last executing test programs: 1m29.433577897s ago: executing program 1 (id=366): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) r3 = socket(0x1d, 0x80000, 0x9) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x3, 0x7, 0x302, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x80}}, 0x5, 0xfff, 0x2, 0x7}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r4, 0xc, 0x7f, "f4b94c6c8e0a65bc2691bc429f16585d3e85b0598be72d2d6b20a148d7f527cc17d791ead840395fa00c84327e87bf08f9c847a179592f2407dee3d82855e677b2c2d18952ebb7c975b3645899c3c09ca75f48acd646bece3c6edf35437a0417d6a710922f79a3504e3ab8e973c8858f6aa893c58c0b80cfcf6137fcd9954d"}, 0x87) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x40880) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000640)={r0, r2, 0x9a, 0x60, &(0x7f00000005c0)="04a40827928ac15a067f0779132f5ad189ef7b4d79ab107200050cd2ada8424e521b8ec419adcc484d32bfa1c6a5686da9290cd16d8810d0aa1944efc2eb3d834f0e95b4b46c3ad2937a8d07298d6b43cbdf9ec23342f7175b7b7c8f681be775", 0x9, 0xc, 0x1, 0x4, 0xfffa, 0x2, 0x9, 'syz0\x00'}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000700)={'team0\x00', <r6=>0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x111000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000780)={'hsr0\x00', 0x200}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', <r8=>r6, 0x2f, 0xa, 0xb, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x40, 0x1, 0xffff}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x180, 0xffffffffffffffff, 0x6, '\x00', r8, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000900)={0x6, 0x3, 0x6, 0xf92b, 0x7, 0x6, 0x101, 0x0, <r10=>r4}, &(0x7f0000000940)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000980)={r10, 0x1d}, &(0x7f00000009c0)=0x8) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000a00)=0x5, 0x4) sendmsg$key(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x2, 0x7, 0x8, 0x9, 0x1e, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x0, 0x8001, 0xd7, 0x0, 0x7}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x3}, @sadb_lifetime={0x4, 0x3, 0x8001, 0x95, 0x8, 0xffffffffffff2273}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbd, 0x3, {0x6, 0x3c, 0x6, 0x1, 0x0, 0x1, 0x0, @in6=@remote, @in6=@empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x10001, @mcast1, 0x27}, @in6={0xa, 0x4e22, 0xb, @mcast1, 0x1ff}}, @sadb_ident={0x2, 0xb, 0x2b, 0x0, 0x6}]}, 0xf0}}, 0x24000050) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000bc0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000c00)={<r11=>0x0, 0x6}, &(0x7f0000000c40)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x26, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x47}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[r7, 0x1], &(0x7f0000000ec0)=[{0x5, 0x3, 0x7, 0x6}, {0x0, 0x1, 0x7, 0x5}, {0x3, 0x1, 0x5, 0xa}], 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000fc0)=@assoc_value={r11, 0x1}, &(0x7f0000001000)=0x8) r12 = accept4(r1, &(0x7f0000001040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000010c0)=0x80, 0x80800) ioctl$AUTOFS_IOC_SETTIMEOUT(r12, 0x80049367, &(0x7f0000001100)=0xfff) 1m29.433237624s ago: executing program 1 (id=366): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) r3 = socket(0x1d, 0x80000, 0x9) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x3, 0x7, 0x302, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x80}}, 0x5, 0xfff, 0x2, 0x7}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r4, 0xc, 0x7f, "f4b94c6c8e0a65bc2691bc429f16585d3e85b0598be72d2d6b20a148d7f527cc17d791ead840395fa00c84327e87bf08f9c847a179592f2407dee3d82855e677b2c2d18952ebb7c975b3645899c3c09ca75f48acd646bece3c6edf35437a0417d6a710922f79a3504e3ab8e973c8858f6aa893c58c0b80cfcf6137fcd9954d"}, 0x87) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x40880) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000640)={r0, r2, 0x9a, 0x60, &(0x7f00000005c0)="04a40827928ac15a067f0779132f5ad189ef7b4d79ab107200050cd2ada8424e521b8ec419adcc484d32bfa1c6a5686da9290cd16d8810d0aa1944efc2eb3d834f0e95b4b46c3ad2937a8d07298d6b43cbdf9ec23342f7175b7b7c8f681be775", 0x9, 0xc, 0x1, 0x4, 0xfffa, 0x2, 0x9, 'syz0\x00'}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000700)={'team0\x00', <r6=>0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x111000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000780)={'hsr0\x00', 0x200}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', <r8=>r6, 0x2f, 0xa, 0xb, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x40, 0x1, 0xffff}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x180, 0xffffffffffffffff, 0x6, '\x00', r8, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000900)={0x6, 0x3, 0x6, 0xf92b, 0x7, 0x6, 0x101, 0x0, <r10=>r4}, &(0x7f0000000940)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000980)={r10, 0x1d}, &(0x7f00000009c0)=0x8) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000a00)=0x5, 0x4) sendmsg$key(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x2, 0x7, 0x8, 0x9, 0x1e, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x0, 0x8001, 0xd7, 0x0, 0x7}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x3}, @sadb_lifetime={0x4, 0x3, 0x8001, 0x95, 0x8, 0xffffffffffff2273}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbd, 0x3, {0x6, 0x3c, 0x6, 0x1, 0x0, 0x1, 0x0, @in6=@remote, @in6=@empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x10001, @mcast1, 0x27}, @in6={0xa, 0x4e22, 0xb, @mcast1, 0x1ff}}, @sadb_ident={0x2, 0xb, 0x2b, 0x0, 0x6}]}, 0xf0}}, 0x24000050) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000bc0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000c00)={<r11=>0x0, 0x6}, &(0x7f0000000c40)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x26, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x47}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[r7, 0x1], &(0x7f0000000ec0)=[{0x5, 0x3, 0x7, 0x6}, {0x0, 0x1, 0x7, 0x5}, {0x3, 0x1, 0x5, 0xa}], 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000fc0)=@assoc_value={r11, 0x1}, &(0x7f0000001000)=0x8) r12 = accept4(r1, &(0x7f0000001040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000010c0)=0x80, 0x80800) ioctl$AUTOFS_IOC_SETTIMEOUT(r12, 0x80049367, &(0x7f0000001100)=0xfff) 1m18.81343805s ago: executing program 1 (id=366): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) r3 = socket(0x1d, 0x80000, 0x9) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x3, 0x7, 0x302, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x80}}, 0x5, 0xfff, 0x2, 0x7}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r4, 0xc, 0x7f, "f4b94c6c8e0a65bc2691bc429f16585d3e85b0598be72d2d6b20a148d7f527cc17d791ead840395fa00c84327e87bf08f9c847a179592f2407dee3d82855e677b2c2d18952ebb7c975b3645899c3c09ca75f48acd646bece3c6edf35437a0417d6a710922f79a3504e3ab8e973c8858f6aa893c58c0b80cfcf6137fcd9954d"}, 0x87) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x40880) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000640)={r0, r2, 0x9a, 0x60, &(0x7f00000005c0)="04a40827928ac15a067f0779132f5ad189ef7b4d79ab107200050cd2ada8424e521b8ec419adcc484d32bfa1c6a5686da9290cd16d8810d0aa1944efc2eb3d834f0e95b4b46c3ad2937a8d07298d6b43cbdf9ec23342f7175b7b7c8f681be775", 0x9, 0xc, 0x1, 0x4, 0xfffa, 0x2, 0x9, 'syz0\x00'}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000700)={'team0\x00', <r6=>0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x111000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000780)={'hsr0\x00', 0x200}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', <r8=>r6, 0x2f, 0xa, 0xb, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x40, 0x1, 0xffff}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x180, 0xffffffffffffffff, 0x6, '\x00', r8, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000900)={0x6, 0x3, 0x6, 0xf92b, 0x7, 0x6, 0x101, 0x0, <r10=>r4}, &(0x7f0000000940)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000980)={r10, 0x1d}, &(0x7f00000009c0)=0x8) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000a00)=0x5, 0x4) sendmsg$key(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x2, 0x7, 0x8, 0x9, 0x1e, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x0, 0x8001, 0xd7, 0x0, 0x7}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x3}, @sadb_lifetime={0x4, 0x3, 0x8001, 0x95, 0x8, 0xffffffffffff2273}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbd, 0x3, {0x6, 0x3c, 0x6, 0x1, 0x0, 0x1, 0x0, @in6=@remote, @in6=@empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x10001, @mcast1, 0x27}, @in6={0xa, 0x4e22, 0xb, @mcast1, 0x1ff}}, @sadb_ident={0x2, 0xb, 0x2b, 0x0, 0x6}]}, 0xf0}}, 0x24000050) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000bc0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000c00)={<r11=>0x0, 0x6}, &(0x7f0000000c40)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x26, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x47}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[r7, 0x1], &(0x7f0000000ec0)=[{0x5, 0x3, 0x7, 0x6}, {0x0, 0x1, 0x7, 0x5}, {0x3, 0x1, 0x5, 0xa}], 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000fc0)=@assoc_value={r11, 0x1}, &(0x7f0000001000)=0x8) r12 = accept4(r1, &(0x7f0000001040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000010c0)=0x80, 0x80800) ioctl$AUTOFS_IOC_SETTIMEOUT(r12, 0x80049367, &(0x7f0000001100)=0xfff) 1m9.423352351s ago: executing program 4 (id=818): socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @remote, @dev, @remote}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x12) 1m8.512222823s ago: executing program 4 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c01000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c00090003000000ff03000008001b0000000000"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:4\t\nm'], 0xa) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'blkio'}]}, 0x7) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x7, 0x9, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x10, 0x8000, 0x6, 0x9}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) 1m8.077589687s ago: executing program 4 (id=827): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100004400010000000000ffdbdf25010100800c00000000000000000000001400010001"], 0x114}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000100)=""/215, 0xd7}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000280)=""/251, 0xfb}], 0x4}, 0x1}, {{&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/155, 0x9b}], 0x2}, 0x4}, {{&(0x7f0000000680)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/254, 0xfe}, {&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000900)=""/81, 0x51}, {&(0x7f0000000980)=""/99, 0x63}, {&(0x7f0000000a00)=""/138, 0x8a}, {&(0x7f0000000ac0)=""/16, 0x10}, {&(0x7f0000000b00)=""/21, 0x15}, {&(0x7f0000000b40)=""/207, 0xcf}], 0x9, &(0x7f0000000d00)=""/158, 0x9e}, 0x9a57}, {{&(0x7f0000000dc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/132, 0x84}], 0x1, &(0x7f0000000f40)=""/226, 0xe2}, 0x4}, {{&(0x7f0000001040)=@sco={0x1f, @none}, 0x80, &(0x7f0000001700)=[{&(0x7f00000010c0)=""/239, 0xef}, {&(0x7f00000011c0)=""/48, 0x30}, {&(0x7f0000001200)=""/162, 0xa2}, {&(0x7f00000012c0)=""/218, 0xda}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000001400)=""/216, 0xd8}, {&(0x7f0000001500)=""/21, 0x15}, {&(0x7f0000001540)=""/244, 0xf4}, {&(0x7f0000001640)=""/175, 0xaf}], 0x9}, 0x5}, {{&(0x7f00000017c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001840)=""/65, 0x41}, {&(0x7f00000018c0)=""/79, 0x4f}, {&(0x7f0000001940)=""/48, 0x30}, {&(0x7f0000001980)}, {&(0x7f00000019c0)=""/228, 0xe4}, {&(0x7f0000001ac0)=""/254, 0xfe}, {&(0x7f0000001bc0)=""/85, 0x55}], 0x7, &(0x7f0000001cc0)=""/4096, 0x1000}, 0xf8ab}, {{&(0x7f0000002cc0)=@phonet, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002d40)=""/51, 0x33}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/111, 0x6f}], 0x3, &(0x7f0000003e40)=""/4096, 0x1000}, 0xffff7506}, {{&(0x7f0000004e40)=@nfc_llcp, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004ec0)=""/33, 0x21}], 0x1, &(0x7f0000004f40)=""/1, 0x1}, 0x137f}, {{&(0x7f0000004f80)=@xdp, 0x80, &(0x7f0000005080)=[{&(0x7f0000005000)=""/103, 0x67}], 0x1, &(0x7f00000050c0)=""/92, 0x5c}, 0x8}, {{&(0x7f0000005140)=@qipcrtr, 0x80, &(0x7f0000006480)=[{&(0x7f00000051c0)=""/167, 0xa7}, {&(0x7f0000005280)=""/106, 0x6a}, {&(0x7f0000005300)=""/204, 0xcc}, {&(0x7f0000005400)=""/65, 0x41}, {&(0x7f0000005480)=""/4096, 0x1000}], 0x5, &(0x7f0000006500)=""/208, 0xd0}, 0x5}], 0xa, 0x10100, &(0x7f0000006880)) 1m7.690737872s ago: executing program 4 (id=830): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe, 0x2, 0x1, 0xc, 0x200, 0x2}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x10, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x101, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10010, r2, 0x5bb68000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000094) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000280)={0x401, 0x8, 0x1, 0x8, r5}, 0x0) close(0x3) writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) socket$kcm(0x10, 0x2, 0x0) 1m6.213155062s ago: executing program 1 (id=366): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) r3 = socket(0x1d, 0x80000, 0x9) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x3, 0x7, 0x302, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x80}}, 0x5, 0xfff, 0x2, 0x7}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r4, 0xc, 0x7f, "f4b94c6c8e0a65bc2691bc429f16585d3e85b0598be72d2d6b20a148d7f527cc17d791ead840395fa00c84327e87bf08f9c847a179592f2407dee3d82855e677b2c2d18952ebb7c975b3645899c3c09ca75f48acd646bece3c6edf35437a0417d6a710922f79a3504e3ab8e973c8858f6aa893c58c0b80cfcf6137fcd9954d"}, 0x87) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x40880) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000640)={r0, r2, 0x9a, 0x60, &(0x7f00000005c0)="04a40827928ac15a067f0779132f5ad189ef7b4d79ab107200050cd2ada8424e521b8ec419adcc484d32bfa1c6a5686da9290cd16d8810d0aa1944efc2eb3d834f0e95b4b46c3ad2937a8d07298d6b43cbdf9ec23342f7175b7b7c8f681be775", 0x9, 0xc, 0x1, 0x4, 0xfffa, 0x2, 0x9, 'syz0\x00'}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000700)={'team0\x00', <r6=>0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x111000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000780)={'hsr0\x00', 0x200}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', <r8=>r6, 0x2f, 0xa, 0xb, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x40, 0x1, 0xffff}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x180, 0xffffffffffffffff, 0x6, '\x00', r8, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000900)={0x6, 0x3, 0x6, 0xf92b, 0x7, 0x6, 0x101, 0x0, <r10=>r4}, &(0x7f0000000940)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000980)={r10, 0x1d}, &(0x7f00000009c0)=0x8) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000a00)=0x5, 0x4) sendmsg$key(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x2, 0x7, 0x8, 0x9, 0x1e, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x0, 0x8001, 0xd7, 0x0, 0x7}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x3}, @sadb_lifetime={0x4, 0x3, 0x8001, 0x95, 0x8, 0xffffffffffff2273}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbd, 0x3, {0x6, 0x3c, 0x6, 0x1, 0x0, 0x1, 0x0, @in6=@remote, @in6=@empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x10001, @mcast1, 0x27}, @in6={0xa, 0x4e22, 0xb, @mcast1, 0x1ff}}, @sadb_ident={0x2, 0xb, 0x2b, 0x0, 0x6}]}, 0xf0}}, 0x24000050) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000bc0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000c00)={<r11=>0x0, 0x6}, &(0x7f0000000c40)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x26, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x47}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[r7, 0x1], &(0x7f0000000ec0)=[{0x5, 0x3, 0x7, 0x6}, {0x0, 0x1, 0x7, 0x5}, {0x3, 0x1, 0x5, 0xa}], 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000fc0)=@assoc_value={r11, 0x1}, &(0x7f0000001000)=0x8) r12 = accept4(r1, &(0x7f0000001040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000010c0)=0x80, 0x80800) ioctl$AUTOFS_IOC_SETTIMEOUT(r12, 0x80049367, &(0x7f0000001100)=0xfff) 48.615426991s ago: executing program 1 (id=366): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) r3 = socket(0x1d, 0x80000, 0x9) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x3, 0x7, 0x302, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x80}}, 0x5, 0xfff, 0x2, 0x7}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r4, 0xc, 0x7f, "f4b94c6c8e0a65bc2691bc429f16585d3e85b0598be72d2d6b20a148d7f527cc17d791ead840395fa00c84327e87bf08f9c847a179592f2407dee3d82855e677b2c2d18952ebb7c975b3645899c3c09ca75f48acd646bece3c6edf35437a0417d6a710922f79a3504e3ab8e973c8858f6aa893c58c0b80cfcf6137fcd9954d"}, 0x87) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x40880) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000640)={r0, r2, 0x9a, 0x60, &(0x7f00000005c0)="04a40827928ac15a067f0779132f5ad189ef7b4d79ab107200050cd2ada8424e521b8ec419adcc484d32bfa1c6a5686da9290cd16d8810d0aa1944efc2eb3d834f0e95b4b46c3ad2937a8d07298d6b43cbdf9ec23342f7175b7b7c8f681be775", 0x9, 0xc, 0x1, 0x4, 0xfffa, 0x2, 0x9, 'syz0\x00'}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000700)={'team0\x00', <r6=>0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x111000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000780)={'hsr0\x00', 0x200}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', <r8=>r6, 0x2f, 0xa, 0xb, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x40, 0x1, 0xffff}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x180, 0xffffffffffffffff, 0x6, '\x00', r8, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000900)={0x6, 0x3, 0x6, 0xf92b, 0x7, 0x6, 0x101, 0x0, <r10=>r4}, &(0x7f0000000940)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000980)={r10, 0x1d}, &(0x7f00000009c0)=0x8) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000a00)=0x5, 0x4) sendmsg$key(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x2, 0x7, 0x8, 0x9, 0x1e, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x0, 0x8001, 0xd7, 0x0, 0x7}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x3}, @sadb_lifetime={0x4, 0x3, 0x8001, 0x95, 0x8, 0xffffffffffff2273}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbd, 0x3, {0x6, 0x3c, 0x6, 0x1, 0x0, 0x1, 0x0, @in6=@remote, @in6=@empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x10001, @mcast1, 0x27}, @in6={0xa, 0x4e22, 0xb, @mcast1, 0x1ff}}, @sadb_ident={0x2, 0xb, 0x2b, 0x0, 0x6}]}, 0xf0}}, 0x24000050) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000bc0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000c00)={<r11=>0x0, 0x6}, &(0x7f0000000c40)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x26, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x47}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[r7, 0x1], &(0x7f0000000ec0)=[{0x5, 0x3, 0x7, 0x6}, {0x0, 0x1, 0x7, 0x5}, {0x3, 0x1, 0x5, 0xa}], 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000fc0)=@assoc_value={r11, 0x1}, &(0x7f0000001000)=0x8) r12 = accept4(r1, &(0x7f0000001040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000010c0)=0x80, 0x80800) ioctl$AUTOFS_IOC_SETTIMEOUT(r12, 0x80049367, &(0x7f0000001100)=0xfff) 47.682738676s ago: executing program 4 (id=830): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe, 0x2, 0x1, 0xc, 0x200, 0x2}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x10, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x101, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10010, r2, 0x5bb68000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000094) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000280)={0x401, 0x8, 0x1, 0x8, r5}, 0x0) close(0x3) writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) socket$kcm(0x10, 0x2, 0x0) 33.123213295s ago: executing program 1 (id=366): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) r3 = socket(0x1d, 0x80000, 0x9) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x3, 0x7, 0x302, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x14000001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x80}}, 0x5, 0xfff, 0x2, 0x7}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r4, 0xc, 0x7f, "f4b94c6c8e0a65bc2691bc429f16585d3e85b0598be72d2d6b20a148d7f527cc17d791ead840395fa00c84327e87bf08f9c847a179592f2407dee3d82855e677b2c2d18952ebb7c975b3645899c3c09ca75f48acd646bece3c6edf35437a0417d6a710922f79a3504e3ab8e973c8858f6aa893c58c0b80cfcf6137fcd9954d"}, 0x87) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x40880) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000640)={r0, r2, 0x9a, 0x60, &(0x7f00000005c0)="04a40827928ac15a067f0779132f5ad189ef7b4d79ab107200050cd2ada8424e521b8ec419adcc484d32bfa1c6a5686da9290cd16d8810d0aa1944efc2eb3d834f0e95b4b46c3ad2937a8d07298d6b43cbdf9ec23342f7175b7b7c8f681be775", 0x9, 0xc, 0x1, 0x4, 0xfffa, 0x2, 0x9, 'syz0\x00'}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000700)={'team0\x00', <r6=>0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x111000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000780)={'hsr0\x00', 0x200}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', <r8=>r6, 0x2f, 0xa, 0xb, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x40, 0x1, 0xffff}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x180, 0xffffffffffffffff, 0x6, '\x00', r8, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000900)={0x6, 0x3, 0x6, 0xf92b, 0x7, 0x6, 0x101, 0x0, <r10=>r4}, &(0x7f0000000940)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000980)={r10, 0x1d}, &(0x7f00000009c0)=0x8) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000a00)=0x5, 0x4) sendmsg$key(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x2, 0x7, 0x8, 0x9, 0x1e, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x0, 0x8001, 0xd7, 0x0, 0x7}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x3}, @sadb_lifetime={0x4, 0x3, 0x8001, 0x95, 0x8, 0xffffffffffff2273}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbd, 0x3, {0x6, 0x3c, 0x6, 0x1, 0x0, 0x1, 0x0, @in6=@remote, @in6=@empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x10001, @mcast1, 0x27}, @in6={0xa, 0x4e22, 0xb, @mcast1, 0x1ff}}, @sadb_ident={0x2, 0xb, 0x2b, 0x0, 0x6}]}, 0xf0}}, 0x24000050) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000bc0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000c00)={<r11=>0x0, 0x6}, &(0x7f0000000c40)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x26, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x47}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[r7, 0x1], &(0x7f0000000ec0)=[{0x5, 0x3, 0x7, 0x6}, {0x0, 0x1, 0x7, 0x5}, {0x3, 0x1, 0x5, 0xa}], 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000fc0)=@assoc_value={r11, 0x1}, &(0x7f0000001000)=0x8) r12 = accept4(r1, &(0x7f0000001040)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000010c0)=0x80, 0x80800) ioctl$AUTOFS_IOC_SETTIMEOUT(r12, 0x80049367, &(0x7f0000001100)=0xfff) 31.225000758s ago: executing program 4 (id=830): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe, 0x2, 0x1, 0xc, 0x200, 0x2}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x10, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x101, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10010, r2, 0x5bb68000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000094) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r3) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000280)={0x401, 0x8, 0x1, 0x8, r5}, 0x0) close(0x3) writev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) socket$kcm(0x10, 0x2, 0x0) 19.021082252s ago: executing program 2 (id=1150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810100000000000000000300000008000100000000000c00030008"], 0x28}}, 0x0) 18.820233325s ago: executing program 0 (id=1151): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc0200ffffffffffffffe40000000000040012"], 0x8c}}, 0x0) 18.794469082s ago: executing program 2 (id=1152): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0002042, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', <r2=>0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a959fc5ec5071900", "8e083700daf38a6d69e9b5e9c2f133d7", "e2739528", "12772541f8ebfebb"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000000c0)={<r5=>0x0, 0x6, 0x999, 0x9}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={r5, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x240448c4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 18.696563758s ago: executing program 3 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adbda888000000001c00129f09dde3d4496f6e64000000000c00028005000100e7f90711"], 0x3c}}, 0x0) 18.500021604s ago: executing program 0 (id=1154): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000540)=""/195, 0xc3}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/98, 0x62}, {&(0x7f00000007c0)=""/160, 0xa0}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000940)=""/94, 0x5e}, {&(0x7f00000009c0)}], 0xa, &(0x7f0000000ac0)=""/78, 0x4e}, 0x9}, {{&(0x7f0000000b40)=@tipc, 0x80, &(0x7f0000001000)=[{&(0x7f0000000bc0)=""/172, 0xac}, {&(0x7f0000000c80)=""/139, 0x8b}, {&(0x7f0000000d40)=""/229, 0xe5}, {&(0x7f0000000e40)=""/104, 0x68}, {&(0x7f0000000ec0)=""/173, 0xad}, {&(0x7f0000000f80)=""/85, 0x55}], 0x6, &(0x7f0000001080)=""/79, 0x4f}, 0x4}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001100)=""/87, 0x57}, {&(0x7f0000001180)=""/100, 0x64}, {&(0x7f0000001200)=""/211, 0xd3}, {&(0x7f0000001300)=""/71, 0x47}], 0x4, &(0x7f00000013c0)=""/135, 0x87}, 0x352a}, {{&(0x7f00000024c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002540)=""/7, 0x7}, {&(0x7f00000025c0)=""/76, 0x4c}, {&(0x7f0000002640)=""/116, 0x74}], 0x3, &(0x7f0000002700)=""/6, 0x6}, 0x7}, {{&(0x7f0000002740)=@phonet, 0x80, &(0x7f0000003a40)=[{&(0x7f00000027c0)=""/109, 0x6d}, {&(0x7f0000002840)}, {&(0x7f0000002880)=""/18, 0x12}, {&(0x7f00000028c0)=""/215, 0xd7}, {0x0}], 0x5, &(0x7f0000003ac0)=""/41, 0x29}, 0x7}, {{&(0x7f0000003b00)=@nfc_llcp, 0x80, &(0x7f0000004340)=[{&(0x7f0000003b80)=""/142, 0x8e}, {&(0x7f0000003c40)=""/94, 0x5e}, {&(0x7f0000003cc0)=""/234, 0xea}, {&(0x7f0000003dc0)=""/243, 0xf3}, {&(0x7f0000003ec0)=""/215, 0xd7}, {&(0x7f0000003fc0)=""/219, 0xdb}, {&(0x7f00000040c0)=""/239, 0xef}, {&(0x7f00000041c0)=""/133, 0x85}, {&(0x7f0000004280)=""/154, 0x9a}], 0x9, &(0x7f0000004400)=""/150, 0x96}, 0x3}, {{&(0x7f00000044c0)=@phonet, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004540)=""/167, 0xa7}, {&(0x7f0000004600)=""/132, 0x84}, {&(0x7f00000046c0)=""/86, 0x56}, {&(0x7f0000004740)=""/69, 0x45}], 0x4, &(0x7f0000004800)=""/165, 0xa5}, 0x3}], 0x7, 0x10061, &(0x7f0000004a80)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f00000000c0), 0x10) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x3, 0x2}, {}, {0x1c, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xc}]}}]}, 0x38}}, 0x24000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x44, 0xffffffff, 0x0, 0x0, 0x6, 0x2, 0x4, 0x10}}) 18.499338751s ago: executing program 3 (id=1155): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x2b8, 0x182, 0x0, 0x0, 0x278, 0x3a8, 0x3a8, 0x278, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {0x0, 0xe0ffff00000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x268}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000880)={'team0\x00', <r6=>0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', <r7=>0x0, 0x2f, 0x2, 0xb, 0xe, 0x40, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7, 0x1}}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000bc0)={0x1d, r7}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x8c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r9=>0x0}) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x4, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0x9c, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x7, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x6, 0x9, 0x2}}]}]}}]}, 0x478}}, 0x4000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xec, r4, 0x100, 0x1, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40011}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a5d90d93dd92ab0eefd2f1af22f"], 0x98}}, 0x8040000) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x5a}]}, 0x10) 18.223907527s ago: executing program 3 (id=1156): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010000000000000000000af9130000000002000000001400010000000000000000000000000000000001140002"], 0x44}}, 0x84) 18.050171765s ago: executing program 2 (id=1157): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x58, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x58}}, 0x800) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x651c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x4004090) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000b80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000180)=0x9c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000003c0)={<r7=>0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f00000014c0)={r7, 0xfffffffffffffffa}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x258, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xfff2, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x224, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x6}}, @TCA_MATCHALL_ACT={0x218, 0x2, [@m_vlan={0xb4, 0x4, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x6e, 0x6, "44b05614a9a4f34c392a8ec7644ad820b3b4f5a91e025e602d4c2b82887e358d6b9f57709adb94d1e1144f1b8b6bdf1d145740e040b5816d71604375559d71bcecbceffb65a23b343e6eac3dfaba3df86556888458b8513a93173c9bade0dca7e4f06c064156fb41ff30"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_csum={0xf8, 0x4, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0x4e, 0xea10ac54275bc1e9, 0x80000000, 0x7}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa90e, 0xfffffffa, 0x0, 0x212, 0xfb0}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe41b, 0x5, 0x4, 0x7f, 0x1}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x7, 0xfffffffe, 0x7ff}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x5, 0xffffffffffffffff, 0x5, 0xfffffffb}, 0x75}}]}, {0x40, 0x6, "a6d4145953b7af2e4e693981cd87c0dba4dd9a30d6abc9577ba030ed8ec70b088622c41140db2978f8a5a888bad02a3dd31734c995aca2c63ac2fe8d"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x68, 0x3, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xde51, 0xe, 0x2, 0x9, 0x2}, 0x8}}]}, {0x1b, 0x6, "2a6c77aba0e9b21b0c02f51ebbdae89c51c7bd8344d66b"}, {0xc}, {0xc, 0x8, {0x4e3cc07b495f8ecf, 0x1}}}}]}]}}]}, 0x258}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.917371428s ago: executing program 3 (id=1158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x49c842, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth0_vlan\x00', 0x400}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r3, 0x0, 0x32, 0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) (rerun: 64) 17.916359198s ago: executing program 0 (id=1159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcc1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="47ec77563a79"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x200400c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r3) r4 = socket$rds(0x15, 0x5, 0x0) sendto(r4, &(0x7f0000000380)="3c7deb57e1a13167cd3c918a13c2a7e08306c5020e45f74d864425c45bcb01bc555cf75c809281ceec2a523e15dd0b7a31168dd353b470f92d83bb4940ffd81e01", 0x41, 0x4004000, &(0x7f0000000540)=@generic={0x3, "16a5d43c35b75975a686b60206f1c3b57062ae374e6f0c43f353495d6c131a4693893138eca6a4840f891cef0bc8c3f33e9df39382ec11b69bc426d79144dd4813befd5eddf7c9fad79fdd3428dc399c3415cb4ad31867740279fe27373a93b6801e33a963a878f68120dea8298af72989fb6ab37af833effa1e4c8130e3"}, 0x80) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r11=>0x0}) sendmsg$nl_route(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000afff130000dbdf25070000009966048f628257a4582d1511a153320d1a3ac0098543e5d5049e70de2ee9d5803df6144780742138a9aa7cf35d1a456c726baa3e08d1f754fbc2076fa5f65a8be9c02698f20babdb15d5c5b2022e5c0ea0ddebda996130b347ebf7e62f4d795792d9a25601b6572e6fd28214584f6a038d1dfef1634876876141e457a431725e97d6f791306b76d65d01eb95d2bda68a2229bef1b14268a8f9b96072d47d153c4df4847aadc5f571afd4c005cdc41e308cc52100", @ANYRES32=r11, @ANYBLOB="400400000010000008001e000900000008000f00e50d0000"], 0x30}}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r12, 0x4004743d, 0x110e22fff6) close(r6) write$cgroup_type(r12, &(0x7f0000000280), 0x9) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[], 0x170}}, 0x0) 17.408239223s ago: executing program 0 (id=1160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, 0x0, 0x40000) 16.464092489s ago: executing program 0 (id=1161): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2010800}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x35dfdbfd, 0x10}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x8, 0x100}, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r8, &(0x7f0000000340), 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0xfffffffc, 0x10000000}, 0xc) (async) r10 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r10, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) 16.341574542s ago: executing program 0 (id=1162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810100000000000000000300000008000100000000000c000300"], 0x28}}, 0x0) 15.431403091s ago: executing program 2 (id=1163): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='svc_unregister\x00', r1, 0x0, 0x6}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) 15.430618409s ago: executing program 3 (id=1164): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000002e80000000000040012"], 0x8c}}, 0x0) 15.327105226s ago: executing program 2 (id=1165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b40000000000019078ac1e0001ac1414aa03049078000000004600000000000000fd010000ac141400ac1414aa07138f00b34aa9ca0000000000000000000000441c00037f00000100000000e000000100000009ffffffff00000006890f0000000000ffffffffffffffff44440001ac1e00010000000000000000000000000000000000000000e0000002000000007f000001000000000000000000000000e000000200000000ffffffff000000000000"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x3, 0xe606) 15.287156127s ago: executing program 3 (id=1166): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "40e5045dd1308759370438b1d57b7bc9df26f41d523e6ac20aaf294dc121f4b1", "079493622eb4615a75a7b15aa958e470d29cd1f75f0aaef06d3d36f9a8fbb57b", "46a4dd7484770adc22f2c96e3a35e29ee07219102bea4d6263f75404596fe571", "bb713e1eb69476422119fe20b4b2eca3b3af34b1273fd4720941224c45e2a6b6", "cc7ebb8e42e62ff89b7dd06d96abde657d3180869d2adf4a7430f7352b6f2899", "81c4b1eca74e76871a34d473", 0x3, 0xb, 0x0, 0x9, 0x5}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r4=>r1, 0x9, 0x3, 0xfffffffffffffffd}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x0, 0x3, 0x5, 0xa, 0xffffffffffffffe0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0xfffff000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) r7 = socket(0x2a, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r5, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001100), &(0x7f00000011c0), 0x8, 0x5, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) pwritev(r8, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r10=>0x0, 0x4, 0x3, 0x8b, 0x4, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7, 0x20, 0x5, 0x4}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r13=>0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan0\x00', <r14=>0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg0\x00', <r15=>0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)={'team0\x00', <r16=>0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x994, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x79, 0x3, "1b09e5dfd718d3ee3d8e8ed0bfb60c27ebb113503eeb1d9631a5876198dcc6c48c3cb2c7c7d1ca50f0f63a24152c8100b2c762056bf12c7f0a69f7aefcf79583a1b93f844197c35beb3109ad7f0843a216f01c51b3458f54362db1124a0f39e738f6852417a2bea6900c6f01cb33c3bab7ae28edfd"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x304, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "f92fac9b2c4cc4d9d2fda7284e188d3f858b4130d246500f19fb559630343681d152a736c8e6426ebe4bd8be40db852ef54139e7596655c07f3b621fd4ba967b0a1497e5a5e4aff9acabbaf36bb631e54a544319cd5fbf1715e5be572b1f20285ba5d9fbcfbf5f"}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x8a\',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40cdb630}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x645}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/--\'^[-*$\\{]Q!+[B\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "12a393f8ab7b12b0f26a09c6f96e7c838a728c57cda723f5bba3d431ef7b962ec435303a55e15c652e6924a5577a813910ac90db0ec11c90deae3283ced30b3b469a51a62900811b6aad5bce19490c7ce1b1f88867e62cb0f8152893dc9eba87c4a34ce315c97d81ade3342661fe50a8b09fa2e8d196e79f57e0d29fbdacfc435a6b5950effc1c506492ba59e87f7308777b6e0889ca231d55c297772468b99857915df6ebd3ab4b6f66d01a39c9c5c85378e3f18f04e28bfe49b94aa97a5eedb59064939da9acbb6cb2115d83bfa87a6157fe830d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "f3b6e933cd05018d991d2e3075615996e8cd99b82c59f97cb18c0d595bf0d793777e4a32650ef8ba3905e59606c5d9af7bfc0f4a65c946259a58c5cc0671542403febab5bc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "306f8158c86000f4e8bcb4730544f1d58321032f9d9361be99c98ebb1c4a202792c3cecb3209a9ec32d479955287d6f2330ba7c9012abb78cddd"}]}, @ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @ETHTOOL_A_WOL_MODES={0x40c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x15, 0x5, "5e1a9884e7e5214bb7a0eb12e80d1b2cc5"}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "eb9790b107f448fb1b27c29ac0cec6aeb1e464bc0ce64d2ba7a9eb0c9bcb4019911d6fa397b5ac416e92d85fa6330e37f28587069a1e3416c0edf62bf11e3359f1e5e814b4ea387282532d81d47dfcfc32ad96ef07897015d667c717cf2c321639105e49c3c162026c8c42b0edb9ab7c977a09e7c79a0820d99ae4fcbd8662da2873307d8321c270ce50d757b7aa8d5b3662092c11dae4f259a14a60cae665548fb82e72b4551ce882f3e4c6f55259418a3dca92b025928eae44ec2dfa8dec8f9f6b"}, @ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "5a9acf6174a2b2b32bea46401102655b9f5f7ba42319da66a495652fd7456b46111e005052e938c7cce683a6a48e16d3b8894bbf0ecf07"}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "ae95232d0dbac1f9425bd0a5e72bc20086be73933440845976c1686245968c0c13ee911e7d83ab24fb0300c42f62726767976a5a37c3bdaec544bccbc68aba96d9b83f802a262cea4c45f8a47221fa72ba1af2e628d713dcf9027e673fe518b79af20d80693b8707a17a8c34c56ea9e3757c715dbc3147073671eb7beeb46686f71dd9d785110100ebcc19ed690362801395595df1c38798e6905aa74cde0be033db028113375284b6aeddbc68525478b66900053f65142027e2c5fcec5fc03fe1ec99eb42fbf8396c"}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "817a57e5db340e79cc29290004fea688bfbbe22e2ecd575af90707354b4a2922c9f8058a046e77b591dae1c20982c6e356d07ab204981ba05506682e053c692b1f47dc8798384c5596283e1dbfabccdc0fe548c78c14e28d18574c2f1c"}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "f32cf79323e8400de99d53bc88fff22ea8c875d048a594e68f746cb29ca2a3f4e50491a1a639380e3190342328eebab63519a9c398e2a3a7b463ccfbf1fe05c59ab66b76d75348ba0baaa369055f90b7ea03351cd77b156d637102f44f85ba0edec7cdb0021f3345bdfed67eb74cb88617ad8b73980495e2c3073e3be5955149b26a482a077eb6cde7ee1bb21515dbb8d58c47ef52cecca47a3f05d3265a4801c534cf3fb97e9c4713f63375"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#/\xb7\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!{(}^:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x484}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_WOL_MODES={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0x53, 0x4, "5b6a31e266ea2149e068ae8eac99c0a36fb57e61b10dae28083beea39b0c6355d32b89e2d9c1eee3115b9603503291c8ca7f4db38ae580db03af79bd50c327bf605a3f14e9c427b2c85fe5980608f7"}, @ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "735bd227ac3611b98fb1e0c2dbaa5dffdbe040e7d3f89515c39c9fc387f20f985f834f46a5dc985f2e1c22fd21ab9434d35d97bc1e5348bfab299cc415031d81f239bb7816"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x1a, 0x3, "622426427c504baf950a0cf6a329225c43f1142c56e9"}, @ETHTOOL_A_WOL_MODES={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x994}, 0x1, 0x0, 0x0, 0x801}, 0x1) 15.127971773s ago: executing program 2 (id=1167): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076808268cb89e14f008001b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>r0}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @local, 0x8}}}, {{@arp={@remote, @multicast2, 0xffffff00, 0xff, 0x9, 0x9, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0xe, 0x40, 0xfffd, 0x0, 0x5, 'syz_tun\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x78, 0x8, 0x3}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0xffffff00, 0x0, 0x2, 0x0, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="290c176c978f", {[0x7f, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xb7, 0x5, 0x0, 0xa7fb, 0x7, 0x800, 'veth1_to_batadv\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x2f2c2646b822bef8}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'erspan0\x00', <r8=>0x0, 0x0, 0x1, 0xfffffeff, 0x6, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x2b, 0x2a, [@broadcast, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', <r9=>0x0, 0x2f, 0x0, 0x81, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x700, 0x400, 0x8}}) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r11=>0x0}) sendto$packet(r10, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r11}, 0x14) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a000409fc043d39d4c5cb5989ddf5616d67211167ea48a1ec0cedd942ec600ee052a9305ae3867f9e817acaf8babaacdeffbcb4dd633ef3641b7af490477208469af237677107f5c908ed321827752445bafec3b3281d3da9cfeb4b827b4a0985c07d57b3f883d9c7ee2573b0be854218102a3fce851", @ANYRES16=r4, @ANYBLOB="000427bd7000fedbdf250100000048000180080006001800000008000700", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB="14000400ff010000000000000000000000000001080006001c00000008000700", @ANYRES32=r9, @ANYBLOB="0800060002000000080003000100000014000680060001000a00000008000700", @ANYRES32=r11, @ANYBLOB="0800030004000000"], 0x80}, 0x1, 0x0, 0x0, 0x4004884}, 0x20048005) 1.091704429s ago: executing program 32 (id=1162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810100000000000000000300000008000100000000000c000300"], 0x28}}, 0x0) 48.684747ms ago: executing program 33 (id=1167): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076808268cb89e14f008001b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>r0}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @local, 0x8}}}, {{@arp={@remote, @multicast2, 0xffffff00, 0xff, 0x9, 0x9, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0xe, 0x40, 0xfffd, 0x0, 0x5, 'syz_tun\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x78, 0x8, 0x3}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0xffffff00, 0x0, 0x2, 0x0, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="290c176c978f", {[0x7f, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xb7, 0x5, 0x0, 0xa7fb, 0x7, 0x800, 'veth1_to_batadv\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x2f2c2646b822bef8}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'erspan0\x00', <r8=>0x0, 0x0, 0x1, 0xfffffeff, 0x6, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x2b, 0x2a, [@broadcast, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', <r9=>0x0, 0x2f, 0x0, 0x81, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x700, 0x400, 0x8}}) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r11=>0x0}) sendto$packet(r10, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r11}, 0x14) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a000409fc043d39d4c5cb5989ddf5616d67211167ea48a1ec0cedd942ec600ee052a9305ae3867f9e817acaf8babaacdeffbcb4dd633ef3641b7af490477208469af237677107f5c908ed321827752445bafec3b3281d3da9cfeb4b827b4a0985c07d57b3f883d9c7ee2573b0be854218102a3fce851", @ANYRES16=r4, @ANYBLOB="000427bd7000fedbdf250100000048000180080006001800000008000700", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB="14000400ff010000000000000000000000000001080006001c00000008000700", @ANYRES32=r9, @ANYBLOB="0800060002000000080003000100000014000680060001000a00000008000700", @ANYRES32=r11, @ANYBLOB="0800030004000000"], 0x80}, 0x1, 0x0, 0x0, 0x4004884}, 0x20048005) 0s ago: executing program 34 (id=1166): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "40e5045dd1308759370438b1d57b7bc9df26f41d523e6ac20aaf294dc121f4b1", "079493622eb4615a75a7b15aa958e470d29cd1f75f0aaef06d3d36f9a8fbb57b", "46a4dd7484770adc22f2c96e3a35e29ee07219102bea4d6263f75404596fe571", "bb713e1eb69476422119fe20b4b2eca3b3af34b1273fd4720941224c45e2a6b6", "cc7ebb8e42e62ff89b7dd06d96abde657d3180869d2adf4a7430f7352b6f2899", "81c4b1eca74e76871a34d473", 0x3, 0xb, 0x0, 0x9, 0x5}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r4=>r1, 0x9, 0x3, 0xfffffffffffffffd}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x0, 0x3, 0x5, 0xa, 0xffffffffffffffe0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0xfffff000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) r7 = socket(0x2a, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r5, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001100), &(0x7f00000011c0), 0x8, 0x5, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) pwritev(r8, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r10=>0x0, 0x4, 0x3, 0x8b, 0x4, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7, 0x20, 0x5, 0x4}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r13=>0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan0\x00', <r14=>0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg0\x00', <r15=>0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000004c0)={'team0\x00', <r16=>0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x994, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x79, 0x3, "1b09e5dfd718d3ee3d8e8ed0bfb60c27ebb113503eeb1d9631a5876198dcc6c48c3cb2c7c7d1ca50f0f63a24152c8100b2c762056bf12c7f0a69f7aefcf79583a1b93f844197c35beb3109ad7f0843a216f01c51b3458f54362db1124a0f39e738f6852417a2bea6900c6f01cb33c3bab7ae28edfd"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x304, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "f92fac9b2c4cc4d9d2fda7284e188d3f858b4130d246500f19fb559630343681d152a736c8e6426ebe4bd8be40db852ef54139e7596655c07f3b621fd4ba967b0a1497e5a5e4aff9acabbaf36bb631e54a544319cd5fbf1715e5be572b1f20285ba5d9fbcfbf5f"}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x8a\',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40cdb630}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x645}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/--\'^[-*$\\{]Q!+[B\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "12a393f8ab7b12b0f26a09c6f96e7c838a728c57cda723f5bba3d431ef7b962ec435303a55e15c652e6924a5577a813910ac90db0ec11c90deae3283ced30b3b469a51a62900811b6aad5bce19490c7ce1b1f88867e62cb0f8152893dc9eba87c4a34ce315c97d81ade3342661fe50a8b09fa2e8d196e79f57e0d29fbdacfc435a6b5950effc1c506492ba59e87f7308777b6e0889ca231d55c297772468b99857915df6ebd3ab4b6f66d01a39c9c5c85378e3f18f04e28bfe49b94aa97a5eedb59064939da9acbb6cb2115d83bfa87a6157fe830d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "f3b6e933cd05018d991d2e3075615996e8cd99b82c59f97cb18c0d595bf0d793777e4a32650ef8ba3905e59606c5d9af7bfc0f4a65c946259a58c5cc0671542403febab5bc"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "306f8158c86000f4e8bcb4730544f1d58321032f9d9361be99c98ebb1c4a202792c3cecb3209a9ec32d479955287d6f2330ba7c9012abb78cddd"}]}, @ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @ETHTOOL_A_WOL_MODES={0x40c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x15, 0x5, "5e1a9884e7e5214bb7a0eb12e80d1b2cc5"}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "eb9790b107f448fb1b27c29ac0cec6aeb1e464bc0ce64d2ba7a9eb0c9bcb4019911d6fa397b5ac416e92d85fa6330e37f28587069a1e3416c0edf62bf11e3359f1e5e814b4ea387282532d81d47dfcfc32ad96ef07897015d667c717cf2c321639105e49c3c162026c8c42b0edb9ab7c977a09e7c79a0820d99ae4fcbd8662da2873307d8321c270ce50d757b7aa8d5b3662092c11dae4f259a14a60cae665548fb82e72b4551ce882f3e4c6f55259418a3dca92b025928eae44ec2dfa8dec8f9f6b"}, @ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "5a9acf6174a2b2b32bea46401102655b9f5f7ba42319da66a495652fd7456b46111e005052e938c7cce683a6a48e16d3b8894bbf0ecf07"}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "ae95232d0dbac1f9425bd0a5e72bc20086be73933440845976c1686245968c0c13ee911e7d83ab24fb0300c42f62726767976a5a37c3bdaec544bccbc68aba96d9b83f802a262cea4c45f8a47221fa72ba1af2e628d713dcf9027e673fe518b79af20d80693b8707a17a8c34c56ea9e3757c715dbc3147073671eb7beeb46686f71dd9d785110100ebcc19ed690362801395595df1c38798e6905aa74cde0be033db028113375284b6aeddbc68525478b66900053f65142027e2c5fcec5fc03fe1ec99eb42fbf8396c"}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "817a57e5db340e79cc29290004fea688bfbbe22e2ecd575af90707354b4a2922c9f8058a046e77b591dae1c20982c6e356d07ab204981ba05506682e053c692b1f47dc8798384c5596283e1dbfabccdc0fe548c78c14e28d18574c2f1c"}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "f32cf79323e8400de99d53bc88fff22ea8c875d048a594e68f746cb29ca2a3f4e50491a1a639380e3190342328eebab63519a9c398e2a3a7b463ccfbf1fe05c59ab66b76d75348ba0baaa369055f90b7ea03351cd77b156d637102f44f85ba0edec7cdb0021f3345bdfed67eb74cb88617ad8b73980495e2c3073e3be5955149b26a482a077eb6cde7ee1bb21515dbb8d58c47ef52cecca47a3f05d3265a4801c534cf3fb97e9c4713f63375"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#/\xb7\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!{(}^:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x484}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_WOL_MODES={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0x53, 0x4, "5b6a31e266ea2149e068ae8eac99c0a36fb57e61b10dae28083beea39b0c6355d32b89e2d9c1eee3115b9603503291c8ca7f4db38ae580db03af79bd50c327bf605a3f14e9c427b2c85fe5980608f7"}, @ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "735bd227ac3611b98fb1e0c2dbaa5dffdbe040e7d3f89515c39c9fc387f20f985f834f46a5dc985f2e1c22fd21ab9434d35d97bc1e5348bfab299cc415031d81f239bb7816"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x1a, 0x3, "622426427c504baf950a0cf6a329225c43f1142c56e9"}, @ETHTOOL_A_WOL_MODES={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x994}, 0x1, 0x0, 0x0, 0x801}, 0x1) kernel console output (not intermixed with test programs): m. [ 201.204018][ T9082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.244867][ T36] bridge_slave_1: left allmulticast mode [ 201.250563][ T36] bridge_slave_1: left promiscuous mode [ 201.257037][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.267619][ T36] bridge_slave_0: left allmulticast mode [ 201.273836][ T36] bridge_slave_0: left promiscuous mode [ 201.279563][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.579364][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.590386][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.602074][ T36] bond0 (unregistering): Released all slaves [ 201.644220][ T9082] hsr_slave_0: entered promiscuous mode [ 201.650643][ T9082] hsr_slave_1: entered promiscuous mode [ 201.659202][ T9082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.667226][ T9082] Cannot create hsr debugfs directory [ 201.957460][ T36] hsr_slave_0: left promiscuous mode [ 201.966008][ T36] hsr_slave_1: left promiscuous mode [ 201.972321][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.985240][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.995508][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.003270][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.026278][ T36] veth1_macvtap: left promiscuous mode [ 202.031924][ T36] veth0_macvtap: left promiscuous mode [ 202.038661][ T36] veth1_vlan: left promiscuous mode [ 202.044514][ T36] veth0_vlan: left promiscuous mode [ 202.534855][ T5857] Bluetooth: hci1: command tx timeout [ 202.556619][ T36] team0 (unregistering): Port device team_slave_1 removed [ 202.589906][ T36] team0 (unregistering): Port device team_slave_0 removed [ 203.468498][ T9082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.486715][ T9082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.502187][ T9082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.523639][ T9082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.622719][ T9082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.651771][ T9082] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.669598][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.676815][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.695131][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.702305][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.016939][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.081277][ T9082] veth0_vlan: entered promiscuous mode [ 204.099227][ T9082] veth1_vlan: entered promiscuous mode [ 204.150187][ T9082] veth0_macvtap: entered promiscuous mode [ 204.168335][ T9082] veth1_macvtap: entered promiscuous mode [ 204.198878][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.215371][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.227710][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.240765][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.252078][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.263908][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.278515][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.291591][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.308536][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.331142][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.349218][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.359989][ T9082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.377262][ T9082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.390573][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.416164][ T9082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.425161][ T9082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.434568][ T9082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.444347][ T9082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.557457][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.576265][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.619070][ T5857] Bluetooth: hci1: command tx timeout [ 204.629659][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.638199][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.119849][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.491051][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.500665][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.508811][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.518320][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.527055][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.563730][ T9164] lo speed is unknown, defaulting to 1000 [ 207.688542][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.757129][ T9164] chnl_net:caif_netlink_parms(): no params data found [ 207.854463][ T9175] netlink: 'syz.4.652': attribute type 4 has an invalid length. [ 207.862533][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 207.876557][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.919518][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 207.928828][ T9180] netlink: 'syz.4.652': attribute type 7 has an invalid length. [ 207.942465][ T9180] netlink: 'syz.4.652': attribute type 8 has an invalid length. [ 207.954860][ T9176] TCP: TCP_TX_DELAY enabled [ 207.970796][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 208.014441][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.249457][ T9186] veth1_macvtap: left promiscuous mode [ 208.257424][ T9186] macsec0: entered promiscuous mode [ 208.283760][ T9164] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.291978][ T9164] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.310164][ T9164] bridge_slave_0: entered allmulticast mode [ 208.322280][ T9164] bridge_slave_0: entered promiscuous mode [ 208.371206][ T9164] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.390205][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.401495][ T9164] bridge_slave_1: entered allmulticast mode [ 208.417162][ T9164] bridge_slave_1: entered promiscuous mode [ 208.467919][ T9203] netlink: 84 bytes leftover after parsing attributes in process `syz.3.656'. [ 208.549900][ T9164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.573870][ T9201] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 208.603889][ T9201] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 208.641164][ T9199] lo speed is unknown, defaulting to 1000 [ 208.670118][ T9164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.936684][ T9164] team0: Port device team_slave_0 added [ 208.972506][ T9164] team0: Port device team_slave_1 added [ 209.222433][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.246286][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.284712][ T9164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.297310][ T12] bridge_slave_1: left allmulticast mode [ 209.303904][ T12] bridge_slave_1: left promiscuous mode [ 209.310417][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.324325][ T12] bridge_slave_0: left allmulticast mode [ 209.330017][ T12] bridge_slave_0: left promiscuous mode [ 209.336123][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.573038][ T5857] Bluetooth: hci1: command tx timeout [ 209.681387][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.719662][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.753916][ T12] bond0 (unregistering): Released all slaves [ 209.818030][ T9164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.850063][ T9164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.886567][ T9164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.087343][ T9164] hsr_slave_0: entered promiscuous mode [ 210.121489][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 210.138650][ T9164] hsr_slave_1: entered promiscuous mode [ 210.167637][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 210.173848][ T9164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.214655][ T9164] Cannot create hsr debugfs directory [ 210.215366][ T9246] netlink: 'syz.3.668': attribute type 14 has an invalid length. [ 210.233040][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 210.258626][ T9246] netlink: 'syz.3.668': attribute type 13 has an invalid length. [ 210.305755][ T42] block nbd0: Possible stuck request ffff888026467000: control (read@0,4096B). Runtime 60 seconds [ 211.213565][ T9285] netlink: 56 bytes leftover after parsing attributes in process `syz.2.675'. [ 211.277482][ T9285] netlink: 44 bytes leftover after parsing attributes in process `syz.2.675'. [ 211.347851][ T12] hsr_slave_0: left promiscuous mode [ 211.377055][ T12] hsr_slave_1: left promiscuous mode [ 211.394514][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.417560][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.445273][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.483650][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.612750][ T12] veth1_macvtap: left promiscuous mode [ 211.634300][ T12] veth0_macvtap: left promiscuous mode [ 211.643678][ T12] veth1_vlan: left promiscuous mode [ 211.649076][ T12] veth0_vlan: left promiscuous mode [ 211.654559][ T5849] Bluetooth: hci1: command tx timeout [ 211.733311][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 211.733728][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 211.791511][ T9311] raw_sendmsg: syz.3.681 forgot to set AF_INET. Fix it! [ 212.347188][ T12] team0 (unregistering): Port device team_slave_1 removed [ 212.382062][ T12] team0 (unregistering): Port device team_slave_0 removed [ 213.402075][ T9356] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 213.700682][ T9369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.692'. [ 213.743205][ T5153] Bluetooth: hci1: command tx timeout [ 214.096720][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 214.312444][ T9164] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.335520][ T9164] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.365813][ T9164] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.380088][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 214.417194][ T9164] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.448430][ T9400] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.701'. [ 214.486451][ T9400] net_ratelimit: 13 callbacks suppressed [ 214.486471][ T9400] netlink: zone id is out of range [ 214.514457][ T9400] netlink: get zone limit has 8 unknown bytes [ 214.642621][ T9164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.701491][ T9164] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.747878][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.755121][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.788252][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.795505][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.315519][ T9437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.708'. [ 215.428869][ T9433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.460452][ T9447] netlink: 'syz.4.710': attribute type 8 has an invalid length. [ 215.549652][ T9164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.658692][ T9433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.751178][ T9433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.814349][ T5153] Bluetooth: hci1: command tx timeout [ 215.899918][ T9433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.032136][ T9164] veth0_vlan: entered promiscuous mode [ 216.107710][ T9164] veth1_vlan: entered promiscuous mode [ 216.266163][ T9433] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.301779][ T9164] veth0_macvtap: entered promiscuous mode [ 216.369422][ T9433] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.429983][ T9433] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.452066][ T9164] veth1_macvtap: entered promiscuous mode [ 216.545625][ T9433] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.599044][ T9492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.721'. [ 216.635828][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.676752][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.712131][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.750881][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.781233][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.797983][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.803389][ T9500] netlink: 56 bytes leftover after parsing attributes in process `syz.4.723'. [ 216.808591][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.825951][ T9499] netlink: 56 bytes leftover after parsing attributes in process `syz.4.723'. [ 216.865334][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.896924][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.919574][ T9497] netlink: 64 bytes leftover after parsing attributes in process `syz.2.722'. [ 216.975082][ T9497] netlink: 64 bytes leftover after parsing attributes in process `syz.2.722'. [ 217.057165][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.089601][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.137370][ T9164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.203004][ T9164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.245022][ T9164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.328213][ T9164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.338803][ T9164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.350497][ T9164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.361675][ T9164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.603521][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.638434][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.743881][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.778972][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.485282][ T9574] ip_vti0: entered allmulticast mode [ 218.640095][ T8175] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.791142][ T8175] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.946086][ T8175] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.980420][ T8175] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.161197][ T8175] bridge_slave_1: left allmulticast mode [ 219.167579][ T8175] bridge_slave_1: left promiscuous mode [ 219.176509][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.188277][ T8175] bridge_slave_0: left allmulticast mode [ 219.196594][ T8175] bridge_slave_0: left promiscuous mode [ 219.203386][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.528085][ T8175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.540040][ T8175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.550845][ T8175] bond0 (unregistering): Released all slaves [ 219.847329][ T8175] hsr_slave_0: left promiscuous mode [ 219.856818][ T8175] hsr_slave_1: left promiscuous mode [ 219.868093][ T8175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.879781][ T8175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.893112][ T8175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.900582][ T8175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.947671][ T8175] veth1_macvtap: left promiscuous mode [ 219.956946][ T8175] veth0_macvtap: left promiscuous mode [ 219.963285][ T8175] veth1_vlan: left promiscuous mode [ 219.968648][ T8175] veth0_vlan: left promiscuous mode [ 220.526862][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.538824][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.551002][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.561381][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.574417][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.750362][ T8175] team0 (unregistering): Port device team_slave_1 removed [ 220.791561][ T8175] team0 (unregistering): Port device team_slave_0 removed [ 221.265878][ T9616] lo speed is unknown, defaulting to 1000 [ 221.452122][ T9628] netlink: 'syz.0.749': attribute type 7 has an invalid length. [ 221.460927][ T9628] __nla_validate_parse: 4 callbacks suppressed [ 221.460945][ T9628] netlink: 15 bytes leftover after parsing attributes in process `syz.0.749'. [ 221.481410][ T9628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.749'. [ 221.495552][ T9628] netlink: 872 bytes leftover after parsing attributes in process `syz.0.749'. [ 221.576365][ T9628] netlink: 'syz.0.749': attribute type 7 has an invalid length. [ 221.599229][ T9628] netlink: 15 bytes leftover after parsing attributes in process `syz.0.749'. [ 221.697859][ T9633] netlink: 'syz.3.752': attribute type 4 has an invalid length. [ 221.814399][ T9646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.754'. [ 222.404441][ T9616] chnl_net:caif_netlink_parms(): no params data found [ 222.498922][ T9678] openvswitch: netlink: IPv4 tun info is not correct [ 222.585053][ T9682] netlink: 'syz.0.758': attribute type 2 has an invalid length. [ 222.618611][ T5153] Bluetooth: hci1: command tx timeout [ 222.816849][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.835339][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.858462][ T9616] bridge_slave_0: entered allmulticast mode [ 222.871412][ T9616] bridge_slave_0: entered promiscuous mode [ 222.900051][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.916727][ T9616] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.928706][ T9616] bridge_slave_1: entered allmulticast mode [ 222.938233][ T9616] bridge_slave_1: entered promiscuous mode [ 223.047254][ T9616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.109441][ T9616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.177896][ T9704] xt_hashlimit: invalid rate [ 223.188138][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 223.238946][ T9616] team0: Port device team_slave_0 added [ 223.295417][ T9616] team0: Port device team_slave_1 added [ 223.326037][ T9710] netlink: 44 bytes leftover after parsing attributes in process `syz.4.766'. [ 223.496724][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.531876][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.608771][ T9616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.639728][ T9722] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 223.665096][ T9728] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 223.773199][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 223.789334][ T9735] netlink: 104 bytes leftover after parsing attributes in process `syz.0.768'. [ 223.840107][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.862332][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.899344][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 223.939161][ T9616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.304046][ T9760] Driver unsupported XDP return value 0 on prog (id 222) dev N/A, expect packet loss! [ 224.348920][ T9616] hsr_slave_0: entered promiscuous mode [ 224.361773][ T9616] hsr_slave_1: entered promiscuous mode [ 224.381977][ T9616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.406318][ T9616] Cannot create hsr debugfs directory [ 224.503200][ T9772] openvswitch: netlink: Flow key attr not present in new flow. [ 224.694009][ T5153] Bluetooth: hci1: command tx timeout [ 225.034739][ T9787] syzkaller0: entered promiscuous mode [ 225.043159][ T9787] syzkaller0: entered allmulticast mode [ 225.259820][ T9810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.843761][ T9839] sctp: [Deprecated]: syz.0.795 (pid 9839) Use of int in max_burst socket option deprecated. [ 225.843761][ T9839] Use struct sctp_assoc_value instead [ 226.066935][ T9850] veth0: entered promiscuous mode [ 226.120800][ T9850] veth0: left promiscuous mode [ 226.261630][ T9866] sctp: [Deprecated]: syz.4.800 (pid 9866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.261630][ T9866] Use struct sctp_sack_info instead [ 226.296209][ T9864] netlink: 'syz.3.802': attribute type 23 has an invalid length. [ 226.350875][ T9616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.400712][ T9616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.415327][ T9866] lo speed is unknown, defaulting to 1000 [ 226.430229][ T9616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.463867][ T9616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.517227][ T9873] __nla_validate_parse: 1 callbacks suppressed [ 226.517250][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 226.776395][ T5153] Bluetooth: hci1: command tx timeout [ 227.030489][ T9616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.067623][ T9893] netlink: 256 bytes leftover after parsing attributes in process `syz.3.809'. [ 227.092615][ T9616] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.135339][ T9893] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.151077][ T9900] xt_limit: Overflow, try lower: 0/0 [ 227.208404][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.215678][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.291508][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.298791][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.491860][ T9913] xt_l2tp: invalid flags combination: 4 [ 227.520195][ T9912] xt_l2tp: invalid flags combination: 4 [ 227.543693][ T9916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.813'. [ 228.122364][ T9616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.295520][ T9616] veth0_vlan: entered promiscuous mode [ 228.330030][ T9958] openvswitch: netlink: IP tunnel dst address not specified [ 228.356584][ T9616] veth1_vlan: entered promiscuous mode [ 228.483587][ T9616] veth0_macvtap: entered promiscuous mode [ 228.516663][ T9616] veth1_macvtap: entered promiscuous mode [ 228.648843][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.692950][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.748934][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.779883][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.813858][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.830260][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.840662][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.852601][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.863164][ T5153] Bluetooth: hci1: command tx timeout [ 229.017302][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.061116][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.088095][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.107704][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.178547][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.208010][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.353393][ T9616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.372908][ T9616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.381846][ T9616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.432917][ T9616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.776200][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.971671][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.029845][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.053549][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.112228][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.327931][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 230.361452][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.423272][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.451398][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.731189][T10045] bond0: entered allmulticast mode [ 230.756693][T10045] bond_slave_0: entered allmulticast mode [ 230.789677][T10045] bond_slave_1: entered allmulticast mode [ 230.877224][ T36] bridge_slave_1: left allmulticast mode [ 230.896137][ T36] bridge_slave_1: left promiscuous mode [ 230.909692][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.927792][ T36] bridge_slave_0: left allmulticast mode [ 230.942233][ T36] bridge_slave_0: left promiscuous mode [ 230.951674][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.025685][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.039483][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.048374][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.059310][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.068562][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.989584][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.000536][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.011120][ T36] bond0 (unregistering): Released all slaves [ 232.026921][ T36] bond1 (unregistering): Released all slaves [ 232.115828][ T36] tipc: Left network mode [ 232.125456][T10054] lo speed is unknown, defaulting to 1000 [ 232.525117][ T36] hsr_slave_0: left promiscuous mode [ 232.532076][ T36] hsr_slave_1: left promiscuous mode [ 232.558995][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.571229][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.582719][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.595344][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.625623][ T36] veth1_macvtap: left promiscuous mode [ 233.093793][ T5857] Bluetooth: hci1: command tx timeout [ 233.158484][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 233.181764][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 233.244555][ T36] team0 (unregistering): Port device team_slave_1 removed [ 233.341112][ T36] team0 (unregistering): Port device team_slave_0 removed [ 233.526591][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.536788][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.549613][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.563383][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.571320][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.829410][T10054] chnl_net:caif_netlink_parms(): no params data found [ 233.975161][T10117] lo speed is unknown, defaulting to 1000 [ 234.037205][T10125] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 234.369371][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.395015][T10054] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.417539][T10054] bridge_slave_0: entered allmulticast mode [ 234.440254][T10054] bridge_slave_0: entered promiscuous mode [ 234.484292][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.493219][T10054] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.500937][T10054] bridge_slave_1: entered allmulticast mode [ 234.524751][T10054] bridge_slave_1: entered promiscuous mode [ 234.532262][T10149] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 234.560299][T10152] netlink: 'syz.2.849': attribute type 4 has an invalid length. [ 234.796810][T10169] xt_hashlimit: size too large, truncated to 1048576 [ 234.815929][T10054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.857194][T10054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.875213][T10171] xt_hashlimit: size too large, truncated to 1048576 [ 235.136227][ T36] IPVS: stop unused estimator thread 0... [ 235.173090][ T5857] Bluetooth: hci1: command tx timeout [ 235.360630][T10054] team0: Port device team_slave_0 added [ 235.378524][T10117] chnl_net:caif_netlink_parms(): no params data found [ 235.404624][T10054] team0: Port device team_slave_1 added [ 235.573798][T10182] netlink: 84 bytes leftover after parsing attributes in process `syz.0.854'. [ 235.653095][ T5857] Bluetooth: hci2: command tx timeout [ 237.252976][ T5857] Bluetooth: hci1: command tx timeout [ 237.733562][ T5857] Bluetooth: hci2: command tx timeout [ 237.746506][ T66] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.984923][T10054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.992445][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.019603][T10054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.053079][T10054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.088986][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.179925][T10054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.277548][ T66] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.536821][ T66] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.569462][T10117] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.577127][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.585034][T10117] bridge_slave_0: entered allmulticast mode [ 238.595359][T10117] bridge_slave_0: entered promiscuous mode [ 238.646854][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 238.657523][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.672438][T10225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 238.682879][T10225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.760268][T10117] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.780855][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.807384][T10117] bridge_slave_1: entered allmulticast mode [ 238.819928][T10117] bridge_slave_1: entered promiscuous mode [ 238.844624][ T66] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.867635][T10054] hsr_slave_0: entered promiscuous mode [ 238.872412][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 238.877902][T10054] hsr_slave_1: entered promiscuous mode [ 239.019040][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 239.111154][T10244] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 239.198174][T10117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.277776][T10117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.315391][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 239.333104][ T5857] Bluetooth: hci1: command tx timeout [ 239.492669][T10117] team0: Port device team_slave_0 added [ 239.520420][T10117] team0: Port device team_slave_1 added [ 239.813330][ T5857] Bluetooth: hci2: command tx timeout [ 239.819594][T10117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.835732][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.865920][T10117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.879063][T10117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.886381][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.936590][T10117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.959662][ T66] bridge_slave_1: left allmulticast mode [ 239.966492][ T66] bridge_slave_1: left promiscuous mode [ 239.982542][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.011839][ T66] bridge_slave_0: left allmulticast mode [ 240.031805][ T66] bridge_slave_0: left promiscuous mode [ 240.042139][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.080776][T10272] netlink: 'syz.0.874': attribute type 11 has an invalid length. [ 240.096810][T10272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.874'. [ 240.376161][ T42] block nbd0: Possible stuck request ffff888026467000: control (read@0,4096B). Runtime 90 seconds [ 240.465287][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.476431][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.486752][ T66] bond0 (unregistering): Released all slaves [ 240.847298][T10286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.877'. [ 240.883820][T10117] hsr_slave_0: entered promiscuous mode [ 240.893936][T10117] hsr_slave_1: entered promiscuous mode [ 240.900399][T10117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.937827][T10117] Cannot create hsr debugfs directory [ 241.224760][T10304] netlink: 244 bytes leftover after parsing attributes in process `syz.2.882'. [ 241.287541][T10303] netlink: 128 bytes leftover after parsing attributes in process `syz.0.880'. [ 241.387313][ T66] hsr_slave_0: left promiscuous mode [ 241.435287][ T66] hsr_slave_1: left promiscuous mode [ 241.447684][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.465941][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.484001][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.491930][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.567574][ T66] veth1_macvtap: left promiscuous mode [ 241.593441][ T66] veth0_macvtap: left promiscuous mode [ 241.608239][ T66] veth1_vlan: left promiscuous mode [ 241.628091][ T66] veth0_vlan: left promiscuous mode [ 241.893070][ T5153] Bluetooth: hci2: command tx timeout [ 242.066112][T10342] openvswitch: netlink: Actions may not be safe on all matching packets [ 242.081010][T10342] delete_channel: no stack [ 242.435219][ T66] team0 (unregistering): Port device team_slave_1 removed [ 242.453328][ T5153] Bluetooth: hci4: command 0x0405 tx timeout [ 242.484544][ T66] team0 (unregistering): Port device team_slave_0 removed [ 242.699518][T10354] block nbd3: not configured, cannot reconfigure [ 242.711694][T10354] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 242.986648][T10354] netlink: 'syz.3.897': attribute type 2 has an invalid length. [ 243.112238][T10362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.898'. [ 243.348683][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 243.407415][T10054] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.421802][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 243.469117][T10054] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.501176][T10054] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.530825][T10375] netlink: 'syz.0.903': attribute type 3 has an invalid length. [ 243.629697][T10054] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.113257][T10395] __nla_validate_parse: 2 callbacks suppressed [ 244.113278][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.912'. [ 244.156525][T10054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.231555][T10054] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.278498][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.285735][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.342311][T10117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.411034][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.418316][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.483596][T10117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.526285][T10117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.559332][T10117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.571779][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 244.589418][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 244.690662][T10054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.706162][T10054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.748995][T10422] netlink: 'syz.2.917': attribute type 4 has an invalid length. [ 244.761462][T10407] pim6reg1: entered promiscuous mode [ 244.775101][T10407] pim6reg1: entered allmulticast mode [ 244.889520][ T5924] lo speed is unknown, defaulting to 1000 [ 244.923311][ T5924] syz2: Port: 1 Link DOWN [ 245.101564][T10117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.189164][T10117] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.204432][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.211639][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.242686][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.249930][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.412539][T10054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.867947][T10117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.146755][T10117] veth0_vlan: entered promiscuous mode [ 246.182113][T10117] veth1_vlan: entered promiscuous mode [ 246.227676][T10485] netlink: 60 bytes leftover after parsing attributes in process `syz.0.929'. [ 246.288211][T10488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.930'. [ 246.307936][T10054] veth0_vlan: entered promiscuous mode [ 246.335860][T10117] veth0_macvtap: entered promiscuous mode [ 246.360557][T10117] veth1_macvtap: entered promiscuous mode [ 246.397231][T10054] veth1_vlan: entered promiscuous mode [ 246.488841][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.502109][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.516659][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.532998][ T5857] Bluetooth: hci2: command tx timeout [ 246.539223][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.551806][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.566242][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.581008][T10117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.631254][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.645557][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.655875][T10117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.666841][T10117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.694896][T10117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.744035][T10503] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 246.749457][T10054] veth0_macvtap: entered promiscuous mode [ 246.817995][T10054] veth1_macvtap: entered promiscuous mode [ 246.841401][T10117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.868933][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 246.872970][T10117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.888284][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 246.890679][T10117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.917318][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 246.920290][T10117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.999991][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.016790][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.031169][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.042013][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.056347][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.067104][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.091456][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.117351][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.142104][T10054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.179043][T10522] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 247.221865][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.248082][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.264525][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.277981][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.304615][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.352695][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.382349][T10054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.474272][T10530] xt_CT: No such helper "pptp" [ 247.520006][T10054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.564088][T10054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.584361][T10054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.599250][T10054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.815810][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.830884][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.860229][T10552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.942'. [ 247.964031][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 247.991580][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.998707][T10551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.032002][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.142699][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.182368][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.308810][ T8175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.368695][ T8175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.566184][T10576] netlink: 'syz.3.948': attribute type 30 has an invalid length. [ 248.833054][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.010570][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.108139][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.235868][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.479221][ T53] bridge_slave_1: left allmulticast mode [ 249.494644][ T53] bridge_slave_1: left promiscuous mode [ 249.500489][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.526475][ T53] bridge_slave_0: left allmulticast mode [ 249.543462][ T53] bridge_slave_0: left promiscuous mode [ 249.549461][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.620935][T10608] __nla_validate_parse: 3 callbacks suppressed [ 249.620958][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 249.652371][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 249.676539][T10608] netlink: 'syz.0.950': attribute type 15 has an invalid length. [ 250.231532][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.241896][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.260950][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.278311][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.287725][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.311022][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.324409][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.339548][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.362689][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.377519][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.441715][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.458134][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.468514][ T53] bond0 (unregistering): Released all slaves [ 250.531907][T10618] lo speed is unknown, defaulting to 1000 [ 250.672992][T10625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.954'. [ 250.706513][T10620] lo speed is unknown, defaulting to 1000 [ 250.764474][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 250.884932][T10633] team0: No ports can be present during mode change [ 251.256690][T10651] batadv1: entered allmulticast mode [ 251.584650][ T53] hsr_slave_0: left promiscuous mode [ 251.612755][ T53] hsr_slave_1: left promiscuous mode [ 251.646644][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.668007][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.689136][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.699522][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.724407][ T53] veth1_macvtap: left promiscuous mode [ 251.730124][ T53] veth0_macvtap: left promiscuous mode [ 251.736059][ T53] veth1_vlan: left promiscuous mode [ 251.741577][ T53] veth0_vlan: left promiscuous mode [ 251.821516][T10678] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 252.173976][ T53] team0 (unregistering): Port device team_slave_1 removed [ 252.211882][ T53] team0 (unregistering): Port device team_slave_0 removed [ 252.374704][ T5847] Bluetooth: hci1: command tx timeout [ 252.454123][ T5847] Bluetooth: hci2: command tx timeout [ 252.607431][T10670] syzkaller1: entered promiscuous mode [ 252.613789][T10670] syzkaller1: entered allmulticast mode [ 252.770216][T10618] chnl_net:caif_netlink_parms(): no params data found [ 252.939728][T10695] netlink: 'syz.0.968': attribute type 11 has an invalid length. [ 252.970291][T10696] netlink: 872 bytes leftover after parsing attributes in process `syz.0.968'. [ 253.071318][T10620] chnl_net:caif_netlink_parms(): no params data found [ 253.235057][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.246274][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.253817][T10618] bridge_slave_0: entered allmulticast mode [ 253.261187][T10618] bridge_slave_0: entered promiscuous mode [ 253.269468][T10618] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.277119][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.284632][T10618] bridge_slave_1: entered allmulticast mode [ 253.292160][T10618] bridge_slave_1: entered promiscuous mode [ 253.606561][T10618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.627474][T10618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.642262][T10723] netlink: 'syz.0.972': attribute type 1 has an invalid length. [ 253.660622][T10723] netlink: 192 bytes leftover after parsing attributes in process `syz.0.972'. [ 253.671075][T10620] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.678622][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.692334][T10620] bridge_slave_0: entered allmulticast mode [ 253.708388][T10620] bridge_slave_0: entered promiscuous mode [ 253.892174][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.911574][T10620] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.921987][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.929618][T10620] bridge_slave_1: entered allmulticast mode [ 253.938298][T10620] bridge_slave_1: entered promiscuous mode [ 254.148040][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.175884][T10618] team0: Port device team_slave_0 added [ 254.185983][T10620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.247515][T10618] team0: Port device team_slave_1 added [ 254.320153][T10620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.365734][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.457577][ T5847] Bluetooth: hci1: command tx timeout [ 254.466464][T10618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.483854][T10751] netlink: 596 bytes leftover after parsing attributes in process `syz.0.977'. [ 254.495728][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.523723][T10618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.534955][ T5847] Bluetooth: hci2: command tx timeout [ 254.668442][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.695964][T10618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.703277][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.731744][T10618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.830619][T10620] team0: Port device team_slave_0 added [ 254.908394][T10620] team0: Port device team_slave_1 added [ 254.928060][T10618] hsr_slave_0: entered promiscuous mode [ 254.940007][T10618] hsr_slave_1: entered promiscuous mode [ 254.947724][T10618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.955825][T10618] Cannot create hsr debugfs directory [ 255.006670][T10620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.021297][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.048290][T10620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.061674][T10620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.070415][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.100033][T10620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.629280][T10620] hsr_slave_0: entered promiscuous mode [ 255.646750][T10620] hsr_slave_1: entered promiscuous mode [ 255.670546][T10620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.688933][T10620] Cannot create hsr debugfs directory [ 255.746574][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.821844][T10794] netlink: 108 bytes leftover after parsing attributes in process `syz.2.988'. [ 255.859085][T10777] lo speed is unknown, defaulting to 1000 [ 255.999892][ T53] bridge_slave_1: left allmulticast mode [ 256.008003][ T53] bridge_slave_1: left promiscuous mode [ 256.026961][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.041288][ T53] bridge_slave_0: left allmulticast mode [ 256.049003][ T53] bridge_slave_0: left promiscuous mode [ 256.058368][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.464340][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.478379][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.488794][ T53] bond0 (unregistering): Released all slaves [ 256.532965][ T5847] Bluetooth: hci1: command tx timeout [ 256.613166][ T5847] Bluetooth: hci2: command tx timeout [ 256.810575][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 257.039555][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 257.391558][ T53] hsr_slave_0: left promiscuous mode [ 257.406125][ T53] hsr_slave_1: left promiscuous mode [ 257.412065][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.420895][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.444393][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.452066][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.488146][ T53] veth1_macvtap: left promiscuous mode [ 257.500817][ T53] veth0_macvtap: left promiscuous mode [ 257.508567][ T53] veth1_vlan: left promiscuous mode [ 257.514599][ T53] veth0_vlan: left promiscuous mode [ 258.053231][ T53] team0 (unregistering): Port device team_slave_1 removed [ 258.091655][ T53] team0 (unregistering): Port device team_slave_0 removed [ 258.614281][ T5847] Bluetooth: hci1: command tx timeout [ 258.676249][T10868] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1006'. [ 258.686114][T10868] NCSI netlink: No device for ifindex 0 [ 258.693105][ T5847] Bluetooth: hci2: command tx timeout [ 258.814318][T10870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.856762][T10618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.930706][T10618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 259.037633][T10618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 259.086017][T10618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 259.121943][T10891] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1010'. [ 259.204084][T10895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1011'. [ 259.439279][T10901] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1012'. [ 260.037447][T10924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'. [ 260.122723][T10928] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1019'. [ 260.138772][T10620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.170206][T10620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.197177][T10620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.251585][T10931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1020'. [ 260.282924][T10933] netlink: 'syz.3.1021': attribute type 12 has an invalid length. [ 260.293993][T10933] netlink: 'syz.3.1021': attribute type 29 has an invalid length. [ 260.310876][T10933] netlink: 'syz.3.1021': attribute type 2 has an invalid length. [ 260.323089][T10620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.369995][T10618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.478467][T10618] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.546308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.553554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.597216][T10945] xt_TPROXY: Can be used only with -p tcp or -p udp [ 260.597846][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.611142][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.871714][T10620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.951391][T10620] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.016920][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.024208][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.066869][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.074141][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.294980][T10620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.547923][T10618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.579092][T10980] netlink: 'syz.3.1031': attribute type 1 has an invalid length. [ 261.621360][T10980] __nla_validate_parse: 2 callbacks suppressed [ 261.621380][T10980] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1031'. [ 261.746384][T10618] veth0_vlan: entered promiscuous mode [ 261.806447][T10618] veth1_vlan: entered promiscuous mode [ 262.031953][T10618] veth0_macvtap: entered promiscuous mode [ 262.059559][T10620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.073101][T10618] veth1_macvtap: entered promiscuous mode [ 262.140459][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.169374][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.183580][T11005] sock: sock_timestamping_bind_phc: sock not bind to device [ 262.218221][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.242709][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.260111][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.299874][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.332464][T10618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.416070][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.448953][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.475341][T11019] x_tables: duplicate underflow at hook 3 [ 262.492844][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.548321][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.581382][T10618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.672113][T10618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.691413][T10618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.706525][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 262.715905][T10618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.725730][T10618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.747053][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 263.056894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.083369][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.152185][T10620] veth0_vlan: entered promiscuous mode [ 263.217784][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.225366][T10620] veth1_vlan: entered promiscuous mode [ 263.262222][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.387180][T10620] veth0_macvtap: entered promiscuous mode [ 263.447971][T10620] veth1_macvtap: entered promiscuous mode [ 263.529385][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.568200][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.597753][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.611653][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.622351][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.643418][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.664028][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.675477][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.691899][T10620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.888803][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.914504][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.928100][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.941294][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.951605][T11084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1051'. [ 263.965091][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.981398][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.999659][T10620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.042173][T10620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.045211][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 264.072017][T10620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.096265][T10620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.133353][T10620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.280944][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.476470][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.592014][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.642080][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.669162][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.715670][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.760520][ T8175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.771942][ T8175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.987611][ T53] bridge_slave_1: left allmulticast mode [ 264.994478][ T53] bridge_slave_1: left promiscuous mode [ 265.000383][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.028272][ T53] bridge_slave_0: left allmulticast mode [ 265.036530][ T53] bridge_slave_0: left promiscuous mode [ 265.042345][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.398380][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.409526][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.420292][ T53] bond0 (unregistering): Released all slaves [ 265.815686][ T53] hsr_slave_0: left promiscuous mode [ 265.833736][ T53] hsr_slave_1: left promiscuous mode [ 265.839878][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.863251][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.875939][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.893583][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.939155][ T53] veth1_macvtap: left promiscuous mode [ 265.955150][ T53] veth0_macvtap: left promiscuous mode [ 265.960866][ T53] veth1_vlan: left promiscuous mode [ 265.979898][ T53] veth0_vlan: left promiscuous mode [ 266.601126][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 266.745610][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 266.885508][ T5153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 266.899624][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 266.909317][ T5153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 266.925437][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 266.934876][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 266.948362][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.964675][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.972648][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.987781][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.997891][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.252221][ T53] team0 (unregistering): Port device team_slave_1 removed [ 267.297349][ T53] team0 (unregistering): Port device team_slave_0 removed [ 267.844895][T11165] lo speed is unknown, defaulting to 1000 [ 267.908647][T11174] netlink: 'syz.3.1061': attribute type 4 has an invalid length. [ 268.019044][T11168] lo speed is unknown, defaulting to 1000 [ 268.120489][T11183] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1064'. [ 268.740744][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.879534][T11165] chnl_net:caif_netlink_parms(): no params data found [ 268.931859][ T30] audit: type=1800 audit(1745386475.227:3): pid=11222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1071" name="blkio.bfq.io_wait_time" dev="tmpfs" ino=1448 res=0 errno=0 [ 268.975155][T11225] netlink: 'syz.2.1072': attribute type 1 has an invalid length. [ 269.006881][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.024458][ T5153] Bluetooth: hci1: command tx timeout [ 269.028465][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 269.095074][ T5153] Bluetooth: hci2: command tx timeout [ 269.147562][T11233] xt_CT: No such helper "pptp" [ 269.250483][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.296799][T11239] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1075'. [ 269.306677][T11239] nbd: illegal input index 61504 [ 269.344592][T11241] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1076'. [ 269.579454][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.815847][T11165] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.848641][T11165] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.872884][T11165] bridge_slave_0: entered allmulticast mode [ 269.888796][T11165] bridge_slave_0: entered promiscuous mode [ 269.919090][T11168] chnl_net:caif_netlink_parms(): no params data found [ 269.945211][T11165] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.958632][T11165] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.967279][T11165] bridge_slave_1: entered allmulticast mode [ 269.975316][T11165] bridge_slave_1: entered promiscuous mode [ 270.148853][T11286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1084'. [ 270.210853][T11165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.315282][T11165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.454418][ T42] block nbd0: Possible stuck request ffff888026467000: control (read@0,4096B). Runtime 120 seconds [ 270.714609][T11165] team0: Port device team_slave_0 added [ 270.722406][T11168] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.752089][T11168] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.765317][T11168] bridge_slave_0: entered allmulticast mode [ 270.793870][T11168] bridge_slave_0: entered promiscuous mode [ 270.879617][T11165] team0: Port device team_slave_1 added [ 271.037312][T11168] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.056300][T11168] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.085340][T11168] bridge_slave_1: entered allmulticast mode [ 271.093309][ T5153] Bluetooth: hci1: command tx timeout [ 271.112367][T11168] bridge_slave_1: entered promiscuous mode [ 271.183658][ T5153] Bluetooth: hci2: command tx timeout [ 271.375454][T11165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.390363][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.419889][T11165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.521505][ T53] bridge_slave_1: left allmulticast mode [ 271.528305][ T53] bridge_slave_1: left promiscuous mode [ 271.547768][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.579993][ T53] bridge_slave_0: left allmulticast mode [ 271.586645][ T53] bridge_slave_0: left promiscuous mode [ 271.592572][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.964988][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.979931][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.991154][ T53] bond0 (unregistering): Released all slaves [ 272.009226][T11165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.033125][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.075304][T11165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.121445][T11168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.145866][T11168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.409513][T11168] team0: Port device team_slave_0 added [ 272.491335][T11165] hsr_slave_0: entered promiscuous mode [ 272.507722][T11165] hsr_slave_1: entered promiscuous mode [ 272.522519][T11168] team0: Port device team_slave_1 added [ 272.670449][T11168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.699311][T11168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.746868][T11168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.830480][T11371] batman_adv: batadv0: Interface deactivated: dummy0 [ 272.843229][T11371] batman_adv: batadv0: Removing interface: dummy0 [ 272.872179][T11371] bridge_slave_0: left allmulticast mode [ 272.888037][T11371] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.907897][T11371] bridge_slave_1: left allmulticast mode [ 272.930500][T11371] bridge_slave_1: left promiscuous mode [ 272.941117][T11371] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.966062][T11371] bond0: (slave bond_slave_0): Releasing backup interface [ 272.975958][T11371] bond_slave_0: left allmulticast mode [ 272.989095][T11371] bond0: (slave bond_slave_1): Releasing backup interface [ 272.998958][T11371] bond_slave_1: left allmulticast mode [ 273.020282][T11371] team0: Port device team_slave_0 removed [ 273.041006][T11371] team0: Port device team_slave_1 removed [ 273.056263][T11371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.064281][T11371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.076656][T11371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.113843][T11371] bond0: (slave macvlan0): Releasing backup interface [ 273.148090][T11371] veth1_vlan: left allmulticast mode [ 273.173076][ T5153] Bluetooth: hci1: command tx timeout [ 273.181385][T11371] bond2: (slave ip6gretap1): Releasing active interface [ 273.210167][T11168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.222708][T11168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.253482][ T5153] Bluetooth: hci2: command tx timeout [ 273.258824][T11168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.289205][ T53] hsr_slave_0: left promiscuous mode [ 273.297309][ T53] hsr_slave_1: left promiscuous mode [ 273.303385][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.311138][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.322881][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.330337][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.351484][ T53] veth1_macvtap: left promiscuous mode [ 273.357322][ T53] veth0_macvtap: left promiscuous mode [ 273.363192][ T53] veth1_vlan: left promiscuous mode [ 273.368550][ T53] veth0_vlan: left promiscuous mode [ 273.790828][ T53] team0 (unregistering): Port device team_slave_1 removed [ 273.831501][ T53] team0 (unregistering): Port device team_slave_0 removed [ 274.205582][T11372] team0: Mode changed to "loadbalance" [ 274.308054][T11378] team0: Unable to change to the same mode the team is in [ 274.364810][T11400] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 274.616089][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 274.635371][T11168] hsr_slave_0: entered promiscuous mode [ 274.657854][T11168] hsr_slave_1: entered promiscuous mode [ 274.681407][T11168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.709069][T11168] Cannot create hsr debugfs directory [ 274.880539][T11424] SET target dimension over the limit! [ 274.956331][T11425] netlink: 'syz.2.1115': attribute type 29 has an invalid length. [ 275.253092][ T5153] Bluetooth: hci1: command tx timeout [ 275.333783][ T5153] Bluetooth: hci2: command tx timeout [ 275.547837][T11451] netlink: 'syz.3.1124': attribute type 4 has an invalid length. [ 275.620940][T11451] netlink: 'syz.3.1124': attribute type 4 has an invalid length. [ 275.804877][T11165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.836850][T11165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.902258][T11165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 276.111782][T11165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 276.572697][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 276.591096][T11500] ip6t_REJECT: ECHOREPLY is not supported [ 276.887761][T11165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.898900][T11512] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1138'. [ 276.984929][T11165] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.038764][T11514] lo speed is unknown, defaulting to 1000 [ 277.046852][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.054106][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.090294][T11168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.158876][T11168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.196900][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.204149][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.273514][T11521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1142'. [ 277.303270][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 277.327812][T11168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.346296][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 277.356717][T11521] netlink: 'syz.0.1142': attribute type 10 has an invalid length. [ 277.370464][T11168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.406565][T11521] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 277.749839][T11538] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1145'. [ 278.142211][T11168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.174376][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 278.294544][T11168] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.331191][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.338488][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.407673][T11165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.459234][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.466501][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.500602][T11569] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1151'. [ 278.854229][T11586] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 279.349347][T11168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.550745][T11165] veth0_vlan: entered promiscuous mode [ 279.688323][T11168] veth0_vlan: entered promiscuous mode [ 281.726920][T11165] veth1_vlan: entered promiscuous mode [ 281.767733][T11168] veth1_vlan: entered promiscuous mode [ 281.869878][T11675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1164'. [ 281.900870][T11165] veth0_macvtap: entered promiscuous mode [ 281.940337][T11165] veth1_macvtap: entered promiscuous mode [ 281.970508][T11168] veth0_macvtap: entered promiscuous mode [ 281.999745][T11168] veth1_macvtap: entered promiscuous mode [ 282.017051][T11165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.029819][T11165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.044868][T11165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.058109][T11165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.071819][T11165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.108299][T11165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.121262][T11165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.135451][T11165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.146739][T11165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.160381][T11165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.180479][T11165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.189463][T11165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.202467][T11165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.211322][T11165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.225348][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.241166][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.251720][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.262458][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.272685][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.283745][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.296096][T11168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.307379][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.318460][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.328632][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.339562][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.349964][T11168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.360576][T11168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.371887][T11168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.392012][T11168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.401115][T11168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.411358][T11168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.424884][T11168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.487001][ T5213] udevd[5213]: worker [5861] /devices/virtual/block/nbd0 is taking a long time [ 296.358979][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.368337][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.377088][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.389295][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.397383][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.435951][T11704] lo speed is unknown, defaulting to 1000 [ 296.580007][T11704] chnl_net:caif_netlink_parms(): no params data found [ 296.661159][T11704] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.669186][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.677028][T11704] bridge_slave_0: entered allmulticast mode [ 296.685931][T11704] bridge_slave_0: entered promiscuous mode [ 296.695984][T11704] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.703381][T11704] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.710642][T11704] bridge_slave_1: entered allmulticast mode [ 296.718669][T11704] bridge_slave_1: entered promiscuous mode [ 296.753766][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.766522][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.808267][T11704] team0: Port device team_slave_0 added [ 296.817128][T11704] team0: Port device team_slave_1 added [ 296.850440][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.857825][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.884832][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.898597][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.905733][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.932368][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.981851][T11704] hsr_slave_0: entered promiscuous mode [ 296.988639][T11704] hsr_slave_1: entered promiscuous mode [ 296.995526][T11704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.003226][T11704] Cannot create hsr debugfs directory [ 297.547837][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.561920][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.572180][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 297.579291][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.583866][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.597997][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.606360][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 297.615887][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.633096][ T5153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.644567][ T5153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 297.699895][T11714] lo speed is unknown, defaulting to 1000 [ 297.738818][T11716] lo speed is unknown, defaulting to 1000 [ 297.970469][T11714] chnl_net:caif_netlink_parms(): no params data found [ 298.051876][T11716] chnl_net:caif_netlink_parms(): no params data found [ 298.115920][T11714] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.126850][T11714] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.135917][T11714] bridge_slave_0: entered allmulticast mode [ 298.144163][T11714] bridge_slave_0: entered promiscuous mode [ 298.163378][T11714] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.170565][T11714] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.178015][T11714] bridge_slave_1: entered allmulticast mode [ 298.186238][T11714] bridge_slave_1: entered promiscuous mode [ 298.262190][T11714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.277171][T11714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.322010][T11716] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.329295][T11716] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.337733][T11716] bridge_slave_0: entered allmulticast mode [ 298.345361][T11716] bridge_slave_0: entered promiscuous mode [ 298.370863][T11716] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.378294][T11716] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.386025][T11716] bridge_slave_1: entered allmulticast mode [ 298.393763][T11716] bridge_slave_1: entered promiscuous mode [ 298.417656][T11714] team0: Port device team_slave_0 added [ 298.442047][T11714] team0: Port device team_slave_1 added [ 298.452026][T11716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.457378][ T5153] Bluetooth: hci5: command tx timeout [ 298.469276][T11716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.526451][T11714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.534276][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.560544][T11714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.590567][T11716] team0: Port device team_slave_0 added [ 298.597268][T11714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.604335][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.630839][T11714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.654618][T11716] team0: Port device team_slave_1 added [ 298.700604][T11716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.707852][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.734898][T11716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.763016][T11716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.770014][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.796196][T11716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.841842][T11714] hsr_slave_0: entered promiscuous mode [ 298.852644][T11714] hsr_slave_1: entered promiscuous mode [ 298.860513][T11714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.870705][T11714] Cannot create hsr debugfs directory [ 298.944072][T11716] hsr_slave_0: entered promiscuous mode [ 298.950553][T11716] hsr_slave_1: entered promiscuous mode [ 298.957696][T11716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.965457][T11716] Cannot create hsr debugfs directory [ 299.653192][ T5153] Bluetooth: hci6: command tx timeout [ 299.733149][ T5153] Bluetooth: hci7: command tx timeout [ 300.533523][ T5153] Bluetooth: hci5: command tx timeout [ 300.540646][ T42] block nbd0: Possible stuck request ffff888026467000: control (read@0,4096B). Runtime 150 seconds [ 301.733052][ T5153] Bluetooth: hci6: command tx timeout [ 301.823015][ T5153] Bluetooth: hci7: command tx timeout [ 302.623157][ T5153] Bluetooth: hci5: command tx timeout [ 303.813176][ T5153] Bluetooth: hci6: command tx timeout [ 303.894829][ T5153] Bluetooth: hci7: command tx timeout [ 304.693994][ T5153] Bluetooth: hci5: command tx timeout [ 305.893139][ T5153] Bluetooth: hci6: command tx timeout [ 305.973002][ T5153] Bluetooth: hci7: command tx timeout [ 317.178750][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.671465][ T5857] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 328.680191][ T5857] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 328.688865][ T5857] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 328.698892][ T5857] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 328.706948][ T5857] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 328.748152][T11732] lo speed is unknown, defaulting to 1000 [ 328.919939][T11732] chnl_net:caif_netlink_parms(): no params data found [ 329.080710][T11732] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.088485][T11732] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.096557][T11732] bridge_slave_0: entered allmulticast mode [ 329.104975][T11732] bridge_slave_0: entered promiscuous mode [ 329.114055][T11732] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.121460][T11732] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.129362][T11732] bridge_slave_1: entered allmulticast mode [ 329.137380][T11732] bridge_slave_1: entered promiscuous mode [ 329.184223][T11732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.200960][T11732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.257293][T11732] team0: Port device team_slave_0 added [ 329.274752][ T5857] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 329.279278][T11732] team0: Port device team_slave_1 added [ 329.284970][ T5857] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 329.296171][ T5857] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 329.306955][ T5857] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 329.314785][ T5857] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 329.352149][T11732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.359192][T11732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.385173][T11732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.397929][T11732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.404985][T11732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.431160][T11732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.489554][T11732] hsr_slave_0: entered promiscuous mode [ 329.497187][T11732] hsr_slave_1: entered promiscuous mode [ 329.503648][T11732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.511288][T11732] Cannot create hsr debugfs directory [ 329.568833][T11741] lo speed is unknown, defaulting to 1000 [ 329.721703][T11732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.804754][T11732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.876640][T11732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.940960][T11732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.966347][T11741] chnl_net:caif_netlink_parms(): no params data found [ 330.093976][T11741] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.101248][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.108772][T11741] bridge_slave_0: entered allmulticast mode [ 330.117546][T11741] bridge_slave_0: entered promiscuous mode [ 330.126394][T11741] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.133792][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.141256][T11741] bridge_slave_1: entered allmulticast mode [ 330.149298][T11741] bridge_slave_1: entered promiscuous mode [ 330.212693][T11741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.235013][T11741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.291916][T11741] team0: Port device team_slave_0 added [ 330.305393][T11741] team0: Port device team_slave_1 added [ 330.343377][T11741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.350485][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.377454][T11741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.390467][T11741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.398180][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.424227][T11741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.478498][T11741] hsr_slave_0: entered promiscuous mode [ 330.485451][T11741] hsr_slave_1: entered promiscuous mode [ 330.492044][T11741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.499717][T11741] Cannot create hsr debugfs directory [ 330.632657][ T42] block nbd0: Possible stuck request ffff888026467000: control (read@0,4096B). Runtime 180 seconds [ 330.656338][T11741] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.731099][T11741] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.773268][ T5153] Bluetooth: hci8: command tx timeout [ 330.798096][T11741] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.871494][T11741] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.343117][ T5153] Bluetooth: hci9: command tx timeout [ 332.852984][ T5153] Bluetooth: hci8: command tx timeout [ 333.423160][ T5153] Bluetooth: hci9: command tx timeout [ 334.009748][ T5213] udevd[5213]: worker [5861] /devices/virtual/block/nbd0 timeout; kill it [ 334.018629][ T5213] udevd[5213]: seq 12757 '/devices/virtual/block/nbd0' killed [ 334.933382][ T5153] Bluetooth: hci8: command tx timeout [ 335.493119][ T5153] Bluetooth: hci9: command tx timeout [ 337.014362][ T5153] Bluetooth: hci8: command tx timeout [ 337.573077][ T5153] Bluetooth: hci9: command tx timeout [ 357.198392][ T5857] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 357.207872][ T5857] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 357.216981][ T5857] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 357.225279][ T5857] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 357.234373][ T5857] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 357.279342][T11751] lo speed is unknown, defaulting to 1000 [ 357.447567][T11751] chnl_net:caif_netlink_parms(): no params data found [ 357.540941][T11751] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.548602][T11751] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.561690][T11751] bridge_slave_0: entered allmulticast mode [ 357.569378][T11751] bridge_slave_0: entered promiscuous mode [ 357.585712][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.593085][T11751] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.600396][T11751] bridge_slave_1: entered allmulticast mode [ 357.608005][T11751] bridge_slave_1: entered promiscuous mode [ 357.647961][T11751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.660589][T11751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.705373][T11751] team0: Port device team_slave_0 added [ 357.714534][T11751] team0: Port device team_slave_1 added [ 357.749667][T11751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.757243][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.783360][T11751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.796557][T11751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.803635][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.829778][T11751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.887525][T11751] hsr_slave_0: entered promiscuous mode [ 357.895015][T11751] hsr_slave_1: entered promiscuous mode [ 357.901253][T11751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.909805][T11751] Cannot create hsr debugfs directory [ 358.445851][ T5153] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 358.475672][ T5153] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 358.492925][ T5153] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 358.505434][ T5153] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 358.513843][ T5153] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 358.554919][ T5153] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 358.564223][ T5153] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 358.572236][ T5153] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 358.581455][ T5153] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 358.590451][ T5153] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 358.671122][T11761] lo speed is unknown, defaulting to 1000 [ 358.720420][T11763] lo speed is unknown, defaulting to 1000 [ 358.994909][T11761] chnl_net:caif_netlink_parms(): no params data found [ 359.029558][T11763] chnl_net:caif_netlink_parms(): no params data found [ 359.197635][T11761] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.208505][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.217066][T11761] bridge_slave_0: entered allmulticast mode [ 359.225405][T11761] bridge_slave_0: entered promiscuous mode [ 359.235683][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.243272][T11761] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.250537][T11761] bridge_slave_1: entered allmulticast mode [ 359.253328][ T5153] Bluetooth: hci10: command tx timeout [ 359.258882][T11761] bridge_slave_1: entered promiscuous mode [ 359.272940][T11763] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.280078][T11763] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.287658][T11763] bridge_slave_0: entered allmulticast mode [ 359.295558][T11763] bridge_slave_0: entered promiscuous mode [ 359.318849][T11763] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.326257][T11763] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.334462][T11763] bridge_slave_1: entered allmulticast mode [ 359.341835][T11763] bridge_slave_1: entered promiscuous mode [ 359.400360][T11761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.412516][T11763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.426927][T11763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.439144][T11761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.519262][T11761] team0: Port device team_slave_0 added [ 359.530097][T11763] team0: Port device team_slave_0 added [ 359.540958][T11763] team0: Port device team_slave_1 added [ 359.550481][T11761] team0: Port device team_slave_1 added [ 359.617146][T11763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.628262][T11763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.661608][T11763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.675263][T11763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.682252][T11763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.709499][T11763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.722311][T11761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.729563][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.757482][T11761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.777948][T11761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.785780][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.811860][T11761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.871228][T11763] hsr_slave_0: entered promiscuous mode [ 359.878348][T11763] hsr_slave_1: entered promiscuous mode [ 359.885421][T11763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.894582][T11763] Cannot create hsr debugfs directory [ 359.959749][T11761] hsr_slave_0: entered promiscuous mode [ 359.968748][T11761] hsr_slave_1: entered promiscuous mode [ 359.975923][T11761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.985115][T11761] Cannot create hsr debugfs directory [ 360.533341][ T5153] Bluetooth: hci11: command tx timeout [ 360.613103][ T5153] Bluetooth: hci12: command tx timeout [ 360.702921][ T42] block nbd0: Possible stuck request ffff888026467000: control (read@0,4096B). Runtime 210 seconds [ 361.333543][ T5153] Bluetooth: hci10: command tx timeout [ 362.613185][ T5857] Bluetooth: hci11: command tx timeout [ 362.692939][ T5857] Bluetooth: hci12: command tx timeout [ 363.413138][ T5857] Bluetooth: hci10: command tx timeout [ 364.693032][ T5857] Bluetooth: hci11: command tx timeout [ 364.783010][ T5857] Bluetooth: hci12: command tx timeout [ 365.493290][ T5857] Bluetooth: hci10: command tx timeout [ 366.773059][ T5857] Bluetooth: hci11: command tx timeout [ 366.853181][ T5857] Bluetooth: hci12: command tx timeout [ 378.619892][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.339693][ T5849] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 390.348725][ T5849] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 390.357777][ T5849] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 390.367482][ T5849] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 390.376429][ T5849] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 390.422026][T11784] lo speed is unknown, defaulting to 1000 [ 390.597126][T11784] chnl_net:caif_netlink_parms(): no params data found [ 390.689400][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.697251][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.705489][T11784] bridge_slave_0: entered allmulticast mode [ 390.713834][T11784] bridge_slave_0: entered promiscuous mode [ 390.721787][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.729344][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.737165][T11784] bridge_slave_1: entered allmulticast mode [ 390.745345][T11784] bridge_slave_1: entered promiscuous mode [ 390.783672][ T42] block nbd0: Possible stuck request ffff888026467000: control (read@0,4096B). Runtime 240 seconds [ 390.798099][T11784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.812195][T11784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.861223][T11784] team0: Port device team_slave_0 added [ 390.874402][T11784] team0: Port device team_slave_1 added [ 390.910283][T11784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.917753][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.942200][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 390.947984][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 390.967671][T11784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.981722][T11784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.988999][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.015341][T11784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.075488][T11784] hsr_slave_0: entered promiscuous mode [ 391.082027][T11784] hsr_slave_1: entered promiscuous mode [ 391.089360][T11784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.097351][T11784] Cannot create hsr debugfs directory [ 391.871100][ T5847] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 391.880859][ T5847] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 391.890018][ T5847] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 391.899800][ T5847] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 391.907950][ T5847] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 391.956277][T11793] lo speed is unknown, defaulting to 1000 [ 392.128946][T11793] chnl_net:caif_netlink_parms(): no params data found [ 392.240060][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.247372][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.255919][T11793] bridge_slave_0: entered allmulticast mode [ 392.264999][T11793] bridge_slave_0: entered promiscuous mode [ 392.274305][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.281519][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.289047][T11793] bridge_slave_1: entered allmulticast mode [ 392.297454][T11793] bridge_slave_1: entered promiscuous mode [ 392.338350][T11793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.351976][T11793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.398525][T11793] team0: Port device team_slave_0 added [ 392.408958][T11793] team0: Port device team_slave_1 added [ 392.444615][T11793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.451685][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.477772][ T5847] Bluetooth: hci13: command tx timeout [ 392.483991][T11793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.496704][T11793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.504495][T11793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.530998][T11793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.589526][T11793] hsr_slave_0: entered promiscuous mode [ 392.596850][T11793] hsr_slave_1: entered promiscuous mode [ 392.604565][T11793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.612162][T11793] Cannot create hsr debugfs directory [ 393.975731][ T5847] Bluetooth: hci14: command tx timeout [ 394.533040][ T5847] Bluetooth: hci13: command tx timeout [ 396.053276][ T5847] Bluetooth: hci14: command tx timeout [ 396.613049][ T5847] Bluetooth: hci13: command tx timeout [ 398.133106][ T5847] Bluetooth: hci14: command tx timeout [ 398.693157][ T5847] Bluetooth: hci13: command tx timeout [ 400.223250][ T5847] Bluetooth: hci14: command tx timeout [ 417.280076][ T5849] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 417.289533][ T5849] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 417.298272][ T5849] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 417.308161][ T5849] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 417.320147][ T5849] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 417.370674][T11802] lo speed is unknown, defaulting to 1000 [ 417.540020][T11802] chnl_net:caif_netlink_parms(): no params data found [ 417.636230][T11802] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.644195][T11802] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.651524][T11802] bridge_slave_0: entered allmulticast mode [ 417.659896][T11802] bridge_slave_0: entered promiscuous mode [ 417.669261][T11802] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.677360][T11802] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.685039][T11802] bridge_slave_1: entered allmulticast mode [ 417.692573][T11802] bridge_slave_1: entered promiscuous mode [ 417.735145][T11802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.747669][T11802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.791427][T11802] team0: Port device team_slave_0 added [ 417.800351][T11802] team0: Port device team_slave_1 added [ 417.840370][T11802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.847754][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.874749][T11802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.888629][T11802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.896347][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.923823][T11802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.982191][T11802] hsr_slave_0: entered promiscuous mode [ 417.989324][T11802] hsr_slave_1: entered promiscuous mode [ 417.996539][T11802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.004360][T11802] Cannot create hsr debugfs directory [ 418.395862][ T5849] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 418.405945][ T5849] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 418.414775][ T5849] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 418.433791][ T5849] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 418.443340][ T5849] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 418.538425][T11811] lo speed is unknown, defaulting to 1000 [ 418.736258][T11811] chnl_net:caif_netlink_parms(): no params data found [ 418.841429][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.848870][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.856774][T11811] bridge_slave_0: entered allmulticast mode [ 418.865162][T11811] bridge_slave_0: entered promiscuous mode [ 418.875271][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.882451][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.890349][T11811] bridge_slave_1: entered allmulticast mode [ 418.898270][T11811] bridge_slave_1: entered promiscuous mode [ 418.946414][T11811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.959386][T11811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.002520][T11811] team0: Port device team_slave_0 added [ 419.011235][T11811] team0: Port device team_slave_1 added [ 419.061221][T11811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.068290][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.096091][T11811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.109803][T11811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.117175][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.144237][T11811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.251947][T11811] hsr_slave_0: entered promiscuous mode [ 419.274849][T11811] hsr_slave_1: entered promiscuous mode [ 419.281416][T11811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.289572][T11811] Cannot create hsr debugfs directory [ 419.343793][ T5849] Bluetooth: hci15: command tx timeout [ 419.468925][ T5847] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 419.486260][ T5847] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 419.512222][ T5847] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 419.520918][ T5847] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 419.528962][ T5847] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 419.614643][T11820] lo speed is unknown, defaulting to 1000 [ 419.839079][T11820] chnl_net:caif_netlink_parms(): no params data found [ 420.010583][T11820] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.018134][T11820] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.025911][T11820] bridge_slave_0: entered allmulticast mode [ 420.034240][T11820] bridge_slave_0: entered promiscuous mode [ 420.044465][T11820] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.051672][T11820] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.059682][T11820] bridge_slave_1: entered allmulticast mode [ 420.068165][T11820] bridge_slave_1: entered promiscuous mode [ 420.112441][T11820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.126232][T11820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.175146][T11820] team0: Port device team_slave_0 added [ 420.186406][T11820] team0: Port device team_slave_1 added [ 420.229891][T11820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.237052][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.263715][T11820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.276609][T11820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.283706][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.309878][T11820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.373591][T11820] hsr_slave_0: entered promiscuous mode [ 420.380369][T11820] hsr_slave_1: entered promiscuous mode [ 420.387493][T11820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.395141][T11820] Cannot create hsr debugfs directory [ 420.544213][T11822] Bluetooth: hci16: command tx timeout [ 420.855995][ T42] block nbd0: Possible stuck request ffff888026467000: control (read@0,4096B). Runtime 270 seconds [ 421.413030][T11822] Bluetooth: hci15: command tx timeout [ 421.573602][T11822] Bluetooth: hci17: command tx timeout [ 421.663046][ T5847] Bluetooth: hci7: command 0x0406 tx timeout [ 421.664621][ T5153] Bluetooth: hci5: command 0x0406 tx timeout [ 421.669104][ T5847] Bluetooth: hci6: command 0x0406 tx timeout [ 422.623023][ T5849] Bluetooth: hci16: command tx timeout [ 423.492931][ T5849] Bluetooth: hci15: command tx timeout [ 423.653534][ T5849] Bluetooth: hci17: command tx timeout [ 424.705378][ T5849] Bluetooth: hci16: command tx timeout [ 425.573294][ T5849] Bluetooth: hci15: command tx timeout [ 425.732930][ T5849] Bluetooth: hci17: command tx timeout [ 426.773531][ T5849] Bluetooth: hci16: command tx timeout [ 427.813431][ T5849] Bluetooth: hci17: command tx timeout [ 431.093754][ T31] INFO: task syz-executor:11165 blocked for more than 143 seconds. [ 431.101735][ T31] Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 [ 431.109897][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.118754][ T31] task:syz-executor state:D stack:21256 pid:11165 tgid:11165 ppid:1 task_flags:0x400140 flags:0x00000004 [ 431.131033][ T31] Call Trace: [ 431.134507][ T31] <TASK> [ 431.137473][ T31] __schedule+0x1b88/0x5240 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 431.142051][ T31] ? schedule+0x163/0x360 [ 431.151295][ T31] ? __pfx___schedule+0x10/0x10 [ 431.158827][ T31] ? schedule+0x90/0x360 [ 431.172496][ T31] ? schedule+0x90/0x360 [ 431.184412][ T31] schedule+0x163/0x360 [ 431.188647][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 431.213643][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.219203][ T31] __mutex_lock+0x805/0x10c0 [ 431.239711][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 431.253526][ T31] ? genl_rcv_msg+0x125/0xf00 [ 431.258310][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.272873][ T31] ? nlmon_xmit+0xaf/0x100 [ 431.277379][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 431.283290][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 431.288533][ T31] ? radix_tree_lookup+0x23b/0x290 [ 431.293768][ T31] genl_rcv_msg+0x125/0xf00 [ 431.298342][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 431.303901][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 431.309045][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.314130][ T31] ? __dev_queue_xmit+0x1780/0x3f60 [ 431.319352][ T31] ? kasan_save_track+0x3f/0x80 [ 431.325211][ T31] ? __kasan_slab_alloc+0x66/0x80 [ 431.330288][ T31] ? do_syscall_64+0xf3/0x210 [ 431.335316][ T31] ? __lock_acquire+0xad5/0xd80 [ 431.340253][ T31] netlink_rcv_skb+0x208/0x480 [ 431.345245][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.350339][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.356930][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.362171][ T31] genl_rcv+0x28/0x40 [ 431.366276][ T31] netlink_unicast+0x7f8/0x9a0 [ 431.371197][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 431.376899][ T31] ? skb_put+0x114/0x1f0 [ 431.381208][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 431.386625][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.392197][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 431.397453][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.403141][ T31] __sock_sendmsg+0x221/0x270 [ 431.407863][ T31] __sys_sendto+0x365/0x4c0 [ 431.412404][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 431.421276][ T31] __x64_sys_sendto+0xde/0x100 [ 431.426589][ T31] do_syscall_64+0xf3/0x210 [ 431.431137][ T31] ? clear_bhb_loop+0x45/0xa0 [ 431.436131][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.442052][ T31] RIP: 0033:0x7f66e638fffc [ 431.446626][ T31] RSP: 002b:00007ffee6a86040 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 431.455196][ T31] RAX: ffffffffffffffda RBX: 00007f66e70e4620 RCX: 00007f66e638fffc [ 431.463299][ T31] RDX: 0000000000000028 RSI: 00007f66e70e4670 RDI: 0000000000000003 [ 431.471310][ T31] RBP: 0000000000000000 R08: 00007ffee6a86094 R09: 000000000000000c [ 431.479511][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 431.487598][ T31] R13: 00007ffee6a860e8 R14: 00007f66e70e4670 R15: 0000000000000000 [ 431.495982][ T31] </TASK> [ 431.499092][ T31] INFO: task syz-executor:11168 blocked for more than 143 seconds. [ 431.507568][ T31] Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 [ 431.515722][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.527730][ T31] task:syz-executor state:D stack:21256 pid:11168 tgid:11168 ppid:1 task_flags:0x400140 flags:0x00000004 [ 431.540108][ T31] Call Trace: [ 431.544638][ T31] <TASK> [ 431.547623][ T31] __schedule+0x1b88/0x5240 [ 431.552196][ T31] ? schedule+0x163/0x360 [ 431.556745][ T31] ? __pfx___schedule+0x10/0x10 [ 431.561668][ T31] ? schedule+0x90/0x360 [ 431.566309][ T31] ? schedule+0x90/0x360 [ 431.570612][ T31] schedule+0x163/0x360 [ 431.576322][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 431.581132][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.586718][ T31] __mutex_lock+0x805/0x10c0 [ 431.591352][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 431.596223][ T31] ? genl_rcv_msg+0x125/0xf00 [ 431.600945][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.606157][ T31] ? nlmon_xmit+0xaf/0x100 [ 431.610648][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 431.616859][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 431.622408][ T31] ? radix_tree_lookup+0x23b/0x290 [ 431.627685][ T31] genl_rcv_msg+0x125/0xf00 [ 431.632230][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 431.637537][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 431.642684][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.647836][ T31] ? __dev_queue_xmit+0x1780/0x3f60 [ 431.654269][ T31] ? kasan_save_track+0x3f/0x80 [ 431.659174][ T31] ? __kasan_slab_alloc+0x66/0x80 [ 431.664705][ T31] ? do_syscall_64+0xf3/0x210 [ 431.669446][ T31] ? __lock_acquire+0xad5/0xd80 [ 431.674437][ T31] netlink_rcv_skb+0x208/0x480 [ 431.679245][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.685413][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.690791][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.696199][ T31] genl_rcv+0x28/0x40 [ 431.700222][ T31] netlink_unicast+0x7f8/0x9a0 [ 431.705152][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 431.710476][ T31] ? skb_put+0x114/0x1f0 [ 431.715201][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 431.720010][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.725831][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 431.730819][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.738199][ T31] __sock_sendmsg+0x221/0x270 [ 431.743290][ T31] __sys_sendto+0x365/0x4c0 [ 431.747854][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 431.753058][ T31] __x64_sys_sendto+0xde/0x100 [ 431.757869][ T31] do_syscall_64+0xf3/0x210 [ 431.762395][ T31] ? clear_bhb_loop+0x45/0xa0 [ 431.768498][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.774582][ T31] RIP: 0033:0x7f4532b8fffc [ 431.779032][ T31] RSP: 002b:00007ffeba210770 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 431.787609][ T31] RAX: ffffffffffffffda RBX: 00007f45338e4620 RCX: 00007f4532b8fffc [ 431.796615][ T31] RDX: 0000000000000028 RSI: 00007f45338e4670 RDI: 0000000000000003 [ 431.804704][ T31] RBP: 0000000000000000 R08: 00007ffeba2107c4 R09: 000000000000000c [ 431.813256][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 431.821260][ T31] R13: 00007ffeba210818 R14: 00007f45338e4670 R15: 0000000000000000 [ 431.829509][ T31] </TASK> [ 431.833325][ T31] INFO: task syz.0.1162:11663 blocked for more than 144 seconds. [ 431.841062][ T31] Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 [ 431.849887][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.859281][ T31] task:syz.0.1162 state:D stack:26120 pid:11663 tgid:11662 ppid:5846 task_flags:0x480140 flags:0x00000004 [ 431.871848][ T31] Call Trace: [ 431.875280][ T31] <TASK> [ 431.878438][ T31] __schedule+0x1b88/0x5240 [ 431.883084][ T31] ? __lock_acquire+0xad5/0xd80 [ 431.888007][ T31] ? schedule+0x163/0x360 [ 431.892393][ T31] ? __pfx___schedule+0x10/0x10 [ 431.897740][ T31] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 431.903803][ T31] ? schedule+0x90/0x360 [ 431.908096][ T31] ? schedule+0x90/0x360 [ 431.912366][ T31] schedule+0x163/0x360 [ 431.916759][ T31] blk_mq_freeze_queue_wait+0xf8/0x180 [ 431.922275][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 431.928633][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 431.934998][ T31] queue_limits_commit_update_frozen+0x6e/0x330 [ 431.941391][ T31] nbd_set_size+0x602/0x8a0 [ 431.946045][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 431.951129][ T31] ? __mutex_lock+0x380/0x10c0 [ 431.956011][ T31] ? nla_memcpy+0x5a/0xb0 [ 431.960371][ T31] nbd_genl_size_set+0x334/0x410 [ 431.965439][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 431.970937][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 431.977281][ T31] ? bpf_lsm_capable+0x9/0x10 [ 431.982012][ T31] ? security_capable+0x7e/0x2d0 [ 431.987090][ T31] ? radix_tree_lookup+0x23b/0x290 [ 431.992270][ T31] nbd_genl_reconfigure+0x4b7/0x1c50 [ 431.997924][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 432.003956][ T31] ? __nla_parse+0x40/0x60 [ 432.008437][ T31] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 432.014936][ T31] genl_rcv_msg+0xb38/0xf00 [ 432.019515][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.024822][ T31] ? stack_trace_save+0x11a/0x1d0 [ 432.029974][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 432.035654][ T31] ? stack_depot_save_flags+0x44/0x940 [ 432.041168][ T31] ? __pfx_stack_trace_save+0x1/0x10 [ 432.046580][ T31] ? __lock_acquire+0xad5/0xd80 [ 432.051463][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 432.057924][ T31] netlink_rcv_skb+0x208/0x480 [ 432.062927][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.068015][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.073436][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.078671][ T31] genl_rcv+0x28/0x40 [ 432.082960][ T31] netlink_unicast+0x7f8/0x9a0 [ 432.087787][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.093194][ T31] ? skb_put+0x114/0x1f0 [ 432.097486][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 432.102273][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.107704][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 432.112679][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.118080][ T31] __sock_sendmsg+0x221/0x270 [ 432.122905][ T31] ____sys_sendmsg+0x523/0x860 [ 432.127766][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.133301][ T31] ? __fget_files+0x2a/0x420 [ 432.137959][ T31] ? __fget_files+0x2a/0x420 [ 432.142592][ T31] __sys_sendmsg+0x271/0x360 [ 432.147835][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.153295][ T31] ? do_syscall_64+0xb6/0x210 [ 432.158020][ T31] do_syscall_64+0xf3/0x210 [ 432.162552][ T31] ? clear_bhb_loop+0x45/0xa0 [ 432.167352][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.173417][ T31] RIP: 0033:0x7ff9eb78e169 [ 432.177892][ T31] RSP: 002b:00007ff9ec5d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.186437][ T31] RAX: ffffffffffffffda RBX: 00007ff9eb9b5fa0 RCX: 00007ff9eb78e169 [ 432.194691][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 432.202685][ T31] RBP: 00007ff9eb810a68 R08: 0000000000000000 R09: 0000000000000000 [ 432.210770][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.218928][ T31] R13: 0000000000000000 R14: 00007ff9eb9b5fa0 R15: 00007ffdca8632f8 [ 432.227033][ T31] </TASK> [ 432.230089][ T31] INFO: task syz.3.1166:11679 blocked for more than 144 seconds. [ 432.238147][ T31] Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 [ 432.248714][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.259807][ T31] task:syz.3.1166 state:D stack:26496 pid:11679 tgid:11678 ppid:5853 task_flags:0x400140 flags:0x00000004 [ 432.273192][ T31] Call Trace: [ 432.276527][ T31] <TASK> [ 432.279492][ T31] __schedule+0x1b88/0x5240 [ 432.284470][ T31] ? schedule+0x163/0x360 [ 432.288862][ T31] ? __pfx___schedule+0x10/0x10 [ 432.294097][ T31] ? schedule+0x90/0x360 [ 432.298399][ T31] ? schedule+0x90/0x360 [ 432.302678][ T31] schedule+0x163/0x360 [ 432.307006][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.311800][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.317380][ T31] __mutex_lock+0x805/0x10c0 [ 432.322004][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.327127][ T31] ? genl_rcv_msg+0x125/0xf00 [ 432.331873][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.337122][ T31] ? nlmon_xmit+0xaf/0x100 [ 432.341623][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 432.348221][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.353567][ T31] ? radix_tree_lookup+0x23b/0x290 [ 432.358736][ T31] genl_rcv_msg+0x125/0xf00 [ 432.364922][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 432.370078][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 432.375852][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.380937][ T31] ? __dev_queue_xmit+0x1780/0x3f60 [ 432.386364][ T31] ? kasan_save_track+0x3f/0x80 [ 432.391270][ T31] ? __kasan_slab_alloc+0x66/0x80 [ 432.396761][ T31] ? do_syscall_64+0xf3/0x210 [ 432.401499][ T31] ? __lock_acquire+0xad5/0xd80 [ 432.406462][ T31] netlink_rcv_skb+0x208/0x480 [ 432.411299][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.416464][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.421806][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.427485][ T31] genl_rcv+0x28/0x40 [ 432.431513][ T31] netlink_unicast+0x7f8/0x9a0 [ 432.436431][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.441753][ T31] ? skb_put+0x114/0x1f0 [ 432.446188][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 432.451008][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.462249][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 432.467389][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.473095][ T31] __sock_sendmsg+0x221/0x270 [ 432.477827][ T31] __sys_sendto+0x365/0x4c0 [ 432.482405][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 432.487611][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 432.493076][ T31] __x64_sys_sendto+0xde/0x100 [ 432.497891][ T31] do_syscall_64+0xf3/0x210 [ 432.502446][ T31] ? clear_bhb_loop+0x45/0xa0 [ 432.507524][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.513666][ T31] RIP: 0033:0x7f5215d8fffc [ 432.518115][ T31] RSP: 002b:00007f5216b22ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.527040][ T31] RAX: ffffffffffffffda RBX: 00007f5216b22fc0 RCX: 00007f5215d8fffc [ 432.535426][ T31] RDX: 0000000000000020 RSI: 00007f5216b23010 RDI: 0000000000000008 [ 432.543670][ T31] RBP: 0000000000000000 R08: 00007f5216b22f14 R09: 000000000000000c [ 432.551678][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 432.559818][ T31] R13: 00007f5216b22f68 R14: 00007f5216b23010 R15: 0000000000000000 [ 432.567880][ T31] </TASK> [ 432.570953][ T31] INFO: task syz.2.1167:11681 blocked for more than 144 seconds. [ 432.579169][ T31] Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 [ 432.586939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.595715][ T31] task:syz.2.1167 state:D stack:25112 pid:11681 tgid:11680 ppid:5840 task_flags:0x400040 flags:0x00000004 [ 432.607763][ T31] Call Trace: [ 432.611069][ T31] <TASK> [ 432.614347][ T31] __schedule+0x1b88/0x5240 [ 432.618927][ T31] ? schedule+0x163/0x360 [ 432.623668][ T31] ? __pfx___schedule+0x10/0x10 [ 432.628592][ T31] ? schedule+0x90/0x360 [ 432.632967][ T31] ? schedule+0x90/0x360 [ 432.637259][ T31] schedule+0x163/0x360 [ 432.641472][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.646357][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.651855][ T31] __mutex_lock+0x805/0x10c0 [ 432.656620][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.661426][ T31] ? genl_rcv_msg+0x125/0xf00 [ 432.666352][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.671426][ T31] ? nlmon_xmit+0xaf/0x100 [ 432.676280][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 432.681704][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.687011][ T31] ? radix_tree_lookup+0x23b/0x290 [ 432.692165][ T31] genl_rcv_msg+0x125/0xf00 [ 432.697043][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 432.702213][ T31] ? __dev_queue_xmit+0x2f9/0x3f60 [ 432.707520][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.712611][ T31] ? __dev_queue_xmit+0x1780/0x3f60 [ 432.717960][ T31] ? kasan_save_track+0x3f/0x80 [ 432.723411][ T31] ? __kasan_slab_alloc+0x66/0x80 [ 432.728513][ T31] ? do_syscall_64+0xf3/0x210 [ 432.733352][ T31] ? __lock_acquire+0xad5/0xd80 [ 432.738281][ T31] netlink_rcv_skb+0x208/0x480 [ 432.743181][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.748294][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.753710][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.758960][ T31] genl_rcv+0x28/0x40 [ 432.763063][ T31] netlink_unicast+0x7f8/0x9a0 [ 432.767906][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 432.774034][ T31] ? skb_put+0x114/0x1f0 [ 432.778339][ T31] netlink_sendmsg+0x8c3/0xcd0 [ 432.783270][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.788606][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 432.793712][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.799047][ T31] __sock_sendmsg+0x221/0x270 [ 432.803815][ T31] __sys_sendto+0x365/0x4c0 [ 432.808368][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 432.813575][ T31] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 432.818855][ T31] __x64_sys_sendto+0xde/0x100 [ 432.824097][ T31] do_syscall_64+0xf3/0x210 [ 432.828657][ T31] ? clear_bhb_loop+0x45/0xa0 [ 432.833655][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.839594][ T31] RIP: 0033:0x7fbeacf8fffc [ 432.844095][ T31] RSP: 002b:00007fbeade6cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.852658][ T31] RAX: ffffffffffffffda RBX: 00007fbeade6cfc0 RCX: 00007fbeacf8fffc [ 432.860923][ T31] RDX: 0000000000000024 RSI: 00007fbeade6d010 RDI: 0000000000000007 [ 432.869070][ T31] RBP: 0000000000000000 R08: 00007fbeade6cf14 R09: 000000000000000c [ 432.877484][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 432.885587][ T31] R13: 00007fbeade6cf68 R14: 00007fbeade6d010 R15: 0000000000000000 [ 432.893720][ T31] </TASK> [ 432.896854][ T31] [ 432.896854][ T31] Showing all locks held in the system: [ 432.904718][ T31] 1 lock held by khungtaskd/31: [ 432.909598][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 432.919605][ T31] 2 locks held by kworker/u8:2/36: [ 432.925158][ T31] 2 locks held by getty/5594: [ 432.929858][ T31] #0: ffff8880365820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 432.940091][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 432.950556][ T31] 1 lock held by udevd/5861: [ 432.955250][ T31] #0: ffff88802635d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 432.964615][ T31] 2 locks held by syz-executor/11165: [ 432.970097][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.978730][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 432.987932][ T31] 2 locks held by syz-executor/11168: [ 432.993475][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.001733][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.010827][ T31] 6 locks held by syz.0.1162/11663: [ 433.016787][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.025574][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.034712][ T31] #2: ffff88802636f198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x42f/0x1c50 [ 433.045250][ T31] #3: ffff888143b4deb8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ac/0x8a0 [ 433.054978][ T31] #4: ffff888143b4d868 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x6e/0x330 [ 433.067289][ T31] #5: ffff888143b4d8a0 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x6e/0x330 [ 433.079824][ T31] 2 locks held by syz.3.1166/11679: [ 433.085152][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.093803][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.103021][ T31] 2 locks held by syz.2.1167/11681: [ 433.108428][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.116772][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.126183][ T31] 2 locks held by syz-executor/11704: [ 433.131587][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.139941][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.149121][ T31] 2 locks held by syz-executor/11714: [ 433.154805][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.163471][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.172522][ T31] 2 locks held by syz-executor/11716: [ 433.179274][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.187817][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.197160][ T31] 2 locks held by syz-executor/11732: [ 433.202550][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.210836][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.220001][ T31] 2 locks held by syz-executor/11741: [ 433.225783][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.234124][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.243248][ T31] 2 locks held by syz-executor/11751: [ 433.248645][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.257164][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.266349][ T31] 2 locks held by syz-executor/11761: [ 433.271735][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.280504][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.289906][ T31] 2 locks held by syz-executor/11763: [ 433.295430][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.303873][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.312988][ T31] 2 locks held by syz-executor/11784: [ 433.318379][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.327027][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.336612][ T31] 2 locks held by syz-executor/11793: [ 433.342012][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.350344][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.359459][ T31] 2 locks held by syz-executor/11802: [ 433.365386][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.374107][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.383627][ T31] 2 locks held by syz-executor/11811: [ 433.389025][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.397351][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.407011][ T31] 2 locks held by syz-executor/11820: [ 433.412406][ T31] #0: ffffffff90161a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.421067][ T31] #1: ffffffff90161948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x125/0xf00 [ 433.430336][ T31] [ 433.432834][ T31] ============================================= [ 433.432834][ T31] [ 433.441583][ T31] NMI backtrace for cpu 0 [ 433.441610][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 PREEMPT(full) [ 433.441635][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.441648][ T31] Call Trace: [ 433.441657][ T31] <TASK> [ 433.441665][ T31] dump_stack_lvl+0x241/0x360 [ 433.441703][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.441732][ T31] ? __pfx__printk+0x10/0x10 [ 433.441774][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 433.441812][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 433.441839][ T31] ? _printk+0xd5/0x120 [ 433.441867][ T31] ? __wake_up_klogd+0xcc/0x110 [ 433.441894][ T31] ? __pfx__printk+0x10/0x10 [ 433.441926][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 433.441947][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 433.441981][ T31] watchdog+0x1058/0x10a0 [ 433.442011][ T31] ? watchdog+0x1ea/0x10a0 [ 433.442042][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.442069][ T31] kthread+0x7b7/0x940 [ 433.442096][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.442123][ T31] ? __pfx_kthread+0x10/0x10 [ 433.442144][ T31] ? __pfx_kthread+0x10/0x10 [ 433.442167][ T31] ? __pfx_kthread+0x10/0x10 [ 433.442190][ T31] ? __pfx_kthread+0x10/0x10 [ 433.442213][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.442241][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 433.442262][ T31] ? __pfx_kthread+0x10/0x10 [ 433.442285][ T31] ret_from_fork+0x4b/0x80 [ 433.442305][ T31] ? __pfx_kthread+0x10/0x10 [ 433.442328][ T31] ret_from_fork_asm+0x1a/0x30 [ 433.442377][ T31] </TASK> [ 433.442386][ T31] Sending NMI from CPU 0 to CPUs 1: [ 433.605799][ C1] NMI backtrace for cpu 1 [ 433.605818][ C1] CPU: 1 UID: 0 PID: 8175 Comm: kworker/u8:10 Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 PREEMPT(full) [ 433.605839][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.605851][ C1] Workqueue: bat_events batadv_nc_worker [ 433.605883][ C1] RIP: 0010:lock_acquire+0x57/0x2f0 [ 433.605909][ C1] Code: 11 65 48 8b 45 00 48 89 44 24 38 0f 1f 44 00 00 65 8b 05 10 fa c9 11 83 f8 08 0f 83 b4 01 00 00 89 c0 48 0f a3 05 39 7f c1 0e <73> 16 e8 52 c6 09 00 84 c0 75 0d f6 05 da 65 ab 0e 01 0f 84 9b 01 [ 433.605924][ C1] RSP: 0018:ffffc9000ed57988 EFLAGS: 00000297 [ 433.605938][ C1] RAX: 0000000000000001 RBX: ffff88802a86db18 RCX: 0000000000000000 [ 433.605950][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802a86db18 [ 433.605962][ C1] RBP: ffffffff93686020 R08: 0000000000000001 R09: 0000000000000000 [ 433.605973][ C1] R10: dffffc0000000000 R11: fffffbfff20bfcaf R12: 0000000000000001 [ 433.605984][ C1] R13: 0000000000000000 R14: ffff88802a86db00 R15: 0000000000000000 [ 433.605996][ C1] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 433.606010][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.606021][ C1] CR2: 00007ffdf082be68 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 433.606037][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 433.606047][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 433.606057][ C1] Call Trace: [ 433.606064][ C1] <TASK> [ 433.606076][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 433.606095][ C1] _raw_spin_lock_bh+0x35/0x50 [ 433.606120][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 433.606135][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 433.606152][ C1] batadv_nc_purge_paths+0xe8/0x3b0 [ 433.606176][ C1] batadv_nc_worker+0x328/0x610 [ 433.606201][ C1] ? batadv_nc_worker+0xcb/0x610 [ 433.606227][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 433.606253][ C1] process_scheduled_works+0xac3/0x18e0 [ 433.606296][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 433.606327][ C1] ? assign_work+0x367/0x3d0 [ 433.606363][ C1] worker_thread+0x870/0xd50 [ 433.606388][ C1] ? __kthread_parkme+0x1a8/0x200 [ 433.606406][ C1] ? __pfx_worker_thread+0x10/0x10 [ 433.606422][ C1] kthread+0x7b7/0x940 [ 433.606442][ C1] ? __pfx_worker_thread+0x10/0x10 [ 433.606459][ C1] ? __pfx_kthread+0x10/0x10 [ 433.606476][ C1] ? __pfx_kthread+0x10/0x10 [ 433.606494][ C1] ? __pfx_kthread+0x10/0x10 [ 433.606512][ C1] ? __pfx_kthread+0x10/0x10 [ 433.606531][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.606554][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 433.606571][ C1] ? __pfx_kthread+0x10/0x10 [ 433.606590][ C1] ret_from_fork+0x4b/0x80 [ 433.606606][ C1] ? __pfx_kthread+0x10/0x10 [ 433.606625][ C1] ret_from_fork_asm+0x1a/0x30 [ 433.606650][ C1] </TASK> [ 433.606978][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 433.895535][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 PREEMPT(full) [ 433.907351][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.917435][ T31] Call Trace: [ 433.920732][ T31] <TASK> [ 433.923676][ T31] dump_stack_lvl+0x241/0x360 [ 433.928374][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.933593][ T31] ? __pfx__printk+0x10/0x10 [ 433.938232][ T31] ? vscnprintf+0x5d/0x90 [ 433.942615][ T31] panic+0x349/0x880 [ 433.946529][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 433.951908][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 433.958080][ T31] ? __pfx_panic+0x10/0x10 [ 433.962511][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 433.967900][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 433.974071][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 433.980257][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 433.986521][ T31] watchdog+0x1097/0x10a0 [ 433.990869][ T31] ? watchdog+0x1ea/0x10a0 [ 433.995305][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.999990][ T31] kthread+0x7b7/0x940 [ 434.004072][ T31] ? __pfx_watchdog+0x10/0x10 [ 434.008757][ T31] ? __pfx_kthread+0x10/0x10 [ 434.013353][ T31] ? __pfx_kthread+0x10/0x10 [ 434.017953][ T31] ? __pfx_kthread+0x10/0x10 [ 434.022556][ T31] ? __pfx_kthread+0x10/0x10 [ 434.027261][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.032495][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 434.037727][ T31] ? __pfx_kthread+0x10/0x10 [ 434.042343][ T31] ret_from_fork+0x4b/0x80 [ 434.046776][ T31] ? __pfx_kthread+0x10/0x10 [ 434.051385][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.056204][ T31] </TASK> [ 434.059607][ T31] Kernel Offset: disabled [ 434.063965][ T31] Rebooting in 86400 seconds..