last executing test programs: 21.001252017s ago: executing program 0 (id=53): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x26c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x5}}, @NFQA_CT={0x1e0, 0xb, 0x0, 0x1, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x900}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe609}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0xc4, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x67af20e7278baa08}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @private1}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x28, 0x17, [0x8, 0x7, 0x3c4, 0x1, 0x6, 0x200, 0x8001, 0x5, 0x2]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6}]}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x84}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x26c}}, 0x4044803) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r2, 0x0, 0x63, 0x2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r5, 0x3) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 19.731356028s ago: executing program 0 (id=69): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@remote, @private=0xa010100}, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0xf21b, 0x4, 0x8000, 0x4, 0xffff, 0x4, 0x9, 0x4}, &(0x7f0000000380)=0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x35}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f00000003c0)={@dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010100, @rand_addr=0x64010102}, 0xc) sendmsg$nl_crypto(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x2000c800}, 0x880) r5 = socket(0x15, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x2e, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.701313457s ago: executing program 0 (id=85): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x8, 0x2000}}, 0x1c}}, 0x4000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400029108001c000000000008001d0000000000"], 0x44}}, 0x0) 18.605929728s ago: executing program 2 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000004800128009000100766c616e00000000380002800c00020012000000170000000600010000000000040003801c0003800c00010001000000d10000000c00010001110000ff0f000008000500", @ANYRES32=r1], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 18.46529461s ago: executing program 2 (id=88): r0 = epoll_create1(0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x80c0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) pread64(r6, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000240)={r5, 0x7f, 0x2, "b0cb5b201d0b806e91d6cc3969f88782928882df25684e10812ee88a85acd61699c383c0d226d3ac6324ff6be51bc99c766a4bf4b0a9f01a27f614ee9a08924aac3fb2f3ca0d81c4f9a670d721b4af7fe8c23fa57fe610794a5e6a77dacc8d02a4c7dca13c566ea9ca80c04744093b3d3c9642cdec3bb1c5af9d33d7109c2baca0af1300ba852e6a55b8188c5cbf06f80b02158841ffb31687f68c64d2dfd40bfe3cd3a582aeba75372bf2408c262f8a5ce825ee76e14bff058981c859fedfbdbc7045da3924e09570d3997a22db5f57bbd4a46d"}) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318001806fffc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000013020000c6d426f2db0626bd11ffffffff06285fd9cd60dfa8e3478c568896989558a5760e4dc5d071"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) r8 = socket$kcm(0xa, 0x2, 0x0) pwritev(r8, 0x0, 0x0, 0x9, 0xbb) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000680)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc4, &(0x7f00000007c0)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe0}}, 0x0) 18.357491457s ago: executing program 0 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="04"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r3}, 0x38) 18.117448407s ago: executing program 3 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f00000011c0)=""/4082, &(0x7f0000000040)=0xff2) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4040080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r4, 0x0, 0x0}, 0x10) 18.117008163s ago: executing program 2 (id=94): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) shutdown(r1, 0x1) syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaacdaaaabb0800450000680000000000069078ac1414bbac1414aa0000400148df81de9489b5e927b4be2f590077a8958b603663f0036da2725fa6635cc1211206bcc3de0d4203c1a01d3ad97df8c1435922d49e9f1a4eaa498e1336210d212195cbe81ac594940a5781195bb5ce39b1374892c3ab20b72e83ac760065b121e76e996a26a365398f0f41b60ccd4ea2f0ef40f857fb400fc731b1e1a89a0026bdc1d69dec7642d45fe67e8ff378ef49778ce8045268cc00ef2bcd6b49adedcab20c702d36faed4ca0508ed21973faed1951cf0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) close(0x3) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto$x25(r2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000000c0)=0xfffffffffffff800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b000000080000000003c00e0000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r7, 0x200204) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x6, "a195d30b"}]}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$tun(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x2c6) 18.040834277s ago: executing program 1 (id=95): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@newnexthop={0x80, 0x68, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x1c}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x2}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_BLACKHOLE={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x2, 0x7}, {0x2, 0x8}, {0x0, 0xfc}, {0x0, 0xb}, {0x0, 0x81}, {0x1, 0xf8}, {0x1, 0x5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008805}, 0x4000000) (rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x10}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x34, r3, 0xa1f, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c091}, 0x8080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r8, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) (async, rerun: 64) sendmsg$can_j1939(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) (rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0x1ec, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x9, 0x3, 0x3, 0x251, 0x9, 0xc62]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x36, 0x60, 0x15, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf20, 0xf, 0xc, 0xde4, 0x400, 0x80, 0x1c00, 0x24]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfffe, 0x5, 0x8, 0x1, 0x3, 0x54d, 0x5017]}}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0xa}, {0x6, 0x8}, {0x1, 0x4}, {0x4}, {}, {0x3, 0xa}]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf31c, 0x5, 0x8fd, 0x101, 0x62, 0x9, 0x8000, 0xf85]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0xc, 0x60, 0x30, 0x12, 0x16, 0xc, 0xb, 0x12, 0x6c, 0x37, 0x48, 0x12, 0x4, 0x24, 0x1b, 0xb, 0x24, 0x4, 0x0, 0x48, 0x3, 0x9, 0xc, 0x2, 0xb, 0x8, 0x6c, 0x3c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x3, 0x2, 0x6, 0x18, 0x24, 0x60, 0x0, 0x1eda1bb4a4cfc7dd, 0x6, 0x18, 0x2f, 0x30, 0x12, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc210, 0x3, 0x409b, 0x1, 0x7, 0x6, 0x308]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x1}, {0x6}, {0x5, 0x7}, {0x5, 0x3}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x3, 0x3, 0x8001, 0x9, 0x8, 0x10]}}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0xa}, {0x7, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x5, 0x9}, {0x7, 0x1}, {0x4, 0x4}, {0x5, 0x7}, {0x7, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x4, 0x7}, {0x2, 0x5}, {0x2, 0x4}, {0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x3}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x5}, {0x2, 0x9}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x6}, {0x6, 0x5}, {0x5, 0x4}, {0x5, 0x3}, {0x3, 0x6}, {0x3}, {0x4, 0xa}, {0x5, 0x3}, {0x7, 0x7}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x19}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x7}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x2}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9c, 0x7, 0xf58c, 0x6, 0xffff, 0x2335, 0xa]}}]}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8000}, 0x20044004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000030400926d00000000000000000000003eddf4e4c85dbfe13e794a71fad6e9f2e267f5e89da6c3fd86adab8f75ac76b0e0828431c07f79873b329090c1d0e4658a4667f8fb9e8eac308d56ea093a5d753436050de36664b4cf1ac886727dbd2c834cd50bb980387b6770c9463a78d9c4dc8a7657170073", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c0002800800030001000000"], 0x38}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x50, r9, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_SSID={0x12, 0x34, @random="a71d2ed3b0de3851fd4b129da13e"}]}, 0x50}, 0x1, 0x0, 0x0, 0xd0}, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r12 = socket(0x22, 0x2, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r12, 0x111, 0x1, 0x0, 0x4) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=ANY=[@ANYBLOB="4d00000200000000000000ff00000000027c0000"], 0x20}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) 17.945531754s ago: executing program 0 (id=97): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket(0x27, 0x80000, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x4010, r1, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtclass={0xfffffffffffffec2, 0x28, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xfff2}, {0x10, 0xffeb}, {0x2, 0x7}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x0, 0x5, {0x54, 0xa1}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x26}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1008}, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x78, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed66554900000000"}, {0x2, 0x12, "be146f746eefb84a760000f90f000000"}, {0x0, 0x11, "320592000000000200000000000000"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 17.727374028s ago: executing program 3 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000004800128009000100766c616e00000000380002800c00020012000000170000000600010000000000040003801c0003800c00010001000000d10000000c00010001120000ff0f000008000500", @ANYRES32=r1], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 17.596400113s ago: executing program 2 (id=100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x29, 0xa, 0xf9, 0xd, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x788, 0x9, 0x557}}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) close(0x3) r5 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122'], 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x260, 0x1a, 0x400, 0x70bd2a, 0x25dfdbfd, {0x8}, [@typed={0x8, 0xbd, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0x11f, 0x0, 0x0, @u64=0x1}, @generic="af9184276d301744d7a00d8e7c6eeed888812345ee2e1d0302593bdb6da3a1f9fce33d67aa2da85de1146f6062102b3af122f66429b9f66ec5e1f9e32a8d8570ebf0d5a45c3311a2ecca78b49ac66a068060acf7d12b1dec7a022deff8f89bb2dc005d0e6dbc7d4c0e68e05cddf6556b7cc8783485d73fac0189b5abd3995ecc9a7d7809651457fe962771a60fdb878b55f22ad12421", @typed={0x2d, 0xeb, 0x0, 0x0, @binary="cc14f5ef857cd1e1db4ea574a62c2063baa69376d17543e5479304e031be328c227a70be24a35ba5dd"}, @generic="4c746777bb0d9f2c28a63855f1e896bff67a7abf3aa8891bcc225a2bf1b157296b0bc04da6ec226e9453509b298cb0531142245c3c9da44beaafb5a3b8816ba2a5d333dfd2327fae9bd6be99ee189a6e5b46441f51317558a5e544e66f80e44499a56c1026e1c393b6661cb7b3b852d0404a421de53bec96ded08a86ff657a77adf64dc98c4b8dd96e18266be1ae96543a4a13", @generic="b69e92f20d74ddffba8b09a49edfc07bc77fdc64968d7e4b2475ad77a3b90d8846554ddbf017c5cbc0cb7b2bae63a601d4497c8e6925264f59d69c229e7ece5feeda154007e723e999e043ee9f82a4525857a535adfb2b1c57efdba4df5b99c177c0dba07336b22fdf31065df261da630a8a7625070c02af05c24984028d33bc02594982b83cc4f5349d4755deab970c21e6d051341e5f3969dde718972d3b9771527844873a4fdffb4898dae92ac34079802b46dd9e4f6bb567a4a51f324ef4dd14576907add699d8afde9ca5fdf1bc3bd0cc980c047d9c80173db96d57fb"]}, 0x260}, 0x1, 0x0, 0x0, 0x4003}, 0x48044) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002e00180027bd7000e3ffffff040000001980"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 17.596130836s ago: executing program 1 (id=101): syz_emit_ethernet(0xbe, &(0x7f00000005c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private=0xa010102}, {@remote}, {@private=0xa010102}]}]}}}}}}}, 0x0) 17.511321152s ago: executing program 1 (id=102): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101040, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, 0x0, 0x0) (async) write$ppp(r0, 0x0, 0x0) 17.345615029s ago: executing program 2 (id=104): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)='=', 0x5ea}], 0x1}}], 0x1, 0x20000080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 17.345412052s ago: executing program 3 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x6801, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) 17.30985699s ago: executing program 0 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x9, 0xfffffffa, {{0xa, 0x4, 0x2, 0x3e, 0x28, 0x68, 0x0, 0x56, 0x4, 0x0, @multicast2, @private=0xa010102, {[@ssrr={0x89, 0x7, 0x12, [@multicast1]}, @generic={0x82, 0xd, "297445b41c883013c0387b"}]}}}}}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000380)='!\x00', 0x600683, &(0x7f00000003c0)={@align=0x6, {0xba76, 0xb, 0xe6d, 0x6}}, 0x1f9, &(0x7f0000000400), &(0x7f0000000440)=0x9}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x16) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd787, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x48}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, 0x0}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) unshare(0x22020400) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r10, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x8}, 0x18) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x20d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x361, 0x8, 0x7, 0x29000, 0x1, 0xa1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000080)=@raw=[@generic={0x4, 0x2, 0x4, 0x7, 0x7fff}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x4e4, 0x8f, &(0x7f0000000200)=""/143, 0x41100, 0x39, '\x00', r2, @fallback=0x1a, r3, 0x8, &(0x7f00000004c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x1, &(0x7f0000000780)=[r5, r6, r7, r8, r9, r11, r12, r13, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x1, 0x5, 0xc}], 0x10, 0x40}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r16}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r17, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="01002abd7000fddbdf25030000000c0002000700000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="080001"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) 17.248116147s ago: executing program 1 (id=107): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000240), 0x10) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x98, @mcast2, 0x7, 0x1}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x8, 0xf8010000, 0x380, 0x238, 0x238, 0x2b0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='scalable', 0x8) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT6_TABLE(r5, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$ax25(r5, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xffffff1f}}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000f40)=""/4096, 0x34, 0x1000, 0x1}, 0x28) 17.150185059s ago: executing program 3 (id=109): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000200)=0x30) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) 17.041579012s ago: executing program 2 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x67}, @in6={0xa, 0x4e23, 0x7, @remote, 0x1ff}]}, &(0x7f0000000240)=0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0) 17.007750472s ago: executing program 3 (id=111): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f00000000c0)=@isdn={0x22, 0x23, 0x1, 0x5, 0xf5}, 0x80, 0x0}}], 0x1, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f00000000c0)=@isdn={0x22, 0x23, 0x1, 0x5, 0xf5}, 0x80, 0x0}}], 0x1, 0x4000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) (async) 16.957941345s ago: executing program 1 (id=112): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 16.832260772s ago: executing program 3 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x48000) r3 = socket(0x2b, 0x1, 0x0) read(r3, &(0x7f0000000000)=""/108, 0x6c) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0) 16.777263192s ago: executing program 1 (id=115): r0 = socket$inet6(0xa, 0xa, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000040)={r0, 0x0, 0x6, 0x2, 0xc, 0x4, [0x9, 0x4, 0xfffffffffffffc00, 0x4, 0x6, 0x7fffffffffffffff]}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r1 = socket$inet(0x2, 0xa, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x200}, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0x34, &(0x7f0000000200)="a605c3328d4af0b42b64a9ba45dbcbcc1561f01763555f8cd074a9ee6e50fd4036652c1c428dc97a591b26489543524cc32b3adf", 0xda, 0x0, &(0x7f0000000240)="c0cda14b7e340f939df6541a2d53861999e3f9872bc942d6094a42e5ba34aca742593558de485d0d30a1ff4f095e4993f6f8db70ea6bfc66cadbc2ed84e705e8099dad8f3aca110042b839aa958b616eb6511adc0dca34490a2928c4a0b345a32abf9f202041cff161968ea520854861bc52189b19564e86ace646b2a74d07b51375cdc6a1e8bdd0d14dc13b5bf4a3425cb2dd0fde4d35d1d22400a3241f451c8834e47897d6693354182db26600e1dc3133b484c339a71a5a4c5ee3682f264b86830fa6aa98da15bac966127db0b97e5e8ca819df7a90f0bf10"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x198, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x78}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c937e407b580bcc5cfd6915a7a0e03556230a1b0a00cf775"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3e967ebbfef882e10df1f743b4d94f53cd910f456b44048c"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc792a36747f42acbf64df5f492330f400baff1d61f38fef"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c56be65cb3809476c356b4ad1614fea03bfca77de3c9869e"}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f8279d3d207331e368d9b78c0007891cdc467ea613edde6b"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond0\x00'}]}, 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000700)={[{0x2b, 'freezer'}, {0x2d, 'cpuset'}, {0x2b, 'net'}]}, 0x16) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000740)={{r1}, "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"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001740)={r2, 0x2, 0x5}, &(0x7f0000001780)=0x8) socket$inet6(0xa, 0x800, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r7, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001900)={'batadv_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001940)={'bridge_slave_1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = accept4$packet(r8, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000019c0)=0x14, 0x80800) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000001a00)=@req={0x6, 0x9, 0x8, 0x8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001a40), r10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'ip6erspan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x70, r3, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008890) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000410}, 0x4040000) 16.305450224s ago: executing program 4 (id=116): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x10000000000066, 0xa) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01672003c90008f51cb49f858813785f9d4c998d4484e829eddf25068bf61c966eebede24ed0c7adb297b0387ae9a0c4b6210e342662ee7e9d1728e00eb42302b352e3ad7073ae8b7a005b96bc5a220a29b1976c6e3a01365c8e05e03958f64958e58b9a43aa5c5f4f"], 0x7) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r8, 0x5411, &(0x7f0000005280)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x91, 0x1, 0x1, 0xf}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r9 = accept(r6, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) openat$cgroup_pressure(r11, &(0x7f00000002c0)='memory.pressure\x00', 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r12, &(0x7f00000001c0)="34eee967c383039bd8106bf92a4dc36c34e792470edb903c141aff11a3000000000000d4700000cfd562e5ff09885aa331e2aab8c3", &(0x7f0000000080)=@tcp6=r9}, 0x20) sendmsg$inet(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000011c0)="d1", 0x1}], 0x1}, 0x404c0c4) recvmsg$can_bcm(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 16.260605489s ago: executing program 4 (id=117): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002000)="ed", 0x1}], 0x1, 0x0, 0x0, 0x24008040}], 0x1, 0x62048800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0xf, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x90}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x3000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800e3ffffffffffffff00000000000071100600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 15.358334721s ago: executing program 4 (id=118): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x80) 15.254046329s ago: executing program 4 (id=119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) (async, rerun: 64) r6 = accept4$x25(r1, &(0x7f0000000200), &(0x7f0000000240)=0x12, 0x800) (rerun: 64) bind$x25(r6, &(0x7f0000000280), 0x12) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) (async, rerun: 64) mmap$xdp(&(0x7f000073c000/0x1000)=nil, 0x1000, 0x7000000, 0x6e073, r2, 0x2000) 15.17496936s ago: executing program 4 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x1a5, 0x0, &(0x7f0000000780)="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", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (async) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0xff, 0x9, 0x3, 0x8, 0x9, 0xa, 0x5, 0x0, 0x7, 0x1, 0x69, 0x7, 0x3}, 0xe) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000100)=0x1) (async) getsockopt(r3, 0x7fffffff, 0x22cb, &(0x7f0000000640)=""/254, &(0x7f0000000740)=0xfe) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="400012ac80c8aa83cbbc43c7ea9cd4a919900010003b150c00000000000000000000007b3c2d269af5f5cbdca548302d2def8a9bce12400fdd802c9e63d6331addfd38ba7fbf99f31c6e8e94641cecf46a95b16cefcd121495285c03bd2fa984892129f7", @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYBLOB="7888867790aa6225c95b43bf03ae39b90e6b6f403aa0f4296476d1b90085742b7edb4ab40d6032af4103a24a2285c19df6c3d4cb0f5c1b111311f43a60184c51cbdd82b2fdbf9cf3efb0cf3480437a342f0c57ad8668f41a2ceb70c3c481b68255e3933fc6d087d6346e975bc3616e895415e1fd99aad7fc2a9c977fa42303dfc76197ac9b15c743d64ba57662e12004a3edf7c3b6994308139e5eebdf52defd6c06851fd54c152b5416919797e09af6eee4e2b938aa9c0cc6b7f6eefc5261bf95945eafa139ec474fb3476b560c1da58d100ae36c4badc82783f4799002fbb9e27e11", @ANYRES64=r1, @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x48010) 15.116378138s ago: executing program 4 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000050) 2.140941427s ago: executing program 32 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x9, 0xfffffffa, {{0xa, 0x4, 0x2, 0x3e, 0x28, 0x68, 0x0, 0x56, 0x4, 0x0, @multicast2, @private=0xa010102, {[@ssrr={0x89, 0x7, 0x12, [@multicast1]}, @generic={0x82, 0xd, "297445b41c883013c0387b"}]}}}}}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000380)='!\x00', 0x600683, &(0x7f00000003c0)={@align=0x6, {0xba76, 0xb, 0xe6d, 0x6}}, 0x1f9, &(0x7f0000000400), &(0x7f0000000440)=0x9}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x16) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd787, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x48}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, 0x0}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) unshare(0x22020400) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r10, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x8}, 0x18) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x20d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x361, 0x8, 0x7, 0x29000, 0x1, 0xa1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000080)=@raw=[@generic={0x4, 0x2, 0x4, 0x7, 0x7fff}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x4e4, 0x8f, &(0x7f0000000200)=""/143, 0x41100, 0x39, '\x00', r2, @fallback=0x1a, r3, 0x8, &(0x7f00000004c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x1, &(0x7f0000000780)=[r5, r6, r7, r8, r9, r11, r12, r13, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x1, 0x5, 0xc}], 0x10, 0x40}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r16}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r17, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="01002abd7000fddbdf25030000000c0002000700000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="080001"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) 1.117928566s ago: executing program 33 (id=115): r0 = socket$inet6(0xa, 0xa, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000040)={r0, 0x0, 0x6, 0x2, 0xc, 0x4, [0x9, 0x4, 0xfffffffffffffc00, 0x4, 0x6, 0x7fffffffffffffff]}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r1 = socket$inet(0x2, 0xa, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x200}, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0x34, &(0x7f0000000200)="a605c3328d4af0b42b64a9ba45dbcbcc1561f01763555f8cd074a9ee6e50fd4036652c1c428dc97a591b26489543524cc32b3adf", 0xda, 0x0, &(0x7f0000000240)="c0cda14b7e340f939df6541a2d53861999e3f9872bc942d6094a42e5ba34aca742593558de485d0d30a1ff4f095e4993f6f8db70ea6bfc66cadbc2ed84e705e8099dad8f3aca110042b839aa958b616eb6511adc0dca34490a2928c4a0b345a32abf9f202041cff161968ea520854861bc52189b19564e86ace646b2a74d07b51375cdc6a1e8bdd0d14dc13b5bf4a3425cb2dd0fde4d35d1d22400a3241f451c8834e47897d6693354182db26600e1dc3133b484c339a71a5a4c5ee3682f264b86830fa6aa98da15bac966127db0b97e5e8ca819df7a90f0bf10"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x198, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x78}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c937e407b580bcc5cfd6915a7a0e03556230a1b0a00cf775"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3e967ebbfef882e10df1f743b4d94f53cd910f456b44048c"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc792a36747f42acbf64df5f492330f400baff1d61f38fef"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c56be65cb3809476c356b4ad1614fea03bfca77de3c9869e"}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f8279d3d207331e368d9b78c0007891cdc467ea613edde6b"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond0\x00'}]}, 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000700)={[{0x2b, 'freezer'}, {0x2d, 'cpuset'}, {0x2b, 'net'}]}, 0x16) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000740)={{r1}, "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"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001740)={r2, 0x2, 0x5}, &(0x7f0000001780)=0x8) socket$inet6(0xa, 0x800, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r7, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001900)={'batadv_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001940)={'bridge_slave_1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = accept4$packet(r8, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000019c0)=0x14, 0x80800) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000001a00)=@req={0x6, 0x9, 0x8, 0x8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001a40), r10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'ip6erspan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x70, r3, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008890) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000410}, 0x4040000) 1.082296342s ago: executing program 34 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x67}, @in6={0xa, 0x4e23, 0x7, @remote, 0x1ff}]}, &(0x7f0000000240)=0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0) 1.03478144s ago: executing program 35 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x48000) r3 = socket(0x2b, 0x1, 0x0) read(r3, &(0x7f0000000000)=""/108, 0x6c) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0) 0s ago: executing program 36 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000050) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 80.473066][ T5815] cgroup: Unknown subsys name 'net' [ 80.587673][ T5815] cgroup: Unknown subsys name 'cpuset' [ 80.597127][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.236825][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.407791][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.417541][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.426483][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.436041][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.444838][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.453147][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.454847][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.465122][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.475362][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.477135][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.488717][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.495599][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.500580][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.505817][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.514697][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.526582][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.530720][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.541579][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.542950][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.555947][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.564849][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.572419][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.573944][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.586522][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.594053][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.276637][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 85.338590][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.394321][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 85.412489][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.543761][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.562661][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.569949][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.577562][ T5828] bridge_slave_0: entered allmulticast mode [ 85.585068][ T5828] bridge_slave_0: entered promiscuous mode [ 85.628977][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.636333][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.643456][ T5828] bridge_slave_1: entered allmulticast mode [ 85.651443][ T5828] bridge_slave_1: entered promiscuous mode [ 85.740253][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.747606][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.755276][ T5829] bridge_slave_0: entered allmulticast mode [ 85.762450][ T5829] bridge_slave_0: entered promiscuous mode [ 85.815127][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.822305][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.829716][ T5829] bridge_slave_1: entered allmulticast mode [ 85.837109][ T5829] bridge_slave_1: entered promiscuous mode [ 85.844605][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.851875][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.859467][ T5827] bridge_slave_0: entered allmulticast mode [ 85.866753][ T5827] bridge_slave_0: entered promiscuous mode [ 85.878084][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.890084][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.926508][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.933886][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.941352][ T5827] bridge_slave_1: entered allmulticast mode [ 85.948682][ T5827] bridge_slave_1: entered promiscuous mode [ 85.965869][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.973035][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.980788][ T5830] bridge_slave_0: entered allmulticast mode [ 85.988536][ T5830] bridge_slave_0: entered promiscuous mode [ 86.034622][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.041870][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.049264][ T5830] bridge_slave_1: entered allmulticast mode [ 86.056556][ T5830] bridge_slave_1: entered promiscuous mode [ 86.076594][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.099664][ T5828] team0: Port device team_slave_0 added [ 86.130063][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.145035][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.156839][ T5828] team0: Port device team_slave_1 added [ 86.172855][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.180217][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.188246][ T5831] bridge_slave_0: entered allmulticast mode [ 86.195728][ T5831] bridge_slave_0: entered promiscuous mode [ 86.216139][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.239087][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.251101][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.260428][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.267999][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.275293][ T5831] bridge_slave_1: entered allmulticast mode [ 86.282469][ T5831] bridge_slave_1: entered promiscuous mode [ 86.345334][ T5829] team0: Port device team_slave_0 added [ 86.363137][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.370427][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.396636][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.443059][ T5829] team0: Port device team_slave_1 added [ 86.450711][ T5827] team0: Port device team_slave_0 added [ 86.458213][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.465812][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.492238][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.505586][ T5830] team0: Port device team_slave_0 added [ 86.513740][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.534732][ T5827] team0: Port device team_slave_1 added [ 86.550262][ T5830] team0: Port device team_slave_1 added [ 86.558376][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.620052][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.627266][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.653445][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.665600][ T50] Bluetooth: hci0: command tx timeout [ 86.665743][ T5147] Bluetooth: hci2: command tx timeout [ 86.671642][ T5843] Bluetooth: hci4: command tx timeout [ 86.677318][ T5835] Bluetooth: hci1: command tx timeout [ 86.689544][ T5845] Bluetooth: hci3: command tx timeout [ 86.728005][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.743931][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.770571][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.815458][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.822477][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.848581][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.885838][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.892842][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.919174][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.932467][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.939772][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.984635][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.005575][ T5831] team0: Port device team_slave_0 added [ 87.017610][ T5831] team0: Port device team_slave_1 added [ 87.049188][ T5828] hsr_slave_0: entered promiscuous mode [ 87.056039][ T5828] hsr_slave_1: entered promiscuous mode [ 87.075025][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.082033][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.108123][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.196643][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.205007][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.231388][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.269125][ T5829] hsr_slave_0: entered promiscuous mode [ 87.275867][ T5829] hsr_slave_1: entered promiscuous mode [ 87.282116][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 87.288200][ T5829] Cannot create hsr debugfs directory [ 87.301543][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.308708][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.335692][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.372383][ T5827] hsr_slave_0: entered promiscuous mode [ 87.379324][ T5827] hsr_slave_1: entered promiscuous mode [ 87.385931][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 87.391702][ T5827] Cannot create hsr debugfs directory [ 87.470878][ T5830] hsr_slave_0: entered promiscuous mode [ 87.477564][ T5830] hsr_slave_1: entered promiscuous mode [ 87.484006][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 87.489944][ T5830] Cannot create hsr debugfs directory [ 87.590572][ T5831] hsr_slave_0: entered promiscuous mode [ 87.597328][ T5831] hsr_slave_1: entered promiscuous mode [ 87.603450][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 87.609331][ T5831] Cannot create hsr debugfs directory [ 88.079699][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.095435][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.104446][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.115137][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.122988][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.134308][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.151513][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.161124][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.225283][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.246064][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.255038][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.264897][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.272674][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.284445][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.292435][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.302654][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.399120][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.409284][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.418673][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.430345][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.449610][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.460684][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.481610][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.492300][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.590581][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.603994][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.612475][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.622786][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.645229][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.656490][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.671888][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.681844][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.719748][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.735271][ T5835] Bluetooth: hci3: command tx timeout [ 88.735917][ T50] Bluetooth: hci1: command tx timeout [ 88.742753][ T5147] Bluetooth: hci0: command tx timeout [ 88.747501][ T5843] Bluetooth: hci2: command tx timeout [ 88.759168][ T5845] Bluetooth: hci4: command tx timeout [ 88.778571][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.790263][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.798489][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.810042][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.819318][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.829395][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.837711][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.847132][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.909105][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.934050][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.949746][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.957205][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.991203][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.998408][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.039656][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.079434][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.086636][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.127600][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.148691][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.155835][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.183215][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.223178][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.230323][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.266727][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.273903][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.357489][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.402023][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.453176][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.491044][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.498298][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.511032][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.530076][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.537283][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.573432][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.580636][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.593680][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.600866][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.766483][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.937762][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.992555][ T5828] veth0_vlan: entered promiscuous mode [ 90.042272][ T5828] veth1_vlan: entered promiscuous mode [ 90.139422][ T5829] veth0_vlan: entered promiscuous mode [ 90.160774][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.233896][ T5829] veth1_vlan: entered promiscuous mode [ 90.282667][ T5828] veth0_macvtap: entered promiscuous mode [ 90.305756][ T5828] veth1_macvtap: entered promiscuous mode [ 90.325953][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.366866][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.390803][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.426735][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.439978][ T5829] veth0_macvtap: entered promiscuous mode [ 90.466459][ T998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.485595][ T998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.505375][ T5829] veth1_macvtap: entered promiscuous mode [ 90.517213][ T998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.536690][ T998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.651598][ T5830] veth0_vlan: entered promiscuous mode [ 90.669668][ T5831] veth0_vlan: entered promiscuous mode [ 90.677891][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.715709][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.740093][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.750436][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.767628][ T5830] veth1_vlan: entered promiscuous mode [ 90.780894][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.789954][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.816268][ T5147] Bluetooth: hci3: command tx timeout [ 90.816303][ T5835] Bluetooth: hci1: command tx timeout [ 90.821823][ T5845] Bluetooth: hci2: command tx timeout [ 90.827815][ T50] Bluetooth: hci0: command tx timeout [ 90.832535][ T5845] Bluetooth: hci4: command tx timeout [ 90.846155][ T5831] veth1_vlan: entered promiscuous mode [ 90.878029][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.896608][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.925842][ T5827] veth0_vlan: entered promiscuous mode [ 90.975673][ T5827] veth1_vlan: entered promiscuous mode [ 90.999031][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.010472][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.066159][ T5830] veth0_macvtap: entered promiscuous mode [ 91.109230][ T5831] veth0_macvtap: entered promiscuous mode [ 91.122180][ T5830] veth1_macvtap: entered promiscuous mode [ 91.126923][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.151606][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.157160][ T5831] veth1_macvtap: entered promiscuous mode [ 91.165295][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.281026][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.298302][ T5827] veth0_macvtap: entered promiscuous mode [ 91.312279][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.319333][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.322908][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.345784][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.365966][ T5827] veth1_macvtap: entered promiscuous mode [ 91.423036][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.470427][ T998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.482531][ T998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.492306][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.492696][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.519695][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.531335][ T998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.540840][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.565905][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.610399][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.680182][ T5958] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 91.682915][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.702696][ T5958] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.720379][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.747078][ T5958] .`: renamed from bond0 (while UP) [ 91.772561][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.798945][ T10] cfg80211: failed to load regulatory.db [ 91.840704][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.863118][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.885670][ T5964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 91.961887][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.994617][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.048657][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.077043][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.121050][ T5971] bridge1: entered promiscuous mode [ 92.128433][ T5971] bridge1: entered allmulticast mode [ 92.138589][ T5971] team0: Port device bridge1 added [ 92.146108][ T5974] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 92.183256][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.193029][ T5974] bridge_slave_1: left allmulticast mode [ 92.200737][ T5974] bridge_slave_1: left promiscuous mode [ 92.208645][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.223048][ T5974] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.240233][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.271395][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.321185][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.357695][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.458135][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.472485][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.557630][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.593681][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.652398][ T5982] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.733102][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.741411][ T5982] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.756873][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.895687][ T50] Bluetooth: hci0: command tx timeout [ 92.901481][ T5835] Bluetooth: hci1: command tx timeout [ 92.914775][ T5843] Bluetooth: hci3: command tx timeout [ 92.915895][ T50] Bluetooth: hci4: command tx timeout [ 92.920789][ T5147] Bluetooth: hci2: command tx timeout [ 93.206770][ T6004] xt_hashlimit: size too large, truncated to 1048576 [ 93.210026][ T5997] vlan2: entered promiscuous mode [ 93.227903][ T5997] bridge0: entered promiscuous mode [ 93.470399][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 93.517563][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 93.823259][ T6026] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 93.831133][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 94.027136][ T6033] netlink: 'syz.2.25': attribute type 1 has an invalid length. [ 94.063038][ T6033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25'. [ 94.433660][ T6049] ieee802154 phy0 wpan0: encryption failed: -90 [ 94.635639][ T6054] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 94.659963][ T6054] netlink: 228 bytes leftover after parsing attributes in process `syz.1.32'. [ 94.761813][ T6052] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.469038][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 95.663659][ T6090] vlan2: entered promiscuous mode [ 95.686896][ T6090] bridge0: entered promiscuous mode [ 96.088366][ T6113] IPVS: Error connecting to the multicast addr [ 96.641634][ T6137] xt_hashlimit: overflow, rate too high: 0 [ 97.178695][ T6146] bond0: option min_links: invalid value (18446744073709551614) [ 97.191404][ T6146] bond0: option min_links: allowed values 0 - 2147483647 [ 97.204811][ T6146] bond0 (unregistering): Released all slaves [ 97.280568][ T6147] vlan2: entered promiscuous mode [ 97.286294][ T6147] bridge0: entered promiscuous mode [ 97.347506][ T6151] batadv1: entered allmulticast mode [ 97.449064][ T6156] xt_l2tp: missing protocol rule (udp|l2tpip) [ 97.728933][ T6169] __nla_validate_parse: 1 callbacks suppressed [ 97.728950][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.67'. [ 97.757359][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.765171][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.875655][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 98.189258][ T6194] xt_l2tp: missing protocol rule (udp|l2tpip) [ 98.199686][ T6195] netlink: 'syz.3.76': attribute type 84 has an invalid length. [ 98.423796][ T6205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.80'. [ 98.556500][ T6207] nbd0: detected capacity change from 0 to 127 [ 98.653797][ T5147] block nbd0: Receive control failed (result -104) [ 98.680406][ T6214] netlink: 27 bytes leftover after parsing attributes in process `syz.4.83'. [ 98.763667][ T6214] netlink: 'syz.4.83': attribute type 29 has an invalid length. [ 98.794042][ T6224] vlan2: entered promiscuous mode [ 98.799362][ T6224] bridge0: entered promiscuous mode [ 99.091585][ T6232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.147400][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 99.173946][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.91'. [ 99.194249][ T6237] openvswitch: netlink: Unknown nsh attribute 0 [ 99.228438][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 99.246273][ T6241] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.92'. [ 99.325868][ T6239] delete_channel: no stack [ 99.340972][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 99.468535][ T6244] hsr_slave_1 (unregistering): left promiscuous mode [ 99.489302][ T6252] x_tables: duplicate underflow at hook 3 [ 99.848962][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 99.859361][ T6266] bond1: entered promiscuous mode [ 99.869638][ T6266] bond1: entered allmulticast mode [ 99.885678][ T6266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.114493][ T6284] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.220225][ T6286] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 100.297113][ T6291] netlink: 'syz.3.109': attribute type 6 has an invalid length. [ 100.507350][ T6303] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 100.648182][ T6309] FAULT_INJECTION: forcing a failure. [ 100.648182][ T6309] name failslab, interval 1, probability 0, space 0, times 1 [ 100.663919][ T6309] CPU: 0 UID: 0 PID: 6309 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT(full) [ 100.663947][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.663967][ T6309] Call Trace: [ 100.663975][ T6309] [ 100.663983][ T6309] dump_stack_lvl+0xe8/0x150 [ 100.664027][ T6309] should_fail_ex+0x412/0x560 [ 100.664062][ T6309] should_failslab+0xa8/0x100 [ 100.664087][ T6309] __kmalloc_cache_noprof+0x88/0x660 [ 100.664129][ T6309] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 100.664167][ T6309] ? sctp_add_bind_addr+0x8c/0x370 [ 100.664194][ T6309] sctp_add_bind_addr+0x8c/0x370 [ 100.664221][ T6309] sctp_copy_local_addr_list+0x314/0x4f0 [ 100.664248][ T6309] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 100.664272][ T6309] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 100.664298][ T6309] ? sctp_v6_is_any+0x64/0x80 [ 100.664324][ T6309] ? sctp_copy_one_addr+0x93/0x360 [ 100.664350][ T6309] sctp_bind_addr_copy+0xb3/0x3c0 [ 100.664394][ T6309] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 100.664433][ T6309] sctp_connect_new_asoc+0x2ff/0x6b0 [ 100.664466][ T6309] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 100.664504][ T6309] ? __local_bh_enable_ip+0xd0/0x130 [ 100.664533][ T6309] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 100.664554][ T6309] ? security_sctp_bind_connect+0x7e/0x2c0 [ 100.664582][ T6309] sctp_sendmsg+0x1528/0x2c10 [ 100.664609][ T6309] ? is_bpf_text_address+0x26/0x2b0 [ 100.664652][ T6309] ? __pfx_sctp_sendmsg+0x10/0x10 [ 100.664685][ T6309] ? aa_sk_perm+0x6d5/0x900 [ 100.664722][ T6309] ? __pfx_aa_sk_perm+0x10/0x10 [ 100.664753][ T6309] ? sock_rps_record_flow+0x19/0x350 [ 100.664778][ T6309] ? inet_sendmsg+0x2f4/0x370 [ 100.664803][ T6309] ____sys_sendmsg+0x80a/0x9f0 [ 100.664847][ T6309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.664891][ T6309] ? import_iovec+0x73/0xa0 [ 100.664917][ T6309] ___sys_sendmsg+0x2a5/0x360 [ 100.664949][ T6309] ? __lock_acquire+0x6b5/0x2cf0 [ 100.664987][ T6309] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.665064][ T6309] ? __fget_files+0x2a/0x420 [ 100.665091][ T6309] ? __fget_files+0x3a0/0x420 [ 100.665138][ T6309] __x64_sys_sendmsg+0x1bd/0x2a0 [ 100.665174][ T6309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.665217][ T6309] ? __pfx_ksys_write+0x10/0x10 [ 100.665258][ T6309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.665281][ T6309] do_syscall_64+0x15f/0xf80 [ 100.665306][ T6309] ? trace_irq_disable+0x3b/0x140 [ 100.665329][ T6309] ? clear_bhb_loop+0x40/0x90 [ 100.665356][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.665377][ T6309] RIP: 0033:0x7f8a52b9c819 [ 100.665403][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.665421][ T6309] RSP: 002b:00007f8a53b1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.665445][ T6309] RAX: ffffffffffffffda RBX: 00007f8a52e15fa0 RCX: 00007f8a52b9c819 [ 100.665460][ T6309] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000005 [ 100.665474][ T6309] RBP: 00007f8a53b1a090 R08: 0000000000000000 R09: 0000000000000000 [ 100.665487][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.665499][ T6309] R13: 00007f8a52e16038 R14: 00007f8a52e15fa0 R15: 00007ffe428f1ef8 [ 100.665533][ T6309] [ 115.337221][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.346344][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.356614][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.367061][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.374842][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.531893][ T6340] chnl_net:caif_netlink_parms(): no params data found [ 115.613476][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.622245][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.629868][ T6340] bridge_slave_0: entered allmulticast mode [ 115.637966][ T6340] bridge_slave_0: entered promiscuous mode [ 115.646255][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.653426][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.662215][ T6340] bridge_slave_1: entered allmulticast mode [ 115.669833][ T6340] bridge_slave_1: entered promiscuous mode [ 115.705260][ T6340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.720045][ T6340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.752257][ T6340] team0: Port device team_slave_0 added [ 115.765745][ T6340] team0: Port device team_slave_1 added [ 115.795392][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.803605][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.829817][ T6340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.843987][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.851313][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.879120][ T6340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.923499][ T6340] hsr_slave_0: entered promiscuous mode [ 115.930048][ T6340] hsr_slave_1: entered promiscuous mode [ 115.937155][ T6340] debugfs: 'hsr0' already exists in 'hsr' [ 115.942946][ T6340] Cannot create hsr debugfs directory [ 116.507753][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.519094][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.528257][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.537467][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.538827][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.557237][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.560038][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.576602][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.600039][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.604971][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 116.615951][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.626726][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 116.648575][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 116.663251][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 116.671650][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 117.041404][ T6355] chnl_net:caif_netlink_parms(): no params data found [ 117.130858][ T6352] chnl_net:caif_netlink_parms(): no params data found [ 117.191719][ T6351] chnl_net:caif_netlink_parms(): no params data found [ 117.231519][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.238824][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.246120][ T6355] bridge_slave_0: entered allmulticast mode [ 117.253610][ T6355] bridge_slave_0: entered promiscuous mode [ 117.285377][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.292582][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.303644][ T6355] bridge_slave_1: entered allmulticast mode [ 117.311124][ T6355] bridge_slave_1: entered promiscuous mode [ 117.423575][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.443564][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.451156][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.458364][ T5147] Bluetooth: hci5: command tx timeout [ 117.466507][ T6352] bridge_slave_0: entered allmulticast mode [ 117.474878][ T6352] bridge_slave_0: entered promiscuous mode [ 117.487430][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.513528][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.521086][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.529081][ T6352] bridge_slave_1: entered allmulticast mode [ 117.537392][ T6352] bridge_slave_1: entered promiscuous mode [ 117.577505][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.587845][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.595590][ T6351] bridge_slave_0: entered allmulticast mode [ 117.603567][ T6351] bridge_slave_0: entered promiscuous mode [ 117.623335][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 117.633555][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 117.642931][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 117.654688][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 117.662888][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 117.684768][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.692473][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.704218][ T6351] bridge_slave_1: entered allmulticast mode [ 117.714767][ T6351] bridge_slave_1: entered promiscuous mode [ 117.737166][ T6355] team0: Port device team_slave_0 added [ 117.755290][ T6352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.768157][ T6352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.779625][ T6355] team0: Port device team_slave_1 added [ 117.800151][ T6351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.858324][ T6351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.870805][ T6352] team0: Port device team_slave_0 added [ 117.901237][ T6352] team0: Port device team_slave_1 added [ 117.919706][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.926851][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.952981][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.990033][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.997438][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.027403][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.040435][ T6351] team0: Port device team_slave_0 added [ 118.052281][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.059684][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.087240][ T6352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.108861][ T6351] team0: Port device team_slave_1 added [ 118.121764][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.129313][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.155734][ T6352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.248974][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.256215][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.283046][ T6351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.300655][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.308143][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.335829][ T6351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.382915][ T6352] hsr_slave_0: entered promiscuous mode [ 118.389614][ T6352] hsr_slave_1: entered promiscuous mode [ 118.396222][ T6352] debugfs: 'hsr0' already exists in 'hsr' [ 118.401962][ T6352] Cannot create hsr debugfs directory [ 118.419995][ T6355] hsr_slave_0: entered promiscuous mode [ 118.428841][ T6355] hsr_slave_1: entered promiscuous mode [ 118.435470][ T6355] debugfs: 'hsr0' already exists in 'hsr' [ 118.441260][ T6355] Cannot create hsr debugfs directory [ 118.570265][ T6351] hsr_slave_0: entered promiscuous mode [ 118.576818][ T6351] hsr_slave_1: entered promiscuous mode [ 118.582927][ T6351] debugfs: 'hsr0' already exists in 'hsr' [ 118.588999][ T6351] Cannot create hsr debugfs directory [ 118.656657][ T5147] Bluetooth: hci6: command tx timeout [ 118.658359][ T50] Bluetooth: hci7: command tx timeout [ 118.734941][ T50] Bluetooth: hci8: command tx timeout [ 118.956344][ T6376] chnl_net:caif_netlink_parms(): no params data found [ 119.079171][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.097743][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.105090][ T6376] bridge_slave_0: entered allmulticast mode [ 119.112336][ T6376] bridge_slave_0: entered promiscuous mode [ 119.121302][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.128782][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.137527][ T6376] bridge_slave_1: entered allmulticast mode [ 119.149229][ T6376] bridge_slave_1: entered promiscuous mode [ 119.195643][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.208469][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.253780][ T6376] team0: Port device team_slave_0 added [ 119.263447][ T6376] team0: Port device team_slave_1 added [ 119.313299][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.320465][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.349600][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.369875][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.377195][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.404667][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.462030][ T6376] hsr_slave_0: entered promiscuous mode [ 119.469027][ T6376] hsr_slave_1: entered promiscuous mode [ 119.475780][ T6376] debugfs: 'hsr0' already exists in 'hsr' [ 119.481569][ T6376] Cannot create hsr debugfs directory [ 119.534487][ T50] Bluetooth: hci5: command tx timeout [ 119.694368][ T50] Bluetooth: hci9: command tx timeout [ 120.734501][ T50] Bluetooth: hci7: command tx timeout [ 120.744552][ T50] Bluetooth: hci6: command tx timeout [ 120.815248][ T50] Bluetooth: hci8: command tx timeout [ 121.614470][ T50] Bluetooth: hci5: command tx timeout [ 121.784415][ T50] Bluetooth: hci9: command tx timeout [ 122.814597][ T5147] Bluetooth: hci6: command tx timeout [ 122.818636][ T50] Bluetooth: hci7: command tx timeout [ 122.895052][ T50] Bluetooth: hci8: command tx timeout [ 123.694289][ T50] Bluetooth: hci5: command tx timeout [ 123.854406][ T50] Bluetooth: hci9: command tx timeout [ 124.894480][ T50] Bluetooth: hci7: command tx timeout [ 124.894503][ T5147] Bluetooth: hci6: command tx timeout [ 124.974780][ T5147] Bluetooth: hci8: command tx timeout [ 125.934332][ T5147] Bluetooth: hci9: command tx timeout [ 128.896544][ T25] block nbd0: Possible stuck request ffff8880273c5080: control (read@0,1024B). Runtime 30 seconds [ 128.908403][ T25] block nbd0: Possible stuck request ffff8880273c5240: control (read@1024,1024B). Runtime 30 seconds [ 128.919467][ T25] block nbd0: Possible stuck request ffff8880273c5400: control (read@2048,1024B). Runtime 30 seconds [ 128.930423][ T25] block nbd0: Possible stuck request ffff8880273c55c0: control (read@3072,1024B). Runtime 30 seconds [ 132.737014][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.744920][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.977530][ T25] block nbd0: Possible stuck request ffff8880273c5080: control (read@0,1024B). Runtime 60 seconds [ 158.988662][ T25] block nbd0: Possible stuck request ffff8880273c5240: control (read@1024,1024B). Runtime 60 seconds [ 158.999728][ T25] block nbd0: Possible stuck request ffff8880273c5400: control (read@2048,1024B). Runtime 60 seconds [ 159.010718][ T25] block nbd0: Possible stuck request ffff8880273c55c0: control (read@3072,1024B). Runtime 60 seconds [ 160.278470][ T5196] udevd[5196]: worker [5895] /devices/virtual/block/nbd0 is taking a long time [ 175.882277][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 175.891849][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 175.899709][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 175.909489][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 175.917473][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 176.070253][ T6391] chnl_net:caif_netlink_parms(): no params data found [ 176.149412][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.156927][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.164232][ T6391] bridge_slave_0: entered allmulticast mode [ 176.171522][ T6391] bridge_slave_0: entered promiscuous mode [ 176.183613][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.191343][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.198618][ T6391] bridge_slave_1: entered allmulticast mode [ 176.205948][ T6391] bridge_slave_1: entered promiscuous mode [ 176.236464][ T6391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.248404][ T6391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.281210][ T6391] team0: Port device team_slave_0 added [ 176.290777][ T6391] team0: Port device team_slave_1 added [ 176.316539][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.323501][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.349986][ T6391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.363648][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.370769][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.398035][ T6391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.446153][ T6391] hsr_slave_0: entered promiscuous mode [ 176.452636][ T6391] hsr_slave_1: entered promiscuous mode [ 176.459035][ T6391] debugfs: 'hsr0' already exists in 'hsr' [ 176.464997][ T6391] Cannot create hsr debugfs directory [ 177.067645][ T5147] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 177.080529][ T5147] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 177.089467][ T5147] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 177.103904][ T5843] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 177.105830][ T5845] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 177.117317][ T5843] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 177.127237][ T5845] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 177.135291][ T5845] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 177.152494][ T5845] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 177.163592][ T5845] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 177.246154][ T5845] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 177.257772][ T5845] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 177.266990][ T5845] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 177.276718][ T5845] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 177.285880][ T5845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 177.628480][ T6404] chnl_net:caif_netlink_parms(): no params data found [ 177.675651][ T6402] chnl_net:caif_netlink_parms(): no params data found [ 177.788430][ T6406] chnl_net:caif_netlink_parms(): no params data found [ 177.867617][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.875032][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.882209][ T6404] bridge_slave_0: entered allmulticast mode [ 177.889789][ T6404] bridge_slave_0: entered promiscuous mode [ 177.924696][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.931905][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.939319][ T6404] bridge_slave_1: entered allmulticast mode [ 177.947129][ T6404] bridge_slave_1: entered promiscuous mode [ 177.993546][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.000891][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.008252][ T6402] bridge_slave_0: entered allmulticast mode [ 178.014757][ T5845] Bluetooth: hci10: command tx timeout [ 178.020656][ T6402] bridge_slave_0: entered promiscuous mode [ 178.046175][ T6404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.055735][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.063004][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.070564][ T6402] bridge_slave_1: entered allmulticast mode [ 178.078522][ T6402] bridge_slave_1: entered promiscuous mode [ 178.099531][ T6404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.120390][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.128547][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.135918][ T6406] bridge_slave_0: entered allmulticast mode [ 178.143330][ T6406] bridge_slave_0: entered promiscuous mode [ 178.172836][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.180558][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.189286][ T6406] bridge_slave_1: entered allmulticast mode [ 178.197167][ T6406] bridge_slave_1: entered promiscuous mode [ 178.232961][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.259312][ T6406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.270922][ T6404] team0: Port device team_slave_0 added [ 178.279412][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.310532][ T6406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.344080][ T6404] team0: Port device team_slave_1 added [ 178.385972][ T6402] team0: Port device team_slave_0 added [ 178.435143][ T6402] team0: Port device team_slave_1 added [ 178.460174][ T6406] team0: Port device team_slave_0 added [ 178.467287][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.476679][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.508099][ T6404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.528859][ T5147] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 178.540369][ T5147] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 178.549144][ T5147] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 178.557567][ T5147] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 178.566313][ T6406] team0: Port device team_slave_1 added [ 178.568694][ T5147] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 178.576774][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.586927][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.613243][ T6404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.630397][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.638978][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.672767][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.707708][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.715370][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.742844][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.765709][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.772712][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.800202][ T6406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.813362][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.821801][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.849532][ T6406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.965946][ T6404] hsr_slave_0: entered promiscuous mode [ 178.972566][ T6404] hsr_slave_1: entered promiscuous mode [ 178.979549][ T6404] debugfs: 'hsr0' already exists in 'hsr' [ 178.985571][ T6404] Cannot create hsr debugfs directory [ 179.001723][ T6402] hsr_slave_0: entered promiscuous mode [ 179.008817][ T6402] hsr_slave_1: entered promiscuous mode [ 179.016362][ T6402] debugfs: 'hsr0' already exists in 'hsr' [ 179.022122][ T6402] Cannot create hsr debugfs directory [ 179.035231][ T6406] hsr_slave_0: entered promiscuous mode [ 179.041729][ T6406] hsr_slave_1: entered promiscuous mode [ 179.049747][ T6406] debugfs: 'hsr0' already exists in 'hsr' [ 179.056281][ T6406] Cannot create hsr debugfs directory [ 179.214229][ T5845] Bluetooth: hci12: command tx timeout [ 179.224629][ T5845] Bluetooth: hci11: command tx timeout [ 179.374295][ T5845] Bluetooth: hci13: command tx timeout [ 179.555827][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 179.644616][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.651864][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.659375][ T6427] bridge_slave_0: entered allmulticast mode [ 179.669691][ T6427] bridge_slave_0: entered promiscuous mode [ 179.678641][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.686730][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.694026][ T6427] bridge_slave_1: entered allmulticast mode [ 179.703553][ T6427] bridge_slave_1: entered promiscuous mode [ 179.743487][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.756076][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.793072][ T6427] team0: Port device team_slave_0 added [ 179.810314][ T6427] team0: Port device team_slave_1 added [ 179.855730][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.862880][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.890591][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.903206][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.910431][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.937032][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.995439][ T6427] hsr_slave_0: entered promiscuous mode [ 180.002160][ T6427] hsr_slave_1: entered promiscuous mode [ 180.008544][ T6427] debugfs: 'hsr0' already exists in 'hsr' [ 180.014588][ T6427] Cannot create hsr debugfs directory [ 180.100844][ T5845] Bluetooth: hci10: command tx timeout [ 180.654714][ T5845] Bluetooth: hci14: command tx timeout [ 181.294321][ T5845] Bluetooth: hci11: command tx timeout [ 181.294899][ T5147] Bluetooth: hci12: command tx timeout [ 181.464245][ T5147] Bluetooth: hci13: command tx timeout [ 182.174365][ T5147] Bluetooth: hci10: command tx timeout [ 182.735781][ T5147] Bluetooth: hci14: command tx timeout [ 183.374347][ T5845] Bluetooth: hci11: command tx timeout [ 183.380481][ T5147] Bluetooth: hci12: command tx timeout [ 183.534472][ T5845] Bluetooth: hci13: command tx timeout [ 184.255785][ T5845] Bluetooth: hci10: command tx timeout [ 184.814318][ T5845] Bluetooth: hci14: command tx timeout [ 185.454323][ T5845] Bluetooth: hci12: command tx timeout [ 185.464563][ T5845] Bluetooth: hci11: command tx timeout [ 185.614405][ T5845] Bluetooth: hci13: command tx timeout [ 186.894449][ T5845] Bluetooth: hci14: command tx timeout [ 189.056943][ T25] block nbd0: Possible stuck request ffff8880273c5080: control (read@0,1024B). Runtime 90 seconds [ 189.067737][ T25] block nbd0: Possible stuck request ffff8880273c5240: control (read@1024,1024B). Runtime 90 seconds [ 189.078858][ T25] block nbd0: Possible stuck request ffff8880273c5400: control (read@2048,1024B). Runtime 90 seconds [ 189.091930][ T25] block nbd0: Possible stuck request ffff8880273c55c0: control (read@3072,1024B). Runtime 90 seconds [ 194.178445][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.185093][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.619623][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 211.619647][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 211.619688][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.629820][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 211.643804][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 219.135663][ T25] block nbd0: Possible stuck request ffff8880273c5080: control (read@0,1024B). Runtime 120 seconds [ 219.147539][ T25] block nbd0: Possible stuck request ffff8880273c5240: control (read@1024,1024B). Runtime 120 seconds [ 219.158920][ T25] block nbd0: Possible stuck request ffff8880273c5400: control (read@2048,1024B). Runtime 120 seconds [ 219.170021][ T25] block nbd0: Possible stuck request ffff8880273c55c0: control (read@3072,1024B). Runtime 120 seconds [ 235.955062][ T5843] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 235.963113][ T5843] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 235.971193][ T5843] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 235.979959][ T5843] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 235.990335][ T5843] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 236.155700][ T6442] chnl_net:caif_netlink_parms(): no params data found [ 236.237160][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.244460][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.251645][ T6442] bridge_slave_0: entered allmulticast mode [ 236.260197][ T6442] bridge_slave_0: entered promiscuous mode [ 236.269280][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.276578][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.284083][ T6442] bridge_slave_1: entered allmulticast mode [ 236.293810][ T6442] bridge_slave_1: entered promiscuous mode [ 236.325013][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.338397][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.371041][ T6442] team0: Port device team_slave_0 added [ 236.379613][ T6442] team0: Port device team_slave_1 added [ 236.410016][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.417305][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.443947][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.456824][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.463766][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.490213][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.539957][ T6442] hsr_slave_0: entered promiscuous mode [ 236.547154][ T6442] hsr_slave_1: entered promiscuous mode [ 236.553409][ T6442] debugfs: 'hsr0' already exists in 'hsr' [ 236.559230][ T6442] Cannot create hsr debugfs directory [ 237.015025][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 237.023219][ T5843] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 237.031711][ T5843] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 237.040190][ T5843] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 237.048068][ T5843] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 237.220124][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 237.306168][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.315567][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.322824][ T6451] bridge_slave_0: entered allmulticast mode [ 237.330410][ T6451] bridge_slave_0: entered promiscuous mode [ 237.338846][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.346310][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.353521][ T6451] bridge_slave_1: entered allmulticast mode [ 237.361027][ T6451] bridge_slave_1: entered promiscuous mode [ 237.391625][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.405411][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.439998][ T6451] team0: Port device team_slave_0 added [ 237.448223][ T6451] team0: Port device team_slave_1 added [ 237.476168][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.483121][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.509152][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.523976][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.531072][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.557443][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.603739][ T6451] hsr_slave_0: entered promiscuous mode [ 237.610292][ T6451] hsr_slave_1: entered promiscuous mode [ 237.616840][ T6451] debugfs: 'hsr0' already exists in 'hsr' [ 237.624298][ T6451] Cannot create hsr debugfs directory [ 238.014705][ T5843] Bluetooth: hci15: command tx timeout [ 238.123043][ T5835] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 238.135600][ T5835] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 238.146673][ T5841] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 238.157603][ T5841] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 238.158222][ T5147] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 238.176020][ T5147] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 238.179901][ T5841] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 238.189693][ T5147] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 238.203052][ T5147] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 238.211510][ T5147] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 238.518077][ T6462] chnl_net:caif_netlink_parms(): no params data found [ 238.591826][ T6461] chnl_net:caif_netlink_parms(): no params data found [ 238.669985][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.677341][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.686306][ T6462] bridge_slave_0: entered allmulticast mode [ 238.693812][ T6462] bridge_slave_0: entered promiscuous mode [ 238.715965][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.723283][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.730915][ T6462] bridge_slave_1: entered allmulticast mode [ 238.738912][ T6462] bridge_slave_1: entered promiscuous mode [ 238.793215][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.806732][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.816662][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.823997][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.831647][ T6461] bridge_slave_0: entered allmulticast mode [ 238.839066][ T6461] bridge_slave_0: entered promiscuous mode [ 238.860146][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.867927][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.875469][ T6461] bridge_slave_1: entered allmulticast mode [ 238.882731][ T6461] bridge_slave_1: entered promiscuous mode [ 238.915497][ T6462] team0: Port device team_slave_0 added [ 238.934383][ T6462] team0: Port device team_slave_1 added [ 238.943738][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.975714][ T6461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.022782][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.030374][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.058800][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.090680][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.100215][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.128024][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.139122][ T5841] Bluetooth: hci16: command tx timeout [ 239.153702][ T6461] team0: Port device team_slave_0 added [ 239.182222][ T6461] team0: Port device team_slave_1 added [ 239.222816][ T5147] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 239.232923][ T5147] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 239.242412][ T5147] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 239.251576][ T5147] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 239.264244][ T5147] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 239.292567][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.301144][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.328262][ T6461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.358733][ T6462] hsr_slave_0: entered promiscuous mode [ 239.367280][ T6462] hsr_slave_1: entered promiscuous mode [ 239.373425][ T6462] debugfs: 'hsr0' already exists in 'hsr' [ 239.380352][ T6462] Cannot create hsr debugfs directory [ 239.388349][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.396242][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.422857][ T6461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.499622][ T6461] hsr_slave_0: entered promiscuous mode [ 239.506394][ T6461] hsr_slave_1: entered promiscuous mode [ 239.512756][ T6461] debugfs: 'hsr0' already exists in 'hsr' [ 239.518661][ T6461] Cannot create hsr debugfs directory [ 239.880613][ T6478] chnl_net:caif_netlink_parms(): no params data found [ 239.971187][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.979812][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.987161][ T6478] bridge_slave_0: entered allmulticast mode [ 239.995226][ T6478] bridge_slave_0: entered promiscuous mode [ 240.011387][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.019801][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.027288][ T6478] bridge_slave_1: entered allmulticast mode [ 240.035555][ T6478] bridge_slave_1: entered promiscuous mode [ 240.069668][ T6478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.084797][ T6478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.094425][ T5841] Bluetooth: hci15: command tx timeout [ 240.134631][ T6478] team0: Port device team_slave_0 added [ 240.143244][ T6478] team0: Port device team_slave_1 added [ 240.189134][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.196956][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.223009][ T6478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.236427][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.243401][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.271850][ T6478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.275219][ T5147] Bluetooth: hci18: command tx timeout [ 240.289645][ T5835] Bluetooth: hci17: command tx timeout [ 240.374847][ T6478] hsr_slave_0: entered promiscuous mode [ 240.381435][ T6478] hsr_slave_1: entered promiscuous mode [ 240.389508][ T6478] debugfs: 'hsr0' already exists in 'hsr' [ 240.395422][ T6478] Cannot create hsr debugfs directory [ 241.214592][ T5147] Bluetooth: hci16: command tx timeout [ 241.294240][ T5147] Bluetooth: hci19: command tx timeout [ 242.174565][ T5147] Bluetooth: hci15: command tx timeout [ 242.345089][ T5147] Bluetooth: hci18: command tx timeout [ 242.351017][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 242.352124][ T5849] Bluetooth: hci6: command 0x0406 tx timeout [ 242.364239][ T5147] Bluetooth: hci8: command 0x0406 tx timeout [ 242.367374][ T5845] Bluetooth: hci9: command 0x0406 tx timeout [ 242.372858][ T5842] Bluetooth: hci7: command 0x0406 tx timeout [ 242.382731][ T5842] Bluetooth: hci17: command tx timeout [ 243.294408][ T50] Bluetooth: hci16: command tx timeout [ 243.374372][ T50] Bluetooth: hci19: command tx timeout [ 244.096187][ T31] INFO: task syz.0.106:6286 blocked for more than 143 seconds. [ 244.103899][ T31] Not tainted syzkaller #0 [ 244.108999][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.117919][ T31] task:syz.0.106 state:D stack:25416 pid:6286 tgid:6285 ppid:5830 task_flags:0x480140 flags:0x00080002 [ 244.130228][ T31] Call Trace: [ 244.133511][ T31] [ 244.136664][ T31] __schedule+0x17b4/0x5680 [ 244.141261][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 244.146278][ T31] ? schedule+0x90/0x360 [ 244.151131][ T31] schedule+0x164/0x360 [ 244.155737][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 244.161358][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 244.167737][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 244.175627][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 244.182046][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 244.188707][ T31] nbd_set_size+0x454/0x680 [ 244.193276][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 244.198887][ T31] ? nla_memcpy+0x5b/0xc0 [ 244.203293][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 244.208757][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 244.215179][ T31] ? rcu_is_watching+0x15/0xb0 [ 244.220018][ T31] ? trace_kmalloc+0x2a/0xf0 [ 244.225069][ T31] ? __nla_parse+0x40/0x60 [ 244.229559][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 244.236108][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 244.243060][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 244.257937][ T50] Bluetooth: hci15: command tx timeout [ 244.264986][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 244.294206][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 244.300781][ T31] genl_rcv_msg+0x61c/0x7a0 [ 244.309582][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.314783][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 244.320579][ T31] netlink_rcv_skb+0x232/0x4b0 [ 244.325486][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.330609][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.336560][ T31] ? down_read+0x270/0x2e0 [ 244.341073][ T31] ? genl_rcv+0xd/0x40 [ 244.345247][ T31] genl_rcv+0x28/0x40 [ 244.349268][ T31] netlink_unicast+0x75c/0x8e0 [ 244.354206][ T31] netlink_sendmsg+0x813/0xb40 [ 244.359050][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.371668][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 244.376793][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.383327][ T31] ____sys_sendmsg+0x972/0x9f0 [ 244.388482][ T31] ? __might_fault+0xaf/0x130 [ 244.393269][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.400605][ T31] ? import_iovec+0x73/0xa0 [ 244.406561][ T31] ___sys_sendmsg+0x2a5/0x360 [ 244.411329][ T31] ? try_to_wake_up+0x828/0x1380 [ 244.416858][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.422144][ T31] ? futex_wake+0x4ac/0x580 [ 244.424781][ T50] Bluetooth: hci17: command tx timeout [ 244.426761][ T5835] Bluetooth: hci18: command tx timeout [ 244.427257][ T31] ? call_rcu+0x644/0x890 [ 244.427299][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.427330][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.427383][ T31] ? rcu_is_watching+0x15/0xb0 [ 244.427419][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.427453][ T31] do_syscall_64+0x15f/0xf80 [ 244.427475][ T31] ? trace_irq_disable+0x3b/0x140 [ 244.427496][ T31] ? clear_bhb_loop+0x40/0x90 [ 244.427518][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.427548][ T31] RIP: 0033:0x7fbf50d9c819 [ 244.427578][ T31] RSP: 002b:00007fbf51beb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.427600][ T31] RAX: ffffffffffffffda RBX: 00007fbf51015fa0 RCX: 00007fbf50d9c819 [ 244.427614][ T31] RDX: 0000000020040080 RSI: 00002000000003c0 RDI: 000000000000000b [ 244.427627][ T31] RBP: 00007fbf50e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 244.427638][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.427650][ T31] R13: 00007fbf51016038 R14: 00007fbf51015fa0 R15: 00007ffd9968c338 [ 244.427726][ T31] [ 244.544396][ T31] INFO: task syz.2.110:6296 blocked for more than 143 seconds. [ 244.552001][ T31] Not tainted syzkaller #0 [ 244.557037][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.565792][ T31] task:syz.2.110 state:D stack:27904 pid:6296 tgid:6295 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 244.577991][ T31] Call Trace: [ 244.581329][ T31] [ 244.588349][ T31] __schedule+0x17b4/0x5680 [ 244.593076][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 244.598198][ T31] ? __pfx___schedule+0x10/0x10 [ 244.603114][ T31] ? schedule+0x90/0x360 [ 244.607471][ T31] schedule+0x164/0x360 [ 244.611674][ T31] schedule_preempt_disabled+0x13/0x30 [ 244.617230][ T31] __mutex_lock+0x7f5/0x1550 [ 244.621871][ T31] ? __mutex_lock+0x606/0x1550 [ 244.626829][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 244.631577][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 244.636691][ T31] ? radix_tree_lookup+0x240/0x290 [ 244.641830][ T31] genl_rcv_msg+0x10b/0x7a0 [ 244.646442][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.651514][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 244.657241][ T31] ? __asan_memcpy+0x40/0x70 [ 244.661897][ T31] ? __skb_clone+0x63/0x7a0 [ 244.666555][ T31] netlink_rcv_skb+0x232/0x4b0 [ 244.671376][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.676515][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.681892][ T31] ? down_read+0x270/0x2e0 [ 244.687579][ T31] ? genl_rcv+0xd/0x40 [ 244.691690][ T31] genl_rcv+0x28/0x40 [ 244.695841][ T31] netlink_unicast+0x75c/0x8e0 [ 244.700665][ T31] netlink_sendmsg+0x813/0xb40 [ 244.705538][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.710873][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 244.715916][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.721234][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.726601][ T31] __sys_sendto+0x672/0x710 [ 244.731136][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 244.736369][ T31] ? exc_page_fault+0x6a/0xc0 [ 244.741084][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 244.746486][ T31] __x64_sys_sendto+0xde/0x100 [ 244.751304][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.757444][ T31] do_syscall_64+0x15f/0xf80 [ 244.762061][ T31] ? trace_irq_disable+0x3b/0x140 [ 244.767299][ T31] ? clear_bhb_loop+0x40/0x90 [ 244.772043][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.778052][ T31] RIP: 0033:0x7f86d515d04e [ 244.782492][ T31] RSP: 002b:00007f86d5f6de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.792208][ T31] RAX: ffffffffffffffda RBX: 00007f86d5f6f6c0 RCX: 00007f86d515d04e [ 244.800298][ T31] RDX: 0000000000000020 RSI: 00007f86d5f6e000 RDI: 0000000000000004 [ 244.808346][ T31] RBP: 0000000000000000 R08: 00007f86d5f6df04 R09: 000000000000000c [ 244.816793][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 244.824866][ T31] R13: 00007f86d5f6df58 R14: 00007f86d5f6e000 R15: 0000000000000000 [ 244.832894][ T31] [ 244.836254][ T31] INFO: task syz.3.113:6306 blocked for more than 144 seconds. [ 244.843837][ T31] Not tainted syzkaller #0 [ 244.849187][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.858215][ T31] task:syz.3.113 state:D stack:27904 pid:6306 tgid:6305 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 244.870300][ T31] Call Trace: [ 244.873603][ T31] [ 244.876770][ T31] __schedule+0x17b4/0x5680 [ 244.881380][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 244.886424][ T31] ? __pfx___schedule+0x10/0x10 [ 244.892668][ T31] ? schedule+0x90/0x360 [ 244.897275][ T31] schedule+0x164/0x360 [ 244.901500][ T31] schedule_preempt_disabled+0x13/0x30 [ 244.907105][ T31] __mutex_lock+0x7f5/0x1550 [ 244.911743][ T31] ? __mutex_lock+0x606/0x1550 [ 244.916657][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 244.921360][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 244.926513][ T31] ? radix_tree_lookup+0x240/0x290 [ 244.931692][ T31] genl_rcv_msg+0x10b/0x7a0 [ 244.936274][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.941329][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 244.946812][ T31] ? __asan_memcpy+0x40/0x70 [ 244.951447][ T31] ? __skb_clone+0x63/0x7a0 [ 244.956101][ T31] netlink_rcv_skb+0x232/0x4b0 [ 244.961009][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.966149][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.971497][ T31] ? down_read+0x270/0x2e0 [ 244.976280][ T31] ? genl_rcv+0xd/0x40 [ 244.980415][ T31] genl_rcv+0x28/0x40 [ 244.984916][ T31] netlink_unicast+0x75c/0x8e0 [ 244.989863][ T31] netlink_sendmsg+0x813/0xb40 [ 244.996231][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.001588][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.006906][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.012250][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.017934][ T31] __sys_sendto+0x672/0x710 [ 245.022522][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 245.027710][ T31] ? exc_page_fault+0x6a/0xc0 [ 245.032453][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 245.037846][ T31] __x64_sys_sendto+0xde/0x100 [ 245.042662][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.048848][ T31] do_syscall_64+0x15f/0xf80 [ 245.053469][ T31] ? trace_irq_disable+0x3b/0x140 [ 245.058686][ T31] ? clear_bhb_loop+0x40/0x90 [ 245.063582][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.069735][ T31] RIP: 0033:0x7f1c94f5d04e [ 245.074237][ T31] RSP: 002b:00007f1c931ece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 245.082676][ T31] RAX: ffffffffffffffda RBX: 00007f1c931ee6c0 RCX: 00007f1c94f5d04e [ 245.090863][ T31] RDX: 0000000000000020 RSI: 00007f1c931ed000 RDI: 0000000000000004 [ 245.100219][ T31] RBP: 0000000000000000 R08: 00007f1c931ecf04 R09: 000000000000000c [ 245.108321][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 245.116393][ T31] R13: 00007f1c931ecf58 R14: 00007f1c931ed000 R15: 0000000000000000 [ 245.124489][ T31] [ 245.129021][ T31] [ 245.129021][ T31] Showing all locks held in the system: [ 245.138128][ T31] 1 lock held by khungtaskd/31: [ 245.143067][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 245.153248][ T31] 2 locks held by getty/5584: [ 245.158229][ T31] #0: ffff888037e4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 245.168348][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 245.178763][ T31] 1 lock held by udevd/5895: [ 245.183416][ T31] #0: ffff888027327350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 245.192931][ T31] 6 locks held by syz.0.106/6286: [ 245.199540][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.207939][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.217353][ T31] #2: ffff88802734ca60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 245.228116][ T31] #3: ffff8880273847c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 245.237700][ T31] #4: ffff888027384190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 245.250033][ T31] #5: ffff8880273841c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 245.262860][ T31] 2 locks held by syz.2.110/6296: [ 245.268082][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.276371][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.285769][ T31] 2 locks held by syz.3.113/6306: [ 245.290835][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.300342][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.309465][ T31] 2 locks held by syz.1.115/6311: [ 245.315113][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.323377][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.332478][ T31] 2 locks held by syz.1.115/6313: [ 245.337640][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.346245][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.356374][ T31] 2 locks held by syz.1.115/6314: [ 245.361441][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.369745][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.379601][ T50] Bluetooth: hci16: command tx timeout [ 245.385205][ T31] 2 locks held by syz.4.121/6337: [ 245.390286][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.398676][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.409737][ T31] 2 locks held by syz-executor/6340: [ 245.415393][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.423792][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.432947][ T31] 2 locks held by syz-executor/6351: [ 245.438411][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.446792][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.456016][ T31] 2 locks held by syz-executor/6352: [ 245.461371][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.464514][ T50] Bluetooth: hci19: command tx timeout [ 245.469683][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.469739][ T31] 2 locks held by syz-executor/6355: [ 245.469750][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.469798][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.469848][ T31] 2 locks held by syz-executor/6376: [ 245.469859][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.469904][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.469953][ T31] 2 locks held by syz-executor/6391: [ 245.469963][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.470008][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.470065][ T31] 2 locks held by syz-executor/6402: [ 245.470075][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.470122][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.470176][ T31] 2 locks held by syz-executor/6404: [ 245.470186][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.470232][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.470286][ T31] 2 locks held by syz-executor/6406: [ 245.604807][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.617457][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.626691][ T31] 2 locks held by syz-executor/6427: [ 245.632080][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.640349][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.649452][ T31] 2 locks held by syz-executor/6442: [ 245.654781][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.663013][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.672168][ T31] 2 locks held by syz-executor/6451: [ 245.677567][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.685892][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.695091][ T31] 2 locks held by syz-executor/6461: [ 245.700412][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.709881][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.719117][ T31] 2 locks held by syz-executor/6462: [ 245.724530][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.732767][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.741807][ T31] 2 locks held by syz-executor/6478: [ 245.747149][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 245.755509][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 245.764586][ T31] [ 245.766932][ T31] ============================================= [ 245.766932][ T31] [ 245.776518][ T31] NMI backtrace for cpu 0 [ 245.776539][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 245.776555][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.776563][ T31] Call Trace: [ 245.776569][ T31] [ 245.776575][ T31] dump_stack_lvl+0xe8/0x150 [ 245.776600][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 245.776624][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 245.776646][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 245.776671][ T31] sys_info+0x135/0x170 [ 245.776690][ T31] watchdog+0xfaa/0x1000 [ 245.776709][ T31] ? watchdog+0x209/0x1000 [ 245.776730][ T31] kthread+0x388/0x470 [ 245.776746][ T31] ? __pfx_watchdog+0x10/0x10 [ 245.776760][ T31] ? __pfx_kthread+0x10/0x10 [ 245.776775][ T31] ret_from_fork+0x514/0xb70 [ 245.776797][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 245.776817][ T31] ? __switch_to+0xc79/0x1410 [ 245.776836][ T31] ? __pfx_kthread+0x10/0x10 [ 245.776857][ T31] ret_from_fork_asm+0x1a/0x30 [ 245.776916][ T31] [ 245.776937][ T31] Sending NMI from CPU 0 to CPUs 1: [ 245.888625][ C1] NMI backtrace for cpu 1 [ 245.888642][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 245.888662][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.888672][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 245.888699][ C1] Code: 5b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 245.888720][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 245.888737][ C1] RAX: 000000000015fe67 RBX: ffffffff819a67ea RCX: 0000000080000001 [ 245.888750][ C1] RDX: 0000000000000001 RSI: ffffffff8dfb6499 RDI: ffffffff8c27f000 [ 245.888762][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 245.888775][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 245.888787][ C1] R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 [ 245.888799][ C1] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 245.888813][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.888824][ C1] CR2: 000055e72edc8ee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 245.888840][ C1] Call Trace: [ 245.888847][ C1] [ 245.888853][ C1] default_idle+0x9/0x20 [ 245.888877][ C1] default_idle_call+0x72/0xb0 [ 245.888902][ C1] do_idle+0x36a/0x5f0 [ 245.888942][ C1] ? __pfx_do_idle+0x10/0x10 [ 245.888968][ C1] ? do_idle+0x5c7/0x5f0 [ 245.888993][ C1] cpu_startup_entry+0x43/0x60 [ 245.889017][ C1] start_secondary+0x101/0x110 [ 245.889039][ C1] common_startup_64+0x13e/0x147 [ 245.889066][ C1] [ 246.056952][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 246.063823][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 246.072931][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 246.082989][ T31] Call Trace: [ 246.086271][ T31] [ 246.089207][ T31] vpanic+0x56c/0xa60 [ 246.093287][ T31] ? __pfx___schedule+0x10/0x10 [ 246.098142][ T31] ? __pfx_vpanic+0x10/0x10 [ 246.102654][ T31] ? __pfx_console_unlock+0x10/0x10 [ 246.107869][ T31] panic+0xc5/0xd0 [ 246.111622][ T31] ? __pfx_panic+0x10/0x10 [ 246.116062][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 246.121488][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 246.127782][ T31] watchdog+0xff4/0x1000 [ 246.132062][ T31] ? watchdog+0x209/0x1000 [ 246.136502][ T31] kthread+0x388/0x470 [ 246.140600][ T31] ? __pfx_watchdog+0x10/0x10 [ 246.145323][ T31] ? __pfx_kthread+0x10/0x10 [ 246.150058][ T31] ret_from_fork+0x514/0xb70 [ 246.154777][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 246.159919][ T31] ? __switch_to+0xc79/0x1410 [ 246.164628][ T31] ? __pfx_kthread+0x10/0x10 [ 246.169261][ T31] ret_from_fork_asm+0x1a/0x30 [ 246.174073][ T31] [ 246.177730][ T31] Kernel Offset: disabled [ 246.182088][ T31] Rebooting in 86400 seconds..