last executing test programs: 21.905619852s ago: executing program 0 (id=1171): bpf$MAP_CREATE(0x0, 0x0, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) pipe(&(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x41, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x1) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0001fe9078201809c40005020000f58afbffffff0000000000000000000000e32f91725ef8f8676e1392a1a6a0110a1d47f2b3fa0607effa8f729187645987134fc1c2c6e5c57e037713b1341ed95096f902afe04c83192f60761989198ac6c640e91c288721fdac881686f4756235731196a093acf681c424214d33981446468fff0f1d6beae119e8786d3a79ad3d1d93ded70421da8074"], 0x4e) 21.435662187s ago: executing program 0 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x2}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 20.445197097s ago: executing program 0 (id=1189): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x110, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x4, 0x1, 0x2, 0x3, 0x3], 0x5, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x22780abc9d52bf24, 0x0, 0x2, 0x1, 0x5], 0x6, 0x3}, {0x0, [0x1, 0x3, 0x0, 0x2, 0x2, 0x4], 0x1, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x26}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0xb92, 0xb, [0x7, 0x11, 0x2e, 0xc, 0x13, 0x24, 0x3b, 0x2f, 0x3, 0xd, 0x33, 0x0, 0x5, 0x33, 0x2e, 0x2b], 0x2, 0x3, 0x9}}}, {{@ip={@multicast2, @multicast1, 0x0, 0xff000000, 'batadv_slave_0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x88, 0x0, 0xf}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x7, 0x0, 0x1, 0x1, 0x2, 0x5], 0x1, 0x5}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xf, 0x4, 0xf6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x117, 0x7, [0x3, 0x7, 0x2, 0x1, 0xb, 0x734, 0xfff9]}, &(0x7f0000000480)=0x16) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=r2, &(0x7f0000000500)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000540)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x640200, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000640)=r5) r6 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, &(0x7f0000000680)=0x17, 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x335) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000006c0)={r3, 0x100}, &(0x7f0000000700)=0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000740)={0x8676, 0x201, 0x5, 0x5, r7}, &(0x7f0000000780)=0x10) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f00000007c0)={0x1, 0x0, 0x9, 0x0, 0xfd, 0x27, 0x1d, "bb5e131dfdb3673409a9890afcf9981ad88ad3ae", "4e72c312a4dd867126daa61ee3540deb4bb32893"}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000800)={r7, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000008c0)={0x70, 0x7, 0x8208, 0x9, 0x7, 0x9, 0x5, 0x3, r7}, &(0x7f0000000900)=0x20) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0xc2ac1, 0x0) ioctl$PPPIOCGNPMODE(r10, 0xc008744c, &(0x7f0000000980)={0x8057, 0x2}) connect$caif(r6, &(0x7f00000009c0), 0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000a00)={r2, 0x6, 0x9}, 0x10) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000a40)=0x318) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a80)={'wlan1\x00'}) ioctl$PPPIOCGIDLE64(r10, 0x8010743f, &(0x7f0000000ac0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x4, 0xd, 0x2, 0x0, 0x11, @local, @loopback, 0x80, 0x10, 0x3, 0x3}}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000bc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3c}, @loopback, 0x8a55, 0x7ff, 0x1, 0x0, 0x4, 0x80, r11}) connect$caif(0xffffffffffffffff, &(0x7f0000000c40)=@dgm={0x25, 0x3, 0xf3}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000c80)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)="0321013febfc2823797ae3d61e869ab5a9f853eba41c", 0x16}, {&(0x7f0000000d40)="e76791f849ad491cb51ec6963c12778837198fd747c1c7972f0f5b7b72b70a9c4ee5d170d105d04298ff2953305d134304e24e47126b4f897bdb280cc637c41e3cd43beee8e2b732e37bee091478c7bbc01283418b9f5e68246227000f4076a2defff909c0357556e2975d6f38b8f8ed7716f8b680a5a8a44d0ff59ea032e0d13d81d1b5490df3a6236acfdd949936106c1529e2754751594301f6fa0ae9e1a4729fa193ae949d", 0xa7}, {&(0x7f0000000e00)="7bfe33cf2bf73d1f7402becb8167b360f28d3f8dc3acce459a111b2a07647decba992b265b1a53bb681579f3be1b2e8b6cf7ba51113a4bfe76db576bd70bc6cb26565abde67de15c36a6813f24729971930f7756515dd1c5c22183884c74273ea2d3a2efe0c0076ac217c2e52287e314c829c59e5e02aa93df0238e1e45f5aaa90fd6e4fa3f1e688eaa9d750a96f744125edd8", 0x93}, {&(0x7f0000000ec0)="92eec601f7f8a35fc14adbc032cda874915a56f93777aba2e6567f7063188406db9e9902c1c2b0adf6f4aee4b300d51a0cf213b8f4be71ebc284f4513725ab41f3f75f2e7c82710a4a95917103ab51b659c335abc3f2e6729b94646f1a7cabec673d52577dcac7d6fad1eb5cc98fe48c90901523df71e6ab6d89b316c1fdb68a202763aeafc751fc0f9f9b9fc717efeb75ff9672031abdf8a50d330568e1fd48f6aae8eb8a06c1cbc337770456a884554ace6738fbc75efa36772cbbcb1fc406c0cdc9404e", 0xc5}, {&(0x7f0000000fc0)="d4cd6662eec768dc682a1e5a12320cc54cf9eb59cf5ed52035a44da580a69f31096adea381", 0x25}], 0x5, &(0x7f0000001080)=[{0x40, 0x11, 0x8, "71063a494f2434436a8ec1ed53ca70b32d2216fb1a92a8690d4c9baca19cb2adeff8504c7590db2353a0a78193"}, {0x88, 0x118, 0x200, "e0c3895adfbd5270219bbd9c2400de62e4bec5010aeaebd825af4b69b023413e729acc0cece672a157a8c8ca8e8a94b11e8d7a24c9ed899d78e7e1386cffea7fddf6dc32ec3921d1fb9c3f31c38c8a99d65954c7c842cbf8ebcebaea2da019dde354586c9e0c053e3cd1a8e82d6c47b4e07ff7c1e163"}, {0xf0, 0x104, 0xfffffff0, "6004ccba3181ed374df6f5eb6116cc98747f8db276608bf616012535d0880bd03b6f86c75aa6efb1743622023b398519968ab20692167f2b7828db9dbac6993fc1cebd766299f4937b8ddba8a7bb2e183a2c28b284cbc420c730806aeaebcde560ed3b04c2a4786759eb586b8a90d5e721c8db548091e7310d7cfa9e3a1685ca09777589d6b35ae1dd4b4fff6daec2a8e9b5894e4fdf703faf83acea8739356834754b10d9b0c5c710fc9fe942366a3e2bcd37c233d424513c5be9e18ee996391d0b206cfa01916ce8130a98ed41a0a68929e0e70685fb725a3eb59f"}, {0x90, 0x104, 0xff, "fbde2400475966c563b7349d7742e8235e41f0a2f378d2656a5c75c7e406454a8b59a8b0780b28fab25ad6b816fb11d2c4de870a0f4087b244e20941c8375e4180362989e480505dcc4a0f226622bddf9cea35b8743f5442123c98e60bfbf87d746fd3c48944cd5a0a8506347ab84279e8c55b42e0a3838c13"}, {0xf8, 0x1d3, 0x2, "ad6dc2c6ae50f0bc5243204844bbbd25fb12e1542c57f39cbe0e17b3c2aedd270475e3fb548a29bf63e3c7177848278932a5297933eface05ab965ac36dee20cdade7a26ba842099e1187e3d81356a2a99ddb80e287ddc3228077e8079b0cafb86477c5108a24298975a1c1884025396d52a75255dcc7b7b2a1f1f6372e12673b2492ad6f41f0ab2b1e9d6a1c180f3f72f58e61340cce77eb68b44288e6ee75be6eb7ca8b3b33b4296506921e168954f7b87ae012d97f2496e214f066d38d8bcfcd94f4e5e37caa60c0932ea99f437152475b083aeaa9aeae8d2906122bc202e5e"}, {0x70, 0x103, 0x3, "ad3bf70ca1241ab5f945018a4cbdced2b609faf992fb15485662e01766c451b04bb65a6c5f7454dc2d7c69e52ee0da0fddfa7ff3b88844ed21ea6f2999b7be6ff0c618542c2767c719aaf0f0e44eb102462e87766eaaec1dab"}], 0x3b0}, 0xc000) 20.181211477s ago: executing program 3 (id=1192): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ec0)="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", 0x151}, {&(0x7f0000001640)="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", 0x5e3}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4) 20.174668836s ago: executing program 0 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x0, 0x3c5a, 0x2, 0x1000}, @eth={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@canfd={0xd, {{0x2}, 0x7, 0x1, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x68) 19.913535255s ago: executing program 3 (id=1196): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="0600060000000000060004"], 0x50}, 0x4, 0x700000000000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000200)="01eb050842e36c92d9e3e900b677cb7e9286ccc067ecbed0cf7372eaa29371003353", 0x22}], 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000030601"], 0x14}}, 0x8081) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f00000002c0), 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.681605763s ago: executing program 0 (id=1200): socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000440), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 19.23313882s ago: executing program 3 (id=1206): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) (async) pipe(&(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r1, &(0x7f00000025c0)=ANY=[@ANYBLOB="01bd86d358"], 0x5) (async) write$cgroup_subtree(r1, &(0x7f0000002980)={[{0x2b, 'cpuset'}]}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000019078ac1e0001ff1300ff0e0090787fff01fffffffff30000000c00008000"], 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0xc}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESHEX=r8, @ANYRESDEC=r0], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d660671f3e121710e8537c4c3060c6a41d106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xa7, 0x0, &(0x7f0000000480)="4322750400f4ffffff003c0000002fdf4d5957058080b23725b6bdf16692ba3b2985c2a2967160347e75c1c3b69fca33b561320a1b0ba8bb11a686b7283080eaefe0afc24e376140f95b6bb75d458da11363594278cc45764a16d8949197eca8fc6b66a1f8144d2c40106cd49cb8843efde30f07b16a4560b3d17d17f8d433faf1857326d41bfc60f3c0dada5455877e076a0e2d656ed7525ec027b40ddbfdb5bf451c071b1de4", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50) 19.045555083s ago: executing program 1 (id=1207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000000000006"], &(0x7f0000000f40)=""/4074, 0x82, 0xfea, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000000000006"], &(0x7f0000000f40)=""/4074, 0x82, 0xfea, 0x1}, 0x20) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) socket$inet(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) (async) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00000000000000ff020000000000000000000000000001000000000a"], 0xc0}}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f065584c", 0x0, 0x1c1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.896975516s ago: executing program 3 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) r1 = socket(0x9, 0x80000, 0x7) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 18.80818282s ago: executing program 2 (id=1210): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000001540), &(0x7f0000001580)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000011c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001140), &(0x7f0000001180)='%-5lx \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r7, 0x4}, 0x38) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x97c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r0}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bind$bt_hci(r4, &(0x7f0000001500)={0x1f, 0x3, 0x4}, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0xff, 0x1000, &(0x7f0000000100)=""/4096, 0x40f00, 0x65, '\x00', r3, 0x1b, r4, 0x8, &(0x7f0000001100)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000013c0)=[r6, r7, r8, 0xffffffffffffffff, r9, r10, 0x1, r11], &(0x7f0000001400)=[{0x4, 0x2, 0x8, 0xc}, {0x4, 0x2, 0x2, 0x2}, {0x5, 0x3, 0xf, 0x9}], 0x10, 0x3}, 0x94) 18.693513632s ago: executing program 1 (id=1211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x40000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 18.692549407s ago: executing program 3 (id=1212): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000300)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 18.691244369s ago: executing program 0 (id=1213): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @bcast, @null, @rose, @null, @netrom, @default, @null]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @default, @netrom={'nr', 0x0}, 0x10000, 'syz1\x00', @null, 0x3, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000180)={{r0}, r1, 0x16, @unused=[0x8001, 0x6], @name="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"}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001180)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000011c0)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001200)='veth0_to_hsr\x00') ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001240)={0x0, 0x400, 0x0, [0x3, 0x1d8, 0x4, 0x5, 0x7], [0x100, 0xff, 0x100, 0x1, 0x298, 0x627, 0x4000000000000000, 0x3ff, 0x6a, 0x0, 0x6, 0x1, 0x10, 0x5, 0x1, 0x3, 0x3, 0x7, 0x4, 0x4, 0x7, 0x7fff, 0x2, 0x5, 0x6, 0x80000000, 0x70, 0x1, 0x4, 0x6, 0xd641, 0x4, 0x401, 0x10000, 0xb, 0x7, 0x4, 0x9, 0x98, 0x4, 0x5, 0x47, 0x7, 0x6195, 0xe, 0xff, 0x8, 0x2, 0x4e7, 0x5, 0x46e22f8a, 0x6, 0xf, 0x9, 0xa, 0x7, 0x2, 0x6, 0x4, 0x5, 0x8, 0xfffffffffffffff7, 0x5, 0xff, 0x3f, 0x2, 0x80000001, 0x4, 0x8, 0x3, 0x44fc130b, 0xa5, 0xfffffffffffffffa, 0x0, 0x1000, 0xde5, 0x98, 0x592, 0x4, 0x0, 0x80000001, 0x3, 0x101, 0x3, 0x8, 0x0, 0x4, 0x2000, 0x9, 0x1, 0x8, 0x3, 0x6, 0x4, 0xa2cc, 0x3, 0x8000, 0xd8ba, 0x60, 0x10000, 0x3, 0x8, 0xc493, 0x2, 0x4, 0x100000001, 0x4, 0x6, 0x5, 0x2, 0xef36, 0x10, 0x8, 0xfffffffffffffff9, 0xc50feff, 0x3, 0xd, 0x9, 0x2, 0x9, 0x80000001]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001680), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001780)={'erspan0\x00', &(0x7f0000001700)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x0, 0x9, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x5b, [@broadcast]}, @lsrr={0x83, 0xb, 0x4c, [@empty, @private=0xa010102]}, @lsrr={0x83, 0xb, 0x9e, [@broadcast, @rand_addr=0x64010101]}, @rr={0x7, 0x7, 0x90, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x14, 0xe3, 0x1, 0xb, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001980)={&(0x7f00000016c0), 0xc, &(0x7f0000001940)={&(0x7f00000017c0)={0x158, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000001a80)={&(0x7f00000019c0), 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044840}, 0x20000004) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r9, 0x100, 0x70bd27, 0x6, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x24008014) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000001c80), r8) socketpair(0xa, 0x0, 0x7, &(0x7f0000001cc0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket(0x1f, 0xa, 0x7) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001e80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0xc0, r11, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x19, 0xa, 'hash_to_port_mapping\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r17}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) r18 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001ec0)={r3, 0x1ff, 0x8}) ioctl$BTRFS_IOC_RM_DEV_V2(r18, 0x5000943a, &(0x7f00000022c0)={{r14}, r1, 0x4, @unused=[0x20000000000000, 0x6, 0xfffffffffffffeff, 0x6], @devid=r19}) openat$pidfd(0xffffffffffffff9c, &(0x7f00000032c0), 0x2100, 0x0) ioctl$sock_SIOCBRDELBR(r16, 0x89a1, &(0x7f0000003300)='caif0\x00') 18.52064645s ago: executing program 3 (id=1214): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1bbacd00, 0x39}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x63}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008000) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x24}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xcc}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x60}}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000440)=0x6) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000480)={r0, 0xbc2c, 0xb, "3ac0d7769060af278af64e9457c853acfdc7116b5f6e58028fea9e771951b7468a8f0a8bef4c701797b0191206fae77d899d25e8a65986dbccaefd1110e8d2c5b7924a1ac87af651a2ddc53987ed79448fcd405c8520fcab50ec8d273e8ec5698288629c78e7a2b497746f8959d377bbdaaa64d4938435a334273bca84ef57ce496e8d14540ef1cc0f3840d4a70c1068b85df6048e4a6edd6bf0d73bea28a9c73fa8255a4f31208905030e02fe60efb75f1d55bd7ab6dfe788093b43444f1c94725f2a1ef4214a14de743001bcfb"}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000580)={0x1, 0x7, 0x7ff}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000580)={0x1, 0x7, 0x7ff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x4, 0xe61, {{0x29, 0x4, 0x2, 0x38, 0xa4, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x8}, {[@lsrr={0x83, 0xf, 0x4c, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @noop, @lsrr={0x83, 0x17, 0x1b, [@multicast2, @private=0xa010102, @broadcast, @loopback, @remote]}, @timestamp_prespec={0x44, 0x3c, 0xf5, 0x3, 0x0, [{@loopback, 0x40c}, {@broadcast, 0x9}, {@empty, 0x1}, {@multicast2, 0x1}, {@broadcast, 0x4000000}, {@broadcast, 0x9}, {@rand_addr=0x64010101, 0xe}]}, @lsrr={0x83, 0x1f, 0x32, [@rand_addr=0x64010101, @broadcast, @remote, @remote, @broadcast, @private=0xa010102, @local]}, @timestamp_prespec={0x44, 0xc, 0xd2, 0x3, 0x1, [{@multicast2, 0x2b76}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x4, 0xe61, {{0x29, 0x4, 0x2, 0x38, 0xa4, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x8}, {[@lsrr={0x83, 0xf, 0x4c, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @noop, @lsrr={0x83, 0x17, 0x1b, [@multicast2, @private=0xa010102, @broadcast, @loopback, @remote]}, @timestamp_prespec={0x44, 0x3c, 0xf5, 0x3, 0x0, [{@loopback, 0x40c}, {@broadcast, 0x9}, {@empty, 0x1}, {@multicast2, 0x1}, {@broadcast, 0x4000000}, {@broadcast, 0x9}, {@rand_addr=0x64010101, 0xe}]}, @lsrr={0x83, 0x1f, 0x32, [@rand_addr=0x64010101, @broadcast, @remote, @remote, @broadcast, @private=0xa010102, @local]}, @timestamp_prespec={0x44, 0xc, 0xd2, 0x3, 0x1, [{@multicast2, 0x2b76}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000700)={0x0, 0x0, 0x88, r3, 0x4}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000700)={0x0, 0x0, 0x88, r3, 0x4}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6tnl0\x00', r3, 0x2f, 0xfd, 0x3, 0x6, 0x24, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast1, 0x0, 0x40, 0x8, 0x7}}) gettid() (async) gettid() setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={r3, @local, @loopback}, 0xc) (async) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={r3, @local, @loopback}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x914, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000a80)=0xe8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b40)={0x328, r6, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0x800}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa52}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc06}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc8b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "8d08d79971df619f7641f592c10d6e2ca5b1d6c10fa25cc4343210dde383cc20b9402e2a9d4ac4ff691ff6bca86651c3a3bc3de29c4a4c93ff61e5cba244e0246f03c1251016e8d064a7626b9506d2ea2465a45666073d09e8a50e90ad882b2f986e3d4d67afa9731e4ddc1054647088a0cdc02d89b7e2ebf4b19ef24d32c4762262487b3bf8c16ecc258c37b7b1c2303fc40a1f78b77b911e70"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1dd6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b40)={0x328, r6, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0x800}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa52}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc06}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc8b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "8d08d79971df619f7641f592c10d6e2ca5b1d6c10fa25cc4343210dde383cc20b9402e2a9d4ac4ff691ff6bca86651c3a3bc3de29c4a4c93ff61e5cba244e0246f03c1251016e8d064a7626b9506d2ea2465a45666073d09e8a50e90ad882b2f986e3d4d67afa9731e4ddc1054647088a0cdc02d89b7e2ebf4b19ef24d32c4762262487b3bf8c16ecc258c37b7b1c2303fc40a1f78b77b911e70"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1dd6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) r7 = accept4(r0, 0x0, &(0x7f0000000f00), 0x80000) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000f40)=0x100) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000f80), 0x8) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x90, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6af, 0x42}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "561ac0651f0389e2c1788979a6eafb96490cc3556063e1fc94c25bbb68d9c47cf9760d689c029da52ece4c8241f47cf0cec32800618df71d66e7999bf587c209423fc0c6b0dcb8b8b280e6848d13c351890633fd92259480c94ca0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xa}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) (async) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f0000001180)='0', 0x1) (async) write$6lowpan_enable(r9, &(0x7f0000001180)='0', 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@remote}}, {{@in=@private}, 0x0, @in=@private}}, &(0x7f00000012c0)=0xe8) socket$netlink(0x10, 0x3, 0x13) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001300)={0x0, 0x74, "be1ddb2480a2b61669497015b6647592c1b94bb2eb84497e43fc5fccd1ce4fe687809add681799bf27c744a20a438b2b40308bd5b68c698980e4f6e88192a8ba6ccdb629276cf41cbf0c6c6e0bd09c5ca36b60e7e8f21f8b86ac383b178715ba18364c3fef74d27199825b27f6593c6614030478"}, &(0x7f0000001380)=0x7c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000013c0)={r10, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x9}, &(0x7f0000001480)=0x90) 18.486722276s ago: executing program 1 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) setsockopt$sock_int(r2, 0x1, 0x2e, 0x0, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@icmp={{0x29, 0x4, 0x3, 0x37, 0xf4, 0x66, 0x0, 0xa, 0x1, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x34, 0x6, 0x1, 0x4, [{@empty, 0x8}, {@multicast2, 0x4}, {@empty, 0x9}, {@rand_addr=0x64010101, 0x40}, {@remote, 0xa}, {@private=0xa010101, 0x12}]}, @timestamp={0x44, 0x10, 0xe2, 0x0, 0x4, [0x1, 0x8000, 0x3]}, @noop, @timestamp={0x44, 0x18, 0x7a, 0x0, 0x7, [0x4, 0x2, 0x91, 0x4, 0x6]}, @ra={0x94, 0x4, 0x376c}, @timestamp={0x44, 0xc, 0x1a, 0x0, 0x0, [0x2, 0x8]}, @rr={0x7, 0x13, 0x9, [@multicast1, @broadcast, @broadcast, @private=0xa010100]}, @generic={0x83, 0xb, "3963fcfb36d0aff6b2"}, @ra={0x94, 0x4, 0x1}]}}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x6, 0x8000, {0x11, 0x4, 0x2, 0x2f, 0x4, 0x64, 0x8, 0xa9, 0x2f, 0x4, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, {[@rr={0x7, 0x7, 0x23, [@broadcast]}, @lsrr={0x83, 0xf, 0xdd, [@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @timestamp={0x44, 0x14, 0xda, 0x0, 0xf, [0xe2, 0x4, 0x7b989c41, 0x6]}, @ra={0x94, 0x4, 0x1}]}}, "00e6f44d"}}}, 0x102) 18.193623388s ago: executing program 1 (id=1216): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x24}, {0x6}]}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="b786be918de917629400f0df59039955331353f9b1ab959c83", 0x19}], 0x1) write$cgroup_subtree(r2, &(0x7f0000001200)=ANY=[], 0xfe33) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) 18.164903942s ago: executing program 1 (id=1217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 18.087866747s ago: executing program 1 (id=1218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x164, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe99, 0x2a}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7ff, 0x4, 0x74, 0xc229, 0x6]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x401}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xfffffffd, 0x5, 0x8, 0x2, 0xa]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x324}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1fe}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ac}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x10001, 0x6]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20010804}, 0x4004804) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) listen(r1, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r9, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) 17.797502636s ago: executing program 2 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x81, 0x18}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x5e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18}], 0x1, 0x10000860) recvmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000540)=""/210, 0xd2}], 0x3, &(0x7f0000000400)=""/76, 0x4c}, 0x41) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) 17.741210006s ago: executing program 2 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000400)={0x0, 0x2, "00dbff", 0xc, 0x9b}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xa, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0100000001901800000000000000000a00000234000f800800014000000005080001400000af4408000140fffffffc080001400000008108000240000000020800014000000002c8000d80080002000a010101140005002001000000000000000000000000000214000400fe88000000000000000000000000010114000000000000000014000400fe88000000000000000000000000000114000380060001004e220000060002004e24000014000400fe8000000000000000000000000000bb440003800600020000650000060002004e220000060001004e210000060002004e200000060001004e210000060001004e210000060002004e240000060001004e210000080015400000000308001a4000000101060012400002000008000840000040370c00188008000340000000ff00"/316], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcb, 0x0, 0x76e6) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r9, @ANYBLOB="049c01000750050008001300", @ANYRES32=r10, @ANYBLOB="140003007600"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x144, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x144}}, 0x20040000) write(r1, &(0x7f0000000000)="23000300010006", 0x7) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000040)) 17.667169885s ago: executing program 4 (id=1225): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000040)) 17.57762792s ago: executing program 2 (id=1226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000800000004f00000085e6ff000300000095000000000000006d"], &(0x7f0000000040)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/237, 0xed}, {&(0x7f0000000240)=""/89, 0x59}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.577292915s ago: executing program 4 (id=1227): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000068000100000000000000000002000000000000000400040008003000a4ea585ca14db7148c2f01d558b733a0943d160f031ec6d7d45f9ca8b27f60c2316a818fd1a00e25ba943a5eb442ced41f016b335d306528cf09dbe713442508de15c7b0ec9fd253db59f629cff3f67d1a4615b17c6e539faadbfd1bd36d3d176695fd76277f30d1bf6f14aafbf6c07d75e4c44898d9859f035d23d606186e3de9c88e7a318fc9400b7e779f296f87334117d46428bee842f715e3bf4cdb4e3a660e5a159f14fed287cda2d0ffb9c7f415246e465a59e9ef68899b26d159638ac9fb45abbdc3cf9bbb7adda3913626cd8feca9427bd953b22782c96422acc6b2e1267b261a57a2462f64994186f14300178f0e2531e3e7cb32f2226626f46e664709bd3787", @ANYRES32=0x0, @ANYBLOB="b579594a398fb0b1e9310a1d2fd86515000400"], 0x24}}, 0x0) 17.544639194s ago: executing program 4 (id=1228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000080)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x44000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x108}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 16.744751058s ago: executing program 2 (id=1229): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xb}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_emit_ethernet(0x42, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x2}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x10, 0x0, 0x0, 0xd0a, 0x2c, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth1_to_team\x00', 0x4}, 0x18) r2 = accept4(r1, &(0x7f0000000040)=@ethernet={0x0, @local}, &(0x7f00000000c0)=0x80, 0x80800) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000100)=@in={0x2, 0x4e22, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="2b75b8cbdf018df99fa8c2ddf9974beee5c17af844b5a44a0bfa92855d59684a34b6898d541d2e0e74f729d455618201ee96940ef659af84cce63f07f973ba5a18306f768e7dff3ecc7258e94b8e064b31a9706049cef85f3f1fcdcf6142c3dc63dfc969015943c225218ce7bf11a725621c725d0be054ed309fd2e72d981c59aec8105f46b69289d7fa1c539dcbec9b70fb88c2fbfa964fa16cabacd872774acc74c9d923cd177377b92289d47b25cd63103d24481ac33cf9490f30c3825d3f61f5e4efea0889ea616bcc109da0982f6ee8c54e30dd679d5096", 0xda}, {&(0x7f0000000280)="f7d859cfa062eb51d1e122a9f041ceec9408e8d175ba150489d17bf2021fb14bbc57f07859730c80612af634422a858802b3505e5c5c3598c636c6227714d88ffacea378d677e03a8c4d811468fecae6ebf17c40da711d7de56babbe3c6126406aa5ea43c4448c0d1977d9fd71a9fa486ce8a0282f5e9166cf28bd250dce9196deb8cd2c4f6a47f6a775c563c1bd7a74212def773fe915b239596a6463abd5a496a6bae9f3496cfebabcd01f73df4678b551753e7cdf6a2a3a18d0ad4841ab4b8e7dea0501310ff3a52d5f014c935cc6c270d835a25f4f", 0xd7}], 0x2, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], 0x348}, 0x8040) getsockname$llc(r2, &(0x7f00000007c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000800)=0x10) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/100, 0x64}], 0x1, &(0x7f0000000900)=""/64, 0x40}, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000980)=0xee, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000009c0)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x6, 0x5}, &(0x7f0000000a80)=0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000009c0)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x6, 0x5}, &(0x7f0000000a80)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000ac0)={r3, 0xdc0, "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"}, &(0x7f0000001b00)=0xdc8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000ac0)={r3, 0xdc0, "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"}, &(0x7f0000001b00)=0xdc8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001b40)={0x2, 0x3ff, 0x2, 0x3, 0x3ff, 0x9, 0x800, 0x1a1, r3}, &(0x7f0000001b80)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001c80)={r4, 0x84, &(0x7f0000001bc0)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x9, @private2, 0x6}, @in6={0xa, 0x4e24, 0x3, @private0, 0x8f}, @in6={0xa, 0x4e23, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}]}, &(0x7f0000001cc0)=0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001d00)={r4, @in6={{0xa, 0x9, 0x6, @empty, 0xfffffffd}}, 0x1, 0x5}, &(0x7f0000001dc0)=0x90) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000001e00)={0x2, 0x4e23, @remote}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x28, 0x140e, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x40001) accept4$tipc(r2, &(0x7f0000001f40)=@name, &(0x7f0000001f80)=0x10, 0x0) (async) accept4$tipc(r2, &(0x7f0000001f40)=@name, &(0x7f0000001f80)=0x10, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002040)={'syztnl1\x00', &(0x7f0000001fc0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x8, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private0, 0x7, 0x40, 0xa3, 0x9}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000002080)={@mcast2, 0x6b, r6}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000002080)={@mcast2, 0x6b, r6}) sendmsg$nl_route(r2, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001a0000012cbd7000fcdbdf2580800000fc00ca02000d000008000500ac14143b05001b000100000008000100e000000194c1e3eeaace7c6677cb500783825e41f62ae0c35c4c51ab68a917d0ed70eb502cb49b7f9fb00c6d42a3b27e8351316aefd9a5d4b7ac131857f9a0fcb560c691d37fad7bb5738ff3f01ba5e3eff35d4446c4adb376e52628f9168589c0fb9d974800000000"], 0x34}, 0x1, 0x0, 0x0, 0x60000004}, 0x4000) (async) sendmsg$nl_route(r2, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001a0000012cbd7000fcdbdf2580800000fc00ca02000d000008000500ac14143b05001b000100000008000100e000000194c1e3eeaace7c6677cb500783825e41f62ae0c35c4c51ab68a917d0ed70eb502cb49b7f9fb00c6d42a3b27e8351316aefd9a5d4b7ac131857f9a0fcb560c691d37fad7bb5738ff3f01ba5e3eff35d4446c4adb376e52628f9168589c0fb9d974800000000"], 0x34}, 0x1, 0x0, 0x0, 0x60000004}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 16.625651854s ago: executing program 4 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 16.62510087s ago: executing program 4 (id=1231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mr_dereg\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.58038437s ago: executing program 4 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000059f1feb90000000a28000000000a010100e6ffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000002f05007ff5fedbfec0ad799c777a0900010073797a300000000009000306b6af590940096a5eb82a73b81e3e1510f38aa3b0aaf5b1f6cae4b2ea659badbe6e1d25288ddfb67fa1186713cd1aca990fc3967b9ceaaa2bfa0f83b171ddb6ce27f26d7ed0f93d18"], 0x7c}}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002c00010122bd7005fcffffff0a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r8) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000340)={'ip6tnl0\x00', @ifru_mtu=0xc50}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xac, r9, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24004800}, 0x810) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x84}}, 0x0) 15.876882275s ago: executing program 2 (id=1233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000008c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x800, 0x1, 0x0, 0x3, 0xd, 0x4, 0x4, 0x8, 0xffffffff, 0x6, 0xc, 0x2e, 0x4790, 0x4d2, 0x4, 0xc, 0x4d, 0xe4, 0x7, 0x0, 0x9, 0xffff, 0x8, 0x93, 0x6, 0x7, 0x4, 0x5, 0xe, 0x8001, 0x5, 0x4, 0x1, 0x0, 0xffff065b, 0x7000, 0x8001, 0x8f, 0x8, 0x0, 0xabfb, 0x2, 0x4, 0xfffffffa, 0x5, 0x7, 0x7, 0x9, 0xfcef, 0x0, 0x0, 0xf27, 0x6, 0x73, 0x3, 0x30, 0x0, 0xfffffff7, 0x6, 0xd, 0x5, 0x5, 0x7, 0x6, 0x7, 0x5, 0x7, 0x7, 0x28, 0x3, 0x2, 0x8, 0x4, 0x3, 0x100, 0x8, 0x4, 0x8001, 0x7fffffff, 0x7, 0xfd, 0x9, 0x1, 0x3, 0x0, 0xfffffff8, 0x100, 0x3d, 0x865, 0xffffffff, 0x1, 0xfffffffe, 0x2, 0x6, 0x3, 0x534b, 0x4, 0xf, 0x10001, 0xc, 0x1, 0x80000000, 0x6, 0x2, 0xf, 0xbe0, 0x2, 0xe0, 0x351, 0x800, 0x5, 0x2, 0x9, 0x9b, 0xfff, 0x100, 0xe, 0xa0a, 0x2, 0x4, 0x7, 0x6, 0x8, 0xa, 0x10, 0x7, 0xfffffffd]}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r2, &(0x7f0000000840)="e8", 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x20}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) listen(r4, 0xea) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x41}, 0x40000122) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400329fdbc590e0cd5e7fe21e5b8da0e00000020601080000000000000000030000000c0007800800114000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000500010007000000"], 0x64}}, 0x20048800) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000000000000080005000800000071d7"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 3.056187008s ago: executing program 32 (id=1213): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @bcast, @null, @rose, @null, @netrom, @default, @null]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @default, @netrom={'nr', 0x0}, 0x10000, 'syz1\x00', @null, 0x3, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000180)={{r0}, r1, 0x16, @unused=[0x8001, 0x6], @name="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"}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001180)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000011c0)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001200)='veth0_to_hsr\x00') ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001240)={0x0, 0x400, 0x0, [0x3, 0x1d8, 0x4, 0x5, 0x7], [0x100, 0xff, 0x100, 0x1, 0x298, 0x627, 0x4000000000000000, 0x3ff, 0x6a, 0x0, 0x6, 0x1, 0x10, 0x5, 0x1, 0x3, 0x3, 0x7, 0x4, 0x4, 0x7, 0x7fff, 0x2, 0x5, 0x6, 0x80000000, 0x70, 0x1, 0x4, 0x6, 0xd641, 0x4, 0x401, 0x10000, 0xb, 0x7, 0x4, 0x9, 0x98, 0x4, 0x5, 0x47, 0x7, 0x6195, 0xe, 0xff, 0x8, 0x2, 0x4e7, 0x5, 0x46e22f8a, 0x6, 0xf, 0x9, 0xa, 0x7, 0x2, 0x6, 0x4, 0x5, 0x8, 0xfffffffffffffff7, 0x5, 0xff, 0x3f, 0x2, 0x80000001, 0x4, 0x8, 0x3, 0x44fc130b, 0xa5, 0xfffffffffffffffa, 0x0, 0x1000, 0xde5, 0x98, 0x592, 0x4, 0x0, 0x80000001, 0x3, 0x101, 0x3, 0x8, 0x0, 0x4, 0x2000, 0x9, 0x1, 0x8, 0x3, 0x6, 0x4, 0xa2cc, 0x3, 0x8000, 0xd8ba, 0x60, 0x10000, 0x3, 0x8, 0xc493, 0x2, 0x4, 0x100000001, 0x4, 0x6, 0x5, 0x2, 0xef36, 0x10, 0x8, 0xfffffffffffffff9, 0xc50feff, 0x3, 0xd, 0x9, 0x2, 0x9, 0x80000001]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001680), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001780)={'erspan0\x00', &(0x7f0000001700)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x0, 0x9, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x5b, [@broadcast]}, @lsrr={0x83, 0xb, 0x4c, [@empty, @private=0xa010102]}, @lsrr={0x83, 0xb, 0x9e, [@broadcast, @rand_addr=0x64010101]}, @rr={0x7, 0x7, 0x90, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x14, 0xe3, 0x1, 0xb, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001980)={&(0x7f00000016c0), 0xc, &(0x7f0000001940)={&(0x7f00000017c0)={0x158, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000001a80)={&(0x7f00000019c0), 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044840}, 0x20000004) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r9, 0x100, 0x70bd27, 0x6, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x24008014) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000001c80), r8) socketpair(0xa, 0x0, 0x7, &(0x7f0000001cc0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket(0x1f, 0xa, 0x7) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001e80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d80)={0xc0, r11, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x19, 0xa, 'hash_to_port_mapping\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r17}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) r18 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000001ec0)={r3, 0x1ff, 0x8}) ioctl$BTRFS_IOC_RM_DEV_V2(r18, 0x5000943a, &(0x7f00000022c0)={{r14}, r1, 0x4, @unused=[0x20000000000000, 0x6, 0xfffffffffffffeff, 0x6], @devid=r19}) openat$pidfd(0xffffffffffffff9c, &(0x7f00000032c0), 0x2100, 0x0) ioctl$sock_SIOCBRDELBR(r16, 0x89a1, &(0x7f0000003300)='caif0\x00') 3.009260518s ago: executing program 33 (id=1218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x164, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe99, 0x2a}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7ff, 0x4, 0x74, 0xc229, 0x6]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x401}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1d6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xfffffffd, 0x5, 0x8, 0x2, 0xa]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x324}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1fe}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffb}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ac}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x10001, 0x6]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20010804}, 0x4004804) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) listen(r1, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r9, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) 2.958235633s ago: executing program 34 (id=1214): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1bbacd00, 0x39}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x63}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008000) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x24}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xcc}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x60}}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000440)=0x6) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000480)={r0, 0xbc2c, 0xb, "3ac0d7769060af278af64e9457c853acfdc7116b5f6e58028fea9e771951b7468a8f0a8bef4c701797b0191206fae77d899d25e8a65986dbccaefd1110e8d2c5b7924a1ac87af651a2ddc53987ed79448fcd405c8520fcab50ec8d273e8ec5698288629c78e7a2b497746f8959d377bbdaaa64d4938435a334273bca84ef57ce496e8d14540ef1cc0f3840d4a70c1068b85df6048e4a6edd6bf0d73bea28a9c73fa8255a4f31208905030e02fe60efb75f1d55bd7ab6dfe788093b43444f1c94725f2a1ef4214a14de743001bcfb"}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000580)={0x1, 0x7, 0x7ff}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000580)={0x1, 0x7, 0x7ff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x4, 0xe61, {{0x29, 0x4, 0x2, 0x38, 0xa4, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x8}, {[@lsrr={0x83, 0xf, 0x4c, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @noop, @lsrr={0x83, 0x17, 0x1b, [@multicast2, @private=0xa010102, @broadcast, @loopback, @remote]}, @timestamp_prespec={0x44, 0x3c, 0xf5, 0x3, 0x0, [{@loopback, 0x40c}, {@broadcast, 0x9}, {@empty, 0x1}, {@multicast2, 0x1}, {@broadcast, 0x4000000}, {@broadcast, 0x9}, {@rand_addr=0x64010101, 0xe}]}, @lsrr={0x83, 0x1f, 0x32, [@rand_addr=0x64010101, @broadcast, @remote, @remote, @broadcast, @private=0xa010102, @local]}, @timestamp_prespec={0x44, 0xc, 0xd2, 0x3, 0x1, [{@multicast2, 0x2b76}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x80, 0x1, 0x4, 0xe61, {{0x29, 0x4, 0x2, 0x38, 0xa4, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x8}, {[@lsrr={0x83, 0xf, 0x4c, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @noop, @lsrr={0x83, 0x17, 0x1b, [@multicast2, @private=0xa010102, @broadcast, @loopback, @remote]}, @timestamp_prespec={0x44, 0x3c, 0xf5, 0x3, 0x0, [{@loopback, 0x40c}, {@broadcast, 0x9}, {@empty, 0x1}, {@multicast2, 0x1}, {@broadcast, 0x4000000}, {@broadcast, 0x9}, {@rand_addr=0x64010101, 0xe}]}, @lsrr={0x83, 0x1f, 0x32, [@rand_addr=0x64010101, @broadcast, @remote, @remote, @broadcast, @private=0xa010102, @local]}, @timestamp_prespec={0x44, 0xc, 0xd2, 0x3, 0x1, [{@multicast2, 0x2b76}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000700)={0x0, 0x0, 0x88, r3, 0x4}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000700)={0x0, 0x0, 0x88, r3, 0x4}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6tnl0\x00', r3, 0x2f, 0xfd, 0x3, 0x6, 0x24, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast1, 0x0, 0x40, 0x8, 0x7}}) gettid() (async) gettid() setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={r3, @local, @loopback}, 0xc) (async) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={r3, @local, @loopback}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x914, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000a80)=0xe8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b40)={0x328, r6, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0x800}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa52}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc06}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc8b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "8d08d79971df619f7641f592c10d6e2ca5b1d6c10fa25cc4343210dde383cc20b9402e2a9d4ac4ff691ff6bca86651c3a3bc3de29c4a4c93ff61e5cba244e0246f03c1251016e8d064a7626b9506d2ea2465a45666073d09e8a50e90ad882b2f986e3d4d67afa9731e4ddc1054647088a0cdc02d89b7e2ebf4b19ef24d32c4762262487b3bf8c16ecc258c37b7b1c2303fc40a1f78b77b911e70"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1dd6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b40)={0x328, r6, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0x800}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa52}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x33}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc06}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc8b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "8d08d79971df619f7641f592c10d6e2ca5b1d6c10fa25cc4343210dde383cc20b9402e2a9d4ac4ff691ff6bca86651c3a3bc3de29c4a4c93ff61e5cba244e0246f03c1251016e8d064a7626b9506d2ea2465a45666073d09e8a50e90ad882b2f986e3d4d67afa9731e4ddc1054647088a0cdc02d89b7e2ebf4b19ef24d32c4762262487b3bf8c16ecc258c37b7b1c2303fc40a1f78b77b911e70"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1dd6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) r7 = accept4(r0, 0x0, &(0x7f0000000f00), 0x80000) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000f40)=0x100) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000f80), 0x8) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x90, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6af, 0x42}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "561ac0651f0389e2c1788979a6eafb96490cc3556063e1fc94c25bbb68d9c47cf9760d689c029da52ece4c8241f47cf0cec32800618df71d66e7999bf587c209423fc0c6b0dcb8b8b280e6848d13c351890633fd92259480c94ca0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xa}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) (async) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f0000001180)='0', 0x1) (async) write$6lowpan_enable(r9, &(0x7f0000001180)='0', 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@remote}}, {{@in=@private}, 0x0, @in=@private}}, &(0x7f00000012c0)=0xe8) socket$netlink(0x10, 0x3, 0x13) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001300)={0x0, 0x74, "be1ddb2480a2b61669497015b6647592c1b94bb2eb84497e43fc5fccd1ce4fe687809add681799bf27c744a20a438b2b40308bd5b68c698980e4f6e88192a8ba6ccdb629276cf41cbf0c6c6e0bd09c5ca36b60e7e8f21f8b86ac383b178715ba18364c3fef74d27199825b27f6593c6614030478"}, &(0x7f0000001380)=0x7c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000013c0)={r10, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x9}, &(0x7f0000001480)=0x90) 1.03769759s ago: executing program 35 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000059f1feb90000000a28000000000a010100e6ffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000002f05007ff5fedbfec0ad799c777a0900010073797a300000000009000306b6af590940096a5eb82a73b81e3e1510f38aa3b0aaf5b1f6cae4b2ea659badbe6e1d25288ddfb67fa1186713cd1aca990fc3967b9ceaaa2bfa0f83b171ddb6ce27f26d7ed0f93d18"], 0x7c}}, 0x8080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002c00010122bd7005fcffffff0a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r8) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000340)={'ip6tnl0\x00', @ifru_mtu=0xc50}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xac, r9, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24004800}, 0x810) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x84}}, 0x0) 0s ago: executing program 36 (id=1233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000008c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x800, 0x1, 0x0, 0x3, 0xd, 0x4, 0x4, 0x8, 0xffffffff, 0x6, 0xc, 0x2e, 0x4790, 0x4d2, 0x4, 0xc, 0x4d, 0xe4, 0x7, 0x0, 0x9, 0xffff, 0x8, 0x93, 0x6, 0x7, 0x4, 0x5, 0xe, 0x8001, 0x5, 0x4, 0x1, 0x0, 0xffff065b, 0x7000, 0x8001, 0x8f, 0x8, 0x0, 0xabfb, 0x2, 0x4, 0xfffffffa, 0x5, 0x7, 0x7, 0x9, 0xfcef, 0x0, 0x0, 0xf27, 0x6, 0x73, 0x3, 0x30, 0x0, 0xfffffff7, 0x6, 0xd, 0x5, 0x5, 0x7, 0x6, 0x7, 0x5, 0x7, 0x7, 0x28, 0x3, 0x2, 0x8, 0x4, 0x3, 0x100, 0x8, 0x4, 0x8001, 0x7fffffff, 0x7, 0xfd, 0x9, 0x1, 0x3, 0x0, 0xfffffff8, 0x100, 0x3d, 0x865, 0xffffffff, 0x1, 0xfffffffe, 0x2, 0x6, 0x3, 0x534b, 0x4, 0xf, 0x10001, 0xc, 0x1, 0x80000000, 0x6, 0x2, 0xf, 0xbe0, 0x2, 0xe0, 0x351, 0x800, 0x5, 0x2, 0x9, 0x9b, 0xfff, 0x100, 0xe, 0xa0a, 0x2, 0x4, 0x7, 0x6, 0x8, 0xa, 0x10, 0x7, 0xfffffffd]}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r2, &(0x7f0000000840)="e8", 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x20}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) listen(r4, 0xea) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x41}, 0x40000122) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400329fdbc590e0cd5e7fe21e5b8da0e00000020601080000000000000000030000000c0007800800114000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000500010007000000"], 0x64}}, 0x20048800) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000000000000080005000800000071d7"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) kernel console output (not intermixed with test programs): ered blocking state [ 95.082101][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.092133][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.099289][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.129146][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.136335][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.143838][ T5150] Bluetooth: hci3: command tx timeout [ 95.180994][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.223043][ T5150] Bluetooth: hci4: command tx timeout [ 95.250201][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.274007][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.297474][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.304622][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.327706][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.352467][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.384319][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.391487][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.428369][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.435547][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.488330][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.495625][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.546135][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.637670][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.709252][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.716489][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.727339][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.734609][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.879168][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.926185][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.105740][ T5836] veth0_vlan: entered promiscuous mode [ 96.215472][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.254877][ T5836] veth1_vlan: entered promiscuous mode [ 96.372327][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.407765][ T5836] veth0_macvtap: entered promiscuous mode [ 96.440159][ T5850] veth0_vlan: entered promiscuous mode [ 96.458467][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.490171][ T5836] veth1_macvtap: entered promiscuous mode [ 96.506974][ T5850] veth1_vlan: entered promiscuous mode [ 96.556245][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.597188][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.628964][ T5844] veth0_vlan: entered promiscuous mode [ 96.637730][ T3539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.670199][ T3539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.686841][ T5840] veth0_vlan: entered promiscuous mode [ 96.699924][ T5844] veth1_vlan: entered promiscuous mode [ 96.707647][ T3539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.716951][ T3539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.734670][ T5850] veth0_macvtap: entered promiscuous mode [ 96.741993][ T5840] veth1_vlan: entered promiscuous mode [ 96.766034][ T5854] veth0_vlan: entered promiscuous mode [ 96.777622][ T5850] veth1_macvtap: entered promiscuous mode [ 96.831235][ T5854] veth1_vlan: entered promiscuous mode [ 96.872619][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.918925][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.921951][ T5840] veth0_macvtap: entered promiscuous mode [ 96.936686][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.949835][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.964079][ T5844] veth0_macvtap: entered promiscuous mode [ 96.988414][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.997670][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.027285][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.036271][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.046735][ T5844] veth1_macvtap: entered promiscuous mode [ 97.053442][ T5150] Bluetooth: hci0: command tx timeout [ 97.054352][ T5841] Bluetooth: hci2: command tx timeout [ 97.058867][ T5150] Bluetooth: hci1: command tx timeout [ 97.081503][ T5840] veth1_macvtap: entered promiscuous mode [ 97.111102][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.124413][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.133728][ T5854] veth0_macvtap: entered promiscuous mode [ 97.151026][ T5854] veth1_macvtap: entered promiscuous mode [ 97.214300][ T5150] Bluetooth: hci3: command tx timeout [ 97.221032][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.236767][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.248093][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.268439][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.279767][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.291852][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.301023][ T5150] Bluetooth: hci4: command tx timeout [ 97.303698][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.334621][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.345581][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.354921][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.418964][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.445878][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.456548][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.469706][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.478955][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.507891][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.535061][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.574585][ T5950] netlink: 528 bytes leftover after parsing attributes in process `syz.0.6'. [ 97.576861][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.583819][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 97.605103][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675334][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.707150][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.729827][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.759247][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.799014][ T3539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824460][ T3539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.885140][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.898570][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.912826][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.934954][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.977390][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.998535][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.066444][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.082173][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.140761][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.175226][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.204620][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.239666][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.429556][ T5964] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9'. [ 98.514230][ T5969] Zero length message leads to an empty skb [ 98.919576][ T5982] tipc: Started in network mode [ 98.949551][ T5982] tipc: Node identity fe1e7c6efa11, cluster identity 4711 [ 98.983555][ T5982] tipc: Enabled bearer , priority 0 [ 99.007605][ T5985] syzkaller0: entered promiscuous mode [ 99.013307][ T5985] syzkaller0: entered allmulticast mode [ 99.051900][ T10] IPVS: starting estimator thread 0... [ 99.133175][ T5150] Bluetooth: hci1: command tx timeout [ 99.133271][ T52] Bluetooth: hci0: command tx timeout [ 99.146089][ T5841] Bluetooth: hci2: command tx timeout [ 99.158215][ T5982] tipc: Resetting bearer [ 99.182683][ T5996] IPVS: using max 28 ests per chain, 67200 per kthread [ 99.247428][ T5982] tipc: Disabling bearer [ 99.302748][ T5841] Bluetooth: hci3: command tx timeout [ 99.336933][ T6005] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET) [ 99.373293][ T5841] Bluetooth: hci4: command tx timeout [ 99.419163][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 99.524651][ T6008] batadv0: entered promiscuous mode [ 99.580459][ T6008] batadv0: entered allmulticast mode [ 99.586179][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 100.031567][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27'. [ 100.082010][ T6034] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 100.214722][ T6044] netlink: 'syz.1.31': attribute type 3 has an invalid length. [ 100.255761][ T6044] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 100.348251][ T6049] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 100.364485][ T6049] netlink: 224 bytes leftover after parsing attributes in process `syz.0.33'. [ 100.884444][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.320759][ T6081] trusted_key: syz.0.45 sent an empty control message without MSG_MORE. [ 101.393661][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.49'. [ 101.753433][ T6107] delete_channel: no stack [ 101.841605][ T6117] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 101.896884][ T6119] gtp0: entered promiscuous mode [ 101.910886][ T6119] gtp0: entered allmulticast mode [ 102.356562][ T6146] netlink: 'syz.0.61': attribute type 7 has an invalid length. [ 102.364763][ T6146] netlink: 'syz.0.61': attribute type 8 has an invalid length. [ 102.381760][ T6146] veth1: entered promiscuous mode [ 102.394952][ T6146] veth0: entered promiscuous mode [ 102.433907][ T6146] erspan0: entered promiscuous mode [ 102.496723][ T6150] netlink: 'syz.3.63': attribute type 2 has an invalid length. [ 102.513384][ T6148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.520878][ T6148] IPv6: NLM_F_CREATE should be set when creating new route [ 102.521233][ T6152] netlink: 'syz.1.66': attribute type 11 has an invalid length. [ 102.569158][ T6155] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 102.592455][ T6155] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 102.613324][ T6152] tipc: Enabled bearer , priority 0 [ 102.750822][ T6159] syzkaller0: entered promiscuous mode [ 102.757549][ T6159] syzkaller0: entered allmulticast mode [ 102.764775][ T6159] tipc: Resetting bearer [ 102.780151][ T6151] tipc: Resetting bearer [ 103.635332][ T5918] tipc: Node number set to 68123758 [ 103.695135][ T6151] tipc: Disabling bearer [ 103.863383][ T6173] netlink: 'syz.2.71': attribute type 2 has an invalid length. [ 103.871077][ T6173] __nla_validate_parse: 133 callbacks suppressed [ 103.871094][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 104.021554][ T6189] netlink: 40 bytes leftover after parsing attributes in process `syz.4.72'. [ 104.114149][ T6185] vxlan0: entered promiscuous mode [ 104.128860][ T6185] vxlan0: entered allmulticast mode [ 104.150027][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 104.182596][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.214499][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.233499][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.251748][ T3451] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.299648][ T6193] warning: `syz.4.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.609694][ T6213] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 104.920130][ T6234] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.005066][ T6237] : renamed from hsr0 (while UP) [ 105.151531][ T6243] netlink: 'syz.3.90': attribute type 2 has an invalid length. [ 105.203375][ T6243] : entered promiscuous mode [ 105.347431][ T6253] bridge0: port 3(batadv1) entered blocking state [ 105.354338][ T6253] bridge0: port 3(batadv1) entered disabled state [ 105.361022][ T6253] batadv1: entered allmulticast mode [ 105.368093][ T6253] batadv1: entered promiscuous mode [ 105.396473][ T6258] bridge0: port 4(batadv2) entered blocking state [ 105.403612][ T6258] bridge0: port 4(batadv2) entered disabled state [ 105.410263][ T6258] batadv2: entered allmulticast mode [ 105.417651][ T6258] batadv2: entered promiscuous mode [ 105.626512][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 105.753526][ T6267] netlink: 256 bytes leftover after parsing attributes in process `syz.4.98'. [ 105.842683][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 105.852113][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 105.905730][ T49] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 105.915075][ T49] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 106.211670][ T6294] netlink: 528 bytes leftover after parsing attributes in process `syz.2.105'. [ 106.258586][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 106.296639][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 106.330647][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 106.358135][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.367081][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.378059][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.388892][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 106.397939][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.618350][ T6311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.773567][ T6321] netlink: 'syz.4.114': attribute type 39 has an invalid length. [ 107.349608][ T6350] !: renamed from dummy0 (while UP) [ 107.584737][ T43] IPVS: starting estimator thread 0... [ 107.593419][ T6357] IPVS: nq: FWM 3 0x00000003 - no destination available [ 107.600482][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 107.648687][ T6361] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 107.692755][ T6360] IPVS: using max 29 ests per chain, 69600 per kthread [ 107.848102][ T6366] tap0: tun_chr_ioctl cmd 1074025677 [ 107.876269][ T6366] tap0: linktype set to 65534 [ 108.107327][ T6380] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 108.143911][ T6380] team0: Device ipvlan2 failed to register rx_handler [ 108.285215][ T6381] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 108.307197][ T6381] team0: Device ipvlan2 failed to register rx_handler [ 108.874564][ T6419] __nla_validate_parse: 5 callbacks suppressed [ 108.874583][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'. [ 109.162293][ T6438] syz_tun: entered allmulticast mode [ 109.227001][ T6434] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 109.307685][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 109.318158][ T6442] netlink: 'syz.1.148': attribute type 9 has an invalid length. [ 109.679936][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 109.709933][ T6465] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 109.841002][ T6465] team1: entered promiscuous mode [ 109.851723][ T6465] team1: entered allmulticast mode [ 109.872684][ T6480] tipc: Started in network mode [ 109.877598][ T6480] tipc: Node identity f62b6d35f92c, cluster identity 4711 [ 109.895511][ T6480] tipc: Enabled bearer , priority 0 [ 109.921994][ T6482] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.943111][ T6468] syzkaller0: entered promiscuous mode [ 109.946973][ T6488] SET target dimension over the limit! [ 109.990514][ T6468] syzkaller0: entered allmulticast mode [ 110.038809][ T6468] tipc: Resetting bearer [ 110.054386][ T6467] tipc: Resetting bearer [ 110.133348][ T6467] tipc: Disabling bearer [ 110.297700][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 110.312097][ T6504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.163'. [ 110.346453][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 110.382394][ T6504] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.427388][ T6503] geneve2: entered promiscuous mode [ 110.433332][ T6504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.440602][ T6504] IPv6: NLM_F_CREATE should be set when creating new route [ 110.498776][ T6503] geneve2: entered allmulticast mode [ 110.751011][ T6524] dvmrp0: entered allmulticast mode [ 110.768088][ T6528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.171'. [ 111.072033][ T6544] xt_hashlimit: size too large, truncated to 1048576 [ 111.099954][ T6539] bond1: Unable to set up delay as MII monitoring is disabled [ 111.130953][ T6539] bond1 (unregistering): Released all slaves [ 111.466435][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.177'. [ 111.488651][ T6563] tipc: Started in network mode [ 111.497255][ T6563] tipc: Node identity d2fc78891ea, cluster identity 4711 [ 111.504859][ T6563] tipc: Enabled bearer , priority 0 [ 111.515925][ T6563] syzkaller0: entered promiscuous mode [ 111.521451][ T6563] syzkaller0: entered allmulticast mode [ 111.538805][ T6561] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 111.562209][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 111.938998][ T6564] tipc: Resetting bearer [ 111.997429][ T6564] tipc: Disabling bearer [ 112.830797][ T6643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 113.103122][ T6653] nft_compat: unsupported protocol 0 [ 113.173342][ T6647] syzkaller0: entered promiscuous mode [ 113.190485][ T6647] syzkaller0: entered allmulticast mode [ 113.289005][ T6656] tipc: Enabled bearer , priority 0 [ 113.376402][ T6656] syzkaller0: entered promiscuous mode [ 113.395064][ T6656] syzkaller0: entered allmulticast mode [ 113.422570][ C0] syzkaller0: tun_net_xmit 90 [ 113.437302][ T6656] tipc: Resetting bearer [ 113.447755][ T6656] syzkaller0: tun_net_xmit 90 [ 113.519919][ T6655] tipc: Resetting bearer [ 113.547838][ T6655] tipc: Disabling bearer [ 113.610517][ T6678] Cannot find set identified by id 1 to match [ 113.992308][ T6693] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 114.005150][ T6688] netlink: 'syz.1.212': attribute type 4 has an invalid length. [ 114.154936][ T6696] __nla_validate_parse: 5 callbacks suppressed [ 114.154975][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 114.278480][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.217'. [ 114.340224][ T6708] netlink: 84 bytes leftover after parsing attributes in process `syz.3.217'. [ 114.364636][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 114.758559][ T6717] vlan3: entered promiscuous mode [ 114.780550][ T6717] bridge0: entered promiscuous mode [ 114.794923][ T6715] tipc: Started in network mode [ 114.808022][ T6715] tipc: Node identity 7a96981dd6df, cluster identity 4711 [ 114.828170][ T6715] tipc: Enabled bearer , priority 0 [ 114.862951][ T6726] syzkaller0: entered promiscuous mode [ 114.892937][ T6726] syzkaller0: entered allmulticast mode [ 115.944563][ T5897] tipc: Node number set to 2890504221 [ 116.082380][ T6726] tipc: Resetting bearer [ 116.103858][ T6726] tipc: Disabling bearer [ 116.130987][ T6732] team0: No ports can be present during mode change [ 116.177368][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 116.288192][ T6738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.391127][ T6747] netlink: 'syz.3.229': attribute type 7 has an invalid length. [ 116.536683][ T6753] netlink: 100 bytes leftover after parsing attributes in process `syz.0.231'. [ 116.574678][ T6755] netlink: 'syz.1.232': attribute type 10 has an invalid length. [ 116.594809][ T6755] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 116.644393][ T6755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.829977][ T6765] netem: change failed [ 116.834316][ T6768] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 116.834367][ T6768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.902451][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 116.914521][ T6774] openvswitch: netlink: Missing key (keys=40, expected=80) [ 116.996144][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 117.063559][ T6782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.113347][ T6781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.357232][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 117.405264][ T6805] netlink: 'syz.4.242': attribute type 7 has an invalid length. [ 117.618764][ T6810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.946715][ T6835] Bluetooth: MGMT ver 1.23 [ 118.666319][ T6869] bridge2: entered promiscuous mode [ 118.693914][ T6871] syzkaller0: entered promiscuous mode [ 118.722837][ T6871] syzkaller0: entered allmulticast mode [ 118.942182][ T6883] netlink: zone id is out of range [ 118.950269][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 119.032610][ T6883] netlink: zone id is out of range [ 119.071841][ T6883] netlink: set zone limit has 8 unknown bytes [ 119.217985][ T6899] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 119.496904][ T6912] netlink: 'syz.2.274': attribute type 11 has an invalid length. [ 119.525420][ T6912] __nla_validate_parse: 1 callbacks suppressed [ 119.525438][ T6912] netlink: 224 bytes leftover after parsing attributes in process `syz.2.274'. [ 119.546243][ T6923] netlink: 'syz.1.277': attribute type 3 has an invalid length. [ 119.729342][ T6931] netlink: 'syz.0.279': attribute type 11 has an invalid length. [ 119.758469][ T6931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.279'. [ 120.197446][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'. [ 120.260808][ T6964] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 120.277335][ T6961] vlan0: entered promiscuous mode [ 120.293954][ T6961] vlan0: entered allmulticast mode [ 120.299698][ T6961] hsr_slave_1: entered allmulticast mode [ 120.687533][ T6982] netlink: 'syz.2.292': attribute type 3 has an invalid length. [ 120.840709][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.849171][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.166078][ T7016] netlink: 'syz.1.301': attribute type 21 has an invalid length. [ 121.329325][ T7016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.301'. [ 121.346307][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 121.431430][ T7029] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.303'. [ 121.989238][ T7059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.215428][ T7071] netlink: 'syz.1.315': attribute type 29 has an invalid length. [ 122.501121][ T7092] netlink: 92 bytes leftover after parsing attributes in process `syz.3.320'. [ 122.546683][ T7084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.318'. [ 122.589450][ T7084] tipc: Started in network mode [ 122.594732][ T7084] tipc: Node identity 2612a8ab42d6, cluster identity 4711 [ 122.602060][ T7084] tipc: Enabled bearer , priority 0 [ 122.644003][ T7095] syzkaller0: entered promiscuous mode [ 122.649550][ T7095] syzkaller0: entered allmulticast mode [ 122.746238][ T7084] tipc: Resetting bearer [ 122.800383][ T7106] netlink: 108 bytes leftover after parsing attributes in process `syz.1.323'. [ 122.811409][ T7083] tipc: Resetting bearer [ 122.813855][ T7100] netlink: 'syz.3.321': attribute type 83 has an invalid length. [ 122.849660][ T7083] tipc: Disabling bearer [ 123.220561][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 123.315503][ T7130] netlink: 'syz.4.330': attribute type 33 has an invalid length. [ 123.523729][ T7139] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 123.632130][ T7142] tipc: Enabled bearer , priority 0 [ 123.716610][ T7146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.726038][ T7146] bond1: (slave bond2): making interface the new active one [ 123.735254][ T7146] bond1: (slave bond2): Enslaving as an active interface with an up link [ 123.745803][ T7142] syzkaller0: entered promiscuous mode [ 123.751490][ T7142] syzkaller0: entered allmulticast mode [ 123.827906][ T7161] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 123.933909][ T7161] tipc: Resetting bearer [ 123.965854][ T7164] IPv6: sit1: Disabled Multicast RS [ 123.996623][ T7164] sit1: entered allmulticast mode [ 124.125451][ T7141] tipc: Resetting bearer [ 124.198566][ T7141] tipc: Disabling bearer [ 124.523923][ T5200] udevd[5200]: worker [5849] terminated by signal 33 (Unknown signal 33) [ 124.549570][ T5200] udevd[5200]: worker [5849] failed while handling '/devices/virtual/block/loop2' [ 124.562966][ T7195] netlink: 'syz.1.345': attribute type 29 has an invalid length. [ 124.582210][ T7195] netlink: 'syz.1.345': attribute type 29 has an invalid length. [ 124.615656][ T7195] __nla_validate_parse: 3 callbacks suppressed [ 124.615674][ T7195] netlink: 500 bytes leftover after parsing attributes in process `syz.1.345'. [ 124.679991][ T7199] netlink: 'syz.4.349': attribute type 83 has an invalid length. [ 124.703975][ T7202] lo: entered promiscuous mode [ 124.719727][ T7202] tunl0: entered promiscuous mode [ 124.743992][ T7202] gre0: entered promiscuous mode [ 124.795058][ T7202] gretap0: entered promiscuous mode [ 124.831704][ T7202] erspan0: entered promiscuous mode [ 124.864487][ T7202] ip_vti0: entered promiscuous mode [ 125.267046][ T7225] netlink: 14 bytes leftover after parsing attributes in process `syz.0.357'. [ 125.412874][ T7231] syzkaller1: entered promiscuous mode [ 125.418525][ T7231] syzkaller1: entered allmulticast mode [ 126.421072][ T5841] Bluetooth: hci4: command tx timeout [ 126.469172][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 126.526632][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 126.569368][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.375'. [ 126.769505][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.380'. [ 126.845576][ T7297] netlink: 67 bytes leftover after parsing attributes in process `syz.4.380'. [ 127.021033][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 127.160610][ T7311] macvtap1: entered promiscuous mode [ 127.166220][ T7311] vlan0: entered promiscuous mode [ 127.172357][ T7311] macvtap1: entered allmulticast mode [ 127.179275][ T7311] vlan0: entered allmulticast mode [ 127.185736][ T7311] veth0_vlan: entered allmulticast mode [ 127.220653][ T7313] macvtap2: entered promiscuous mode [ 127.227652][ T7313] macvtap2: entered allmulticast mode [ 127.253823][ T7311] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 127.262350][ T7311] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 127.277189][ T7311] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 127.626696][ T7332] netlink: 68 bytes leftover after parsing attributes in process `syz.3.391'. [ 128.112998][ T7346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.397'. [ 128.225057][ T7354] syzkaller0: entered promiscuous mode [ 128.236304][ T7354] syzkaller0: entered allmulticast mode [ 128.246106][ T7353] tipc: Enabled bearer , priority 0 [ 128.345670][ T7353] tipc: Resetting bearer [ 128.409070][ T7353] tipc: Disabling bearer [ 128.469662][ T7371] bridge3: entered promiscuous mode [ 128.475244][ T7371] bridge3: entered allmulticast mode [ 128.857430][ T7388] ipt_REJECT: ECHOREPLY no longer supported. [ 129.071149][ T7403] block nbd0: not configured, cannot reconfigure [ 129.133516][ T7403] openvswitch: netlink: Key type 119 is out of range max 32 [ 129.326576][ T7408] syz_tun: entered allmulticast mode [ 129.354996][ T7415] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 129.364812][ T7415] netlink: 'syz.3.415': attribute type 7 has an invalid length. [ 129.394896][ T7415] netlink: 'syz.3.415': attribute type 8 has an invalid length. [ 129.434031][ T7418] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 129.467123][ T7407] syz_tun: left allmulticast mode [ 129.948595][ T7436] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.994659][ T7441] __nla_validate_parse: 7 callbacks suppressed [ 129.994677][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 130.223289][ T7449] netlink: 'syz.3.426': attribute type 21 has an invalid length. [ 130.260108][ T7449] netlink: 128 bytes leftover after parsing attributes in process `syz.3.426'. [ 130.296851][ T7449] netlink: 'syz.3.426': attribute type 5 has an invalid length. [ 130.309061][ T7449] netlink: 3 bytes leftover after parsing attributes in process `syz.3.426'. [ 130.331774][ T7449] syz_tun: entered allmulticast mode [ 130.359204][ T7456] syzkaller1: entered promiscuous mode [ 130.365978][ T7456] syzkaller1: entered allmulticast mode [ 130.379836][ T7454] openvswitch: netlink: Unknown nsh attribute 0 [ 130.395583][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.580568][ T7460] macvtap1: entered promiscuous mode [ 130.599699][ T7460] macvtap1: entered allmulticast mode [ 130.609598][ T7464] lo speed is unknown, defaulting to 1000 [ 130.617326][ T7464] lo speed is unknown, defaulting to 1000 [ 130.626544][ T7464] lo speed is unknown, defaulting to 1000 [ 130.640525][ T7464] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.715192][ T7464] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 130.805413][ T7464] lo speed is unknown, defaulting to 1000 [ 130.814173][ T7464] lo speed is unknown, defaulting to 1000 [ 130.822033][ T7464] lo speed is unknown, defaulting to 1000 [ 130.852168][ T7464] lo speed is unknown, defaulting to 1000 [ 130.879728][ T7464] lo speed is unknown, defaulting to 1000 [ 131.083836][ T7480] tipc: Enabled bearer , priority 0 [ 131.097939][ T7484] netlink: 'syz.4.437': attribute type 12 has an invalid length. [ 131.203700][ T7484] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 131.278847][ T7476] tipc: Disabling bearer [ 131.424900][ T7499] syzkaller1: entered promiscuous mode [ 131.430457][ T7499] syzkaller1: entered allmulticast mode [ 131.678858][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 131.719494][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.798485][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.856573][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.971279][ T7527] Illegal XDP return value 186787133 on prog (id 138) dev N/A, expect packet loss! [ 132.140466][ T7535] bond1: entered allmulticast mode [ 132.146363][ T7535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.231892][ T7541] netlink: 56 bytes leftover after parsing attributes in process `syz.4.452'. [ 132.388122][ T7545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.453'. [ 132.415421][ T7547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.455'. [ 132.444130][ T7547] netlink: 32 bytes leftover after parsing attributes in process `syz.2.455'. [ 132.471018][ T7547] netlink: 18 bytes leftover after parsing attributes in process `syz.2.455'. [ 132.513664][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 132.598731][ T7554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.654143][ T2154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.820673][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828622][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.892886][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.946253][ T7575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.045362][ T7575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.074758][ T7575] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 133.096084][ T7575] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 133.117270][ T7587] xt_cgroup: path and classid specified [ 133.165326][ T7585] syzkaller1: entered promiscuous mode [ 133.171314][ T7585] syzkaller1: entered allmulticast mode [ 133.649060][ T7608] 8021q: VLANs not supported on ip6_vti0 [ 133.933650][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.705295][ T7669] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 134.974267][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.119386][ T7681] netlink: 'syz.3.496': attribute type 29 has an invalid length. [ 135.174797][ T7683] __nla_validate_parse: 5 callbacks suppressed [ 135.174815][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 135.231511][ T7683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.324152][ T7683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.666672][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 135.693026][ T2154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.024577][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.101928][ T7719] tunl0: entered promiscuous mode [ 136.114191][ T7719] netlink: 'syz.4.509': attribute type 3 has an invalid length. [ 136.121988][ T7719] netlink: 9 bytes leftover after parsing attributes in process `syz.4.509'. [ 136.268617][ T7725] netlink: 'syz.4.511': attribute type 6 has an invalid length. [ 136.430016][ T7734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.514'. [ 136.455519][ T7740] netlink: 'syz.4.513': attribute type 5 has an invalid length. [ 136.651354][ T7747] netlink: 294 bytes leftover after parsing attributes in process `syz.3.517'. [ 136.661747][ T2154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.676392][ T7747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.716781][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 137.052722][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.108062][ T7767] tipc: Enabled bearer , priority 0 [ 137.132044][ T7767] syzkaller0: entered promiscuous mode [ 137.154635][ T7767] syzkaller0: entered allmulticast mode [ 137.468790][ T7788] tipc: Resetting bearer [ 137.502778][ T7764] tipc: Resetting bearer [ 137.583363][ T7764] tipc: Disabling bearer [ 137.723976][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 137.835648][ T7804] netlink: 'syz.3.533': attribute type 10 has an invalid length. [ 137.864199][ T7803] netlink: 'syz.4.532': attribute type 3 has an invalid length. [ 137.903407][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.911653][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.964578][ T7815] netlink: 17 bytes leftover after parsing attributes in process `syz.1.534'. [ 137.974193][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.981446][ T7804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.990150][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.997387][ T7804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.044524][ T7804] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 138.092951][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.414482][ T5841] Bluetooth: hci0: command tx timeout [ 138.422992][ T7841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.543'. [ 138.602211][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 138.608012][ T7854] netlink: 'syz.4.547': attribute type 29 has an invalid length. [ 138.734275][ T2154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.133609][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.427808][ T7890] IPVS: Scheduler module ip_vs_sip not found [ 139.430304][ T7894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.182237][ T13] net_ratelimit: 3 callbacks suppressed [ 140.182256][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.201374][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.212099][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.223287][ T7947] __nla_validate_parse: 5 callbacks suppressed [ 140.223305][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.578'. [ 140.411135][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 140.453802][ T7960] Bluetooth: MGMT ver 1.23 [ 140.454709][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 141.042816][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.590'. [ 141.108627][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.590'. [ 141.558373][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 141.656155][ T8011] bond3: entered promiscuous mode [ 141.661250][ T8011] bond3: entered allmulticast mode [ 141.693635][ T8011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.770096][ T8013] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 141.816603][ T8020] tipc: Enabled bearer , priority 0 [ 141.826143][ T8016] syzkaller0: entered promiscuous mode [ 141.832137][ T8016] syzkaller0: entered allmulticast mode [ 141.841356][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 142.272728][ T8015] tipc: Resetting bearer [ 142.305041][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 142.336542][ T8015] tipc: Disabling bearer [ 142.554054][ T8048] netlink: 72 bytes leftover after parsing attributes in process `syz.2.605'. [ 142.595101][ T8044] bond1: option mode: invalid value (133) [ 142.605982][ T8044] bond1 (unregistering): Released all slaves [ 142.608904][ T8052] nbd: must specify a device to reconfigure [ 142.744880][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 143.257498][ T8078] veth0: entered promiscuous mode [ 143.281111][ T8077] veth0: left promiscuous mode [ 143.625949][ T8093] bridge1: entered allmulticast mode [ 143.996622][ T8117] IPv6: sit1: Disabled Multicast RS [ 144.017068][ T8117] sit1: entered allmulticast mode [ 144.265220][ T8131] vlan0: entered promiscuous mode [ 144.277352][ T8131] vlan0: entered allmulticast mode [ 144.283957][ T8131] veth0_vlan: entered allmulticast mode [ 144.401349][ T8131] lo speed is unknown, defaulting to 1000 [ 144.422183][ T8133] lo speed is unknown, defaulting to 1000 [ 144.620964][ T8142] netlink: 'syz.0.627': attribute type 9 has an invalid length. [ 145.400365][ T8191] lo speed is unknown, defaulting to 1000 [ 145.532807][ T8194] netlink: 'syz.0.641': attribute type 4 has an invalid length. [ 145.561982][ T8198] __nla_validate_parse: 10 callbacks suppressed [ 145.562001][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.643'. [ 145.943756][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 146.084699][ T8224] netlink: 'syz.4.651': attribute type 2 has an invalid length. [ 146.163203][ T8224] 9: entered promiscuous mode [ 146.293507][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 146.360824][ T8240] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 146.402624][ C1] af_packet: tpacket_rcv: packet too big, clamped from 17 to 4294967272. macoff=96 [ 146.712379][ T8262] netlink: 'syz.2.659': attribute type 1 has an invalid length. [ 146.725151][ T8262] netlink: 228 bytes leftover after parsing attributes in process `syz.2.659'. [ 146.750385][ T8262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.659'. [ 146.810872][ T8265] netlink: 176 bytes leftover after parsing attributes in process `syz.0.661'. [ 146.829308][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.661'. [ 146.840262][ T8265] netlink: 'syz.0.661': attribute type 29 has an invalid length. [ 146.965125][ T8272] netlink: 'syz.0.661': attribute type 29 has an invalid length. [ 147.152321][ T8281] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 147.240001][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 147.254005][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.358561][ T8284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.513943][ T8293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.668'. [ 147.703499][ T8298] sctp: Trying to GSO but underlying device doesn't support it. [ 147.705348][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 147.755743][ T8293] bond5 (unregistering): Released all slaves [ 148.324361][ T8322] netlink: 'syz.0.677': attribute type 29 has an invalid length. [ 148.342251][ T8322] netlink: 'syz.0.677': attribute type 29 has an invalid length. [ 148.547023][ T8330] vlan2: entered promiscuous mode [ 148.563231][ T8330] bridge0: entered promiscuous mode [ 148.793966][ T8338] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 148.821517][ T8338] bond2 (unregistering): Released all slaves [ 149.538338][ T8379] lo speed is unknown, defaulting to 1000 [ 149.910328][ T8395] xt_hashlimit: invalid rate [ 150.242039][ T8406] bridge0: port 3(vlan2) entered blocking state [ 150.270399][ T8406] bridge0: port 3(vlan2) entered disabled state [ 150.286520][ T8406] vlan2: entered allmulticast mode [ 150.297235][ T8406] bridge0: entered allmulticast mode [ 150.320930][ T8406] vlan2: left allmulticast mode [ 150.326324][ T8406] bridge0: left allmulticast mode [ 150.326781][ T8417] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 150.375096][ T8417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.466520][ T8418] bond2: option lp_interval: invalid value (0) [ 150.473034][ T8418] bond2: option lp_interval: allowed values 1 - 2147483647 [ 150.964505][ T8418] bond2 (unregistering): Released all slaves [ 150.995700][ T8419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.076021][ T8419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.118212][ T8428] __nla_validate_parse: 9 callbacks suppressed [ 151.118329][ T8428] netlink: 216 bytes leftover after parsing attributes in process `syz.3.709'. [ 151.134506][ T8417] bond0: Error: Cannot enslave bond to itself. [ 151.172770][ T8425] netlink: 44 bytes leftover after parsing attributes in process `syz.0.708'. [ 151.337760][ T8438] syzkaller0: entered promiscuous mode [ 151.344333][ T8438] syzkaller0: entered allmulticast mode [ 151.921861][ T8477] syzkaller1: entered promiscuous mode [ 151.930414][ T8477] syzkaller1: entered allmulticast mode [ 151.977328][ T8477] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 151.986839][ T8481] netlink: 'syz.3.721': attribute type 3 has an invalid length. [ 152.221406][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 152.240960][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 152.258505][ T8502] xfrm1: entered promiscuous mode [ 152.275615][ T8502] xfrm1: entered allmulticast mode [ 152.288895][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 152.337897][ T8508] can: request_module (can-proto-4) failed. [ 152.440279][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 152.449837][ T8517] tipc: Enabled bearer , priority 0 [ 152.458104][ T8518] syzkaller0: entered promiscuous mode [ 152.464018][ T8518] syzkaller0: entered allmulticast mode [ 152.483557][ T3451] syzkaller0: tun_net_xmit 70 [ 152.488520][ T3451] syzkaller0: tun_net_xmit 70 [ 152.505218][ T8520] tipc: Resetting bearer [ 152.511090][ T8520] syzkaller0: tun_net_xmit 90 [ 152.516034][ T8520] syzkaller0: tun_net_xmit 90 [ 152.561834][ T8515] tipc: Resetting bearer [ 152.580292][ T8528] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 152.605128][ T8515] tipc: Disabling bearer [ 152.664415][ T8528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.699683][ T8534] veth5: entered promiscuous mode [ 152.720950][ T8534] bond2: (slave veth5): Enslaving as an active interface with a down link [ 152.806973][ T8537] tipc: Enabled bearer , priority 0 [ 152.816641][ T8537] syzkaller0: entered promiscuous mode [ 152.822149][ T8537] syzkaller0: entered allmulticast mode [ 152.887006][ T8537] tipc: Resetting bearer [ 152.973277][ T8552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.049203][ T8536] tipc: Resetting bearer [ 153.077491][ T8536] tipc: Disabling bearer [ 153.284781][ T8572] netlink: 'syz.4.749': attribute type 4 has an invalid length. [ 153.296699][ T8563] tipc: Enabled bearer , priority 0 [ 153.338929][ T8563] syzkaller0: entered promiscuous mode [ 153.350232][ T8563] syzkaller0: entered allmulticast mode [ 153.353651][ T8574] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 153.362747][ T8563] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 153.378299][ T24] lo speed is unknown, defaulting to 1000 [ 153.385246][ T24] syz2: Port: 1 Link DOWN [ 153.389070][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 153.406404][ T8577] syz_tun (unregistering): left allmulticast mode [ 153.432222][ T8562] tipc: Resetting bearer [ 153.478618][ T8562] tipc: Disabling bearer [ 153.551045][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 153.605538][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 153.685663][ T8590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.738354][ T8595] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 153.991922][ T8609] IPVS: set_ctl: invalid protocol: 135 172.30.0.1:20002 [ 154.053503][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 154.349402][ T8627] openvswitch: netlink: Message has 6 unknown bytes. [ 154.360753][ T8627] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 154.404129][ T8627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.838623][ T8654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.798368][ T8720] tipc: Enabling of bearer rejected, failed to enable media [ 155.815909][ T2154] IPVS: starting estimator thread 0... [ 155.912705][ T8725] IPVS: using max 30 ests per chain, 72000 per kthread [ 156.219677][ T8742] __nla_validate_parse: 7 callbacks suppressed [ 156.219696][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 156.291132][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 156.323968][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 156.519842][ T8761] netlink: 'syz.3.801': attribute type 33 has an invalid length. [ 156.535433][ T8761] netlink: 152 bytes leftover after parsing attributes in process `syz.3.801'. [ 156.602199][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 156.679402][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 156.800572][ T8774] netlink: 'syz.2.804': attribute type 19 has an invalid length. [ 157.019285][ T8782] netlink: 156 bytes leftover after parsing attributes in process `syz.1.806'. [ 157.295916][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.811'. [ 157.376938][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 157.618401][ T8822] syzkaller0: entered promiscuous mode [ 157.625989][ T8822] syzkaller0: entered allmulticast mode [ 157.697390][ T8828] netlink: 'syz.2.818': attribute type 23 has an invalid length. [ 159.244613][ T8862] netlink: 'syz.1.827': attribute type 13 has an invalid length. [ 159.276756][ T8869] netlink: 'syz.1.827': attribute type 13 has an invalid length. [ 159.282645][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 159.400267][ T8862] netlink: 'syz.1.827': attribute type 13 has an invalid length. [ 159.402804][ T8869] netlink: 'syz.1.827': attribute type 13 has an invalid length. [ 159.590261][ T8866] "syz.3.828" (8866) uses obsolete ecb(arc4) skcipher [ 159.609520][ T8881] tipc: Enabled bearer , priority 0 [ 159.651974][ T8881] syzkaller0: entered promiscuous mode [ 159.682564][ T8881] syzkaller0: entered allmulticast mode [ 159.816245][ T8891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.941002][ T8881] tipc: Resetting bearer [ 159.950908][ T8895] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 159.959630][ T8879] tipc: Resetting bearer [ 159.994667][ T8879] tipc: Disabling bearer [ 160.022717][ T8895] netlink: 'syz.1.832': attribute type 29 has an invalid length. [ 160.062901][ T8898] netlink: 'syz.1.832': attribute type 29 has an invalid length. [ 160.790024][ T8950] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 161.134422][ T8966] syzkaller0: entered promiscuous mode [ 161.147626][ T8966] syzkaller0: entered allmulticast mode [ 161.208284][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.234076][ T8970] bridge_slave_1: left allmulticast mode [ 161.253363][ T8970] bridge_slave_1: left promiscuous mode [ 161.274623][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.289556][ T8970] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 161.825217][ T8996] bond1: entered allmulticast mode [ 161.830863][ T8996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.833017][ T8994] nbd0: detected capacity change from 0 to 127 [ 161.869710][ T8996] bridge0: port 3(bond1) entered blocking state [ 161.894266][ T8996] bridge0: port 3(bond1) entered disabled state [ 161.955087][ T8996] bond1: entered promiscuous mode [ 162.037479][ T5841] block nbd0: Receive control failed (result -104) [ 162.120047][ T9024] __nla_validate_parse: 9 callbacks suppressed [ 162.120064][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.861'. [ 162.290771][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 162.328520][ T9034] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.862'. [ 162.338449][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.863'. [ 162.347564][ T9034] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 162.638144][ T9050] x_tables: duplicate underflow at hook 1 [ 162.776579][ T9062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.855731][ T9062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.900001][ T9068] validate_nla: 1 callbacks suppressed [ 162.900020][ T9068] netlink: 'syz.4.875': attribute type 4 has an invalid length. [ 163.085995][ T9075] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 163.093976][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 163.107158][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 164.324214][ T9144] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 164.354303][ T9147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'. [ 164.364163][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'. [ 164.532641][ T9154] netlink: 244 bytes leftover after parsing attributes in process `syz.3.891'. [ 164.584950][ T9160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.893'. [ 164.651113][ T9160] tipc: Enabling of bearer rejected, failed to enable media [ 164.758286][ T9167] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 164.825032][ T9168] veth3: entered promiscuous mode [ 164.830637][ T9168] bridge4: port 1(veth3) entered blocking state [ 164.858591][ T9168] bridge4: port 1(veth3) entered disabled state [ 164.877157][ T9168] veth3: entered allmulticast mode [ 164.958623][ T9167] veth5: entered promiscuous mode [ 164.983920][ T9167] bridge4: port 2(veth5) entered blocking state [ 165.003747][ T9167] bridge4: port 2(veth5) entered disabled state [ 165.017322][ T9167] veth5: entered allmulticast mode [ 165.141083][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.148930][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.765648][ T9221] sctp: [Deprecated]: syz.0.908 (pid 9221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.765648][ T9221] Use struct sctp_sack_info instead [ 165.930398][ T9228] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 166.259593][ T9238] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 166.271577][ T9241] batadv0: left promiscuous mode [ 166.281676][ T9253] xt_CONNSECMARK: invalid mode: 0 [ 166.288987][ T9253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.299105][ T9241] batadv0: left allmulticast mode [ 166.406423][ T9255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.469012][ T9255] syzkaller0: entered promiscuous mode [ 166.475876][ T9255] syzkaller0: entered allmulticast mode [ 166.508522][ T9259] tipc: Enabled bearer , priority 0 [ 166.590353][ T9265] veth3: entered allmulticast mode [ 166.598939][ T9259] syzkaller0: entered promiscuous mode [ 166.606551][ T9259] syzkaller0: entered allmulticast mode [ 166.696942][ T9256] tipc: Resetting bearer [ 166.750092][ T9256] tipc: Disabling bearer [ 166.990203][ T9277] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 167.032897][ T49] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.048081][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.097515][ T49] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.128930][ T49] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 167.178823][ T9302] netem: incorrect gi model size [ 167.185112][ T9302] netem: change failed [ 167.200520][ T9305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 167.262107][ T9312] syzkaller0: entered promiscuous mode [ 167.269546][ T9312] syzkaller0: entered allmulticast mode [ 167.456950][ T9319] __nla_validate_parse: 13 callbacks suppressed [ 167.456971][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 167.557284][ T9319] : entered promiscuous mode [ 167.579299][ T9328] ip6gre1: entered allmulticast mode [ 167.613773][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 167.646832][ T9327] vlan3: entered promiscuous mode [ 167.663258][ T9327] bridge0: entered promiscuous mode [ 167.709711][ T9337] netlink: 104 bytes leftover after parsing attributes in process `syz.2.940'. [ 167.905196][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 167.970298][ T9355] netlink: 'syz.3.946': attribute type 11 has an invalid length. [ 167.992879][ T9355] netlink: 228 bytes leftover after parsing attributes in process `syz.3.946'. [ 168.318585][ T9376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.404655][ T9378] bond0: (slave bridge0): Releasing backup interface [ 168.416181][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.450508][ T9381] netlink: 64 bytes leftover after parsing attributes in process `syz.3.954'. [ 168.482290][ T9378] bridge_slave_0: left allmulticast mode [ 168.523615][ T9378] bridge_slave_0: left promiscuous mode [ 168.547215][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.572968][ T9378] bond0: (slave bridge_slave_1): Releasing backup interface [ 168.589035][ T9378] bond0: (slave bond_slave_0): Releasing backup interface [ 168.608675][ T9378] bond0: (slave bond_slave_1): Releasing backup interface [ 168.633054][ T9392] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2771 [ 168.648814][ T9378] team0: Port device team_slave_0 removed [ 168.670729][ T9378] team0: Port device team_slave_1 removed [ 168.677765][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.694734][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.707529][ T9378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.743604][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.960'. [ 168.751693][ T9381] team0: Mode changed to "loadbalance" [ 168.904868][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 168.925977][ T9403] tipc: Failed to remove unknown binding: 66,1,1/0:4138838141/4138838143 [ 168.947815][ T9407] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.964'. [ 169.014060][ T9409] netlink: 'syz.4.965': attribute type 29 has an invalid length. [ 169.024351][ T9409] netlink: 'syz.4.965': attribute type 29 has an invalid length. [ 169.103886][ T9412] netlink: 'syz.3.964': attribute type 27 has an invalid length. [ 169.139173][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.964'. [ 169.148715][ T9413] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 169.179641][ T9412] lo: entered promiscuous mode [ 169.189084][ T9413] netlink: 'syz.1.966': attribute type 2 has an invalid length. [ 169.213817][ T9412] tunl0: entered promiscuous mode [ 169.233872][ T9412] gre0: entered promiscuous mode [ 169.259656][ T9413] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 169.260001][ T9412] gretap0: entered promiscuous mode [ 169.311586][ T9412] erspan0: entered promiscuous mode [ 169.361797][ T9412] ip_vti0: entered promiscuous mode [ 169.370343][ T9412] ip6_vti0: entered promiscuous mode [ 169.381029][ T9412] sit0: entered promiscuous mode [ 169.395485][ T9412] ip6tnl0: entered promiscuous mode [ 169.407940][ T9412] ip6gre0: entered promiscuous mode [ 169.427870][ T9412] ip6gretap0: entered promiscuous mode [ 169.447941][ T9412] vcan0: entered promiscuous mode [ 169.455962][ T9412] bond0: entered promiscuous mode [ 169.466179][ T9412] team0: entered promiscuous mode [ 169.476351][ T9412] nlmon0: entered promiscuous mode [ 169.501158][ T9412] caif0: entered promiscuous mode [ 169.507351][ T9412] batadv0: entered promiscuous mode [ 169.521155][ T9412] vxcan0: entered promiscuous mode [ 169.528433][ T9412] vxcan1: entered promiscuous mode [ 169.538702][ T9412] veth0: entered promiscuous mode [ 169.548584][ T9412] veth1: entered promiscuous mode [ 169.563080][ T9412] wg0: entered promiscuous mode [ 169.576221][ T9412] wg1: entered promiscuous mode [ 169.585412][ T9412] wg2: entered promiscuous mode [ 169.603394][ T9412] veth0_to_bridge: entered promiscuous mode [ 169.614099][ T9412] bridge_slave_0: entered promiscuous mode [ 169.625609][ T9412] veth1_to_bridge: entered promiscuous mode [ 169.637846][ T9412] bridge_slave_1: entered promiscuous mode [ 169.644659][ T9412] veth0_to_bond: entered promiscuous mode [ 169.654118][ T9412] bond_slave_0: entered promiscuous mode [ 169.662701][ T9412] veth1_to_bond: entered promiscuous mode [ 169.674015][ T9412] bond_slave_1: entered promiscuous mode [ 169.680154][ T9412] veth0_to_team: entered promiscuous mode [ 169.693135][ T9412] team_slave_0: entered promiscuous mode [ 169.699479][ T9412] veth1_to_team: entered promiscuous mode [ 169.712092][ T9412] team_slave_1: entered promiscuous mode [ 169.718873][ T9412] veth0_to_batadv: entered promiscuous mode [ 169.730153][ T9412] batadv_slave_0: entered promiscuous mode [ 169.743610][ T9412] xfrm0: entered promiscuous mode [ 169.752109][ T9412] veth0_to_hsr: entered promiscuous mode [ 169.769026][ T9412] veth1_to_hsr: entered promiscuous mode [ 169.791892][ T9412] : entered promiscuous mode [ 169.803162][ T9412] veth1_virt_wifi: entered promiscuous mode [ 169.815136][ T9412] veth0_virt_wifi: entered promiscuous mode [ 169.826558][ T9412] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 169.852016][ T9412] macvtap0: entered promiscuous mode [ 169.866950][ T9412] macsec0: entered promiscuous mode [ 169.877639][ T9412] geneve0: entered promiscuous mode [ 169.891781][ T9412] geneve1: entered promiscuous mode [ 169.905444][ T9412] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 169.919517][ T9412] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 169.931965][ T9412] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 169.950991][ T9412] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 169.981063][ T9412] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 170.004429][ T9412] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 170.015195][ T9412] bridge1: entered promiscuous mode [ 170.024834][ T9412] dvmrp0: entered promiscuous mode [ 170.035035][ T9412] syztnl1: entered promiscuous mode [ 170.041727][ T9412] bridge3: entered promiscuous mode [ 170.057702][ T9412] vlan1: entered promiscuous mode [ 170.064557][ T9412] bridge4: entered promiscuous mode [ 170.070519][ T9412] vlan0: left allmulticast mode [ 170.080312][ T9412] hsr_slave_1: left allmulticast mode [ 170.087379][ T9412] macvtap1: left allmulticast mode [ 170.095088][ T9412] bond1: entered promiscuous mode [ 170.102013][ T9412] macsec1: entered promiscuous mode [ 170.107994][ T9412] bridge5: entered promiscuous mode [ 170.114768][ T9412] bridge6: entered promiscuous mode [ 170.123697][ T9412] veth2: entered promiscuous mode [ 170.129039][ T9412] veth3: entered promiscuous mode [ 170.135317][ T9412] bond2: entered promiscuous mode [ 170.143447][ T9412] veth4: entered promiscuous mode [ 170.151219][ T9412] bridge7: entered promiscuous mode [ 170.156939][ T9412] vlan2: entered promiscuous mode [ 170.163871][ T9412] bridge8: entered promiscuous mode [ 170.172830][ T9412] gre1: entered promiscuous mode [ 170.178078][ T9412] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 170.236994][ T9421] bridge2: entered promiscuous mode [ 170.242956][ T9421] bridge2: entered allmulticast mode [ 170.292342][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.326767][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.371539][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.406881][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.485483][ T9449] tipc: Enabled bearer , priority 0 [ 170.508118][ T9449] syzkaller0: entered promiscuous mode [ 170.528248][ T9449] syzkaller0: entered allmulticast mode [ 170.569875][ T9449] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 170.624507][ T9452] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 170.634892][ T9452] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 170.665367][ T9449] tipc: Resetting bearer [ 170.752210][ T9448] tipc: Resetting bearer [ 170.825381][ T9448] tipc: Disabling bearer [ 170.854521][ T9474] tipc: Enabled bearer , priority 0 [ 170.872147][ T9474] syzkaller0: entered promiscuous mode [ 170.883639][ T9474] syzkaller0: entered allmulticast mode [ 170.895403][ T9476] lo speed is unknown, defaulting to 1000 [ 170.918372][ T9474] tipc: Resetting bearer [ 170.936669][ T9473] tipc: Resetting bearer [ 170.954606][ T9473] tipc: Disabling bearer [ 170.993583][ T9479] IPv6: sit1: Disabled Multicast RS [ 171.000739][ T9479] sit1: entered allmulticast mode [ 171.242437][ T9490] nbd: couldn't find device at index 61440 [ 171.727339][ T9511] tipc: Enabled bearer , priority 0 [ 171.771405][ T9511] syzkaller0: entered promiscuous mode [ 171.813302][ T9511] syzkaller0: entered allmulticast mode [ 172.075179][ T9509] tipc: Resetting bearer [ 172.128557][ T9509] tipc: Disabling bearer [ 172.403755][ T9559] netlink: 'syz.1.1007': attribute type 32 has an invalid length. [ 172.464954][ T9559] bond2: Setting coupled_control to off (0) [ 172.629363][ T9572] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 172.669323][ T9574] syzkaller1: entered promiscuous mode [ 172.682256][ T9574] syzkaller1: entered allmulticast mode [ 172.886192][ T9584] : entered promiscuous mode [ 172.936571][ T9591] __nla_validate_parse: 10 callbacks suppressed [ 172.936590][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 173.053615][ T9594] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20003 [ 173.057924][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 173.098658][ T9594] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20003 [ 173.152644][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.189247][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.200818][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.209986][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.264363][ T9610] netlink: 'syz.3.1025': attribute type 11 has an invalid length. [ 173.294633][ T9610] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.1025'. [ 173.441542][ T9620] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1028'. [ 173.499843][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1029'. [ 173.510395][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1029'. [ 173.640360][ T9629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.641775][ T9630] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 174.130163][ T9654] bond2: (slave bond_slave_1): Device is not our slave [ 174.150274][ T9654] bond2: option active_slave: invalid value (bond_slave_1) [ 174.211652][ T9654] bond2 (unregistering): Released all slaves [ 174.280574][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 174.289784][ T9667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 174.615823][ T9682] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1047'. [ 174.723800][ T9686] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 174.883044][ T9697] netlink: 'syz.3.1051': attribute type 10 has an invalid length. [ 174.961521][ T9699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.044185][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 175.072676][ T9702] bond1: left promiscuous mode [ 175.077819][ T9702] bridge0: port 3(bond1) entered disabled state [ 175.144780][ T9702] bridge_slave_1: left allmulticast mode [ 175.151223][ T9719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.179047][ T9702] bridge_slave_1: left promiscuous mode [ 175.208628][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.261180][ T9702] bridge_slave_0: left allmulticast mode [ 175.280302][ T9702] bridge_slave_0: left promiscuous mode [ 175.301983][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.533434][ T9737] tipc: Enabled bearer , priority 0 [ 175.541101][ T9737] syzkaller0: entered promiscuous mode [ 175.547311][ T9737] syzkaller0: entered allmulticast mode [ 175.589550][ T9737] tipc: Resetting bearer [ 175.727088][ T9730] tipc: Resetting bearer [ 175.747768][ T9730] tipc: Disabling bearer [ 176.106387][ T9773] sctp: [Deprecated]: syz.4.1068 (pid 9773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.106387][ T9773] Use struct sctp_sack_info instead [ 176.180943][ T9778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 176.311315][ T9778] Timeout policy `syz1' can only be used by L3 protocol number 35119 [ 176.404244][ T9793] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 176.411613][ T9793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.436253][ T9798] netlink: 'syz.2.1075': attribute type 12 has an invalid length. [ 176.478182][ T9798] netlink: 'syz.2.1075': attribute type 12 has an invalid length. [ 176.844365][ T9836] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 176.854785][ T9806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.069382][ T9852] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 177.568301][ T9882] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 177.767555][ T9889] syzkaller0: entered promiscuous mode [ 177.773904][ T9889] syzkaller0: entered allmulticast mode [ 178.040517][ T9903] __nla_validate_parse: 13 callbacks suppressed [ 178.040536][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1104'. [ 178.074608][ T9904] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1102'. [ 178.193151][ T9910] tap0: tun_chr_ioctl cmd 2148553947 [ 178.332762][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 178.352204][ T9919] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1109'. [ 178.381992][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 178.441802][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'. [ 178.493368][ T9927] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1112'. [ 178.621435][ T9938] syzkaller0: entered promiscuous mode [ 178.627308][ T9938] syzkaller0: entered allmulticast mode [ 178.632907][ T9934] Cannot find add_set index 0 as target [ 178.670867][ T9937] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 178.734263][ T9937] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 178.744262][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 178.763515][ T9937] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 178.777826][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 178.897019][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 179.609484][ T9999] netlink: 'syz.4.1133': attribute type 29 has an invalid length. [ 179.638429][ T9999] netlink: 'syz.4.1133': attribute type 29 has an invalid length. [ 179.739940][T10010] IPVS: Unknown mcast interface: pim6reg1 [ 179.929453][T10020] TCP: TCP_TX_DELAY enabled [ 180.014130][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.046689][T10024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.114065][T10030] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 180.119156][T10032] IPVS: sync thread started: state = MASTER, mcast_ifn = vxcan1, syncid = 0, id = 0 [ 180.122753][T10030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.532442][T10047] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 180.609406][T10056] openvswitch: netlink: EtherType 53b is less than min 600 [ 180.659814][T10047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.721774][T10051] lo: left promiscuous mode [ 180.727379][T10051] tunl0: left promiscuous mode [ 180.732669][T10051] gre0: left promiscuous mode [ 180.738333][T10051] gretap0: left promiscuous mode [ 180.743976][T10051] erspan0: left promiscuous mode [ 180.749230][T10051] ip_vti0: left promiscuous mode [ 180.756416][T10051] ip6_vti0: left promiscuous mode [ 180.761723][T10051] sit0: left promiscuous mode [ 180.768996][T10051] ip6tnl0: left promiscuous mode [ 180.817182][T10051] ip6gre0: left promiscuous mode [ 180.855576][T10051] ip6gretap0: left promiscuous mode [ 180.874789][T10051] vcan0: left promiscuous mode [ 180.881216][T10051] bond0: left promiscuous mode [ 180.902922][T10051] team0: left promiscuous mode [ 180.929087][T10051] nlmon0: left promiscuous mode [ 180.959244][T10051] batadv0: left promiscuous mode [ 180.969882][T10051] vxcan0: left promiscuous mode [ 181.004532][T10051] vxcan1: left promiscuous mode [ 181.030049][T10051] veth0: left promiscuous mode [ 181.045134][T10051] veth1: left promiscuous mode [ 181.050204][T10051] wg0: left promiscuous mode [ 181.058330][T10051] wg1: left promiscuous mode [ 181.067566][T10051] wg2: left promiscuous mode [ 181.087157][T10051] veth0_to_bridge: left promiscuous mode [ 181.104488][T10051] bridge_slave_0: left promiscuous mode [ 181.120193][T10051] veth1_to_bridge: left promiscuous mode [ 181.142157][T10051] bridge_slave_1: left promiscuous mode [ 181.161475][T10051] veth0_to_bond: left promiscuous mode [ 181.171240][T10051] bond_slave_0: left promiscuous mode [ 181.180866][T10051] veth1_to_bond: left promiscuous mode [ 181.190378][T10051] bond_slave_1: left promiscuous mode [ 181.196455][T10051] veth0_to_team: left promiscuous mode [ 181.202349][T10051] team_slave_0: left promiscuous mode [ 181.209975][T10051] veth1_to_team: left promiscuous mode [ 181.224684][T10051] team_slave_1: left promiscuous mode [ 181.230452][T10051] veth0_to_batadv: left promiscuous mode [ 181.237004][T10051] batadv_slave_0: left promiscuous mode [ 181.243729][T10051] xfrm0: left promiscuous mode [ 181.248960][T10051] veth0_to_hsr: left promiscuous mode [ 181.255365][T10051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.523844][T10102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.531130][T10102] IPv6: NLM_F_CREATE should be set when creating new route [ 181.538464][T10102] IPv6: NLM_F_CREATE should be set when creating new route [ 181.545737][T10102] IPv6: NLM_F_CREATE should be set when creating new route [ 181.570407][T10105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.446983][T10161] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 182.491688][T10162] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 182.514064][T10161] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 182.528488][T10161] gretap1: entered promiscuous mode [ 182.550457][T10161] gretap1: entered allmulticast mode [ 182.861671][T10177] syzkaller1: entered promiscuous mode [ 182.867282][T10177] syzkaller1: entered allmulticast mode [ 182.971268][T10181] sctp: [Deprecated]: syz.4.1182 (pid 10181) Use of int in maxseg socket option. [ 182.971268][T10181] Use struct sctp_assoc_value instead [ 183.131403][T10188] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 183.165500][T10188] __nla_validate_parse: 13 callbacks suppressed [ 183.165520][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 183.181502][T10191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1184'. [ 183.345844][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1185'. [ 183.540805][T10212] x_tables: duplicate underflow at hook 2 [ 183.547974][T10212] sctp: [Deprecated]: syz.0.1189 (pid 10212) Use of int in maxseg socket option. [ 183.547974][T10212] Use struct sctp_assoc_value instead [ 183.554262][T10205] tipc: Enabled bearer , priority 0 [ 183.589889][T10205] tipc: Disabling bearer [ 183.589894][T10196] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.607399][T10212] 8021q: VLANs not supported on gre0 [ 184.090069][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 184.126786][T10243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.175687][T10243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.642155][T10275] xt_cgroup: invalid path, errno=-2 [ 184.659622][T10277] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1204'. [ 184.693231][T10272] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 184.725630][T10272] bond4 (unregistering): Released all slaves [ 184.944293][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1208'. [ 185.069992][T10296] netlink: 'syz.3.1209': attribute type 8 has an invalid length. [ 185.319034][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 185.536067][T10314] syzkaller1: entered promiscuous mode [ 185.541745][T10314] syzkaller1: entered allmulticast mode [ 185.868994][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 185.920962][T10330] netem: change failed [ 186.097725][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 186.111010][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 186.129693][T10337] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 186.225482][T10340] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 186.236880][T10340] v: renamed from vlan0 (while UP) [ 188.178928][T10372] xt_TCPMSS: Only works on TCP SYN packets [ 188.252625][ T5841] Bluetooth: hci0: command tx timeout [ 192.334383][ T25] block nbd0: Possible stuck request ffff888024b9e000: control (read@0,1024B). Runtime 30 seconds [ 192.345689][ T25] block nbd0: Possible stuck request ffff888024b9e1c0: control (read@1024,1024B). Runtime 30 seconds [ 192.356720][ T25] block nbd0: Possible stuck request ffff888024b9e380: control (read@2048,1024B). Runtime 30 seconds [ 192.367887][ T25] block nbd0: Possible stuck request ffff888024b9e540: control (read@3072,1024B). Runtime 30 seconds [ 194.256180][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.262652][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.313190][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.321893][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.329543][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.339932][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.348326][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.410304][T10376] lo speed is unknown, defaulting to 1000 [ 201.419714][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.428349][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.438063][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.446247][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.455859][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.523565][ T5150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 201.526730][T10378] lo speed is unknown, defaulting to 1000 [ 201.539798][ T5150] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 201.547986][ T5150] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 201.556163][ T5150] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 201.565144][ T5150] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.698157][T10380] lo speed is unknown, defaulting to 1000 [ 201.768952][T10376] chnl_net:caif_netlink_parms(): no params data found [ 201.887857][T10378] chnl_net:caif_netlink_parms(): no params data found [ 201.966031][T10376] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.973514][T10376] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.980676][T10376] bridge_slave_0: entered allmulticast mode [ 201.988575][T10376] bridge_slave_0: entered promiscuous mode [ 202.018318][T10376] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.025804][T10376] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.033196][T10376] bridge_slave_1: entered allmulticast mode [ 202.040423][T10376] bridge_slave_1: entered promiscuous mode [ 202.137183][T10376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.178915][T10376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.204784][T10378] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.211913][T10378] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.220216][T10378] bridge_slave_0: entered allmulticast mode [ 202.227822][T10378] bridge_slave_0: entered promiscuous mode [ 202.236229][T10378] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.243699][T10378] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.250922][T10378] bridge_slave_1: entered allmulticast mode [ 202.258851][T10378] bridge_slave_1: entered promiscuous mode [ 202.309408][T10376] team0: Port device team_slave_0 added [ 202.315733][T10380] chnl_net:caif_netlink_parms(): no params data found [ 202.329567][T10378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.340647][T10376] team0: Port device team_slave_1 added [ 202.370638][T10378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.427801][T10376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.434812][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.462552][T10376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.474986][T10376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.481959][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.508384][T10376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.533478][T10378] team0: Port device team_slave_0 added [ 202.552692][T10378] team0: Port device team_slave_1 added [ 202.611639][T10378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.618790][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.645404][T10378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.690559][T10378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.697669][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.725064][T10378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.754986][T10376] hsr_slave_0: entered promiscuous mode [ 202.761521][T10376] hsr_slave_1: entered promiscuous mode [ 202.769374][T10376] debugfs: 'hsr0' already exists in 'hsr' [ 202.775634][T10376] Cannot create hsr debugfs directory [ 202.787924][T10380] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.795352][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.802705][T10380] bridge_slave_0: entered allmulticast mode [ 202.809816][T10380] bridge_slave_0: entered promiscuous mode [ 202.819024][T10380] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.826359][T10380] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.834783][T10380] bridge_slave_1: entered allmulticast mode [ 202.841905][T10380] bridge_slave_1: entered promiscuous mode [ 202.982631][T10380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.998185][T10378] hsr_slave_0: entered promiscuous mode [ 203.006427][T10378] hsr_slave_1: entered promiscuous mode [ 203.015310][T10378] debugfs: 'hsr0' already exists in 'hsr' [ 203.021068][T10378] Cannot create hsr debugfs directory [ 203.030981][T10380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.157169][T10380] team0: Port device team_slave_0 added [ 203.189680][T10380] team0: Port device team_slave_1 added [ 203.240510][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 203.249604][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 203.257812][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 203.266519][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 203.277339][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 203.330642][T10380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.338144][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.365797][T10380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.373017][ T5841] Bluetooth: hci5: command tx timeout [ 203.378747][T10380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.390028][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.416394][T10380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.519948][T10380] hsr_slave_0: entered promiscuous mode [ 203.527112][T10380] hsr_slave_1: entered promiscuous mode [ 203.532655][ T5841] Bluetooth: hci6: command tx timeout [ 203.539676][T10380] debugfs: 'hsr0' already exists in 'hsr' [ 203.545651][T10380] Cannot create hsr debugfs directory [ 203.582720][T10401] lo speed is unknown, defaulting to 1000 [ 203.612692][ T5841] Bluetooth: hci7: command tx timeout [ 203.973932][T10401] chnl_net:caif_netlink_parms(): no params data found [ 204.088224][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.103020][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.110266][T10401] bridge_slave_0: entered allmulticast mode [ 204.118260][T10401] bridge_slave_0: entered promiscuous mode [ 204.128767][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.136199][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.143995][T10401] bridge_slave_1: entered allmulticast mode [ 204.151904][T10401] bridge_slave_1: entered promiscuous mode [ 204.198892][T10401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.213590][T10401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.260927][T10401] team0: Port device team_slave_0 added [ 204.270121][T10401] team0: Port device team_slave_1 added [ 204.282040][ T5150] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 204.295312][ T5150] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 204.304907][ T5150] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 204.314797][ T5150] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 204.322883][ T5150] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 204.335022][T10401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.341992][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.368213][T10401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.381487][T10401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.388529][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.417324][T10401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.480672][T10401] hsr_slave_0: entered promiscuous mode [ 204.487377][T10401] hsr_slave_1: entered promiscuous mode [ 204.495322][T10401] debugfs: 'hsr0' already exists in 'hsr' [ 204.501080][T10401] Cannot create hsr debugfs directory [ 204.508536][T10410] lo speed is unknown, defaulting to 1000 [ 204.793301][T10410] chnl_net:caif_netlink_parms(): no params data found [ 204.877049][T10410] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.884380][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.891836][T10410] bridge_slave_0: entered allmulticast mode [ 204.899431][T10410] bridge_slave_0: entered promiscuous mode [ 204.907559][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.915176][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.924147][T10410] bridge_slave_1: entered allmulticast mode [ 204.931518][T10410] bridge_slave_1: entered promiscuous mode [ 204.967429][T10410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.979159][T10410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.013398][T10410] team0: Port device team_slave_0 added [ 205.022418][T10410] team0: Port device team_slave_1 added [ 205.052041][T10410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.059937][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.086145][T10410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.098379][T10410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.105974][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.138084][T10410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.184433][T10410] hsr_slave_0: entered promiscuous mode [ 205.190841][T10410] hsr_slave_1: entered promiscuous mode [ 205.197456][T10410] debugfs: 'hsr0' already exists in 'hsr' [ 205.203401][T10410] Cannot create hsr debugfs directory [ 205.372795][ T5841] Bluetooth: hci8: command tx timeout [ 205.452761][ T5841] Bluetooth: hci5: command tx timeout [ 205.612685][ T5841] Bluetooth: hci6: command tx timeout [ 205.692702][ T5841] Bluetooth: hci7: command tx timeout [ 206.412922][ T5841] Bluetooth: hci9: command tx timeout [ 207.452685][ T5841] Bluetooth: hci8: command tx timeout [ 207.532715][ T5841] Bluetooth: hci5: command tx timeout [ 207.693096][ T5150] Bluetooth: hci6: command tx timeout [ 207.772682][ T5841] Bluetooth: hci7: command tx timeout [ 208.492891][ T5841] Bluetooth: hci9: command tx timeout [ 209.532892][ T5841] Bluetooth: hci8: command tx timeout [ 209.615152][ T5841] Bluetooth: hci5: command tx timeout [ 209.773407][ T5841] Bluetooth: hci6: command tx timeout [ 209.853539][ T5841] Bluetooth: hci7: command tx timeout [ 210.572625][ T5841] Bluetooth: hci9: command tx timeout [ 211.612659][ T5841] Bluetooth: hci8: command tx timeout [ 212.652672][ T5841] Bluetooth: hci9: command tx timeout [ 216.818762][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 216.819312][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 216.824947][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 222.417045][ T25] block nbd0: Possible stuck request ffff888024b9e000: control (read@0,1024B). Runtime 60 seconds [ 222.428188][ T25] block nbd0: Possible stuck request ffff888024b9e1c0: control (read@1024,1024B). Runtime 60 seconds [ 222.439514][ T25] block nbd0: Possible stuck request ffff888024b9e380: control (read@2048,1024B). Runtime 60 seconds [ 222.451045][ T25] block nbd0: Possible stuck request ffff888024b9e540: control (read@3072,1024B). Runtime 60 seconds [ 222.854197][ T5200] udevd[5200]: worker [7424] /devices/virtual/block/nbd0 is taking a long time [ 252.493998][ T25] block nbd0: Possible stuck request ffff888024b9e000: control (read@0,1024B). Runtime 90 seconds [ 252.504732][ T25] block nbd0: Possible stuck request ffff888024b9e1c0: control (read@1024,1024B). Runtime 90 seconds [ 252.515785][ T25] block nbd0: Possible stuck request ffff888024b9e380: control (read@2048,1024B). Runtime 90 seconds [ 252.526719][ T25] block nbd0: Possible stuck request ffff888024b9e540: control (read@3072,1024B). Runtime 90 seconds [ 255.699360][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.705776][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.149618][ T5843] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 261.158034][ T5843] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 261.166525][ T5843] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 261.176493][ T5843] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 261.184392][ T5843] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 261.220488][T10425] lo speed is unknown, defaulting to 1000 [ 261.362697][T10425] chnl_net:caif_netlink_parms(): no params data found [ 261.450901][T10425] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.459024][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.466470][T10425] bridge_slave_0: entered allmulticast mode [ 261.474091][T10425] bridge_slave_0: entered promiscuous mode [ 261.482175][T10425] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.490184][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.497769][T10425] bridge_slave_1: entered allmulticast mode [ 261.506661][T10425] bridge_slave_1: entered promiscuous mode [ 261.540895][T10425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.556168][T10425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.592358][T10425] team0: Port device team_slave_0 added [ 261.600302][T10425] team0: Port device team_slave_1 added [ 261.634308][T10425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.641284][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.669425][T10425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.683776][T10425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.690734][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.717156][T10425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.766811][T10425] hsr_slave_0: entered promiscuous mode [ 261.773667][T10425] hsr_slave_1: entered promiscuous mode [ 261.779917][T10425] debugfs: 'hsr0' already exists in 'hsr' [ 261.787638][T10425] Cannot create hsr debugfs directory [ 262.334167][ T5843] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 262.344932][ T5843] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 262.355275][ T5843] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 262.374628][ T5843] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 262.383536][ T5843] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 262.409796][ T5843] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 262.419715][ T5843] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 262.428496][ T5843] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 262.437352][ T5843] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 262.446435][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 262.507894][T10435] lo speed is unknown, defaulting to 1000 [ 262.519484][T10437] lo speed is unknown, defaulting to 1000 [ 262.760310][T10435] chnl_net:caif_netlink_parms(): no params data found [ 262.825454][T10437] chnl_net:caif_netlink_parms(): no params data found [ 262.909551][T10435] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.917221][T10435] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.924732][T10435] bridge_slave_0: entered allmulticast mode [ 262.932107][T10435] bridge_slave_0: entered promiscuous mode [ 262.948412][T10435] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.955725][T10435] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.963081][T10435] bridge_slave_1: entered allmulticast mode [ 262.970336][T10435] bridge_slave_1: entered promiscuous mode [ 263.067082][T10435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.081785][T10435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.092055][T10437] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.100072][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.107811][T10437] bridge_slave_0: entered allmulticast mode [ 263.116712][T10437] bridge_slave_0: entered promiscuous mode [ 263.143637][T10437] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.150888][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.159027][T10437] bridge_slave_1: entered allmulticast mode [ 263.167255][T10437] bridge_slave_1: entered promiscuous mode [ 263.212669][ T5843] Bluetooth: hci10: command tx timeout [ 263.213902][T10435] team0: Port device team_slave_0 added [ 263.245845][T10435] team0: Port device team_slave_1 added [ 263.274565][T10437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.307495][T10437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.318950][T10435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.326660][T10435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.353463][T10435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.385290][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 263.395961][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 263.413262][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 263.423139][T10435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.423785][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 263.430110][T10435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.438415][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 263.466808][T10435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.485081][T10437] team0: Port device team_slave_0 added [ 263.516814][T10437] team0: Port device team_slave_1 added [ 263.568908][T10437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.576226][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.604618][T10437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.617725][T10437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.625020][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.651389][T10437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.685693][T10435] hsr_slave_0: entered promiscuous mode [ 263.692128][T10435] hsr_slave_1: entered promiscuous mode [ 263.699265][T10435] debugfs: 'hsr0' already exists in 'hsr' [ 263.705116][T10435] Cannot create hsr debugfs directory [ 263.720714][T10452] lo speed is unknown, defaulting to 1000 [ 263.790355][T10437] hsr_slave_0: entered promiscuous mode [ 263.798958][T10437] hsr_slave_1: entered promiscuous mode [ 263.806010][T10437] debugfs: 'hsr0' already exists in 'hsr' [ 263.811748][T10437] Cannot create hsr debugfs directory [ 264.257076][T10452] chnl_net:caif_netlink_parms(): no params data found [ 264.393963][ T5839] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 264.405234][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.418843][ T5839] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 264.426324][ T52] Bluetooth: hci11: command tx timeout [ 264.429022][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.434189][ T5839] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 264.449754][ T5839] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 264.449818][T10452] bridge_slave_0: entered allmulticast mode [ 264.457828][ T5839] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 264.466115][T10452] bridge_slave_0: entered promiscuous mode [ 264.482226][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.489912][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.497247][ T5839] Bluetooth: hci12: command tx timeout [ 264.504696][T10452] bridge_slave_1: entered allmulticast mode [ 264.511980][T10452] bridge_slave_1: entered promiscuous mode [ 264.563412][T10452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.580187][T10452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.637584][T10452] team0: Port device team_slave_0 added [ 264.644402][T10461] lo speed is unknown, defaulting to 1000 [ 264.647307][T10452] team0: Port device team_slave_1 added [ 264.699875][T10452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.707117][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.736714][T10452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.761020][T10452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.768604][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.795062][T10452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.888833][T10452] hsr_slave_0: entered promiscuous mode [ 264.896417][T10452] hsr_slave_1: entered promiscuous mode [ 264.903637][T10452] debugfs: 'hsr0' already exists in 'hsr' [ 264.909386][T10452] Cannot create hsr debugfs directory [ 265.158086][T10461] chnl_net:caif_netlink_parms(): no params data found [ 265.285777][T10461] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.293890][ T5839] Bluetooth: hci10: command tx timeout [ 265.299707][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.308213][T10461] bridge_slave_0: entered allmulticast mode [ 265.316040][T10461] bridge_slave_0: entered promiscuous mode [ 265.330842][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.338695][T10461] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.346355][T10461] bridge_slave_1: entered allmulticast mode [ 265.354031][T10461] bridge_slave_1: entered promiscuous mode [ 265.404590][T10461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.417714][T10461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.466614][T10461] team0: Port device team_slave_0 added [ 265.475408][T10461] team0: Port device team_slave_1 added [ 265.517208][T10461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.525032][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.554692][T10461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.554935][ T5843] Bluetooth: hci13: command tx timeout [ 265.568894][T10461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.579020][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.605518][T10461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.676649][T10461] hsr_slave_0: entered promiscuous mode [ 265.683755][T10461] hsr_slave_1: entered promiscuous mode [ 265.690089][T10461] debugfs: 'hsr0' already exists in 'hsr' [ 265.696583][T10461] Cannot create hsr debugfs directory [ 266.492890][ T5839] Bluetooth: hci11: command tx timeout [ 266.492897][ T5843] Bluetooth: hci14: command tx timeout [ 266.572765][ T5843] Bluetooth: hci12: command tx timeout [ 267.372599][ T5843] Bluetooth: hci10: command tx timeout [ 267.612643][ T5843] Bluetooth: hci13: command tx timeout [ 268.575535][ T5839] Bluetooth: hci11: command tx timeout [ 268.578732][ T5843] Bluetooth: hci14: command tx timeout [ 268.652773][ T5843] Bluetooth: hci12: command tx timeout [ 269.452678][ T5843] Bluetooth: hci10: command tx timeout [ 269.692778][ T5843] Bluetooth: hci13: command tx timeout [ 270.652639][ T5843] Bluetooth: hci14: command tx timeout [ 270.658762][ T5843] Bluetooth: hci11: command tx timeout [ 270.733333][ T5843] Bluetooth: hci12: command tx timeout [ 271.772878][ T5843] Bluetooth: hci13: command tx timeout [ 272.742785][ T5843] Bluetooth: hci14: command tx timeout [ 282.575272][ T25] block nbd0: Possible stuck request ffff888024b9e000: control (read@0,1024B). Runtime 120 seconds [ 282.586103][ T25] block nbd0: Possible stuck request ffff888024b9e1c0: control (read@1024,1024B). Runtime 120 seconds [ 282.597167][ T25] block nbd0: Possible stuck request ffff888024b9e380: control (read@2048,1024B). Runtime 120 seconds [ 282.608220][ T25] block nbd0: Possible stuck request ffff888024b9e540: control (read@3072,1024B). Runtime 120 seconds [ 312.661106][ T25] block nbd0: Possible stuck request ffff888024b9e000: control (read@0,1024B). Runtime 150 seconds [ 312.671947][ T25] block nbd0: Possible stuck request ffff888024b9e1c0: control (read@1024,1024B). Runtime 150 seconds [ 312.683037][ T25] block nbd0: Possible stuck request ffff888024b9e380: control (read@2048,1024B). Runtime 150 seconds [ 312.694196][ T25] block nbd0: Possible stuck request ffff888024b9e540: control (read@3072,1024B). Runtime 150 seconds [ 317.137019][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.143552][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.226195][ T5839] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 321.234563][ T5839] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 321.244341][ T5839] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 321.253566][ T5839] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 321.261407][ T5839] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 321.298419][T10476] lo speed is unknown, defaulting to 1000 [ 321.439258][T10476] chnl_net:caif_netlink_parms(): no params data found [ 321.521134][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.528668][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.536383][T10476] bridge_slave_0: entered allmulticast mode [ 321.544455][T10476] bridge_slave_0: entered promiscuous mode [ 321.554777][T10476] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.561981][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.569365][T10476] bridge_slave_1: entered allmulticast mode [ 321.577309][T10476] bridge_slave_1: entered promiscuous mode [ 321.610566][T10476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.625286][T10476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.663292][T10476] team0: Port device team_slave_0 added [ 321.671448][T10476] team0: Port device team_slave_1 added [ 321.704856][T10476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.711832][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.738387][T10476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.750680][T10476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.758841][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.786312][T10476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.834539][T10476] hsr_slave_0: entered promiscuous mode [ 321.841151][T10476] hsr_slave_1: entered promiscuous mode [ 321.848005][T10476] debugfs: 'hsr0' already exists in 'hsr' [ 321.854065][T10476] Cannot create hsr debugfs directory [ 322.405982][ T5841] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 322.415471][ T5841] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 322.424501][ T5841] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 322.434494][ T5841] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 322.445094][ T5841] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 322.495411][T10486] lo speed is unknown, defaulting to 1000 [ 322.534714][ T5841] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 322.549280][ T5841] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 322.558433][ T5841] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 322.567368][ T5841] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 322.577476][ T5841] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 322.669853][T10488] lo speed is unknown, defaulting to 1000 [ 322.719842][T10486] chnl_net:caif_netlink_parms(): no params data found [ 322.834919][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.842125][T10486] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.849927][T10486] bridge_slave_0: entered allmulticast mode [ 322.857468][T10486] bridge_slave_0: entered promiscuous mode [ 322.868035][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.876009][T10486] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.884042][T10486] bridge_slave_1: entered allmulticast mode [ 322.891358][T10486] bridge_slave_1: entered promiscuous mode [ 322.947674][T10486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.960879][T10486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.033371][T10486] team0: Port device team_slave_0 added [ 323.047833][T10486] team0: Port device team_slave_1 added [ 323.126565][T10486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.136129][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.168118][T10486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.180932][T10488] chnl_net:caif_netlink_parms(): no params data found [ 323.198066][T10486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.206396][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.234556][T10486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.299211][ T5841] Bluetooth: hci15: command tx timeout [ 323.389567][T10486] hsr_slave_0: entered promiscuous mode [ 323.399888][T10486] hsr_slave_1: entered promiscuous mode [ 323.406552][T10486] debugfs: 'hsr0' already exists in 'hsr' [ 323.413489][T10486] Cannot create hsr debugfs directory [ 323.419319][ T5845] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 323.429684][ T5845] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 323.439694][ T5845] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 323.455334][ T5845] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 323.463665][ T5845] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 323.525529][T10488] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.533526][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.540866][T10488] bridge_slave_0: entered allmulticast mode [ 323.549331][T10488] bridge_slave_0: entered promiscuous mode [ 323.570217][T10488] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.577770][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.585462][T10488] bridge_slave_1: entered allmulticast mode [ 323.593108][T10488] bridge_slave_1: entered promiscuous mode [ 323.657408][T10488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.674817][T10488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.689958][T10503] lo speed is unknown, defaulting to 1000 [ 323.766834][T10488] team0: Port device team_slave_0 added [ 323.776467][T10488] team0: Port device team_slave_1 added [ 323.847072][T10488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.854527][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.881296][T10488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.898397][T10488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.906390][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.933213][T10488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.017583][T10488] hsr_slave_0: entered promiscuous mode [ 324.024764][T10488] hsr_slave_1: entered promiscuous mode [ 324.031255][T10488] debugfs: 'hsr0' already exists in 'hsr' [ 324.037167][T10488] Cannot create hsr debugfs directory [ 324.344120][ T5841] Bluetooth: hci7: command 0x0406 tx timeout [ 324.344142][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 324.344154][ T5150] Bluetooth: hci6: command 0x0406 tx timeout [ 324.391981][T10503] chnl_net:caif_netlink_parms(): no params data found [ 324.492848][ T5843] Bluetooth: hci16: command tx timeout [ 324.499572][ T5843] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 324.509685][ T5843] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 324.517890][ T5843] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 324.529449][ T5843] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 324.537926][ T5843] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 324.611246][T10503] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.619033][T10503] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.627194][T10503] bridge_slave_0: entered allmulticast mode [ 324.634985][T10503] bridge_slave_0: entered promiscuous mode [ 324.650833][T10503] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.659165][ T5843] Bluetooth: hci17: command tx timeout [ 324.664947][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.672998][T10503] bridge_slave_1: entered allmulticast mode [ 324.680296][T10503] bridge_slave_1: entered promiscuous mode [ 324.760996][T10503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.770728][T10509] lo speed is unknown, defaulting to 1000 [ 324.775500][T10503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.862070][T10503] team0: Port device team_slave_0 added [ 324.874951][T10503] team0: Port device team_slave_1 added [ 324.931113][T10503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.938569][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.965411][T10503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.978476][T10503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.985640][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.012757][T10503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.093486][T10503] hsr_slave_0: entered promiscuous mode [ 325.100415][T10503] hsr_slave_1: entered promiscuous mode [ 325.107647][T10503] debugfs: 'hsr0' already exists in 'hsr' [ 325.113791][T10503] Cannot create hsr debugfs directory [ 325.278511][T10509] chnl_net:caif_netlink_parms(): no params data found [ 325.372957][ T5843] Bluetooth: hci15: command tx timeout [ 325.446441][T10509] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.454661][T10509] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.462007][T10509] bridge_slave_0: entered allmulticast mode [ 325.470708][T10509] bridge_slave_0: entered promiscuous mode [ 325.490384][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.497797][T10509] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.505315][T10509] bridge_slave_1: entered allmulticast mode [ 325.512967][T10509] bridge_slave_1: entered promiscuous mode [ 325.532736][ T5843] Bluetooth: hci18: command tx timeout [ 325.566699][T10509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.579815][T10509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.633636][T10509] team0: Port device team_slave_0 added [ 325.641538][T10509] team0: Port device team_slave_1 added [ 325.683658][T10509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.690635][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.717382][T10509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.729830][T10509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.736928][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.765239][T10509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.833881][T10509] hsr_slave_0: entered promiscuous mode [ 325.840438][T10509] hsr_slave_1: entered promiscuous mode [ 325.854190][T10509] debugfs: 'hsr0' already exists in 'hsr' [ 325.859983][T10509] Cannot create hsr debugfs directory [ 326.572827][ T5843] Bluetooth: hci16: command tx timeout [ 326.572926][ T5839] Bluetooth: hci19: command tx timeout [ 326.732717][ T5839] Bluetooth: hci17: command tx timeout [ 327.452597][ T5843] Bluetooth: hci15: command tx timeout [ 327.612683][ T5843] Bluetooth: hci18: command tx timeout [ 328.652735][ T5843] Bluetooth: hci19: command tx timeout [ 328.657271][ T5841] Bluetooth: hci16: command tx timeout [ 328.813224][ T5841] Bluetooth: hci17: command tx timeout [ 329.452803][ T5841] Bluetooth: hci8: command 0x0406 tx timeout [ 329.458887][ T5841] Bluetooth: hci9: command 0x0406 tx timeout [ 329.532693][ T5839] Bluetooth: hci15: command tx timeout [ 329.692701][ T5839] Bluetooth: hci18: command tx timeout [ 330.575080][ T31] INFO: task syz.0.1213:10307 blocked for more than 143 seconds. [ 330.583100][ T31] Not tainted syzkaller #0 [ 330.588059][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.597094][ T31] task:syz.0.1213 state:D stack:26024 pid:10307 tgid:10302 ppid:5836 task_flags:0x480140 flags:0x00080002 [ 330.609178][ T31] Call Trace: [ 330.612566][ T31] [ 330.615546][ T31] __schedule+0x1798/0x4cc0 [ 330.620103][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.625266][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.630175][ T31] ? __pfx___schedule+0x10/0x10 [ 330.635237][ T31] ? schedule+0x91/0x360 [ 330.639532][ T31] schedule+0x165/0x360 [ 330.643808][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 330.649302][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 330.655604][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 330.662490][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 330.669092][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 330.702758][ T31] nbd_set_size+0x47e/0x6a0 [ 330.707348][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 330.732702][ T5839] Bluetooth: hci16: command tx timeout [ 330.735788][ T52] Bluetooth: hci19: command tx timeout [ 330.741093][ T31] ? nla_memcpy+0x5b/0xc0 [ 330.749425][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 330.754777][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 330.760275][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 330.767439][ T31] ? bpf_lsm_capable+0x9/0x20 [ 330.772163][ T31] ? security_capable+0x7e/0x2e0 [ 330.777222][ T31] ? radix_tree_lookup+0x240/0x290 [ 330.782508][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 330.787867][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 330.793736][ T31] ? rcu_is_watching+0x15/0xb0 [ 330.798548][ T31] ? __nla_parse+0x40/0x60 [ 330.803086][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 330.809460][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 330.815799][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 330.821952][ T31] ? stack_trace_save+0x9c/0xe0 [ 330.827024][ T31] genl_rcv_msg+0x60e/0x790 [ 330.831568][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.836852][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 330.842840][ T31] netlink_rcv_skb+0x208/0x470 [ 330.847650][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.852648][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.858324][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.863849][ T31] ? down_read+0x1ad/0x2e0 [ 330.870335][ T31] genl_rcv+0x28/0x40 [ 330.874431][ T31] netlink_unicast+0x82f/0x9e0 [ 330.879237][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 330.884904][ T31] ? netlink_sendmsg+0x642/0xb30 [ 330.889863][ T31] netlink_sendmsg+0x805/0xb30 [ 330.895068][ T52] Bluetooth: hci17: command tx timeout [ 330.896468][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.905977][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.911063][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 330.916817][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.922483][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.927810][ T31] __sock_sendmsg+0x21c/0x270 [ 330.932744][ T31] ____sys_sendmsg+0x505/0x830 [ 330.937539][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.943291][ T31] ? import_iovec+0x74/0xa0 [ 330.947833][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 330.952668][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.957932][ T31] ? __fget_files+0x2a/0x420 [ 330.962609][ T31] ? __fget_files+0x3a0/0x420 [ 330.967330][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 330.974811][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.980372][ T31] ? do_syscall_64+0xbe/0xfa0 [ 330.985961][ T31] do_syscall_64+0xfa/0xfa0 [ 330.990509][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.995812][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.001900][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.006689][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.012909][ T31] RIP: 0033:0x7f2ae4b8efc9 [ 331.017342][ T31] RSP: 002b:00007f2ae5ae3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.025981][ T31] RAX: ffffffffffffffda RBX: 00007f2ae4de6090 RCX: 00007f2ae4b8efc9 [ 331.034053][ T31] RDX: 0000000000000040 RSI: 0000200000001e80 RDI: 0000000000000007 [ 331.042054][ T31] RBP: 00007f2ae4c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.050560][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.058885][ T31] R13: 00007f2ae4de6128 R14: 00007f2ae4de6090 R15: 00007ffcfe8e6618 [ 331.067048][ T31] [ 331.070107][ T31] INFO: task syz.3.1214:10311 blocked for more than 143 seconds. [ 331.079558][ T31] Not tainted syzkaller #0 [ 331.084583][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.093524][ T31] task:syz.3.1214 state:D stack:28712 pid:10311 tgid:10310 ppid:5844 task_flags:0x400040 flags:0x00080002 [ 331.105889][ T31] Call Trace: [ 331.109208][ T31] [ 331.112160][ T31] __schedule+0x1798/0x4cc0 [ 331.116765][ T31] ? css_rstat_updated+0x23a/0x4f0 [ 331.121909][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.126829][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.131697][ T31] ? __pfx___schedule+0x10/0x10 [ 331.139671][ T31] ? schedule+0x91/0x360 [ 331.144302][ T31] schedule+0x165/0x360 [ 331.148572][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.154170][ T31] __mutex_lock+0x7e6/0x1350 [ 331.158787][ T31] ? __mutex_lock+0x5bb/0x1350 [ 331.163625][ T31] ? genl_rcv_msg+0x10d/0x790 [ 331.168342][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.173653][ T31] ? stack_trace_save+0x9c/0xe0 [ 331.179298][ T31] ? radix_tree_lookup+0x240/0x290 [ 331.184593][ T31] genl_rcv_msg+0x10d/0x790 [ 331.189128][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.194132][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.199214][ T31] netlink_rcv_skb+0x208/0x470 [ 331.204087][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.208963][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.214466][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.219819][ T31] ? down_read+0x1ad/0x2e0 [ 331.224462][ T31] genl_rcv+0x28/0x40 [ 331.228481][ T31] netlink_unicast+0x82f/0x9e0 [ 331.233400][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 331.238737][ T31] ? netlink_sendmsg+0x642/0xb30 [ 331.243917][ T31] ? skb_put+0x11b/0x210 [ 331.248191][ T31] netlink_sendmsg+0x805/0xb30 [ 331.253295][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.258618][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.264007][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.269329][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.274948][ T31] __sock_sendmsg+0x21c/0x270 [ 331.280816][ T31] __sys_sendto+0x3bd/0x520 [ 331.285462][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 331.290515][ T31] ? count_memcg_event_mm+0x21/0x260 [ 331.296356][ T31] ? rcu_is_watching+0x15/0xb0 [ 331.301162][ T31] __x64_sys_sendto+0xde/0x100 [ 331.306100][ T31] do_syscall_64+0xfa/0xfa0 [ 331.310665][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.316023][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.322125][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.327299][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.333339][ T31] RIP: 0033:0x7f3006d90e5c [ 331.337777][ T31] RSP: 002b:00007f3007c94ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 331.346298][ T31] RAX: ffffffffffffffda RBX: 00007f3007c94fc0 RCX: 00007f3006d90e5c [ 331.354997][ T31] RDX: 0000000000000020 RSI: 00007f3007c95010 RDI: 0000000000000003 [ 331.363074][ T31] RBP: 0000000000000000 R08: 00007f3007c94f14 R09: 000000000000000c [ 331.371076][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 331.379458][ T31] R13: 00007f3007c94f68 R14: 00007f3007c95010 R15: 0000000000000000 [ 331.389210][ T31] [ 331.392280][ T31] INFO: task syz.3.1214:10316 blocked for more than 144 seconds. [ 331.401378][ T31] Not tainted syzkaller #0 [ 331.406395][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.415365][ T31] task:syz.3.1214 state:D stack:28200 pid:10316 tgid:10310 ppid:5844 task_flags:0x400140 flags:0x00080002 [ 331.427369][ T31] Call Trace: [ 331.430661][ T31] [ 331.433657][ T31] __schedule+0x1798/0x4cc0 [ 331.438370][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.443713][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.448588][ T31] ? __pfx___schedule+0x10/0x10 [ 331.453751][ T31] ? schedule+0x91/0x360 [ 331.458048][ T31] schedule+0x165/0x360 [ 331.462218][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.467872][ T31] __mutex_lock+0x7e6/0x1350 [ 331.472925][ T31] ? __mutex_lock+0x5bb/0x1350 [ 331.477721][ T31] ? genl_rcv_msg+0x10d/0x790 [ 331.484105][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.489181][ T31] ? stack_trace_save+0x9c/0xe0 [ 331.494152][ T31] ? radix_tree_lookup+0x240/0x290 [ 331.499299][ T31] genl_rcv_msg+0x10d/0x790 [ 331.504192][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.509068][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.514198][ T31] netlink_rcv_skb+0x208/0x470 [ 331.518996][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.523930][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.528990][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.534910][ T31] ? down_read+0x1ad/0x2e0 [ 331.539379][ T31] genl_rcv+0x28/0x40 [ 331.543438][ T31] netlink_unicast+0x82f/0x9e0 [ 331.548259][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 331.553677][ T31] ? netlink_sendmsg+0x642/0xb30 [ 331.558650][ T31] ? skb_put+0x11b/0x210 [ 331.563258][ T31] netlink_sendmsg+0x805/0xb30 [ 331.568076][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.573582][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.578570][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.583931][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.590568][ T31] __sock_sendmsg+0x21c/0x270 [ 331.595657][ T31] __sys_sendto+0x3bd/0x520 [ 331.600203][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 331.605314][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.610203][ T31] ? fd_install+0x97/0x540 [ 331.614821][ T31] ? fd_install+0x30d/0x540 [ 331.619746][ T31] __x64_sys_sendto+0xde/0x100 [ 331.624955][ T31] do_syscall_64+0xfa/0xfa0 [ 331.629501][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.634848][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.640991][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.645767][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.651685][ T31] RIP: 0033:0x7f3006d90e5c [ 331.656512][ T31] RSP: 002b:00007f3007c73ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 331.665029][ T31] RAX: ffffffffffffffda RBX: 00007f3007c73fc0 RCX: 00007f3006d90e5c [ 331.673068][ T31] RDX: 0000000000000020 RSI: 00007f3007c74010 RDI: 0000000000000004 [ 331.681049][ T31] RBP: 0000000000000000 R08: 00007f3007c73f14 R09: 000000000000000c [ 331.690877][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 331.700524][ T31] R13: 00007f3007c73f68 R14: 00007f3007c74010 R15: 0000000000000000 [ 331.708628][ T31] [ 331.711663][ T31] INFO: task syz.3.1214:10317 blocked for more than 144 seconds. [ 331.722726][ T31] Not tainted syzkaller #0 [ 331.727704][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.736900][ T31] task:syz.3.1214 state:D stack:28296 pid:10317 tgid:10310 ppid:5844 task_flags:0x400140 flags:0x00080002 [ 331.749320][ T31] Call Trace: [ 331.752672][ T31] [ 331.755623][ T31] __schedule+0x1798/0x4cc0 [ 331.760149][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.765091][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.770051][ T31] ? __pfx___schedule+0x10/0x10 [ 331.773944][ T52] Bluetooth: hci18: command tx timeout [ 331.776608][ T31] ? schedule+0x91/0x360 [ 331.784805][ T31] schedule+0x165/0x360 [ 331.788999][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.796214][ T31] __mutex_lock+0x7e6/0x1350 [ 331.800854][ T31] ? __mutex_lock+0x5bb/0x1350 [ 331.806063][ T31] ? genl_rcv_msg+0x10d/0x790 [ 331.810781][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.815926][ T31] ? stack_trace_save+0x9c/0xe0 [ 331.820813][ T31] ? radix_tree_lookup+0x240/0x290 [ 331.826078][ T31] genl_rcv_msg+0x10d/0x790 [ 331.830616][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.835790][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.840860][ T31] netlink_rcv_skb+0x208/0x470 [ 331.845835][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.850721][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.857313][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.863425][ T31] ? down_read+0x1ad/0x2e0 [ 331.867925][ T31] genl_rcv+0x28/0x40 [ 331.871912][ T31] netlink_unicast+0x82f/0x9e0 [ 331.876796][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 331.882116][ T31] ? netlink_sendmsg+0x642/0xb30 [ 331.887165][ T31] ? skb_put+0x11b/0x210 [ 331.891435][ T31] netlink_sendmsg+0x805/0xb30 [ 331.897731][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.903467][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.908463][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.913918][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.919257][ T31] __sock_sendmsg+0x21c/0x270 [ 331.924349][ T31] __sys_sendto+0x3bd/0x520 [ 331.928877][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 331.934061][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.938967][ T31] ? fd_install+0x97/0x540 [ 331.943571][ T31] ? fd_install+0x30d/0x540 [ 331.948115][ T31] __x64_sys_sendto+0xde/0x100 [ 331.953271][ T31] do_syscall_64+0xfa/0xfa0 [ 331.957809][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.963153][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.969264][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.974048][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.979966][ T31] RIP: 0033:0x7f3006d90e5c [ 331.984783][ T31] RSP: 002b:00007f3007c52ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 331.993316][ T31] RAX: ffffffffffffffda RBX: 00007f3007c52fc0 RCX: 00007f3006d90e5c [ 332.003122][ T31] RDX: 0000000000000024 RSI: 00007f3007c53010 RDI: 0000000000000008 [ 332.011160][ T31] RBP: 0000000000000000 R08: 00007f3007c52f14 R09: 000000000000000c [ 332.021035][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 332.029109][ T31] R13: 00007f3007c52f68 R14: 00007f3007c53010 R15: 0000000000000000 [ 332.037168][ T31] [ 332.040228][ T31] INFO: task syz.1.1218:10328 blocked for more than 144 seconds. [ 332.048382][ T31] Not tainted syzkaller #0 [ 332.053399][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.062126][ T31] task:syz.1.1218 state:D stack:26248 pid:10328 tgid:10327 ppid:5850 task_flags:0x400140 flags:0x00080002 [ 332.074466][ T31] Call Trace: [ 332.077802][ T31] [ 332.080741][ T31] __schedule+0x1798/0x4cc0 [ 332.085343][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.090304][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.095274][ T31] ? __pfx___schedule+0x10/0x10 [ 332.101512][ T31] ? schedule+0x91/0x360 [ 332.106227][ T31] schedule+0x165/0x360 [ 332.110429][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.115963][ T31] __mutex_lock+0x7e6/0x1350 [ 332.120661][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.125645][ T31] ? genl_rcv_msg+0x10d/0x790 [ 332.130360][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.135816][ T31] ? stack_trace_save+0x9c/0xe0 [ 332.140735][ T31] ? radix_tree_lookup+0x240/0x290 [ 332.145985][ T31] genl_rcv_msg+0x10d/0x790 [ 332.150531][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.155468][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.160542][ T31] netlink_rcv_skb+0x208/0x470 [ 332.165710][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.170584][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.175914][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.181259][ T31] ? down_read+0x1ad/0x2e0 [ 332.185752][ T31] genl_rcv+0x28/0x40 [ 332.189795][ T31] netlink_unicast+0x82f/0x9e0 [ 332.194997][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 332.201673][ T31] ? netlink_sendmsg+0x642/0xb30 [ 332.206725][ T31] ? skb_put+0x11b/0x210 [ 332.210996][ T31] netlink_sendmsg+0x805/0xb30 [ 332.215978][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.221311][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.226881][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.232181][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.237760][ T31] __sock_sendmsg+0x21c/0x270 [ 332.242560][ T31] __sys_sendto+0x3bd/0x520 [ 332.247164][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 332.252198][ T31] ? count_memcg_event_mm+0x21/0x260 [ 332.258162][ T31] ? exc_page_fault+0x82/0x100 [ 332.263047][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 332.268378][ T31] __x64_sys_sendto+0xde/0x100 [ 332.273240][ T31] do_syscall_64+0xfa/0xfa0 [ 332.277773][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.283377][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.289460][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.294271][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.300185][ T31] RIP: 0033:0x7f9031790e5c [ 332.306203][ T31] RSP: 002b:00007f90325ceec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 332.315027][ T31] RAX: ffffffffffffffda RBX: 00007f90325cefc0 RCX: 00007f9031790e5c [ 332.323111][ T31] RDX: 0000000000000028 RSI: 00007f90325cf010 RDI: 0000000000000008 [ 332.331106][ T31] RBP: 0000000000000000 R08: 00007f90325cef14 R09: 000000000000000c [ 332.339411][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 332.347847][ T31] R13: 00007f90325cef68 R14: 00007f90325cf010 R15: 0000000000000000 [ 332.355900][ T31] [ 332.359027][ T31] [ 332.359027][ T31] Showing all locks held in the system: [ 332.366926][ T31] 1 lock held by khungtaskd/31: [ 332.371788][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 332.382024][ T31] 2 locks held by getty/5596: [ 332.386757][ T31] #0: ffff88802fad30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 332.396592][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 332.408379][ T31] 1 lock held by udevd/7424: [ 332.413188][ T31] #0: ffff888024ab1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 332.422557][ T31] 6 locks held by syz.0.1213/10307: [ 332.427759][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.436486][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.445569][ T31] #2: ffff888024aaf270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 332.456169][ T31] #3: ffff888024a92e48 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 332.465942][ T31] #4: ffff888024a927e8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 332.478165][ T31] #5: ffff888024a92820 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 332.490676][ T31] 2 locks held by syz.3.1214/10311: [ 332.502540][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.513067][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.522249][ T31] 2 locks held by syz.3.1214/10316: [ 332.528793][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.537499][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.547787][ T31] 2 locks held by syz.3.1214/10317: [ 332.553359][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.561616][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.575828][ T31] 2 locks held by syz.1.1218/10328: [ 332.581063][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.590295][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.599774][ T31] 2 locks held by syz.4.1232/10362: [ 332.605437][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.615762][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.626125][ T31] 2 locks held by syz.4.1232/10365: [ 332.631356][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.641074][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.650382][ T31] 2 locks held by syz.4.1232/10367: [ 332.658751][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.667438][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.677746][ T31] 2 locks held by syz.2.1233/10370: [ 332.684518][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.693596][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.703112][ T31] 2 locks held by syz.2.1233/10371: [ 332.708336][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.717753][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.727130][ T31] 2 locks held by syz-executor/10376: [ 332.734158][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.742774][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.751927][ T31] 2 locks held by syz-executor/10378: [ 332.758402][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.767178][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.776595][ T31] 2 locks held by syz-executor/10380: [ 332.781992][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.790777][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.800593][ T31] 2 locks held by syz-executor/10401: [ 332.806536][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.816770][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.825994][ T52] Bluetooth: hci19: command tx timeout [ 332.831825][ T31] 2 locks held by syz-executor/10410: [ 332.837625][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.846243][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.855645][ T31] 2 locks held by syz-executor/10425: [ 332.861043][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.870012][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.879475][ T31] 2 locks held by syz-executor/10435: [ 332.885238][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.893919][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.903285][ T31] 2 locks held by syz-executor/10437: [ 332.908679][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.917546][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.926677][ T31] 2 locks held by syz-executor/10452: [ 332.932071][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.940508][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.949583][ T31] 2 locks held by syz-executor/10461: [ 332.955229][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.963497][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.972841][ T31] 2 locks held by syz-executor/10476: [ 332.978232][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 332.986514][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 332.995768][ T31] 2 locks held by syz-executor/10486: [ 333.001161][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.009435][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 333.019412][ T31] 2 locks held by syz-executor/10488: [ 333.024888][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.033191][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 333.042190][ T31] 2 locks held by syz-executor/10503: [ 333.047746][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.058845][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 333.068331][ T31] 2 locks held by syz-executor/10509: [ 333.074030][ T31] #0: ffffffff8f330fd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.082276][ T31] #1: ffffffff8f330de8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 333.091370][ T31] [ 333.093920][ T31] ============================================= [ 333.093920][ T31] [ 333.102358][ T31] NMI backtrace for cpu 1 [ 333.102386][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 333.102409][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.102422][ T31] Call Trace: [ 333.102431][ T31] [ 333.102440][ T31] dump_stack_lvl+0x189/0x250 [ 333.102477][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.102506][ T31] ? __pfx__printk+0x10/0x10 [ 333.102542][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 333.102568][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 333.102593][ T31] ? __pfx__printk+0x10/0x10 [ 333.102618][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.102655][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 333.102680][ T31] watchdog+0xf60/0xfa0 [ 333.102706][ T31] ? watchdog+0x1e2/0xfa0 [ 333.102734][ T31] kthread+0x711/0x8a0 [ 333.102767][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.102796][ T31] ? __pfx_kthread+0x10/0x10 [ 333.102827][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.102854][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.102879][ T31] ? __pfx_kthread+0x10/0x10 [ 333.102910][ T31] ret_from_fork+0x4bc/0x870 [ 333.102935][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.102964][ T31] ? __switch_to_asm+0x39/0x70 [ 333.102982][ T31] ? __switch_to_asm+0x33/0x70 [ 333.102998][ T31] ? __pfx_kthread+0x10/0x10 [ 333.103028][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.103062][ T31] [ 333.243809][ T31] Sending NMI from CPU 1 to CPUs 0: [ 333.249068][ C0] NMI backtrace for cpu 0 [ 333.249090][ C0] CPU: 0 UID: 0 PID: 3451 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 333.249110][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.249121][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 333.249152][ C0] RIP: 0010:filter_irq_stacks+0x49/0xa0 [ 333.249179][ C0] Code: 00 fc ff df 49 89 ff 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 84 80 79 00 49 8b 04 de 48 3d 30 02 00 81 0f 93 c1 <48> 3d 70 16 00 81 0f 92 c2 84 d1 75 27 48 3d 40 f8 48 8b 0f 92 c1 [ 333.249194][ C0] RSP: 0018:ffffc90000007428 EFLAGS: 00000202 [ 333.249208][ C0] RAX: ffffffff89275ca9 RBX: 000000000000000e RCX: 0000000000000001 [ 333.249220][ C0] RDX: 0000000000000000 RSI: 0000000000000016 RDI: ffffc900000074c0 [ 333.249231][ C0] RBP: ffffc900000076f0 R08: 000000000000001f R09: ffffffff81738d25 [ 333.249243][ C0] R10: ffffc900000073d8 R11: ffffffff81ac2d30 R12: 0000000000000016 [ 333.249255][ C0] R13: dffffc0000000000 R14: ffffc900000074c0 R15: ffffc90000007530 [ 333.249268][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 333.249282][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.249293][ C0] CR2: 0000562387380000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 333.249308][ C0] Call Trace: [ 333.249315][ C0] [ 333.249325][ C0] stack_depot_save_flags+0x40/0x860 [ 333.249357][ C0] kasan_save_track+0x4f/0x80 [ 333.249381][ C0] ? kasan_save_track+0x3e/0x80 [ 333.249404][ C0] ? __kasan_save_free_info+0x46/0x50 [ 333.249423][ C0] ? __kasan_slab_free+0x5c/0x80 [ 333.249447][ C0] ? kfree+0x19a/0x6d0 [ 333.249467][ C0] ? skb_release_data+0x62d/0x7c0 [ 333.249484][ C0] ? sk_skb_reason_drop+0x127/0x170 [ 333.249499][ C0] ? __netif_receive_skb_core+0x3d5f/0x4380 [ 333.249522][ C0] ? __netif_receive_skb+0x72/0x380 [ 333.249544][ C0] ? process_backlog+0x60e/0x14f0 [ 333.249566][ C0] ? __napi_poll+0xc7/0x360 [ 333.249587][ C0] ? net_rx_action+0x5f7/0xdf0 [ 333.249610][ C0] ? handle_softirqs+0x286/0x870 [ 333.249627][ C0] ? do_softirq+0xec/0x180 [ 333.249643][ C0] ? __local_bh_enable_ip+0x17d/0x1c0 [ 333.249660][ C0] ? __dev_queue_xmit+0x1d79/0x3b50 [ 333.249679][ C0] ? batadv_send_skb_packet+0x418/0x690 [ 333.249721][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x62f/0x7e0 [ 333.249747][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 333.249765][ C0] ? worker_thread+0x8a0/0xda0 [ 333.249782][ C0] ? kthread+0x711/0x8a0 [ 333.249804][ C0] ? ret_from_fork+0x4bc/0x870 [ 333.249820][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 333.249858][ C0] __kasan_save_free_info+0x46/0x50 [ 333.249879][ C0] __kasan_slab_free+0x5c/0x80 [ 333.249905][ C0] ? skb_release_data+0x62d/0x7c0 [ 333.249922][ C0] kfree+0x19a/0x6d0 [ 333.249946][ C0] skb_release_data+0x62d/0x7c0 [ 333.249970][ C0] sk_skb_reason_drop+0x127/0x170 [ 333.249988][ C0] __netif_receive_skb_core+0x3d5f/0x4380 [ 333.250018][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 333.250042][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 333.250084][ C0] ? process_backlog+0x2d5/0x14f0 [ 333.250111][ C0] ? process_backlog+0x2d5/0x14f0 [ 333.250138][ C0] __netif_receive_skb+0x72/0x380 [ 333.250164][ C0] ? process_backlog+0x2d5/0x14f0 [ 333.250190][ C0] process_backlog+0x60e/0x14f0 [ 333.250224][ C0] ? __pfx_process_backlog+0x10/0x10 [ 333.250255][ C0] __napi_poll+0xc7/0x360 [ 333.250277][ C0] ? skb_defer_free_flush+0x229/0x250 [ 333.250303][ C0] net_rx_action+0x5f7/0xdf0 [ 333.250336][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 333.250364][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 333.250391][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 333.250419][ C0] handle_softirqs+0x286/0x870 [ 333.250440][ C0] ? do_softirq+0xec/0x180 [ 333.250461][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 333.250483][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.250503][ C0] do_softirq+0xec/0x180 [ 333.250520][ C0] [ 333.250526][ C0] [ 333.250532][ C0] ? __pfx_do_softirq+0x10/0x10 [ 333.250555][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 333.250573][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 333.250592][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.250613][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.250633][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.250652][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.250672][ C0] __dev_queue_xmit+0x1d79/0x3b50 [ 333.250698][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.250726][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 333.250748][ C0] ? rcu_is_watching+0x15/0xb0 [ 333.250768][ C0] ? trace_kmalloc+0x1f/0xd0 [ 333.250793][ C0] ? skb_release_data+0x2b6/0x7c0 [ 333.250827][ C0] ? batadv_skb_head_push+0x187/0x200 [ 333.250855][ C0] batadv_send_skb_packet+0x418/0x690 [ 333.250887][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x62f/0x7e0 [ 333.250919][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 333.250938][ C0] process_scheduled_works+0xae1/0x17b0 [ 333.250973][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.251001][ C0] worker_thread+0x8a0/0xda0 [ 333.251034][ C0] kthread+0x711/0x8a0 [ 333.251059][ C0] ? __pfx_worker_thread+0x10/0x10 [ 333.251085][ C0] ? __pfx_kthread+0x10/0x10 [ 333.251109][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.251130][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.251152][ C0] ? __pfx_kthread+0x10/0x10 [ 333.251175][ C0] ret_from_fork+0x4bc/0x870 [ 333.251194][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 333.251216][ C0] ? __switch_to_asm+0x39/0x70 [ 333.251230][ C0] ? __switch_to_asm+0x33/0x70 [ 333.251244][ C0] ? __pfx_kthread+0x10/0x10 [ 333.251268][ C0] ret_from_fork_asm+0x1a/0x30 [ 333.251292][ C0]