 0x202, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe6ece6457ac2f9209343489876b3bc19691c5912dbe6edb"}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x8880) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'syztnl2\x00', r2, 0x29, 0xcb, 0x5, 0x929a, 0x1, @private0, @empty, 0x80, 0x40, 0x1, 0xa}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', r2, 0x29, 0x2, 0x9, 0xfffffffd, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x700, 0x4, 0x80}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d00)={0x0, @initdev, @broadcast}, &(0x7f0000000d40)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000dc0)={'gre0\x00', r2, 0x8000, 0x1, 0x4446, 0x4, {{0x40, 0x4, 0x3, 0x8, 0x100, 0x67, 0x0, 0x9, 0x29, 0x0, @local, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x8d, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0x18, 0x1, 0xb, [{@empty}, {@multicast1, 0x6}, {@rand_addr=0x64010100, 0x9}, {@local, 0xffffffff}, {@rand_addr=0x64010102, 0x6}]}, @ra={0x94, 0x4, 0x8}, @timestamp_prespec={0x44, 0x14, 0x66, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010102, 0x7}]}, @cipso={0x86, 0x28, 0x3, [{0x1, 0x4, "a643"}, {0x0, 0xb, "fefb03482946fee097"}, {0x5, 0x8, "6dc13e8a95b9"}, {0x2, 0xb, "41919a2d8af2503c31"}]}, @cipso={0x86, 0x53, 0x3, [{0x1, 0x3, "a6"}, {0x7, 0xf, "8e72eff2255a284209ea156123"}, {0x5, 0x11, "0f8b90243653eb7532591afc6cba26"}, {0x984107d6bead1038, 0x10, "d34d5c5774f106832ce7f5da1eea"}, {0x7, 0xf, "4baafca7f3376eabd78cd03f03"}, {0x0, 0xb, "932fc8b785eb9d97a7"}]}, @noop, @ssrr={0x89, 0xf, 0xa7, [@local, @remote, @rand_addr=0x64010100]}, @rr={0x7, 0xf, 0x2a, [@private=0xa010100, @multicast2, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000fc0)={@rand_addr, 0x0}, &(0x7f0000001000)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000011c0)={0x96c, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x376, 0xf7, 0x8, 0x3}, {0xf, 0x7, 0xaf, 0xf}, {0x9, 0x1, 0x6, 0xc}, {0x8, 0x2, 0x3, 0x3}, {0x6, 0x80, 0x7, 0x24}, {0x1, 0x1, 0x6, 0xf}, {0x8, 0xca, 0x1, 0x1ff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}, {{0x8, 0x1, r13}, {0x4}}, {{0x8, 0x1, r14}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}, {{0x8, 0x1, r15}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r16}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}]}, 0x96c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 2.399364628s ago: executing program 34 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000580)=""/249, 0x46, 0xf9, 0x6}, 0x28) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000006c0)={0x0, 0x0, 0x3}, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000e9ffffffffffffff000004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$int_in(r4, 0x5421, &(0x7f0000000680)=0x5) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000044000480400001800e000100627974656f726465720000002c000280080004400000006d080001400000000e0800034000000065080002400000000e080005"], 0x98}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) 2.22370593s ago: executing program 35 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001000)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000001040)={&(0x7f0000001080), 0x10, 0x0}, 0x0) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="78e6add5", @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf25860000000c009900000000001e0000000800a00002000000080022011b0200000800270003000000080026006c090000080022014e0200000800a00001040000080026008c1400000800a000000000000800220122000000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x400c808) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYBLOB="60040000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="2c02028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000059fc040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b000028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000400003c00010024000100757365725f6c696e6b75705f656e61626c6564000000a231aa188b4a9a248b026452156c416a00"/116, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRESHEX=0x0, @ANYBLOB="8400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004006200000008000600", @ANYRES64=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000e0027fbbc720baa968056985da3fc35fb9d54f0df97ab772364d9", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400cd0f000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000"], 0x460}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008081) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000780), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000000840)={0x1d, r11}, 0x10) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x7f, 0x1, 0x8, @mcast2, @local, 0x7, 0x7, 0x2, 0xc}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r2, 0x58, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b80)={0x1ec, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x3b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0xfffffffffffffdfb}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) 0s ago: executing program 36 (id=1006): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b80)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20000000150a0102000000000000000000000001090001"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004880c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r6) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r9, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x724, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r13, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r13, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000005) kernel console output (not intermixed with test programs): ] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.323550][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.341791][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.342641][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.346365][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.470562][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.470680][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.481204][ T5633] bridge_slave_0: entered allmulticast mode [ 73.482852][ T5633] bridge_slave_0: entered promiscuous mode [ 73.504600][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.504712][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.504850][ T5633] bridge_slave_1: entered allmulticast mode [ 73.506474][ T5633] bridge_slave_1: entered promiscuous mode [ 73.511141][ T5629] Bluetooth: hci0: command tx timeout [ 73.514721][ T5629] Bluetooth: hci1: command tx timeout [ 73.549552][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.550206][ T5642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.569377][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.570234][ T5642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.587075][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.587745][ T5642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.591287][ T5629] Bluetooth: hci3: command tx timeout [ 73.591316][ T5629] Bluetooth: hci2: command tx timeout [ 73.594680][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.598198][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.636833][ T5633] team0: Port device team_slave_0 added [ 73.637947][ T5642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.642941][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.659322][ T5633] team0: Port device team_slave_1 added [ 73.671462][ T53] Bluetooth: hci4: command tx timeout [ 73.706303][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.706318][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.706339][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.713994][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.714010][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.714034][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.832530][ T5633] hsr_slave_0: entered promiscuous mode [ 73.833235][ T5633] hsr_slave_1: entered promiscuous mode [ 73.833629][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 73.833647][ T5633] Cannot create hsr debugfs directory [ 73.835335][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.838611][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.839281][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.844269][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.898561][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.910139][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.938912][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.945190][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.966222][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.088271][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.098032][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.111609][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.112395][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.115830][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.140094][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.149817][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.153055][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.160405][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.175407][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.175491][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.207576][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.234786][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.234850][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.290408][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.296126][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.303689][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.320731][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.329813][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.337741][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.337842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.346002][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.356667][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.376283][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.378501][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.380511][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.380616][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.513801][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.575267][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.614717][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.614830][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.640649][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.640751][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.675940][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.772280][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.810203][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.810331][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.836104][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.873806][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.873910][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.965363][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.017087][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.017178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.056778][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.056877][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.569632][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.591948][ T53] Bluetooth: hci1: command tx timeout [ 75.591981][ T53] Bluetooth: hci0: command tx timeout [ 75.593787][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.671185][ T5629] Bluetooth: hci2: command tx timeout [ 75.671217][ T5629] Bluetooth: hci3: command tx timeout [ 75.725280][ T5642] veth0_vlan: entered promiscuous mode [ 75.751349][ T53] Bluetooth: hci4: command tx timeout [ 75.758127][ T5642] veth1_vlan: entered promiscuous mode [ 75.913675][ T5642] veth0_macvtap: entered promiscuous mode [ 75.950554][ T5642] veth1_macvtap: entered promiscuous mode [ 76.017719][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.044947][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.098585][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.358310][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.358336][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.448568][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.448839][ T5631] veth0_vlan: entered promiscuous mode [ 76.471558][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.471579][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.480064][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.533956][ T1383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.535451][ T5631] veth1_vlan: entered promiscuous mode [ 76.577688][ T5642] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.658400][ T5623] veth0_vlan: entered promiscuous mode [ 76.680190][ T5633] veth0_vlan: entered promiscuous mode [ 76.683625][ T5623] veth1_vlan: entered promiscuous mode [ 76.694395][ T5631] veth0_macvtap: entered promiscuous mode [ 76.715942][ T5631] veth1_macvtap: entered promiscuous mode [ 76.750558][ T5633] veth1_vlan: entered promiscuous mode [ 76.753570][ T5624] veth0_vlan: entered promiscuous mode [ 76.775227][ T5624] veth1_vlan: entered promiscuous mode [ 76.784463][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.792435][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.805353][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.831738][ T1383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.832040][ T1383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.832078][ T1383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.832112][ T1383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.832146][ T1383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.832180][ T1383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.906990][ T5623] veth0_macvtap: entered promiscuous mode [ 76.940272][ T5633] veth0_macvtap: entered promiscuous mode [ 76.951987][ T5623] veth1_macvtap: entered promiscuous mode [ 76.965079][ T5633] veth1_macvtap: entered promiscuous mode [ 76.997476][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.997905][ T5624] veth0_macvtap: entered promiscuous mode [ 77.026445][ T5624] veth1_macvtap: entered promiscuous mode [ 77.037083][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.047558][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.057838][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.057858][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.107186][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.139388][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.139409][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.164951][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.212490][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.213496][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.214203][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281632][ T1383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281680][ T1383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281715][ T1383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281749][ T1383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281782][ T1383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281816][ T1383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281850][ T1383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281883][ T1383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281917][ T1383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281952][ T1383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.289018][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.289038][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.359785][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.359806][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.534550][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.534563][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.617498][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.617519][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.671961][ T53] Bluetooth: hci0: command tx timeout [ 77.671971][ T5629] Bluetooth: hci1: command tx timeout [ 77.705488][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.705508][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.751666][ T5629] Bluetooth: hci3: command tx timeout [ 77.751686][ T53] Bluetooth: hci2: command tx timeout [ 77.831825][ T53] Bluetooth: hci4: command tx timeout [ 77.863789][ T1383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.863810][ T1383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.984466][ T5839] Zero length message leads to an empty skb [ 78.028730][ T5842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 78.250388][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.250411][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.585245][ T5877] netlink: 'syz.3.19': attribute type 11 has an invalid length. [ 78.585267][ T5877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19'. [ 78.642980][ T5879] warning: `syz.1.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.836093][ T5893] netlink: 'syz.1.21': attribute type 1 has an invalid length. [ 78.889218][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 78.949162][ T5893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.992517][ T5906] netlink: 116 bytes leftover after parsing attributes in process `syz.3.25'. [ 79.054609][ T5903] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 79.071459][ T5903] ip_tables: iptables: counters copy to user failed while replacing table [ 79.229493][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.232221][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.358050][ T5922] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 79.404676][ T5922] batman_adv: batadv0: Adding interface: gretap1 [ 79.404695][ T5922] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.404723][ T5922] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 79.675410][ T5931] netlink: 52 bytes leftover after parsing attributes in process `syz.3.34'. [ 80.070507][ T5945] Cannot find set identified by id 0 to match [ 80.070780][ T5954] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 80.102312][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41'. [ 80.154125][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.239641][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.367911][ T5964] netlink: 'syz.2.43': attribute type 3 has an invalid length. [ 80.422520][ T5976] netlink: 'syz.2.43': attribute type 3 has an invalid length. [ 80.688815][ T6006] netlink: 'syz.0.48': attribute type 10 has an invalid length. [ 80.716654][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.720818][ T6006] bond0: (slave team0): Enslaving as an active interface with an up link [ 80.778581][ T6010] bond0: option ad_select: unable to set because the bond device is up [ 80.820088][ T6008] Bluetooth: MGMT ver 1.23 [ 80.912553][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 80.912610][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.57'. [ 81.021726][ T6026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.183221][ T6036] syzkaller0: entered promiscuous mode [ 81.183243][ T6036] syzkaller0: entered allmulticast mode [ 81.447961][ T53] Bluetooth: hci3: Malformed Event: 0x13 [ 81.974608][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.284555][ T6078] Illegal XDP return value 4294967282 on prog (id 22) dev N/A, expect packet loss! [ 83.052312][ T6129] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 83.538414][ T6164] __nla_validate_parse: 7 callbacks suppressed [ 83.538434][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 83.538489][ T6164] netlink: 160 bytes leftover after parsing attributes in process `syz.1.92'. [ 83.538508][ T6164] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 83.538521][ T6164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.92'. [ 83.592587][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 83.738105][ T6175] netlink: 32 bytes leftover after parsing attributes in process `syz.4.93'. [ 83.973425][ T6177] netlink: 277 bytes leftover after parsing attributes in process `syz.4.95'. [ 84.259874][ T6202] netlink: 104 bytes leftover after parsing attributes in process `syz.0.100'. [ 84.317918][ T6204] netlink: 104 bytes leftover after parsing attributes in process `syz.0.100'. [ 84.683287][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'. [ 84.851536][ T6253] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 84.886459][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.105'. [ 85.055459][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 85.366350][ T6242] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 85.381911][ T6242] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 85.466214][ T6279] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 85.508893][ T6242] vda: unable to read partition table [ 85.550388][ T6279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.626922][ T6242] syz.1.104 (6242) used greatest stack depth: 19240 bytes left [ 85.692215][ T6283] bond1: (slave erspan1): making interface the new active one [ 85.717410][ T6283] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 86.717002][ T24] cfg80211: failed to load regulatory.db [ 86.952255][ T6371] openvswitch: netlink: Duplicate or invalid key (type 0). [ 86.955088][ T6371] netlink: 'syz.2.137': attribute type 2 has an invalid length. [ 86.999867][ T6382] netlink: 'syz.2.137': attribute type 2 has an invalid length. [ 87.006831][ T6378] openvswitch: netlink: Duplicate or invalid key (type 0). [ 87.025798][ T6383] bond0: option ad_select: unable to set because the bond device is up [ 87.141335][ T6389] bridge_slave_1: left allmulticast mode [ 87.141364][ T6389] bridge_slave_1: left promiscuous mode [ 87.142135][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.172829][ T6389] bridge_slave_0: left allmulticast mode [ 87.172923][ T6389] bridge_slave_0: left promiscuous mode [ 87.173144][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.514522][ T6397] lo: MTU not usable for tipc bearer [ 87.514571][ T6397] tipc: Enabling of bearer rejected, failed to enable media [ 87.734323][ T6410] netlink: 'syz.4.145': attribute type 75 has an invalid length. [ 88.038244][ T6412] syzkaller1: entered promiscuous mode [ 88.038268][ T6412] syzkaller1: entered allmulticast mode [ 88.544288][ T6420] IPv6: sit1: Disabled Multicast RS [ 88.563780][ T6429] __nla_validate_parse: 11 callbacks suppressed [ 88.563800][ T6429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 88.788559][ T145] IPVS: starting estimator thread 0... [ 88.873010][ T6448] IPVS: using max 32 ests per chain, 76800 per kthread [ 88.910352][ T6453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.159'. [ 89.043220][ T6455] tipc: Started in network mode [ 89.043252][ T6455] tipc: Node identity ac14142f, cluster identity 4711 [ 89.045072][ T6455] tipc: Enabled bearer , priority 10 [ 89.076814][ T6461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.098558][ T6459] netlink: 112 bytes leftover after parsing attributes in process `syz.1.164'. [ 89.280690][ T6473] 0: reclassify loop, rule prio 0, protocol 03 [ 89.429873][ T6481] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 89.444789][ T6480] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 89.659263][ T6491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.686878][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 89.686899][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 89.887744][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 89.898216][ T6512] netlink: 48 bytes leftover after parsing attributes in process `syz.3.178'. [ 89.923783][ T6502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.177'. [ 89.936559][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.177'. [ 89.950052][ T6518] netlink: 45 bytes leftover after parsing attributes in process `syz.2.181'. [ 90.098165][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.176180][ T5748] tipc: Node number set to 2886997039 [ 90.266260][ T6539] netlink: 'syz.4.186': attribute type 2 has an invalid length. [ 90.266282][ T6539] netlink: 'syz.4.186': attribute type 8 has an invalid length. [ 90.674592][ T6561] netlink: 'syz.4.194': attribute type 1 has an invalid length. [ 90.717450][ T6561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.763364][ T6561] bond1: (slave bridge1): making interface the new active one [ 90.764613][ T6561] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 90.767714][ T6561] netlink: 'syz.4.194': attribute type 1 has an invalid length. [ 90.814397][ T6561] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 90.863795][ T6573] block nbd0: not configured, cannot reconfigure [ 91.076845][ T6590] netlink: 'syz.1.201': attribute type 4 has an invalid length. [ 91.078082][ T6593] netlink: 'syz.1.201': attribute type 4 has an invalid length. [ 91.115192][ T6590] .`: renamed from bond0 (while UP) [ 91.344442][ T6609] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.274204][ T6670] syzkaller0: entered promiscuous mode [ 92.274226][ T6670] syzkaller0: entered allmulticast mode [ 92.346774][ T6676] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 92.353112][ T6676] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 92.390830][ T6678] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 92.394420][ T6678] bond2 (unregistering): Released all slaves [ 92.606831][ T6686] syzkaller1: entered promiscuous mode [ 92.606849][ T6686] syzkaller1: entered allmulticast mode [ 92.637652][ T6686] syzkaller1: left promiscuous mode [ 92.637674][ T6686] syzkaller1: left allmulticast mode [ 92.731964][ T6704] tunl0: entered promiscuous mode [ 92.734046][ T6704] netlink: 'syz.0.229': attribute type 3 has an invalid length. [ 93.163213][ T6728] openvswitch: netlink: Multiple metadata blocks provided [ 93.264597][ T6730] syzkaller0: entered promiscuous mode [ 93.264619][ T6730] syzkaller0: entered allmulticast mode [ 93.495010][ T6746] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 93.617079][ T6758] __nla_validate_parse: 38 callbacks suppressed [ 93.617099][ T6758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 93.617115][ T6758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 93.732092][ T6753] bond3: option resend_igmp: invalid value (32767) [ 93.732114][ T6753] bond3: option resend_igmp: allowed values 0 - 255 [ 93.736759][ T6753] bond3 (unregistering): Released all slaves [ 93.777275][ T6761] xt_hashlimit: size too large, truncated to 1048576 [ 94.015581][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.015604][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.049532][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.245751][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 94.247673][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 94.329536][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 94.520443][ T6813] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 94.748536][ T6826] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.264'. [ 94.748562][ T6826] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.264'. [ 94.866470][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 95.064295][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 95.147573][ T6848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.155506][ T6848] ip_tables: iptables: counters copy to user failed while replacing table [ 95.420259][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 95.434360][ T6863] xt_l2tp: invalid flags combination: 0 [ 95.578926][ T6872] netlink: 'syz.4.277': attribute type 3 has an invalid length. [ 95.578946][ T6872] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 95.727245][ T6882] syzkaller1: entered promiscuous mode [ 95.727266][ T6882] syzkaller1: entered allmulticast mode [ 96.152656][ T53] Bluetooth: hci0: command tx timeout [ 96.210124][ T6919] bond0: (slave bond_slave_0): Releasing backup interface [ 96.251864][ T6919] bond_slave_0: entered promiscuous mode [ 96.251887][ T6919] bond_slave_0: entered allmulticast mode [ 96.793097][ T53] Bluetooth: hci1: command tx timeout [ 97.697222][ T6986] syzkaller1: entered promiscuous mode [ 97.697245][ T6986] syzkaller1: entered allmulticast mode [ 97.700253][ T6986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.917438][ T6995] ip_tables: iptables: counters copy to user failed while replacing table [ 98.222218][ T7010] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 98.323109][ T7019] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 98.367598][ T7020] sctp: [Deprecated]: syz.0.314 (pid 7020) Use of int in max_burst socket option. [ 98.367598][ T7020] Use struct sctp_assoc_value instead [ 98.410314][ T7025] netlink: 'syz.2.318': attribute type 13 has an invalid length. [ 98.483329][ T7031] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 98.655809][ T7027] hsr_slave_1 (unregistering): left promiscuous mode [ 98.753081][ T7027] __nla_validate_parse: 7 callbacks suppressed [ 98.753100][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.775338][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.775512][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.775684][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.775849][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.776013][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.776168][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.776323][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.776490][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 98.776671][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 99.676134][ T7091] Bluetooth: MGMT ver 1.23 [ 99.773160][ T7098] netlink: 'syz.1.343': attribute type 8 has an invalid length. [ 100.285777][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.285871][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.285960][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286039][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286120][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286200][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286279][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286357][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286438][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286519][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286593][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286678][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286759][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286843][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.286922][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.287009][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.287089][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.287165][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.287255][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.288399][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.288483][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.288569][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.288650][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.288731][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.288843][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.288932][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.289021][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.289100][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.289179][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.289258][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.289336][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.289412][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.289492][ T53] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 100.302366][ T7137] Cannot find set identified by id 65534 to match [ 100.625336][ T7155] netlink: 'syz.3.360': attribute type 3 has an invalid length. [ 100.649946][ T7153] syzkaller0: entered promiscuous mode [ 100.649969][ T7153] syzkaller0: entered allmulticast mode [ 100.657149][ T7153] tipc: Started in network mode [ 100.657176][ T7153] tipc: Node identity be8e44c94fb8, cluster identity 4711 [ 100.657546][ T7153] tipc: Enabled bearer , priority 0 [ 100.663552][ T7151] tipc: Resetting bearer [ 100.713037][ T7151] tipc: Disabling bearer [ 101.047360][ T7182] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 101.110208][ T7182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.207105][ T7189] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 101.296400][ T7206] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 101.323460][ T7189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.427463][ T7214] ip6t_REJECT: ECHOREPLY is not supported [ 101.530800][ T7216] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 101.751069][ T7232] netlink: 'syz.1.379': attribute type 15 has an invalid length. [ 103.069002][ T7274] veth1_macvtap: left promiscuous mode [ 103.645302][ T7327] netlink: 'syz.1.400': attribute type 4 has an invalid length. [ 103.646660][ T7322] netlink: 'syz.1.400': attribute type 4 has an invalid length. [ 103.810202][ T7331] vlan2: entered allmulticast mode [ 103.810224][ T7331] bridge1: entered allmulticast mode [ 103.813590][ T7325] bridge1: port 1(erspan0) entered blocking state [ 103.814037][ T7325] bridge1: port 1(erspan0) entered disabled state [ 103.814544][ T7325] erspan0: entered allmulticast mode [ 103.822637][ T7325] erspan0: entered promiscuous mode [ 103.825784][ T7325] bridge1: port 1(erspan0) entered blocking state [ 103.825895][ T7325] bridge1: port 1(erspan0) entered forwarding state [ 104.101696][ T7344] xt_hashlimit: size too large, truncated to 1048576 [ 104.449541][ T5290] veth1_macvtap: entered promiscuous mode [ 104.688609][ T7376] batman_adv: batadv0: Adding interface: veth0 [ 104.688626][ T7376] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.688653][ T7376] batman_adv: batadv0: Interface activated: veth0 [ 104.735902][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.735926][ T7378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.760706][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.760728][ T7378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.779204][ T7378] batman_adv: batadv0: Removing interface: gretap1 [ 104.785205][ T7385] netlink: 'syz.4.414': attribute type 1 has an invalid length. [ 104.787324][ T7378] batman_adv: batadv0: Interface deactivated: veth0 [ 104.787344][ T7378] batman_adv: batadv0: Removing interface: veth0 [ 104.787466][ T7383] netlink: 'syz.4.414': attribute type 1 has an invalid length. [ 104.812005][ T7384] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 105.019025][ T7400] __nla_validate_parse: 38 callbacks suppressed [ 105.019046][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 105.058010][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 105.152004][ T1122] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.152056][ T1122] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.152092][ T1122] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.160011][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 105.202811][ T7399] bridge0: port 1(gretap0) entered blocking state [ 105.202905][ T7399] bridge0: port 1(gretap0) entered disabled state [ 105.203063][ T7399] gretap0: entered allmulticast mode [ 105.207111][ T7399] gretap0: entered promiscuous mode [ 105.261014][ T1383] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.261718][ T7417] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 105.486659][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.422'. [ 105.928855][ T7466] netlink: 'syz.0.428': attribute type 2 has an invalid length. [ 105.948960][ T7466] netlink: 'syz.0.428': attribute type 4 has an invalid length. [ 105.999589][ T7466] netlink: 'syz.0.428': attribute type 4 has an invalid length. [ 106.092401][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.429'. [ 106.253884][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'. [ 106.299569][ T7486] block nbd0: Unsupported socket: should be TCP or UNIX. [ 106.424238][ T7490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.435'. [ 106.441917][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.434'. [ 106.441936][ T7493] netlink: 80 bytes leftover after parsing attributes in process `syz.3.434'. [ 106.441950][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.434'. [ 107.215938][ T7519] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 107.674633][ T7519] bond0: entered promiscuous mode [ 107.688665][ T7519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.977816][ T7539] ieee802154 phy0 wpan0: encryption failed: -90 [ 108.218263][ T7541] netlink: 'syz.4.444': attribute type 6 has an invalid length. [ 108.857815][ T7566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.966852][ T7572] ip_tables: iptables: counters copy to user failed while replacing table [ 109.019682][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.026633][ T7573] validate_nla: 3 callbacks suppressed [ 109.026650][ T7573] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 109.093254][ T7564] bond3: invalid ARP target 0.0.0.0 specified for addition [ 109.093287][ T7564] bond3: option arp_ip_target: invalid value (0) [ 109.170448][ T7564] bond3 (unregistering): Released all slaves [ 109.476126][ T7573] bond4: entered promiscuous mode [ 109.479239][ T7573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.552611][ T7579] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.552638][ T7579] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 109.552654][ T7579] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 109.779742][ T7593] netlink: 'syz.0.455': attribute type 64 has an invalid length. [ 109.785229][ T7575] tipc: Started in network mode [ 109.785256][ T7575] tipc: Node identity 5af53e843088, cluster identity 4711 [ 109.785574][ T7575] tipc: Enabled bearer , priority 11 [ 109.837593][ T7583] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.837619][ T7583] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 110.384822][ T7599] netlink: 'syz.1.457': attribute type 8 has an invalid length. [ 110.664854][ T7612] __nla_validate_parse: 10 callbacks suppressed [ 110.664875][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 110.732981][ T7615] bridge1: entered promiscuous mode [ 110.733061][ T7615] bridge1: entered allmulticast mode [ 110.904093][ T7615] bridge2: entered promiscuous mode [ 110.904289][ T7615] bridge2: entered allmulticast mode [ 110.933007][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 110.933901][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 110.934810][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 110.939637][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 110.958905][ T24] tipc: Node number set to 1786592900 [ 111.186685][ T7615] bridge3: entered promiscuous mode [ 111.186875][ T7615] bridge3: entered allmulticast mode [ 111.226291][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 111.227196][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 111.227984][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 111.228854][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 111.249268][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 111.578965][ T7615] bridge4: entered promiscuous mode [ 111.579183][ T7615] bridge4: entered allmulticast mode [ 114.020503][ T7667] bridge_slave_1: left promiscuous mode [ 114.021396][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.057736][ T7667] bridge_slave_0: left allmulticast mode [ 114.074862][ T7667] bridge_slave_0: left promiscuous mode [ 114.078049][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.741580][ T7681] bridge0: port 3(veth1_to_bridge) entered blocking state [ 114.742009][ T7681] bridge0: port 3(veth1_to_bridge) entered disabled state [ 114.742329][ T7681] veth1_to_bridge: entered allmulticast mode [ 114.752724][ T7681] veth1_to_bridge: entered promiscuous mode [ 115.243262][ T7692] tipc: Enabling of bearer rejected, failed to enable media [ 115.404784][ T7703] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 115.603384][ T7709] bridge0: port 3(syz_tun) entered blocking state [ 115.604734][ T7709] bridge0: port 3(syz_tun) entered disabled state [ 115.605074][ T7709] syz_tun: entered allmulticast mode [ 115.615152][ T7709] syz_tun: entered promiscuous mode [ 115.624099][ T7709] bridge0: port 3(syz_tun) entered blocking state [ 115.624211][ T7709] bridge0: port 3(syz_tun) entered forwarding state [ 115.816288][ T7720] __nla_validate_parse: 5 callbacks suppressed [ 115.816310][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 115.893384][ T7719] netlink: 56 bytes leftover after parsing attributes in process `syz.2.479'. [ 116.307337][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 116.416723][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 118.225898][ T7776] netlink: 52 bytes leftover after parsing attributes in process `syz.3.492'. [ 118.251635][ T7779] netlink: 52 bytes leftover after parsing attributes in process `syz.3.492'. [ 118.476104][ T53] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 119.098311][ T7796] dvmrp1: entered allmulticast mode [ 119.546024][ T7814] ip_tables: iptables: counters copy to user failed while replacing table [ 119.704694][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 120.003978][ T7821] netlink: 68 bytes leftover after parsing attributes in process `syz.2.499'. [ 120.376814][ T7820] syzkaller1: entered promiscuous mode [ 120.377009][ T7820] syzkaller1: entered allmulticast mode [ 120.603567][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.502'. [ 120.944133][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.502'. [ 121.147921][ T7861] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 121.878487][ T7875] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 122.292144][ T7885] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.323530][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 122.351572][ T7886] ip6erspan0: entered allmulticast mode [ 122.720172][ T7889] syzkaller0: entered promiscuous mode [ 122.720364][ T7889] syzkaller0: entered allmulticast mode [ 123.598687][ T7898] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 124.070490][ T7898] bond3: entered promiscuous mode [ 124.077063][ T7898] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.806226][ T7909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.807332][ T7909] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 124.807353][ T7909] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 124.854269][ T7909] bond3: (slave gre1): making interface the new active one [ 124.854293][ T7909] gre1: entered promiscuous mode [ 124.885424][ T7909] bond3: (slave gre1): Enslaving as an active interface with an up link [ 125.506794][ T7944] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 125.536765][ T7943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.522'. [ 125.842972][ T7950] syzkaller0: entered promiscuous mode [ 125.843168][ T7950] syzkaller0: entered allmulticast mode [ 126.539193][ T7970] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20000 [ 126.641626][ T7970] IPVS: set_ctl: invalid protocol: 4 10.1.1.1:20001 [ 127.373392][ T7960] syzkaller1: entered promiscuous mode [ 127.375188][ T7960] syzkaller1: entered allmulticast mode [ 128.513018][ T8004] ip6t_srh: unknown srh invflags 4000 [ 128.660862][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.532'. [ 128.894399][ T8016] ip_tables: iptables: counters copy to user failed while replacing table [ 128.988108][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 131.121166][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 131.743042][ T8085] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 131.790504][ T8085] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 132.286404][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.551'. [ 132.333286][ T8106] x_tables: duplicate underflow at hook 1 [ 132.334922][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 132.766880][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'. [ 132.786141][ T30] audit: type=1804 audit(1792799341.377:2): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.556" name="/newroot/110/cgroup.controllers" dev="tmpfs" ino=582 res=1 errno=0 [ 132.797721][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.797842][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.809004][ T30] audit: type=1800 audit(1792799341.397:3): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.556" name="cgroup.controllers" dev="tmpfs" ino=582 res=0 errno=-22 [ 132.833694][ T8122] netlink: 44 bytes leftover after parsing attributes in process `syz.2.558'. [ 133.601882][ T8140] netlink: 'syz.3.562': attribute type 5 has an invalid length. [ 133.694152][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 133.695160][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 133.773081][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'. [ 133.774021][ T8144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'. [ 135.230025][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 135.402859][ T8170] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 135.658265][ T8170] bond6: entered promiscuous mode [ 135.667556][ T8170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.763511][ T8177] macvtap1: entered allmulticast mode [ 135.825162][ T8178] macvtap2: entered allmulticast mode [ 135.957551][ T8186] bond6: (slave bridge2): making interface the new active one [ 135.957576][ T8186] bridge2: entered promiscuous mode [ 135.974946][ T8186] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 136.379749][ T1122] IPVS: starting estimator thread 0... [ 136.471597][ T8199] IPVS: using max 32 ests per chain, 76800 per kthread [ 136.677376][ T8207] netlink: 14 bytes leftover after parsing attributes in process `syz.2.578'. [ 137.063118][ T8214] x_tables: unsorted underflow at hook 3 [ 137.097534][ T8216] x_tables: unsorted underflow at hook 3 [ 137.758538][ T8230] syzkaller0: entered promiscuous mode [ 137.758731][ T8230] syzkaller0: entered allmulticast mode [ 137.872914][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 137.907709][ T8236] syz_tun: Device is already in use. [ 137.931507][ T8236] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 138.034202][ T53] Bluetooth: hci0: Malformed Event: 0x02 [ 138.309524][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 138.450810][ T8254] netlink: 32 bytes leftover after parsing attributes in process `syz.4.593'. [ 138.460518][ T8256] batman_adv: batadv0: Adding interface: veth0 [ 138.460536][ T8256] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.460565][ T8256] batman_adv: batadv0: Interface activated: veth0 [ 138.600553][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.600751][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.630237][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.630437][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.678150][ T8256] batman_adv: batadv0: Interface deactivated: veth0 [ 138.678359][ T8256] batman_adv: batadv0: Removing interface: veth0 [ 140.782376][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'. [ 141.071824][ T8298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.602'. [ 141.366673][ T8302] netlink: 'syz.0.603': attribute type 2 has an invalid length. [ 141.366694][ T8302] netlink: 244 bytes leftover after parsing attributes in process `syz.0.603'. [ 141.834193][ T8309] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 141.910887][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.607'. [ 142.478473][ T8330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.764834][ T8334] netlink: 128 bytes leftover after parsing attributes in process `syz.0.613'. [ 142.764860][ T8334] netlink: 128 bytes leftover after parsing attributes in process `syz.0.613'. [ 143.607825][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 143.761386][ T8364] geneve2: entered promiscuous mode [ 143.761575][ T8364] geneve2: entered allmulticast mode [ 143.796748][ T8360] ip_tables: iptables: counters copy to user failed while replacing table [ 145.199300][ T8381] netlink: 'syz.3.624': attribute type 20 has an invalid length. [ 145.199327][ T8381] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.517375][ T8381] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 145.560098][ T8393] netlink: 'syz.3.624': attribute type 20 has an invalid length. [ 145.629658][ T8397] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 145.820504][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 146.344565][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 147.062978][ T8425] syzkaller1: entered promiscuous mode [ 147.063168][ T8425] syzkaller1: entered allmulticast mode [ 147.637695][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.638'. [ 148.405471][ T8464] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 148.405494][ T8464] netlink: 228 bytes leftover after parsing attributes in process `syz.3.645'. [ 148.405521][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 148.576702][ T8466] netlink: 96 bytes leftover after parsing attributes in process `syz.0.644'. [ 148.678019][ T8465] netlink: 64 bytes leftover after parsing attributes in process `syz.2.646'. [ 149.588805][ T8487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.588823][ T8487] IPv6: NLM_F_CREATE should be set when creating new route [ 149.588856][ T8487] IPv6: NLM_F_CREATE should be set when creating new route [ 150.793293][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 151.447775][ T8517] sit0: entered promiscuous mode [ 151.581041][ T8518] netlink: 'syz.1.659': attribute type 2 has an invalid length. [ 151.582855][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.659'. [ 151.587710][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 152.030420][ T8537] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 152.030441][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 152.260365][ T8537] ip6gre1: entered promiscuous mode [ 152.733819][ T8551] netlink: 72 bytes leftover after parsing attributes in process `syz.0.670'. [ 152.894650][ T8555] netlink: 164 bytes leftover after parsing attributes in process `syz.1.671'. [ 152.894766][ T8555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.671'. [ 153.473203][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 153.666148][ T8576] Bluetooth: hci0: unsupported parameter 5161 [ 153.666172][ T8576] Bluetooth: hci0: unsupported parameter 8192 [ 153.666190][ T8576] Bluetooth: hci0: unsupported parameter 5161 [ 153.666203][ T8576] Bluetooth: hci0: unsupported parameter 8192 [ 153.899302][ T8579] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 154.128107][ T8582] syzkaller0: entered promiscuous mode [ 154.128193][ T8582] syzkaller0: entered allmulticast mode [ 154.288648][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.681'. [ 154.910240][ T8595] 8021q: VLANs not supported on dvmrp1 [ 155.257744][ T8601] pimreg3: entered allmulticast mode [ 155.433223][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 156.412454][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 156.880097][ T8622] netlink: 52 bytes leftover after parsing attributes in process `syz.1.689'. [ 157.033953][ T8620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 157.162636][ T8640] netlink: 60 bytes leftover after parsing attributes in process `syz.4.696'. [ 157.408482][ T8647] netlink: 'syz.0.697': attribute type 28 has an invalid length. [ 157.408504][ T8647] netlink: 'syz.0.697': attribute type 3 has an invalid length. [ 157.408516][ T8647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.697'. [ 157.498557][ T8643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.696'. [ 157.510928][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 157.619566][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 157.854547][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 157.877047][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 157.982981][ T8664] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 158.176106][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 158.202742][ T8668] netlink: 'syz.2.702': attribute type 2 has an invalid length. [ 158.400268][ T8678] netlink: 'syz.0.706': attribute type 21 has an invalid length. [ 158.400293][ T8678] netlink: 128 bytes leftover after parsing attributes in process `syz.0.706'. [ 158.430762][ T8664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.522346][ T8683] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.710011][ T8691] FAULT_INJECTION: forcing a failure. [ 158.710011][ T8691] name failslab, interval 1, probability 0, space 0, times 1 [ 158.710056][ T8691] CPU: 0 UID: 0 PID: 8691 Comm: syz.2.707 Not tainted syzkaller #0 PREEMPT(full) [ 158.710079][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 158.710099][ T8691] Call Trace: [ 158.710110][ T8691] [ 158.710119][ T8691] dump_stack_lvl+0xe8/0x150 [ 158.710156][ T8691] should_fail_ex+0x410/0x560 [ 158.710189][ T8691] should_failslab+0xa8/0x100 [ 158.710218][ T8691] ? skb_clone+0x212/0x3a0 [ 158.710246][ T8691] kmem_cache_alloc_noprof+0x9c/0x600 [ 158.710273][ T8691] ? skb_clone+0x212/0x3a0 [ 158.710311][ T8691] skb_clone+0x212/0x3a0 [ 158.710340][ T8691] __netlink_deliver_tap+0x355/0x6e0 [ 158.710372][ T8691] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.710394][ T8691] netlink_deliver_tap+0x19c/0x1b0 [ 158.710417][ T8691] netlink_unicast+0x8c1/0xa80 [ 158.710473][ T8691] netlink_sendmsg+0x7f0/0xb20 [ 158.710501][ T8691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.710525][ T8691] ? aa_sock_msg_perm+0x144/0x210 [ 158.710554][ T8691] ? apparmor_socket_sendmsg+0x98/0x360 [ 158.710577][ T8691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.710597][ T8691] sock_sendmsg_nosec+0x14e/0x190 [ 158.710631][ T8691] ____sys_sendmsg+0x54e/0x850 [ 158.710662][ T8691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.710698][ T8691] ? import_iovec+0x73/0xa0 [ 158.710729][ T8691] ___sys_sendmsg+0x2a5/0x360 [ 158.710753][ T8691] ? __lock_acquire+0x747/0x2de0 [ 158.710781][ T8691] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.710841][ T8691] ? __fget_files+0x3a2/0x420 [ 158.710861][ T8691] ? __fget_files+0x2a/0x420 [ 158.710890][ T8691] __x64_sys_sendmsg+0x1b1/0x290 [ 158.710917][ T8691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.710961][ T8691] do_syscall_64+0x166/0x520 [ 158.710984][ T8691] ? trace_irq_disable+0x3b/0x140 [ 158.711005][ T8691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.711025][ T8691] ? clear_bhb_loop+0x70/0xc0 [ 158.711048][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.711067][ T8691] RIP: 0033:0x7f51c8b9f559 [ 158.711091][ T8691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.711106][ T8691] RSP: 002b:00007f51c9a1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.711129][ T8691] RAX: ffffffffffffffda RBX: 00007f51c8e25fa0 RCX: 00007f51c8b9f559 [ 158.711143][ T8691] RDX: 0000000000000880 RSI: 0000200000000b40 RDI: 0000000000000003 [ 158.711155][ T8691] RBP: 00007f51c9a1b090 R08: 0000000000000000 R09: 0000000000000000 [ 158.711167][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.711178][ T8691] R13: 00007f51c8e26038 R14: 00007f51c8e25fa0 R15: 00007fffe3021898 [ 158.711212][ T8691] [ 158.726144][ T8681] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.975281][ T8692] netlink: 'syz.3.704': attribute type 30 has an invalid length. [ 158.976602][ T8692] netlink: 'syz.3.704': attribute type 30 has an invalid length. [ 159.245861][ T8698] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.591031][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 159.730730][ T53] Bluetooth: hci2: SCO packet too small [ 160.948291][ T8724] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 161.463435][ T8750] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 161.978777][ T8757] FAULT_INJECTION: forcing a failure. [ 161.978777][ T8757] name failslab, interval 1, probability 0, space 0, times 0 [ 161.978811][ T8757] CPU: 0 UID: 0 PID: 8757 Comm: syz.4.720 Not tainted syzkaller #0 PREEMPT(full) [ 161.978833][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 161.978845][ T8757] Call Trace: [ 161.978853][ T8757] [ 161.978861][ T8757] dump_stack_lvl+0xe8/0x150 [ 161.978897][ T8757] should_fail_ex+0x410/0x560 [ 161.978930][ T8757] should_failslab+0xa8/0x100 [ 161.978962][ T8757] __kmalloc_noprof+0xf9/0x710 [ 161.978988][ T8757] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 161.979016][ T8757] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 161.979052][ T8757] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 161.979087][ T8757] genl_family_rcv_msg_doit+0xda/0x340 [ 161.979121][ T8757] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 161.979156][ T8757] ? apparmor_capable+0x126/0x170 [ 161.979187][ T8757] ? bpf_lsm_capable+0x9/0x20 [ 161.979209][ T8757] ? security_capable+0x7e/0x2c0 [ 161.979237][ T8757] genl_rcv_msg+0x614/0x7a0 [ 161.979270][ T8757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.979295][ T8757] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 161.979319][ T8757] ? __pfx_nl80211_start_radar_detection+0x10/0x10 [ 161.979341][ T8757] ? __pfx_nl80211_post_doit+0x10/0x10 [ 161.979380][ T8757] netlink_rcv_skb+0x226/0x4a0 [ 161.979403][ T8757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.979430][ T8757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.979468][ T8757] ? down_read+0x2b9/0x320 [ 161.979501][ T8757] genl_rcv+0x28/0x40 [ 161.979524][ T8757] netlink_unicast+0x8ef/0xa80 [ 161.979573][ T8757] netlink_sendmsg+0x7f0/0xb20 [ 161.979601][ T8757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.979626][ T8757] ? aa_sock_msg_perm+0x144/0x210 [ 161.979657][ T8757] ? apparmor_socket_sendmsg+0x98/0x360 [ 161.979680][ T8757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.979700][ T8757] sock_sendmsg_nosec+0x14e/0x190 [ 161.979740][ T8757] ____sys_sendmsg+0x54e/0x850 [ 161.979772][ T8757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.979809][ T8757] ? import_iovec+0x73/0xa0 [ 161.979839][ T8757] ___sys_sendmsg+0x2a5/0x360 [ 161.979863][ T8757] ? __lock_acquire+0x747/0x2de0 [ 161.979891][ T8757] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.979958][ T8757] ? __fget_files+0x3a2/0x420 [ 161.979979][ T8757] ? __fget_files+0x2a/0x420 [ 161.980010][ T8757] __x64_sys_sendmsg+0x1b1/0x290 [ 161.980040][ T8757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.980090][ T8757] do_syscall_64+0x166/0x520 [ 161.980115][ T8757] ? trace_irq_disable+0x3b/0x140 [ 161.980138][ T8757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.980158][ T8757] ? clear_bhb_loop+0x70/0xc0 [ 161.980189][ T8757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.980209][ T8757] RIP: 0033:0x7f54c539f559 [ 161.980227][ T8757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.980243][ T8757] RSP: 002b:00007f54c35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.980265][ T8757] RAX: ffffffffffffffda RBX: 00007f54c5625fa0 RCX: 00007f54c539f559 [ 161.980279][ T8757] RDX: 0000000000000880 RSI: 0000200000000b40 RDI: 0000000000000003 [ 161.980292][ T8757] RBP: 00007f54c35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.980304][ T8757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.980316][ T8757] R13: 00007f54c5626038 R14: 00007f54c5625fa0 R15: 00007ffc28dce1f8 [ 161.980350][ T8757] [ 162.716478][ T8771] __nla_validate_parse: 8 callbacks suppressed [ 162.716498][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 162.877661][ T8776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.726'. [ 162.909204][ T8776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.726'. [ 162.946842][ T8776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.726'. [ 163.023577][ T8770] syz.0.724 (8770) used greatest stack depth: 18056 bytes left [ 163.128582][ T8785] netlink: 44 bytes leftover after parsing attributes in process `syz.4.729'. [ 163.162714][ T8786] netlink: 44 bytes leftover after parsing attributes in process `syz.4.729'. [ 163.188084][ T8786] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 163.188222][ T8786] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 163.338470][ T8783] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 163.385881][ T8786] xt_hashlimit: size too large, truncated to 1048576 [ 163.649622][ T8785] xt_hashlimit: size too large, truncated to 1048576 [ 164.190625][ T8820] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.818546][ T8840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.738'. [ 164.844435][ T8840] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 165.199681][ T8854] af_packet: tpacket_rcv: packet too big, clamped from 216 to 4294967272. macoff=96 [ 166.473081][ T8792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.534022][ T8879] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 167.645002][ T8880] openvswitch: netlink: Flow key attribute not present in set flow. [ 167.646383][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 168.075591][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.076477][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.077428][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.078290][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.080664][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.089591][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.090448][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.095623][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.096475][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.103388][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.130626][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.131623][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.132463][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.133433][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.134274][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.141823][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.145027][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.148364][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.149210][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.150478][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.153634][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.156569][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.162979][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.164603][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.182416][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.190009][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.202947][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.209525][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.210379][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.213745][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.214501][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.215358][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.218192][ T8893] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 168.916823][ T8916] ipt_rpfilter: unknown options [ 169.011570][ T8916] syzkaller1: entered promiscuous mode [ 169.011767][ T8916] syzkaller1: entered allmulticast mode [ 169.057496][ T8916] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 170.587125][ T8957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.764'. [ 170.656253][ T8946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.656278][ T8946] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 170.898408][ T8946] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.898432][ T8946] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 171.076712][ T8946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.076735][ T8946] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 171.122481][ T8946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.122503][ T8946] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 171.217943][ T8946] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.217967][ T8946] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 171.540589][ T8980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.769'. [ 171.606467][ T8980] netlink: 'syz.0.769': attribute type 8 has an invalid length. [ 172.477958][ T8995] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20000 [ 172.488847][ T12] IPVS: starting estimator thread 0... [ 172.535762][ T30] audit: type=1804 audit(1792799381.107:4): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.771" name="/newroot/149/cgroup.controllers" dev="tmpfs" ino=780 res=1 errno=0 [ 172.535814][ T30] audit: type=1800 audit(1792799381.107:5): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.771" name="cgroup.controllers" dev="tmpfs" ino=780 res=0 errno=-22 [ 172.592543][ T8996] IPVS: using max 26 ests per chain, 62400 per kthread [ 175.579586][ T9020] ip_tunnel: non-ECT from 172.30.0.1 with TOS=0x3 [ 176.190381][ T9030] hsr0: entered allmulticast mode [ 176.190404][ T9030] hsr_slave_0: entered allmulticast mode [ 176.190735][ T9030] hsr_slave_1: entered allmulticast mode [ 176.208975][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 176.314362][ T9032] hsr0: entered promiscuous mode [ 176.458037][ T9034] hsr_slave_0: left promiscuous mode [ 176.479315][ T9034] hsr_slave_1: left promiscuous mode [ 176.683447][ T9034] hsr0 (unregistering): left allmulticast mode [ 176.683835][ T9034] hsr0 (unregistering): left promiscuous mode [ 177.502854][ T9052] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 177.820009][ T9053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.891572][ T9053] tls_set_device_offload: netdev not found [ 178.904495][ T9069] netlink: 256 bytes leftover after parsing attributes in process `syz.1.785'. [ 178.940562][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.785'. [ 178.944489][ T9071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.787'. [ 178.944513][ T9071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.787'. [ 178.948870][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 179.009465][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 179.011671][ T9069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.785'. [ 179.470227][ T9085] netlink: 'syz.1.789': attribute type 4 has an invalid length. [ 179.653628][ T9091] nbd0: detected capacity change from 0 to 274877906944 [ 179.761917][ T9085] syzkaller0: entered promiscuous mode [ 179.762100][ T9085] syzkaller0: entered allmulticast mode [ 180.461041][ T53] block nbd0: Receive control failed (result -104) [ 180.740371][ T9124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.984729][ T9126] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 181.145465][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 181.301740][ T9126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.306227][ T9139] sctp: [Deprecated]: syz.0.799 (pid 9139) Use of int in max_burst socket option deprecated. [ 181.306227][ T9139] Use struct sctp_assoc_value instead [ 181.421816][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.443361][ T9137] bond3: (slave team0): Enslaving as a backup interface with an up link [ 181.779310][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 182.538954][ T9159] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.538991][ T9159] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.312865][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 184.708733][ T9225] netlink: 'syz.3.818': attribute type 11 has an invalid length. [ 185.260667][ T9239] xt_hashlimit: size too large, truncated to 1048576 [ 185.394739][ T9241] syzkaller0: entered promiscuous mode [ 185.394925][ T9241] syzkaller0: entered allmulticast mode [ 185.575365][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a0a6800: rx timeout, send abort [ 185.577383][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a0a6800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.744158][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.824'. [ 185.744359][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.824'. [ 185.772389][ T9248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.824'. [ 185.779498][ T9248] ip_tables: iptables: counters copy to user failed while replacing table [ 187.335295][ T9299] syz_tun: left allmulticast mode [ 187.335662][ T9299] syz_tun: left promiscuous mode [ 187.336744][ T9299] bridge0: port 3(syz_tun) entered disabled state [ 187.645998][ T9299] bridge_slave_0: left allmulticast mode [ 187.683619][ T9299] bridge_slave_0: left promiscuous mode [ 187.684553][ T9299] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.976494][ T9299] bridge_slave_1: left allmulticast mode [ 187.979253][ T9299] bridge_slave_1: left promiscuous mode [ 188.017764][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.205305][ T9299] bond0: (slave bond_slave_1): Releasing backup interface [ 188.697266][ T9299] team0: Port device team_slave_0 removed [ 188.933099][ T9299] team0: Port device team_slave_1 removed [ 188.976563][ T9299] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.754677][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 190.365378][ T5290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.462412][ T9355] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 190.968468][ T9368] syzkaller0: entered promiscuous mode [ 190.968690][ T9368] syzkaller0: entered allmulticast mode [ 191.755764][ T9383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.849'. [ 191.885033][ T9394] netlink: 'syz.2.851': attribute type 15 has an invalid length. [ 193.342198][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 193.577316][ T9453] netlink: 'syz.3.859': attribute type 3 has an invalid length. [ 194.239528][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.844224][ T9472] ip_tables: iptables: counters copy to user failed while replacing table [ 194.985612][ T9478] x_tables: duplicate entry at hook 3 [ 195.013159][ T9478] x_tables: duplicate entry at hook 3 [ 195.109175][ T9476] syzkaller1: entered promiscuous mode [ 195.109381][ T9476] syzkaller1: entered allmulticast mode [ 195.183987][ T9476] syzkaller1: left promiscuous mode [ 195.184185][ T9476] syzkaller1: left allmulticast mode [ 197.782834][ T9547] veth0: entered promiscuous mode [ 197.893922][ T9545] veth0: left promiscuous mode [ 198.004383][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 198.464008][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 199.878429][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 200.185605][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.889'. [ 200.206254][ T9594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.889'. [ 200.315547][ T9569] dvmrp0: entered allmulticast mode [ 201.329509][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.892'. [ 201.732745][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'. [ 201.735604][ T9633] 8021q: VLANs not supported on wg1 [ 201.862342][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 201.871436][ T9636] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 202.417660][ T9653] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 202.768506][ T9653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.769864][ T9661] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 202.887391][ T9670] ip_tables: iptables: counters copy to user failed while replacing table [ 202.957870][ T9653] bond4: (slave ip6gretap1): making interface the new active one [ 202.976213][ T9653] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 202.976309][ T9656] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 203.008346][ T9656] bond4: entered allmulticast mode [ 203.008370][ T9656] ip6gretap1: entered allmulticast mode [ 203.176429][ T9636] bridge7: entered promiscuous mode [ 203.229163][ T9636] bond5: (slave bridge7): making interface the new active one [ 203.279035][ T9636] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 203.319099][ T9680] ip6t_srh: unknown srh match flags 5F28 [ 203.457524][ T9662] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 204.177155][ T9697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.908'. [ 204.341964][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.908'. [ 204.671188][ T9699] syzkaller1: entered promiscuous mode [ 204.671385][ T9699] syzkaller1: entered allmulticast mode [ 204.757829][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 206.050775][ T9730] netlink: zone id is out of range [ 206.051853][ T9730] netlink: del zone limit has 4 unknown bytes [ 206.332127][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 206.476277][ T9741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.919'. [ 207.472266][ T9763] IPv6: addrconf: prefix option has invalid lifetime [ 207.472289][ T9763] IPv6: addrconf: prefix option has invalid lifetime [ 207.587547][ T9770] lo: entered allmulticast mode [ 207.649150][ T9768] lo: left allmulticast mode [ 207.740726][ T9764] netlink: 348 bytes leftover after parsing attributes in process `syz.3.927'. [ 208.300271][ T9792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.930'. [ 208.522345][ T9800] 0: reclassify loop, rule prio 0, protocol 03 [ 208.569074][ T9800] 0: reclassify loop, rule prio 0, protocol 03 [ 209.547363][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 209.724014][ T24] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 209.769061][ T9820] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 209.994202][ T9835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.943'. [ 210.039182][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 210.286176][ T1989] block nbd0: Possible stuck request ffff888028797000: control (read@0,4096B). Runtime 30 seconds [ 210.449087][ T9844] netlink: 36 bytes leftover after parsing attributes in process `syz.3.947'. [ 211.231441][ T9860] FAULT_INJECTION: forcing a failure. [ 211.231441][ T9860] name failslab, interval 1, probability 0, space 0, times 0 [ 211.231475][ T9860] CPU: 1 UID: 0 PID: 9860 Comm: syz.0.951 Not tainted syzkaller #0 PREEMPT(full) [ 211.231496][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 211.231509][ T9860] Call Trace: [ 211.231517][ T9860] [ 211.231526][ T9860] dump_stack_lvl+0xe8/0x150 [ 211.231560][ T9860] should_fail_ex+0x410/0x560 [ 211.231590][ T9860] ? __alloc_skb+0x1db/0x7a0 [ 211.231612][ T9860] should_failslab+0xa8/0x100 [ 211.231641][ T9860] ? __alloc_skb+0x1db/0x7a0 [ 211.231661][ T9860] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 211.231685][ T9860] ? __alloc_skb+0x18d/0x7a0 [ 211.231706][ T9860] ? preempt_schedule_thunk+0x16/0x40 [ 211.231727][ T9860] ? __alloc_skb+0x1db/0x7a0 [ 211.231756][ T9860] __alloc_skb+0x1db/0x7a0 [ 211.231783][ T9860] netlink_sendmsg+0x5cd/0xb20 [ 211.231810][ T9860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.231832][ T9860] ? aa_sock_msg_perm+0x144/0x210 [ 211.231857][ T9860] ? apparmor_socket_sendmsg+0x18b/0x360 [ 211.231877][ T9860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.231895][ T9860] sock_sendmsg_nosec+0x14e/0x190 [ 211.231925][ T9860] ____sys_sendmsg+0x54e/0x850 [ 211.231955][ T9860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.231990][ T9860] ? import_iovec+0x73/0xa0 [ 211.232019][ T9860] ___sys_sendmsg+0x2a5/0x360 [ 211.232042][ T9860] ? __lock_acquire+0x747/0x2de0 [ 211.232075][ T9860] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.232138][ T9860] ? __fget_files+0x3a2/0x420 [ 211.232159][ T9860] ? __fget_files+0x2a/0x420 [ 211.232189][ T9860] __x64_sys_sendmsg+0x1b1/0x290 [ 211.232218][ T9860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.232265][ T9860] do_syscall_64+0x166/0x520 [ 211.232290][ T9860] ? trace_irq_disable+0x3b/0x140 [ 211.232318][ T9860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.232338][ T9860] ? clear_bhb_loop+0x70/0xc0 [ 211.232362][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.232382][ T9860] RIP: 0033:0x7f65bef9f559 [ 211.232401][ T9860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.232416][ T9860] RSP: 002b:00007f65bd1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.232437][ T9860] RAX: ffffffffffffffda RBX: 00007f65bf225fa0 RCX: 00007f65bef9f559 [ 211.232452][ T9860] RDX: 0000000020004000 RSI: 0000200000001380 RDI: 0000000000000003 [ 211.232464][ T9860] RBP: 00007f65bd1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.232477][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.232488][ T9860] R13: 00007f65bf226038 R14: 00007f65bf225fa0 R15: 00007ffdb459ece8 [ 211.232520][ T9860] [ 211.424379][ T9866] TCP: TCP_TX_DELAY enabled [ 212.022391][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 212.022416][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.954'. [ 212.602173][ T9893] netlink: 'syz.4.960': attribute type 21 has an invalid length. [ 212.785239][ T9900] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 212.852258][ T9900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.962'. [ 214.057920][ T9943] ip_tables: iptables: counters copy to user failed while replacing table [ 214.715042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.715120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.120739][ T9959] FAULT_INJECTION: forcing a failure. [ 215.120739][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 215.120788][ T9959] CPU: 0 UID: 0 PID: 9959 Comm: syz.0.974 Not tainted syzkaller #0 PREEMPT(full) [ 215.120808][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 215.120818][ T9959] Call Trace: [ 215.120827][ T9959] [ 215.120836][ T9959] dump_stack_lvl+0xe8/0x150 [ 215.120870][ T9959] should_fail_ex+0x410/0x560 [ 215.120897][ T9959] should_failslab+0xa8/0x100 [ 215.120922][ T9959] ? skb_clone+0x212/0x3a0 [ 215.120948][ T9959] kmem_cache_alloc_noprof+0x9c/0x600 [ 215.120973][ T9959] ? skb_clone+0x212/0x3a0 [ 215.121002][ T9959] skb_clone+0x212/0x3a0 [ 215.121029][ T9959] __netlink_deliver_tap+0x355/0x6e0 [ 215.121058][ T9959] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.121079][ T9959] netlink_deliver_tap+0x19c/0x1b0 [ 215.121100][ T9959] netlink_unicast+0x8c1/0xa80 [ 215.121144][ T9959] netlink_sendmsg+0x7f0/0xb20 [ 215.121172][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.121198][ T9959] ? aa_sock_msg_perm+0x144/0x210 [ 215.121227][ T9959] ? apparmor_socket_sendmsg+0x18b/0x360 [ 215.121250][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.121269][ T9959] sock_sendmsg_nosec+0x14e/0x190 [ 215.121305][ T9959] ____sys_sendmsg+0x54e/0x850 [ 215.121335][ T9959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.121373][ T9959] ? import_iovec+0x73/0xa0 [ 215.121404][ T9959] ___sys_sendmsg+0x2a5/0x360 [ 215.121428][ T9959] ? __lock_acquire+0x747/0x2de0 [ 215.121456][ T9959] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.121516][ T9959] ? __fget_files+0x3a2/0x420 [ 215.121543][ T9959] ? __fget_files+0x2a/0x420 [ 215.121574][ T9959] __x64_sys_sendmsg+0x1b1/0x290 [ 215.121603][ T9959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.121653][ T9959] do_syscall_64+0x166/0x520 [ 215.121678][ T9959] ? trace_irq_disable+0x3b/0x140 [ 215.121700][ T9959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.121718][ T9959] ? clear_bhb_loop+0x70/0xc0 [ 215.121743][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.121771][ T9959] RIP: 0033:0x7f65bef9f559 [ 215.121790][ T9959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.121806][ T9959] RSP: 002b:00007f65bd1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.121828][ T9959] RAX: ffffffffffffffda RBX: 00007f65bf225fa0 RCX: 00007f65bef9f559 [ 215.121843][ T9959] RDX: 0000000020004000 RSI: 0000200000001380 RDI: 0000000000000003 [ 215.121856][ T9959] RBP: 00007f65bd1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.121868][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.121880][ T9959] R13: 00007f65bf226038 R14: 00007f65bf225fa0 R15: 00007ffdb459ece8 [ 215.121908][ T9959] [ 216.284475][ T9970] syzkaller0: entered promiscuous mode [ 216.284669][ T9970] syzkaller0: entered allmulticast mode [ 216.571947][ T9990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.980'. [ 216.701221][ T9994] Cannot find add_set index 0 as target [ 216.769915][ T9997] netlink: 'syz.2.982': attribute type 29 has an invalid length. [ 219.193509][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.848682][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.736414][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 223.895942][T10028] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 224.265034][T10034] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.374017][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 224.374041][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 224.543390][T10034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.579440][T10034] bond5: (slave bond0): making interface the new active one [ 224.603057][T10034] bond5: (slave bond0): Enslaving as an active interface with an up link [ 224.845101][T10038] bond5 (unregistering): (slave bond0): Releasing active interface [ 224.880422][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.994'. [ 224.920100][T10038] bond5 (unregistering): Released all slaves [ 225.051730][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.051942][ T1122] bridge0: port 2(bridge_slave_1) entered listening state [ 225.059985][ T1122] bridge0: port 3(veth1_to_bridge) entered blocking state [ 225.060097][ T1122] bridge0: port 3(veth1_to_bridge) entered listening state [ 225.219293][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'. [ 226.873123][ C0] bridge0: port 3(veth1_to_bridge) entered blocking state [ 229.231155][T10086] bond0: entered allmulticast mode [ 229.231180][T10086] bond_slave_0: entered allmulticast mode [ 229.231539][T10086] bond_slave_1: entered allmulticast mode [ 229.231921][T10086] team0: entered allmulticast mode [ 229.231936][T10086] team_slave_0: entered allmulticast mode [ 229.232290][T10086] team_slave_1: entered allmulticast mode [ 229.432073][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.669172][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1006'. [ 239.053202][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.176069][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.183198][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.189111][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.206185][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.214437][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.282570][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.283285][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.283984][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.299399][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.316459][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 240.326906][ T1989] block nbd0: Possible stuck request ffff888028797000: control (read@0,4096B). Runtime 60 seconds [ 240.329331][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.129995][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.136837][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.138571][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.140270][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.142385][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.335223][T10096] rxe_eth0 speed is unknown, defaulting to 1000 [ 242.307449][T10111] rxe_eth0 speed is unknown, defaulting to 1000 [ 242.390974][ T53] Bluetooth: hci5: command tx timeout [ 243.271043][ T53] Bluetooth: hci6: command tx timeout [ 243.927989][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.941556][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.943475][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.945512][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.946820][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.126042][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 244.129464][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 244.130458][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 244.141786][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 244.147577][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 244.480956][ T5629] Bluetooth: hci5: command tx timeout [ 245.168561][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.169009][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.169336][T10096] bridge_slave_0: entered allmulticast mode [ 245.216676][T10096] bridge_slave_0: entered promiscuous mode [ 245.339759][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.340219][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.340551][T10096] bridge_slave_1: entered allmulticast mode [ 245.346687][T10096] bridge_slave_1: entered promiscuous mode [ 245.355760][ T5629] Bluetooth: hci6: command tx timeout [ 245.732293][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.750759][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.880308][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 245.891690][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 245.895604][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 245.917545][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 245.918854][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 245.992542][ T5629] Bluetooth: hci7: command tx timeout [ 246.000545][T10096] team0: Port device team_slave_0 added [ 246.029069][T10096] team0: Port device team_slave_1 added [ 246.129714][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.131353][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.131379][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.138410][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.138426][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.138450][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.391342][ T5629] Bluetooth: hci8: command tx timeout [ 246.482563][T10096] hsr_slave_0: entered promiscuous mode [ 246.490426][T10096] hsr_slave_1: entered promiscuous mode [ 246.504162][T10127] rxe_eth0 speed is unknown, defaulting to 1000 [ 246.551355][ T5629] Bluetooth: hci5: command tx timeout [ 247.126569][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.128996][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.129333][T10111] bridge_slave_0: entered allmulticast mode [ 247.158225][T10111] bridge_slave_0: entered promiscuous mode [ 247.239028][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.240012][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.240574][T10111] bridge_slave_1: entered allmulticast mode [ 247.272139][T10111] bridge_slave_1: entered promiscuous mode [ 247.437439][T10130] rxe_eth0 speed is unknown, defaulting to 1000 [ 247.451149][ T5629] Bluetooth: hci6: command tx timeout [ 247.628483][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.797209][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.991080][ T5629] Bluetooth: hci9: command tx timeout [ 248.070970][ T5629] Bluetooth: hci7: command tx timeout [ 248.303338][T10111] team0: Port device team_slave_0 added [ 248.416176][T10111] team0: Port device team_slave_1 added [ 248.471691][ T5629] Bluetooth: hci8: command tx timeout [ 248.631296][ T5629] Bluetooth: hci5: command tx timeout [ 248.631868][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.811296][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.811314][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.811339][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.884043][T10152] rxe_eth0 speed is unknown, defaulting to 1000 [ 248.887828][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.887846][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.887872][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.513689][ T5629] Bluetooth: hci6: command tx timeout [ 249.999442][T10111] hsr_slave_0: entered promiscuous mode [ 250.002274][T10111] hsr_slave_1: entered promiscuous mode [ 250.003964][T10111] debugfs: 'hsr0' already exists in 'hsr' [ 250.003983][T10111] Cannot create hsr debugfs directory [ 250.081155][ T5629] Bluetooth: hci9: command tx timeout [ 250.160934][ T5629] Bluetooth: hci7: command tx timeout [ 250.551147][ T5629] Bluetooth: hci8: command tx timeout [ 252.010502][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.018306][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.018655][T10127] bridge_slave_0: entered allmulticast mode [ 252.036197][T10127] bridge_slave_0: entered promiscuous mode [ 252.117900][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.118357][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.118680][T10127] bridge_slave_1: entered allmulticast mode [ 252.123739][T10127] bridge_slave_1: entered promiscuous mode [ 252.151898][ T5629] Bluetooth: hci9: command tx timeout [ 252.233723][ T5629] Bluetooth: hci7: command tx timeout [ 252.483700][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.631474][ T5629] Bluetooth: hci8: command tx timeout [ 252.847967][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.422982][T10127] team0: Port device team_slave_0 added [ 253.441822][T10127] team0: Port device team_slave_1 added [ 253.598349][T10130] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.598807][T10130] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.599128][T10130] bridge_slave_0: entered allmulticast mode [ 253.639476][T10130] bridge_slave_0: entered promiscuous mode [ 253.857109][T10130] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.857572][T10130] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.858211][T10130] bridge_slave_1: entered allmulticast mode [ 253.887483][T10130] bridge_slave_1: entered promiscuous mode [ 253.967098][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.967126][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.967153][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.241244][ T5629] Bluetooth: hci9: command tx timeout [ 254.299046][T10130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.326514][T10130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.471977][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.471996][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.472021][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.652534][T10130] team0: Port device team_slave_0 added [ 254.684856][T10130] team0: Port device team_slave_1 added [ 255.446276][T10152] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.446836][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.447175][T10152] bridge_slave_0: entered allmulticast mode [ 255.452616][T10152] bridge_slave_0: entered promiscuous mode [ 255.463107][T10152] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.466026][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.466625][T10152] bridge_slave_1: entered allmulticast mode [ 255.470865][T10152] bridge_slave_1: entered promiscuous mode [ 255.599350][T10127] hsr_slave_0: entered promiscuous mode [ 255.607094][T10127] hsr_slave_1: entered promiscuous mode [ 255.611188][T10127] debugfs: 'hsr0' already exists in 'hsr' [ 255.611213][T10127] Cannot create hsr debugfs directory [ 255.677776][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.677798][ C1] bridge0: topology change detected, propagating [ 255.736354][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.771013][T10130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.771031][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.771056][T10130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.775231][T10130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.775246][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.775268][T10130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.167699][T10152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.189628][T10152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.650901][ T4995] udevd[4995]: worker [8978] /devices/virtual/block/nbd0 is taking a long time [ 256.824550][T10130] hsr_slave_0: entered promiscuous mode [ 256.829382][T10130] hsr_slave_1: entered promiscuous mode [ 256.834804][T10130] debugfs: 'hsr0' already exists in 'hsr' [ 256.834826][T10130] Cannot create hsr debugfs directory [ 256.912900][T10152] team0: Port device team_slave_0 added [ 257.107983][T10152] team0: Port device team_slave_1 added [ 257.460663][T10152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.460683][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.460708][T10152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.623701][T10152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.623720][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.623749][T10152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.135877][T10152] hsr_slave_0: entered promiscuous mode [ 258.147171][T10152] hsr_slave_1: entered promiscuous mode [ 258.156753][T10152] debugfs: 'hsr0' already exists in 'hsr' [ 258.156776][T10152] Cannot create hsr debugfs directory [ 258.247225][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.842148][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.391652][ T1989] block nbd0: Possible stuck request ffff888028797000: control (read@0,4096B). Runtime 90 seconds [ 277.441639][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.467466][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.467531][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.467579][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.467634][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.548737][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.548829][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.548880][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.590322][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.043505][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.632198][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.183380][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 300.187046][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 300.188431][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 300.207400][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 300.208782][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 300.472016][ T1989] block nbd0: Possible stuck request ffff888028797000: control (read@0,4096B). Runtime 120 seconds [ 301.301945][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 301.306029][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 301.308113][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 301.310448][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 301.311883][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 302.310939][ T5629] Bluetooth: hci10: command tx timeout [ 302.590379][T10195] rxe_eth0 speed is unknown, defaulting to 1000 [ 303.294285][T10203] rxe_eth0 speed is unknown, defaulting to 1000 [ 303.350920][ T5629] Bluetooth: hci11: command tx timeout [ 304.390932][ T5629] Bluetooth: hci10: command tx timeout [ 304.803347][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 304.808897][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 304.829125][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 304.858985][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 304.860365][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 304.937805][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 304.950190][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 304.968338][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 305.028631][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 305.030019][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 305.430892][ T5629] Bluetooth: hci11: command tx timeout [ 305.458400][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.458854][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.459180][T10195] bridge_slave_0: entered allmulticast mode [ 305.493019][T10195] bridge_slave_0: entered promiscuous mode [ 305.521493][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.521921][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.522265][T10195] bridge_slave_1: entered allmulticast mode [ 305.572016][T10195] bridge_slave_1: entered promiscuous mode [ 306.079065][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.128313][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.412118][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.474906][ T5629] Bluetooth: hci10: command tx timeout [ 306.587248][T10195] team0: Port device team_slave_0 added [ 306.667766][T10195] team0: Port device team_slave_1 added [ 306.982015][ T5629] Bluetooth: hci12: command tx timeout [ 307.106439][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 307.110567][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 307.133215][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 307.159332][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 307.174971][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 307.192563][ T53] Bluetooth: hci13: command tx timeout [ 307.283278][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.283296][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.283321][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.501002][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.501022][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.501046][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.511353][ T5629] Bluetooth: hci11: command tx timeout [ 308.109560][T10195] hsr_slave_0: entered promiscuous mode [ 308.124374][T10195] hsr_slave_1: entered promiscuous mode [ 308.127657][T10195] debugfs: 'hsr0' already exists in 'hsr' [ 308.127680][T10195] Cannot create hsr debugfs directory [ 308.551087][ T53] Bluetooth: hci10: command tx timeout [ 308.961880][T10223] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.050931][ T53] Bluetooth: hci12: command tx timeout [ 309.273015][ T53] Bluetooth: hci14: command tx timeout [ 309.273646][ T53] Bluetooth: hci13: command tx timeout [ 309.601706][ T5629] Bluetooth: hci11: command tx timeout [ 310.208118][T10224] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.350242][T10203] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.350793][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.351159][T10203] bridge_slave_0: entered allmulticast mode [ 310.368209][T10203] bridge_slave_0: entered promiscuous mode [ 310.512295][T10203] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.512746][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.513352][T10203] bridge_slave_1: entered allmulticast mode [ 310.518065][T10203] bridge_slave_1: entered promiscuous mode [ 311.180885][ T5629] Bluetooth: hci12: command tx timeout [ 311.305822][T10203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.353882][ T5629] Bluetooth: hci13: command tx timeout [ 311.353920][ T5629] Bluetooth: hci14: command tx timeout [ 311.557167][T10203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.690804][T10241] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.249086][T10203] team0: Port device team_slave_0 added [ 312.615928][T10203] team0: Port device team_slave_1 added [ 312.971596][T10203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.971614][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.971638][T10203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.979713][T10203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.979728][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.979753][T10203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.191093][ T53] Bluetooth: hci12: command tx timeout [ 313.430969][ T53] Bluetooth: hci14: command tx timeout [ 313.431003][ T53] Bluetooth: hci13: command tx timeout [ 313.679912][T10203] hsr_slave_0: entered promiscuous mode [ 313.690475][T10203] hsr_slave_1: entered promiscuous mode [ 313.698269][T10203] debugfs: 'hsr0' already exists in 'hsr' [ 313.698291][T10203] Cannot create hsr debugfs directory [ 315.469844][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.470339][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.470667][T10223] bridge_slave_0: entered allmulticast mode [ 315.501537][T10223] bridge_slave_0: entered promiscuous mode [ 315.512194][ T5629] Bluetooth: hci14: command tx timeout [ 315.729231][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.729687][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.729992][T10223] bridge_slave_1: entered allmulticast mode [ 315.768038][T10223] bridge_slave_1: entered promiscuous mode [ 315.846288][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.240477][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.272419][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.816460][T10223] team0: Port device team_slave_0 added [ 316.817858][T10224] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.818358][T10224] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.818674][T10224] bridge_slave_0: entered allmulticast mode [ 316.826860][T10224] bridge_slave_0: entered promiscuous mode [ 316.932825][T10223] team0: Port device team_slave_1 added [ 316.933380][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.933822][T10224] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.934468][T10224] bridge_slave_1: entered allmulticast mode [ 316.962670][T10224] bridge_slave_1: entered promiscuous mode [ 317.123039][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.359222][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.359240][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.359266][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.477395][T10224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.498596][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.498614][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.498641][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.626034][T10224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.158198][T10224] team0: Port device team_slave_0 added [ 318.287082][T10224] team0: Port device team_slave_1 added [ 318.370399][T10223] hsr_slave_0: entered promiscuous mode [ 318.389714][T10223] hsr_slave_1: entered promiscuous mode [ 318.447870][T10223] debugfs: 'hsr0' already exists in 'hsr' [ 318.447896][T10223] Cannot create hsr debugfs directory [ 318.801099][T10224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.801118][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.801146][T10224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.865626][T10224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.865646][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.865674][T10224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.576107][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.576571][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.577174][T10241] bridge_slave_0: entered allmulticast mode [ 319.583131][T10241] bridge_slave_0: entered promiscuous mode [ 319.751950][T10241] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.752401][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.752724][T10241] bridge_slave_1: entered allmulticast mode [ 319.758584][T10241] bridge_slave_1: entered promiscuous mode [ 320.002391][T10224] hsr_slave_0: entered promiscuous mode [ 320.006985][T10224] hsr_slave_1: entered promiscuous mode [ 320.008872][T10224] debugfs: 'hsr0' already exists in 'hsr' [ 320.008891][T10224] Cannot create hsr debugfs directory [ 320.540993][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.724768][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.019770][T10241] team0: Port device team_slave_0 added [ 321.050196][T10241] team0: Port device team_slave_1 added [ 321.585773][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.585793][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.585825][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.635869][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.635887][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.653470][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.321894][T10241] hsr_slave_0: entered promiscuous mode [ 322.327550][T10241] hsr_slave_1: entered promiscuous mode [ 322.329397][T10241] debugfs: 'hsr0' already exists in 'hsr' [ 322.329418][T10241] Cannot create hsr debugfs directory [ 325.433215][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.662837][ T1989] block nbd0: Possible stuck request ffff888028797000: control (read@0,4096B). Runtime 150 seconds [ 332.475975][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.476976][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.477034][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.072402][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.720843][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.720910][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.322777][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.963496][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.071548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.071619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.166590][ T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 361.169125][ T53] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 361.170482][ T53] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 361.207314][ T53] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 361.208698][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 361.272225][ T1989] block nbd0: Possible stuck request ffff888028797000: control (read@0,4096B). Runtime 180 seconds [ 362.524587][ T53] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 362.552468][ T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 362.554401][ T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 362.571656][ T2260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.607823][ T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 362.609938][ T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 363.157631][T10290] rxe_eth0 speed is unknown, defaulting to 1000 [ 363.271275][ T4946] Bluetooth: hci15: command tx timeout [ 364.477494][T10300] rxe_eth0 speed is unknown, defaulting to 1000 [ 364.721759][ T4946] Bluetooth: hci16: command tx timeout [ 365.259680][ T5630] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 365.270044][ T5630] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 365.274004][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 365.279039][ T5630] Bluetooth: hci6: command 0x0406 tx timeout [ 365.297122][ T5630] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 365.299154][ T5630] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 365.300442][ T5630] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 365.357069][ T5626] Bluetooth: hci15: command tx timeout [ 365.707162][ T5626] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 365.709023][ T5626] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 365.710235][ T5626] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 365.742366][ T5626] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 365.743685][ T5626] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 366.791525][ T53] Bluetooth: hci16: command tx timeout [ 367.090141][T10290] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.090596][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.090899][T10290] bridge_slave_0: entered allmulticast mode [ 367.134577][T10290] bridge_slave_0: entered promiscuous mode [ 367.213674][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.214132][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.214751][T10290] bridge_slave_1: entered allmulticast mode [ 367.263760][T10290] bridge_slave_1: entered promiscuous mode [ 367.438071][ T53] Bluetooth: hci15: command tx timeout [ 367.512105][ T53] Bluetooth: hci17: command tx timeout [ 367.815237][T10290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.829779][T10290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.869938][ T53] Bluetooth: hci18: command tx timeout [ 368.007878][ T5626] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 368.021542][ T5626] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 368.084694][ T5626] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 368.087811][ T5626] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 368.089248][ T5626] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 368.448412][T10290] team0: Port device team_slave_0 added [ 368.516289][T10290] team0: Port device team_slave_1 added [ 368.855381][T10290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.855400][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.855427][T10290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.896643][ T5630] Bluetooth: hci16: command tx timeout [ 368.932261][T10290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.932280][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.932307][T10290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.253792][T10319] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.511189][ T5630] Bluetooth: hci15: command tx timeout [ 369.591319][ T5630] Bluetooth: hci17: command tx timeout [ 369.658965][T10290] hsr_slave_0: entered promiscuous mode [ 369.678061][T10290] hsr_slave_1: entered promiscuous mode [ 369.679992][T10290] debugfs: 'hsr0' already exists in 'hsr' [ 369.680013][T10290] Cannot create hsr debugfs directory [ 369.911007][ T5630] Bluetooth: hci18: command tx timeout [ 370.150990][ T5630] Bluetooth: hci19: command tx timeout [ 370.391583][ T5630] Bluetooth: hci9: command 0x0406 tx timeout [ 370.392226][ T5630] Bluetooth: hci7: command 0x0406 tx timeout [ 370.392486][ T5630] Bluetooth: hci8: command 0x0406 tx timeout [ 370.961248][ T5626] Bluetooth: hci16: command tx timeout [ 371.244218][T10316] rxe_eth0 speed is unknown, defaulting to 1000 [ 371.671532][ T5626] Bluetooth: hci17: command tx timeout [ 371.922804][T10300] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.923256][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.923657][T10300] bridge_slave_0: entered allmulticast mode [ 371.926098][T10300] bridge_slave_0: entered promiscuous mode [ 371.990815][ T5626] Bluetooth: hci18: command tx timeout [ 372.160781][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.233201][ T5626] Bluetooth: hci19: command tx timeout [ 372.261372][T10300] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.261879][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.262237][T10300] bridge_slave_1: entered allmulticast mode [ 372.264417][T10300] bridge_slave_1: entered promiscuous mode [ 372.481562][T10338] rxe_eth0 speed is unknown, defaulting to 1000 [ 372.811115][ T32] INFO: task syz.2.992:10044 blocked for more than 143 seconds. [ 372.811146][ T32] Not tainted syzkaller #0 [ 372.811157][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.811179][ T32] task:syz.2.992 state:D stack:25976 pid:10044 tgid:10042 ppid:5642 task_flags:0x480140 flags:0x00080002 [ 372.811243][ T32] Call Trace: [ 372.811339][ T32] [ 372.811361][ T32] __schedule+0x17dd/0x5820 [ 372.811563][ T32] ? __lock_acquire+0x747/0x2de0 [ 372.811686][ T32] ? __pfx___schedule+0x10/0x10 [ 372.811708][ T32] ? lock_acquire+0x115/0x350 [ 372.811741][ T32] ? schedule+0x90/0x2b0 [ 372.811768][ T32] schedule+0x164/0x2b0 [ 372.811796][ T32] blk_mq_freeze_queue_wait+0xfc/0x180 [ 372.811913][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 372.811944][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 372.811988][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 372.812018][ T32] nbd_set_size+0x4c5/0x7d0 [ 372.812120][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 372.812171][ T32] ? nla_memcpy+0x5b/0xc0 [ 372.812274][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 372.812315][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 372.812346][ T32] ? __kmalloc_noprof+0x387/0x710 [ 372.812398][ T32] ? __nla_parse+0x40/0x60 [ 372.812432][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 372.812550][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 372.812585][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 372.812624][ T32] ? __lock_acquire+0x747/0x2de0 [ 372.812657][ T32] genl_rcv_msg+0x614/0x7a0 [ 372.812691][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.812717][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 372.812760][ T32] netlink_rcv_skb+0x226/0x4a0 [ 372.812782][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.812810][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.812849][ T32] ? down_read+0x2b9/0x320 [ 372.812907][ T32] genl_rcv+0x28/0x40 [ 372.812931][ T32] netlink_unicast+0x8ef/0xa80 [ 372.813007][ T32] netlink_sendmsg+0x7f0/0xb20 [ 372.813036][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.813061][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 372.813148][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 372.813172][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.813192][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 372.813299][ T32] ____sys_sendmsg+0x54e/0x850 [ 372.813332][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.813370][ T32] ? import_iovec+0x73/0xa0 [ 372.813426][ T32] ___sys_sendmsg+0x2a5/0x360 [ 372.813451][ T32] ? __lock_acquire+0x747/0x2de0 [ 372.813478][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.813510][ T32] ? futex_wake+0x51b/0x5f0 [ 372.813578][ T32] ? __fget_files+0x3a2/0x420 [ 372.813609][ T32] ? __fget_files+0x2a/0x420 [ 372.813641][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 372.813672][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.813722][ T32] do_syscall_64+0x166/0x520 [ 372.813777][ T32] ? trace_irq_disable+0x3b/0x140 [ 372.813808][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.813847][ T32] ? clear_bhb_loop+0x70/0xc0 [ 372.813873][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.813895][ T32] RIP: 0033:0x7f51c8b9f559 [ 372.814131][ T32] RSP: 002b:00007f51c9a1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.814184][ T32] RAX: ffffffffffffffda RBX: 00007f51c8e25fa0 RCX: 00007f51c8b9f559 [ 372.814199][ T32] RDX: 0000000000004004 RSI: 0000200000000cc0 RDI: 0000000000000007 [ 372.814213][ T32] RBP: 00007f51c8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 372.814226][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.814239][ T32] R13: 00007f51c8e26038 R14: 00007f51c8e25fa0 R15: 00007fffe3021898 [ 372.814275][ T32] [ 372.814285][ T32] INFO: task syz.2.992:10047 blocked for more than 143 seconds. [ 372.814301][ T32] Not tainted syzkaller #0 [ 372.814311][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.814321][ T32] task:syz.2.992 state:D stack:24328 pid:10047 tgid:10042 ppid:5642 task_flags:0x400140 flags:0x00080002 [ 372.814371][ T32] Call Trace: [ 372.814377][ T32] [ 372.814389][ T32] __schedule+0x17dd/0x5820 [ 372.814444][ T32] ? __pfx___schedule+0x10/0x10 [ 372.814479][ T32] ? schedule+0x90/0x2b0 [ 372.814506][ T32] schedule+0x164/0x2b0 [ 372.814533][ T32] schedule_preempt_disabled+0x13/0x30 [ 372.814558][ T32] __mutex_lock+0x7c4/0x15a0 [ 372.814588][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 372.814619][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 372.814647][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 372.814675][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 372.814764][ T32] ? radix_tree_lookup+0x240/0x290 [ 372.814844][ T32] genl_rcv_msg+0x10b/0x7a0 [ 372.814877][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.814921][ T32] netlink_rcv_skb+0x226/0x4a0 [ 372.814945][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.814973][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.815012][ T32] ? down_read+0x2b9/0x320 [ 372.815045][ T32] genl_rcv+0x28/0x40 [ 372.815076][ T32] netlink_unicast+0x8ef/0xa80 [ 372.815124][ T32] netlink_sendmsg+0x7f0/0xb20 [ 372.815153][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.815179][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 372.815208][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 372.815232][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.815252][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 372.815287][ T32] __sys_sendto+0x408/0x5a0 [ 372.815317][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 372.815371][ T32] ? rcu_is_watching+0x16/0xb0 [ 372.815412][ T32] __x64_sys_sendto+0xde/0x100 [ 372.815445][ T32] do_syscall_64+0x166/0x520 [ 372.815470][ T32] ? trace_irq_disable+0x3b/0x140 [ 372.815494][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.815514][ T32] ? clear_bhb_loop+0x70/0xc0 [ 372.815539][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.815559][ T32] RIP: 0033:0x7f51c8b5fd8e [ 372.815649][ T32] RSP: 002b:00007f51c99f8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 372.815680][ T32] RAX: ffffffffffffffda RBX: 00007f51c99fa6c0 RCX: 00007f51c8b5fd8e [ 372.815696][ T32] RDX: 0000000000000020 RSI: 00007f51c99f9000 RDI: 000000000000000b [ 372.815710][ T32] RBP: 0000000000000000 R08: 00007f51c99f8f04 R09: 000000000000000c [ 372.815723][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 372.815735][ T32] R13: 00007f51c99f8f58 R14: 00007f51c99f9000 R15: 0000000000000000 [ 372.815772][ T32] [ 372.815783][ T32] INFO: task syz.2.992:10048 blocked for more than 143 seconds. [ 372.815801][ T32] Not tainted syzkaller #0 [ 372.815812][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.815822][ T32] task:syz.2.992 state:D stack:27168 pid:10048 tgid:10042 ppid:5642 task_flags:0x400140 flags:0x00080002 [ 372.815876][ T32] Call Trace: [ 372.815889][ T32] [ 372.815902][ T32] __schedule+0x17dd/0x5820 [ 372.815964][ T32] ? __pfx___schedule+0x10/0x10 [ 372.816001][ T32] ? schedule+0x90/0x2b0 [ 372.816048][ T32] schedule+0x164/0x2b0 [ 372.816076][ T32] schedule_preempt_disabled+0x13/0x30 [ 372.816101][ T32] __mutex_lock+0x7c4/0x15a0 [ 372.816132][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 372.816162][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 372.816191][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 372.816220][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 372.816262][ T32] ? radix_tree_lookup+0x240/0x290 [ 372.816292][ T32] genl_rcv_msg+0x10b/0x7a0 [ 372.816326][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.816393][ T32] netlink_rcv_skb+0x226/0x4a0 [ 372.816418][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.816446][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.816484][ T32] ? down_read+0x2b9/0x320 [ 372.835449][ T32] genl_rcv+0x28/0x40 [ 372.835491][ T32] netlink_unicast+0x8ef/0xa80 [ 372.835541][ T32] netlink_sendmsg+0x7f0/0xb20 [ 372.835571][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.835598][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 372.835628][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 372.835651][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.835672][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 372.835709][ T32] __sys_sendto+0x408/0x5a0 [ 372.835740][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 372.835792][ T32] ? fd_install+0x95/0x4e0 [ 372.835822][ T32] __x64_sys_sendto+0xde/0x100 [ 372.835851][ T32] do_syscall_64+0x166/0x520 [ 372.835878][ T32] ? trace_irq_disable+0x3b/0x140 [ 372.835904][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.835926][ T32] ? clear_bhb_loop+0x70/0xc0 [ 372.836137][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.836159][ T32] RIP: 0033:0x7f51c8b5fd8e [ 372.836178][ T32] RSP: 002b:00007f51c99d7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 372.836198][ T32] RAX: ffffffffffffffda RBX: 00007f51c99d96c0 RCX: 00007f51c8b5fd8e [ 372.836214][ T32] RDX: 0000000000000020 RSI: 00007f51c99d8000 RDI: 000000000000000c [ 372.836228][ T32] RBP: 0000000000000000 R08: 00007f51c99d7f04 R09: 000000000000000c [ 372.836241][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 372.836254][ T32] R13: 00007f51c99d7f58 R14: 00007f51c99d8000 R15: 0000000000000000 [ 372.836288][ T32] [ 372.836300][ T32] INFO: task syz.4.1000:10066 blocked for more than 143 seconds. [ 372.836316][ T32] Not tainted syzkaller #0 [ 372.836327][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.836336][ T32] task:syz.4.1000 state:D stack:27840 pid:10066 tgid:10065 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 372.836391][ T32] Call Trace: [ 372.836398][ T32] [ 372.836411][ T32] __schedule+0x17dd/0x5820 [ 372.836466][ T32] ? __pfx___schedule+0x10/0x10 [ 372.836501][ T32] ? schedule+0x90/0x2b0 [ 372.836528][ T32] schedule+0x164/0x2b0 [ 372.836555][ T32] schedule_preempt_disabled+0x13/0x30 [ 372.836579][ T32] __mutex_lock+0x7c4/0x15a0 [ 372.836611][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 372.836642][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 372.836671][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 372.836699][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 372.836740][ T32] ? radix_tree_lookup+0x240/0x290 [ 372.836770][ T32] genl_rcv_msg+0x10b/0x7a0 [ 372.836802][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.836846][ T32] netlink_rcv_skb+0x226/0x4a0 [ 372.836869][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.836898][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.836935][ T32] ? down_read+0x2b9/0x320 [ 372.836968][ T32] genl_rcv+0x28/0x40 [ 372.836992][ T32] netlink_unicast+0x8ef/0xa80 [ 372.837047][ T32] netlink_sendmsg+0x7f0/0xb20 [ 372.837075][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.837101][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 372.837130][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 372.837154][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.837175][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 372.837209][ T32] __sys_sendto+0x408/0x5a0 [ 372.837239][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 372.837320][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 372.837394][ T32] __x64_sys_sendto+0xde/0x100 [ 372.837423][ T32] do_syscall_64+0x166/0x520 [ 372.837449][ T32] ? trace_irq_disable+0x3b/0x140 [ 372.837472][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.837492][ T32] ? clear_bhb_loop+0x70/0xc0 [ 372.837528][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.837551][ T32] RIP: 0033:0x7f54c535fd8e [ 372.837568][ T32] RSP: 002b:00007f54c35f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 372.837589][ T32] RAX: ffffffffffffffda RBX: 00007f54c35f66c0 RCX: 00007f54c535fd8e [ 372.837604][ T32] RDX: 0000000000000020 RSI: 00007f54c35f5000 RDI: 0000000000000003 [ 372.837618][ T32] RBP: 0000000000000000 R08: 00007f54c35f4f04 R09: 000000000000000c [ 372.837646][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 372.837672][ T32] R13: 00007f54c35f4f58 R14: 00007f54c35f5000 R15: 0000000000000000 [ 372.837719][ T32] [ 372.837727][ T32] INFO: task syz.4.1000:10067 blocked for more than 143 seconds. [ 372.837747][ T32] Not tainted syzkaller #0 [ 372.837758][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.837783][ T32] task:syz.4.1000 state:D stack:27840 pid:10067 tgid:10065 ppid:5623 task_flags:0x400040 flags:0x00080002 [ 372.837884][ T32] Call Trace: [ 372.837891][ T32] [ 372.837905][ T32] __schedule+0x17dd/0x5820 [ 372.837982][ T32] ? __pfx___schedule+0x10/0x10 [ 372.838018][ T32] ? schedule+0x90/0x2b0 [ 372.838053][ T32] schedule+0x164/0x2b0 [ 372.838080][ T32] schedule_preempt_disabled+0x13/0x30 [ 372.838103][ T32] __mutex_lock+0x7c4/0x15a0 [ 372.838144][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 372.838196][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 372.838225][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 372.838253][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 372.838294][ T32] ? radix_tree_lookup+0x240/0x290 [ 372.838349][ T32] genl_rcv_msg+0x10b/0x7a0 [ 372.838384][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.838429][ T32] netlink_rcv_skb+0x226/0x4a0 [ 372.838451][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.838480][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.838514][ T32] ? down_read+0x2b9/0x320 [ 372.838546][ T32] genl_rcv+0x28/0x40 [ 372.838571][ T32] netlink_unicast+0x8ef/0xa80 [ 372.838620][ T32] netlink_sendmsg+0x7f0/0xb20 [ 372.838648][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.838674][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 372.838715][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 372.838740][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.838761][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 372.838796][ T32] __sys_sendto+0x408/0x5a0 [ 372.838826][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 372.838879][ T32] ? fd_install+0x95/0x4e0 [ 372.838908][ T32] __x64_sys_sendto+0xde/0x100 [ 372.838937][ T32] do_syscall_64+0x166/0x520 [ 372.838975][ T32] ? trace_irq_disable+0x3b/0x140 [ 372.838999][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.839028][ T32] ? clear_bhb_loop+0x70/0xc0 [ 372.839054][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.839074][ T32] RIP: 0033:0x7f54c535fd8e [ 372.839092][ T32] RSP: 002b:00007f54c35d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 372.839113][ T32] RAX: ffffffffffffffda RBX: 00007f54c35d56c0 RCX: 00007f54c535fd8e [ 372.839128][ T32] RDX: 0000000000000020 RSI: 00007f54c35d4000 RDI: 0000000000000005 [ 372.839142][ T32] RBP: 0000000000000000 R08: 00007f54c35d3f04 R09: 000000000000000c [ 372.839154][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 372.839167][ T32] R13: 00007f54c35d3f58 R14: 00007f54c35d4000 R15: 0000000000000000 [ 372.839200][ T32] [ 372.839209][ T32] INFO: task syz.1.1003:10077 blocked for more than 143 seconds. [ 372.839224][ T32] Not tainted syzkaller #0 [ 372.839234][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.839243][ T32] task:syz.1.1003 state:D stack:27168 pid:10077 tgid:10076 ppid:5631 task_flags:0x400040 flags:0x00080002 [ 372.839293][ T32] Call Trace: [ 372.839300][ T32] [ 372.839313][ T32] __schedule+0x17dd/0x5820 [ 372.839367][ T32] ? __pfx___schedule+0x10/0x10 [ 372.839402][ T32] ? schedule+0x90/0x2b0 [ 372.839429][ T32] schedule+0x164/0x2b0 [ 372.839455][ T32] schedule_preempt_disabled+0x13/0x30 [ 372.839479][ T32] __mutex_lock+0x7c4/0x15a0 [ 372.839511][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 372.839541][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 372.839574][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 372.839602][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 372.856115][ T32] ? radix_tree_lookup+0x240/0x290 [ 372.856159][ T32] genl_rcv_msg+0x10b/0x7a0 [ 372.856195][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.856240][ T32] netlink_rcv_skb+0x226/0x4a0 [ 372.856263][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.856292][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.856330][ T32] ? down_read+0x2b9/0x320 [ 372.856363][ T32] genl_rcv+0x28/0x40 [ 372.856388][ T32] netlink_unicast+0x8ef/0xa80 [ 372.856437][ T32] netlink_sendmsg+0x7f0/0xb20 [ 372.856466][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.856492][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 372.856521][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 372.856545][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.856566][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 372.856601][ T32] ____sys_sendmsg+0x54e/0x850 [ 372.856635][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.856672][ T32] ? import_iovec+0x73/0xa0 [ 372.856703][ T32] ___sys_sendmsg+0x2a5/0x360 [ 372.856909][ T32] ? __lock_acquire+0x747/0x2de0 [ 372.856939][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.856971][ T32] ? futex_wait+0x2a2/0x390 [ 372.857032][ T32] ? __fget_files+0x3a2/0x420 [ 372.857054][ T32] ? __fget_files+0x2a/0x420 [ 372.857086][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 372.857117][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.857167][ T32] do_syscall_64+0x166/0x520 [ 372.857193][ T32] ? trace_irq_disable+0x3b/0x140 [ 372.857216][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.857238][ T32] ? clear_bhb_loop+0x70/0xc0 [ 372.857263][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.857284][ T32] RIP: 0033:0x7f68a759f559 [ 372.857303][ T32] RSP: 002b:00007f68a850f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.857327][ T32] RAX: ffffffffffffffda RBX: 00007f68a7825fa0 RCX: 00007f68a759f559 [ 372.857342][ T32] RDX: 0000000024008802 RSI: 0000200000000000 RDI: 0000000000000003 [ 372.857357][ T32] RBP: 00007f68a7636b20 R08: 0000000000000000 R09: 0000000000000000 [ 372.857370][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.857382][ T32] R13: 00007f68a7826038 R14: 00007f68a7825fa0 R15: 00007ffeb73b6ee8 [ 372.857417][ T32] [ 372.857428][ T32] INFO: task syz.3.1004:10080 blocked for more than 143 seconds. [ 372.857443][ T32] Not tainted syzkaller #0 [ 372.857454][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.857463][ T32] task:syz.3.1004 state:D stack:24128 pid:10080 tgid:10079 ppid:5633 task_flags:0x400140 flags:0x00080002 [ 372.857514][ T32] Call Trace: [ 372.857520][ T32] [ 372.857533][ T32] __schedule+0x17dd/0x5820 [ 372.857588][ T32] ? __pfx___schedule+0x10/0x10 [ 372.857622][ T32] ? schedule+0x90/0x2b0 [ 372.857650][ T32] schedule+0x164/0x2b0 [ 372.857677][ T32] schedule_preempt_disabled+0x13/0x30 [ 372.857701][ T32] __mutex_lock+0x7c4/0x15a0 [ 372.857733][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 372.857764][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 372.857792][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 372.857820][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 372.857861][ T32] ? radix_tree_lookup+0x240/0x290 [ 372.857889][ T32] genl_rcv_msg+0x10b/0x7a0 [ 372.857922][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.857966][ T32] netlink_rcv_skb+0x226/0x4a0 [ 372.857988][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.858016][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.858060][ T32] ? down_read+0x2b9/0x320 [ 372.858093][ T32] genl_rcv+0x28/0x40 [ 372.858117][ T32] netlink_unicast+0x8ef/0xa80 [ 372.858165][ T32] netlink_sendmsg+0x7f0/0xb20 [ 372.858194][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.858220][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 372.858249][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 372.858272][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.858293][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 372.858328][ T32] __sys_sendto+0x408/0x5a0 [ 372.858358][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 372.858410][ T32] ? fd_install+0x95/0x4e0 [ 372.858440][ T32] __x64_sys_sendto+0xde/0x100 [ 372.858468][ T32] do_syscall_64+0x166/0x520 [ 372.858494][ T32] ? trace_irq_disable+0x3b/0x140 [ 372.858517][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.858537][ T32] ? clear_bhb_loop+0x70/0xc0 [ 372.858562][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.858583][ T32] RIP: 0033:0x7f627b55fd8e [ 372.858600][ T32] RSP: 002b:00007f627c4d6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 372.858620][ T32] RAX: ffffffffffffffda RBX: 00007f627c4d86c0 RCX: 00007f627b55fd8e [ 372.858636][ T32] RDX: 0000000000000020 RSI: 00007f627c4d7000 RDI: 0000000000000009 [ 372.858649][ T32] RBP: 0000000000000000 R08: 00007f627c4d6f04 R09: 000000000000000c [ 372.858662][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 372.858675][ T32] R13: 00007f627c4d6f58 R14: 00007f627c4d7000 R15: 0000000000000000 [ 372.858708][ T32] [ 372.858769][ T32] [ 372.858769][ T32] Showing all locks held in the system: [ 372.858854][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 372.858960][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 372.859079][ T32] locks held by kworker/u8:6/145: 3, last CPU#1: [ 372.859094][ T32] #0: ffff888033f3c948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 372.859160][ T32] #1: ffffc90002db7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 372.867792][ T32] #2: ffff8880b8528618 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10 [ 372.867908][ T32] locks held by getty/5382: 2, on CPU#0: [ 372.867924][ T32] #0: ffff888033db10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 372.868059][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 372.868156][ T32] locks held by udevd/8978: 1, on CPU#1: [ 372.868171][ T32] #0: ffff8880286ae350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 372.868253][ T32] locks held by syz.2.992/10044: 6, on CPU#0: [ 372.868268][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.868321][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.868374][ T32] #2: ffff8880272d0a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 372.868429][ T32] #3: ffff8880286bc7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 372.868486][ T32] #4: ffff8880286bc190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 372.868544][ T32] #5: ffff8880286bc1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 372.868602][ T32] locks held by syz.2.992/10047: 2, on CPU#1: [ 372.868617][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.868668][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.868721][ T32] locks held by syz.2.992/10048: 2, on CPU#0: [ 372.868736][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.868786][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.868840][ T32] locks held by syz.4.1000/10066: 2, on CPU#1: [ 372.868854][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.868905][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.868959][ T32] locks held by syz.4.1000/10067: 2, on CPU#1: [ 372.868973][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.869031][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.869084][ T32] locks held by syz.1.1003/10077: 2, on CPU#1: [ 372.869098][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.869149][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.869203][ T32] locks held by syz.3.1004/10080: 2, on CPU#0: [ 372.869217][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.869268][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.869320][ T32] locks held by syz.0.1006/10088: 2, on CPU#0: [ 372.869335][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.869386][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.869439][ T32] locks held by syz.0.1006/10090: 2, on CPU#0: [ 372.869453][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.869504][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.869557][ T32] locks held by syz.0.1006/10091: 2, on CPU#0: [ 372.869571][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.869622][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.869675][ T32] locks held by syz.0.1006/10092: 2, on CPU#1: [ 372.869690][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.869740][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.869793][ T32] locks held by syz.0.1006/10093: 2, on CPU#1: [ 372.869808][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.869858][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.869912][ T32] locks held by syz-executor/10096: 2, on CPU#1: [ 372.869926][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.869977][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.870037][ T32] locks held by syz-executor/10111: 2, on CPU#1: [ 372.870051][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.870102][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.870155][ T32] locks held by syz-executor/10127: 2, on CPU#0: [ 372.870170][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.870220][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.870273][ T32] locks held by syz-executor/10130: 2, on CPU#0: [ 372.870287][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.874919][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.874991][ T32] locks held by syz-executor/10152: 2, on CPU#1: [ 372.875006][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.875065][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.875121][ T32] locks held by syz-executor/10195: 2, on CPU#1: [ 372.875135][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.875186][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.875239][ T32] locks held by syz-executor/10203: 2, on CPU#1: [ 372.875254][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.875302][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.875355][ T32] locks held by syz-executor/10223: 2, on CPU#1: [ 372.875370][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.875421][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.875474][ T32] locks held by syz-executor/10224: 2, on CPU#1: [ 372.875489][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.875539][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.875593][ T32] locks held by syz-executor/10241: 2, on CPU#0: [ 372.875608][ T32] #0: ffffffff912e5de8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 372.875659][ T32] #1: ffffffff912e5c20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 372.875713][ T32] locks held by syz-executor/10290: 10, last CPU#0: [ 372.875728][ T32] #0: ffff888026c62460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 372.875802][ T32] #1: ffff88809253c080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 372.875925][ T32] #2: ffff88802a90b2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 372.875980][ T32] #3: ffffffff90ad1fa0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 372.876117][ T32] #4: ffff888078646128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 372.876230][ T32] #5: ffff888078645258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 372.876285][ T32] #6: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 372.876364][ T32] #7: ffff88801d2dcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 372.876450][ T32] #8: ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 372.876509][ T32] #9: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 372.876564][ T32] locks held by syz-executor/10300: 1, on CPU#1: [ 372.876579][ T32] #0: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 372.876703][ T32] locks held by syz-executor/10316: 2, on CPU#1: [ 372.876718][ T32] #0: ffffffff91272f28 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 372.876794][ T32] #1: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ee/0x870 [ 372.876917][ T32] locks held by syz-executor/10319: 2, on CPU#1: [ 372.876932][ T32] #0: ffffffff91272f28 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 372.876982][ T32] #1: ffffffff91281be0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 372.877072][ T32] locks held by syz-executor/10338: 6, last CPU#1: [ 372.877086][ T32] #0: ffffffff91272f28 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 372.877136][ T32] #1: ffffffff90fc8e48 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 [ 372.877235][ T32] #2: ffffffff90fc9008 (rdma_nets_rwsem){.+.+}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 [ 372.877287][ T32] #3: ffff888077ce1020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 [ 372.881874][ T32] #4: ffffffff8fe8de00 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xb9/0x720 [ 372.881936][ T32] #5: ffffffff8fea39e0 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100 [ 372.881997][ T32] [ 372.882002][ T32] ============================================= [ 372.882002][ T32] [ 372.882030][ T32] NMI backtrace for cpu 0 [ 372.882049][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 372.882073][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 372.882086][ T32] Call Trace: [ 372.882095][ T32] [ 372.882104][ T32] dump_stack_lvl+0xe8/0x150 [ 372.882155][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 372.882181][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 372.882212][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 372.882240][ T32] sys_info+0x135/0x170 [ 372.882259][ T32] watchdog+0xfd2/0x1030 [ 372.882298][ T32] ? watchdog+0x1c7/0x1030 [ 372.882330][ T32] kthread+0x38b/0x480 [ 372.882352][ T32] ? __pfx_watchdog+0x10/0x10 [ 372.882374][ T32] ? __pfx_kthread+0x10/0x10 [ 372.882396][ T32] ret_from_fork+0x514/0xb70 [ 372.882431][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 372.882453][ T32] ? __switch_to+0xc78/0x1410 [ 372.882486][ T32] ? __pfx_kthread+0x10/0x10 [ 372.882509][ T32] ret_from_fork_asm+0x1a/0x30 [ 372.882546][ T32] [ 372.882554][ T32] Sending NMI from CPU 0 to CPUs 1: [ 372.882592][ C1] NMI backtrace for cpu 1 [ 372.882605][ C1] CPU: 1 UID: 0 PID: 145 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 372.882626][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 372.882638][ C1] Workqueue: bat_events batadv_tt_purge [ 372.882725][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 372.882754][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a e9 18 3f 00 00 56 0f b6 f0 e8 9f ff ff ff 5e 5a e9 08 3f [ 372.882770][ C1] RSP: 0018:ffffc90000a08f00 EFLAGS: 00000046 [ 372.882786][ C1] RAX: 0000000000000001 RBX: ffff8880b8528600 RCX: 0000000000000001 [ 372.882798][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8528600 [ 372.882811][ C1] RBP: 1ffff110170a50c1 R08: ffff8880b8528603 R09: 1ffff110170a50c0 [ 372.882825][ C1] R10: dffffc0000000000 R11: ffffed10170a50c1 R12: dffffc0000000000 [ 372.882839][ C1] R13: 1ffff110170a50c2 R14: ffff8880b8528610 R15: ffff8880b8528608 [ 372.882854][ C1] FS: 0000000000000000(0000) GS:ffff888123b52000(0000) knlGS:0000000000000000 [ 372.882870][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.882883][ C1] CR2: 00007ffa7d5aca10 CR3: 0000000076aaa000 CR4: 00000000003526f0 [ 372.882899][ C1] Call Trace: [ 372.882906][ C1] [ 372.882914][ C1] do_raw_spin_unlock+0xf5/0x200 [ 372.882943][ C1] _raw_spin_unlock_irqrestore+0x23/0x80 [ 372.882965][ C1] handle_softirqs+0x265/0x8d0 [ 372.882999][ C1] ? batadv_tt_local_purge+0x277/0x300 [ 372.883018][ C1] do_softirq+0x77/0xd0 [ 372.883039][ C1] [ 372.883045][ C1] [ 372.883052][ C1] __local_bh_enable_ip+0x100/0x140 [ 372.883074][ C1] batadv_tt_local_purge+0x277/0x300 [ 372.883098][ C1] ? process_scheduled_works+0x97a/0x1630 [ 372.883126][ C1] batadv_tt_purge+0x35/0xa40 [ 372.883148][ C1] ? rcu_is_watching+0x16/0xb0 [ 372.883173][ C1] ? process_scheduled_works+0x97a/0x1630 [ 372.883197][ C1] process_scheduled_works+0xc3d/0x1630 [ 372.883239][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 372.883267][ C1] ? assign_work+0x3cf/0x5d0 [ 372.883293][ C1] worker_thread+0xa47/0xfb0 [ 372.883333][ C1] kthread+0x38b/0x480 [ 372.883351][ C1] ? __pfx_worker_thread+0x10/0x10 [ 372.883374][ C1] ? __pfx_kthread+0x10/0x10 [ 372.883392][ C1] ret_from_fork+0x514/0xb70 [ 372.883413][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 372.883431][ C1] ? __switch_to+0xc78/0x1410 [ 372.883458][ C1] ? __pfx_kthread+0x10/0x10 [ 372.883476][ C1] ret_from_fork_asm+0x1a/0x30 [ 372.883503][ C1] [ 372.883593][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 376.136598][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 376.145722][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 376.155789][ T32] Call Trace: [ 376.159079][ T32] [ 376.162026][ T32] vpanic+0x56d/0xa60 [ 376.166306][ T32] ? __pfx_vpanic+0x10/0x10 [ 376.170826][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 376.176388][ T32] panic+0xc5/0xd0 [ 376.180131][ T32] ? __pfx_panic+0x10/0x10 [ 376.184569][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 376.189611][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 376.195819][ T32] watchdog+0x102b/0x1030 [ 376.200179][ T32] ? watchdog+0x1c7/0x1030 [ 376.204620][ T32] kthread+0x38b/0x480 [ 376.208695][ T32] ? __pfx_watchdog+0x10/0x10 [ 376.213379][ T32] ? __pfx_kthread+0x10/0x10 [ 376.217983][ T32] ret_from_fork+0x514/0xb70 [ 376.222704][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 376.227917][ T32] ? __switch_to+0xc78/0x1410 [ 376.232612][ T32] ? __pfx_kthread+0x10/0x10 [ 376.237218][ T32] ret_from_fork_asm+0x1a/0x30 [ 376.242013][ T32] [ 376.245356][ T32] Kernel Offset: disabled [ 376.249761][ T32] Rebooting in 86400 seconds..